last executing test programs:

8m15.250464664s ago: executing program 32 (id=137):
socket$kcm(0x2, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=<r1=>0x0, &(0x7f00000004c0)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x40, 0x0, 0x0)

7m24.835678939s ago: executing program 33 (id=555):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000800)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@check_strict}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@rodir}]}, 0x1, 0x28d, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6)
getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9)

6m20.111915172s ago: executing program 34 (id=1196):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3})

6m18.087906653s ago: executing program 35 (id=1206):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

5m10.982583512s ago: executing program 36 (id=1823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

4m26.577005365s ago: executing program 5 (id=2191):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x727, 0x400)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x67, 0x6})

4m26.195691213s ago: executing program 5 (id=2194):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='children\x00')
exit(0x10)
read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020)

4m25.300800987s ago: executing program 5 (id=2219):
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="84060000", @ANYRES16, @ANYBLOB="000108000100ffdbdf253900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x684}, 0x1, 0x0, 0x0, 0x880}, 0x800)
r0 = fanotify_init(0x0, 0x8000)
write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18)

4m25.191229189s ago: executing program 5 (id=2220):
inotify_init1(0x800)
syz_mount_image$fuse(0x0, 0x0, 0x1000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\xa2-\x00', 0x3, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
llistxattr(0x0, 0x0, 0x0)

4m24.583263726s ago: executing program 5 (id=2222):
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x209f0000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)

4m23.223008292s ago: executing program 5 (id=2228):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000100))

4m22.846209867s ago: executing program 37 (id=2228):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000100))

4m3.6769569s ago: executing program 8 (id=2372):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x30c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

4m3.596105219s ago: executing program 8 (id=2374):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="81ba39f5d0b948e6504995d6d47c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4m3.529514651s ago: executing program 8 (id=2375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003680)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x22}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004000)

4m3.529115881s ago: executing program 8 (id=2376):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

4m3.368003882s ago: executing program 8 (id=2377):
r0 = socket$netlink(0x10, 0x3, 0x15)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0)

4m3.039531864s ago: executing program 8 (id=2378):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x8)

4m2.824199458s ago: executing program 38 (id=2378):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x8)

4m0.010992002s ago: executing program 3 (id=2398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_PRIORITY={0x6}]}}}]}, 0x44}}, 0x0)

3m59.927179412s ago: executing program 3 (id=2400):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r5=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_io_uring_setup(0xd35, 0x0, &(0x7f00000001c0), 0x0)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r9, &(0x7f0000000000)="b8d2b38d5ed1de47a60d8128f1596940861bc74b9db65ba8", 0x18)
epoll_create1(0x80000)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(0xffffffffffffffff, &(0x7f0000000e00), 0x12)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffff7ffbdbdf250500000008000600", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

3m59.340179507s ago: executing program 3 (id=2405):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read(r2, &(0x7f0000000040)=""/148, 0xffffff96)

3m57.957516693s ago: executing program 3 (id=2407):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

3m57.95713804s ago: executing program 3 (id=2408):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m57.666408114s ago: executing program 3 (id=2409):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0)

3m57.545100527s ago: executing program 39 (id=2409):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0)

2m47.559568446s ago: executing program 7 (id=3222):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4)

2m47.559313388s ago: executing program 7 (id=3223):
syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x4004000, &(0x7f0000000140)={[{@qnoenforce}, {@nodiscard}, {@nouuid}, {@usrquota}, {@inode32}, {@pquota}, {@lazytime}, {@usrquota}, {@gquota}, {}]}, 0x1, 0x975c, &(0x7f000001c600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x200980)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)

2m47.166177522s ago: executing program 7 (id=3226):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')

2m47.057520858s ago: executing program 7 (id=3227):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_security(0x11, r0, &(0x7f0000001180)=""/95, 0x5f)

2m46.441560176s ago: executing program 7 (id=3236):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x9, 0x12}, 0x50)

2m46.441394027s ago: executing program 7 (id=3237):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
unlink(&(0x7f00000001c0)='./file0\x00')

2m29.852291616s ago: executing program 40 (id=3237):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
unlink(&(0x7f00000001c0)='./file0\x00')

1m27.394519281s ago: executing program 0 (id=3910):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32], 0x74}}, 0x0)

1m26.789127814s ago: executing program 0 (id=3922):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m26.688376623s ago: executing program 0 (id=3924):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d9125"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1m24.875342562s ago: executing program 0 (id=3930):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "841d7cb49e5b8cc49dc6e85ffe45460b"}]}, 0x44}}, 0x0)

1m24.788599967s ago: executing program 0 (id=3931):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000100)='./file0\x00')

1m24.788329067s ago: executing program 0 (id=3932):
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={'xxhash64-generic\x00'}})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, 'f'}]}}}}}}}}, 0x0)

1m8.735994115s ago: executing program 41 (id=3932):
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={'xxhash64-generic\x00'}})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, 'f'}]}}}}}}}}, 0x0)

35.246953698s ago: executing program 4 (id=4284):
r0 = gettid()
setreuid(0xee01, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(r0, 0xe, 0x0, 0x0)

34.747366248s ago: executing program 4 (id=4288):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x7}}}}]}, 0x40}}, 0x4000000)

34.365760886s ago: executing program 4 (id=4289):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001ac0)={@cgroup, 0xffffffffffffffff, 0x9, 0x20}, 0x20)

34.286123648s ago: executing program 4 (id=4290):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x100000000000, 0xfffffffffffffffa, 0x0, 0x203, 0x38820000, {0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)

34.07438288s ago: executing program 4 (id=4291):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0xfd5b}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000))

33.921492454s ago: executing program 4 (id=4294):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

33.72445313s ago: executing program 42 (id=4294):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12)

23.044702596s ago: executing program 2 (id=4349):
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)

22.767855055s ago: executing program 2 (id=4351):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x801)

22.608824767s ago: executing program 2 (id=4353):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

22.459101363s ago: executing program 2 (id=4354):
syz_mount_image$jfs(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x20108c2, &(0x7f0000000e40)=ANY=[], 0xff, 0x61f8, &(0x7f00000128c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

22.018784763s ago: executing program 2 (id=4356):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x86}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

20.930093019s ago: executing program 2 (id=4370):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x200, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x6, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x3, 0x8, 0x4c76, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8001, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xffffffa3, 0x4, 0x14001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0xa, 0x7fff, 0x6, 0x5, 0x401, 0x6, 0x1, 0x2, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x2000bc45, 0x48c93690, 0x42, 0x3], [0x9, 0x408, 0xcb07, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8007fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x201, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x5, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x8, 0x6, 0x6, 0xfffffffd, 0xb9, 0xce7, 0x1ff, 0x2, 0x6, 0x5, 0x3, 0x0, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x88000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x4000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000012c0)={0x2004})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

20.654845043s ago: executing program 43 (id=4370):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x200, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x6, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x3, 0x8, 0x4c76, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8001, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xffffffa3, 0x4, 0x14001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0xa, 0x7fff, 0x6, 0x5, 0x401, 0x6, 0x1, 0x2, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x2000bc45, 0x48c93690, 0x42, 0x3], [0x9, 0x408, 0xcb07, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8007fff, 0x0, 0x7, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x201, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x5, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x8, 0x6, 0x6, 0xfffffffd, 0xb9, 0xce7, 0x1ff, 0x2, 0x6, 0x5, 0x3, 0x0, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x88000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x4000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000012c0)={0x2004})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.034391727s ago: executing program 6 (id=4514):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="d082aa258a61fa51d31910b939824f0a37028b586570c7cf", 0x18)

1.974999927s ago: executing program 9 (id=4515):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0)

1.974574105s ago: executing program 6 (id=4516):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

1.8743991s ago: executing program 9 (id=4517):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0)

1.8737448s ago: executing program 6 (id=4518):
r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
shutdown(r1, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.241670687s ago: executing program 6 (id=4522):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)=')\x00', 0x0)
request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xa}, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
clock_gettime(0x2, &(0x7f00000000c0))
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99)
lgetxattr(0x0, 0x0, 0x0, 0x0)

1.044964024s ago: executing program 1 (id=4524):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20010}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000))

676.25145ms ago: executing program 9 (id=4525):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10)
msgget$private(0x0, 0x0)

624.343966ms ago: executing program 1 (id=4526):
mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {}]})

537.962403ms ago: executing program 1 (id=4527):
r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0x2, 0x5, 0x1, 0x0, 'syz1\x00', 0x3})

474.249243ms ago: executing program 1 (id=4528):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000780)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x2}]}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0)

334.926713ms ago: executing program 1 (id=4529):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000490001002bbd7000fddbdf250a000000", @ANYRES32, @ANYBLOB="0700000014000100fc000000000000000000000000000000080002"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

285.689271ms ago: executing program 6 (id=4530):
syz_mount_image$exfat(&(0x7f0000000880), &(0x7f00000000c0)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0xf9, 0x150b, &(0x7f0000004280)="$eJzs3Am4jlX3MPC19t43x8nwJJnvtdfNkwybJAklyZAkSUjmhCRJkiRxyJSEJGQ8ScYTkimddMzzkDnp5JUkSUhIsr/rNHz+vcPX+75//8/7fWf9ruu+7OW+177XPut6zj1c13m+6T6iZpNa1RoyM/w79O8D/PWfJABIAIDBAJALAAIAKJ+7fO6M/dk0Jv1bJxH/QxrNutIViCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITK1lAJXy5Z5N3n///849d9Jlut/poD/aIf0//83+l86WvqfuUn/Mzfpf+Ym/c/MgitdgLjC5POfuUn/hcjULvs75Q3nrvQ7bdn+hU0IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPi/4Jy/xADA7+MrXZcQQgghhBBCCCEuH//ula5ACCGEEEIIIYQQ//MQFGgwEEAWyAoJkA0S4SrIDjkgJ+SCGFwNueEayAPXQl7IB/mhABSEQlAYQiCwwBBBESgKcbgOisH1UBxKQEkoBQ5KQxm4AcrCjVDO9wGAm6EC3AIVodIv58xwO1SFO6Aa3AnVoQbUhFpwF9SGu6EO3AN14V6oB/dBfbgfGsAD0BAaQWN4EJrAQ9AUmkFzaAEtoRW0/pP85Fx/L/956AUvQG/oA0nQF/rBi9AfBsBAGASD4SUYAi/DUHgFhsFwGAGvwkh4DUbB6zAaxsBYeAPGwXiYABNhEkyGZHgTpsBbMBXefigHTIcZMBNmwWxIgXdgDsyFefAuzIf3YAEkZ1sEi2EJvA9L4QNIhQ9hGXwEabAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVt8DFshx2wE3bBbtgDe+ET2Aefwn74DNLx838x/+wf86EHAgIqVGjQYBbMggmYgImYiNkxO+bEnBjDGObG3JgH82BezIv5MT8mYUEsjIWRkJCRsQgWwTjGsRgWw+JYHEtiSXTosAyWwbJ4I5bDclgey2MFrIAVsRJWwlvxVqyCVbAqVsVqWA2rY3WsiTXxLrwL78Y6WAfrYl2sh/WwPtbHBtgAG2JDbIyNsQk2wabYFJtjc2yJLbE1tsY22AbbYltsj+2xA3bAjtgRO2En7IydsQt2wa7YFbthN+yO3bEHPofP4fP4PL6AL2AfrK76Yj/sh/2xPw7EQTgIX8Ih+DK+jK/gMByOI/BVfBVfw1F4BkfjGByLY7GKGo8TcCKymozJmIxZYQpOxak4DafjdJyJs3A2pmAKzsG5OBffxfn4Hr6HC3EhLsYluASX4geYiqm4DM9iGi7HFbgSV+FqXIVrcR2uxQ24ETfgZtyMW3Erfowf4w7cgbtwF+7BPfgJfoKf4qc4DNMxHQ/gATyIB/EQHsLDeBiP4BE8ikfxGB7D43gcT+BJPIUn8TSexjN4Fs8BwHk8jxfwAl7EixkffpXBKKOyqCwqQSWoRJWosqvsKqfKqWIqpnKr3CqPyqPyqrwqv8qvCqqCqrAqrEiRYhWpIqqIiqu4KqaKqeKquCqpSiqnnCqjyqiyqqwqp8qp8upmVUHdoiqqSqqdu1Xdqqqo9q6qukNVU9VUdVVD1VS1VC1VW9VWdVQdVVfVVfVUPVVf3a8aqL44EBupjM40UcOxqRqBzVUL1VK1Uq/hw6qNGoVtVTvVXj2qxuBo7KjauE7qCdVZTcAu6ik1EZ9W3dRk7K6eVT3Uc6qnel71Um1db9VHTcvaV/VTM7G/GqAGqkFqDtZQGR2rqV5Rz2cdrkaoV9VifE2NUq+r0WqMGqveUOPUeDVBTVST1GSVrN5UU9Rbaqp6W01T09UMNVPNUrNVinpHzVFz1Tz1rpqv3lML1EK1SC1WS9T7aqn6QKWqD9Uy9ZFKU8vVCrVSrVKr1Rq1Vq1T69UGtVFtUpvVFrVVbVMfq+1qh9qpdqndao/aqz5R+9Snar/6TKWrz9UB9Rd1UH2hDqkv1WH1lTqivlZH1TfqmPpWHVffqRPqpDqlvlen1Q/qjDqrzqkf1Xn1k7qgflYXlVegUSuttdGBzqKz6gSdTSfqq3R2nUPn1Ll0TF+tc+trdB59rc6r8+n8poAuqAvpwjrUpK1mHekiuqiO6+t0MX29Lq5L6JK6lHa6tC6jb9Bl9Y26nL5Jl9c36wr6Fl1RV9KVPejbdBV9u66q79DV9J26uq6ha+pa+i5dW9+t6+h7dF19r66n79P19f26gX5AN9SNdGP9oG6iH9JNdTPdXLfQLXUr3Vo/rNvoR3Rb3U6314/qDvox3VE/rjvpJ3Rn/aTuop/SXfXTupt+RnfXz+oe+jndU/+sL2qve+s+Okn31f30i7q/HqAH6kF6sH5JD9Ev66H6FT1MD9cj9Kt6pH5Nj9Kv69F6jB6r39Dj9Hg9QU/Uk/Rknazf1FP0W3qqfltP09P1DD1Tz9Kz9cDfZpr3T+S/9Xfyh/5y9q16m/5Yb9c79E69S+/We/RevVfv0/v0fr1fp+t0fUAf0Af1QX1IH9KH9WF9RB/RR/VRfUwf08f1cX1Cn9Q/6u/1af2DPqPP6rP6R31en9cXfvsZgEGjjDbGBCaLyWoSTDaTaK4y2U0Ok9PkMjFztcltrjF5zLUmr8ln8psCpqApZAqb0JCxhk1kipiiJm6uM8XM9aa4KWFKmlLGmdKmjLnhv53/Z/W1Nq1NG9PGtDVtTXvT3nQwHUxH09F0Mp1MZ9PZdDFdTFfT1XQz3Ux30930MD1MT9PT9DK9TG/T2ySZJNPPvGj6mwFmoBlkBpuXzBAzxAw1Q80wM8yMMCPMSDPSjDKjzGgz2ow1Y804M85MMBPMJDPJJPtcZoqZYqaaqWaamWZmDM5lZplZJsWkmDlmjpln5pn5Zr5ZYBaYRWaRWWKWmKVmqUk1qWaZWWbSzHKz3Kw0K81qs9qsNWvNerPebDQbzWaz2aSZbWab2W62m51mp9ltdpu9Zq/ZZ/aZ/Wa/STfp5oA5YA6ag+aQOWQOm8PmiDlijpqj5pg5Zo6b4+aEOWFOmVPmtDltzpgz5pw5Z86b8+aCuWAumosZt32BClRgAhNkCbIECUFCkBgkBtmD7EHOIGcQC2JB7iB3kCe4Nsgb5AvyBwWCgkGhoHAQBhTYgIMoKBIUDeLBdUGx4PqgeFAiKBmUClxQOigT3BCUDW4MygU3BeWDm4MKwS1BxaBSUDm4NbgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw6BR0Dh4MGgSPBQ0DZoFzYMWQcugVdD6ss7v/Zl8j7jeYZ8wKewb9gtfDPuHA8KB4aBwcPhSOCR8ORwavhIOC4eHI8JXw5Hha+Go8PVwdDgmHBu+EY4Lx4cTwonhpHBymBy+GU4J3wqnhm+H08Lp4YxgZjgrnB2mhO+Ec8K54bzw3XB++F64IFwYLgoXh/jrLTGkhh+Gy8KPwrRwebgiXBmuCleHa8K14bpwfbgh3BhuCjeXH/LroeH2cEe4M9wV7g73hHvDT8J94afh/vCzMD38PDwQ/iU8GH4RHgq/DA+HX4VHwq/Do+E34bHw2/B4+F14IjwZngq/D0+HP4RnwrPhufDH8Hz4U3gh/Dm8GPqMm/uMyzsZMpSFslACJVAiJVJ2yk45KSfFKEa5KTfloTyUl/JSfspPBakgFabClIGJqQgVoTjFqRgVo+JUnEpSSXLkqAyVobJUlspROSpP5akCVaCKVJEqU2W6jW6j2+l2uoPuoDvpTqpBNagW1aLaVJvqUB2qS3WpHtWj+lSfGlADakgNqTE1pibUhJpSU2pOzakltaTW1JraUBtqS22pPbWnDtSBOlJH6kSdqDN1pi7UhbpSV+pG3ag7dace1IN6Uk/qRb2oN/WmJEqiftSP+lN/GkgDaTANpiE0hIbSUBpGw2gEjaCRNJJG0SgaTWNoLL1B42g8TaCJNIkmUzIl0xSaQlNpKk2jaTSDZtAsmkUplEJzaA7No3k0n+bTAlpAi2gRLaEltJSWUiql0jJaRmmURitoBa2iVbSG1tA6WkcbaANtok20hbbQNtpG22k77aSdtJt2017aS/toH+2n/ZRO6XSADiDSQTpEh+gwHaYjdISO0lE6RsfoOB2nE3SCTtEpOk2n6QydoXN0js7TT3SBfqaL5CnBZrOJ9iqb3eawOW0u+9dxflvAFrSFbGEb2rw23x9istYWtyVsSVvKOlvalrE3/E1c0Vayle2t9jZbxd5uq9qKNhv817i2vdvWsffYuvZeW8ve9Ye4nr3P1rcP2Qa2mW1oW9jGtpVtYh+yTW0z29y2sC1tK9vBPmY72sdtJ/uE7Wyf/Jt4qf3ArrPr7Qa70e6zn9pz9kd71H5jz9ufbG/bxw62L9kh9mU71L5ih9nhf4wB7Fj7hh1nx9sJdqKdZCf/TTzDzrSz7GybYt+xc+zcv4mX2PftfJtqF9iFdpFd/EucUVOq/dAusx/ZNLvcrrAr7Sq72q6xa/93rSvtZrvFbrV77Sd2u91hd9pddrfd80ucsY799jObbj+3R+zX9qD9wh6yx+xh+9Uvccb6jtlv7XH7nT1hT9pT9nt72v5gz9izv6w/Y+3f25/tRestMLJizYYDzsJZOYGzcSJfxdk5B+fkXBzjqzk3X8N5+FrOy/k4PxfgglyIC3PIxJaZIy7CRTnO13Exvp6LcwkuyaXYcWkuwzdwWb6Ry/FNXJ5v5gp8C1fkSlyZb+XbuArfzlX5Dq7Gd3J1rsE1uRbfxbX5bq7D93Bdvpfr8X1cn+/nBvwAN+RG3Jgf5Cb8EDflZtycW3BLbsWt+WFuw49wW27H7flR7sCPcUd+nDvxE9yZn+Qu/BR35ae5Gz/D3flZ7sHPcU9+nnvxC9yb+3AS9+V+/CL35wE8kAfxYH6Jh/DLPJRf4WE8nEfwqzySX+NR/DqP5jE8lt/gcTyeJ/BEnsSTOZnfbDeF3+Kp/DZP4+k8g2fyLJ7NKfwOz+G5PI/f5fn8Hi/ghbyIF/MSfp+XXvScyh/yMv6I03g5r+CVvIpX8xpey+t4PW/gjbyJN/MW3srb+GPezjt4J+/i3byH9/InvI8/5f38Gafz53yA/8IH+Qs+xF/yYf6Kj/DXfJS/4WP8LR/n7/gEn+RT/D2f5h/4DJ/lc/wjn+ef+AL/zBfZM0QYqUhHJgqiLFHWKCHKFiVGV0XZoxxRzihXFIuujnJH10R5omujvFG+KH9UICoYFYoKR2FEkY04iqIiUdEoHl0XFYuuj4pHJaKSUanIRaWjMtENUdnoxqhcdFNUPro5qhDdElWMKkWVo1uj26Iq0e1R1eiOqFp0Z1Q9qhHVjGpFd0W1o7ujOtE9Ud3o3qhcdF9UP7o/ahA9EDWMGkWNowejJtFDUdOoWdQ8ahG1jFpFraOHozbRI1HbqF3UPno06hA9FnWMHo86RU9EnaMnL+0vEfx6Nf2r/UlR30j/9obsHr0ovji+JP5+fGn8g3hq/MP4svhH8bT48viK+Mr4qvjq+Jr42vi6+Pr4hvjG+Kb45viW+Na497WygsOMB2EwLnBZXFaX4LK5RHeVy+5yuJwul4u5q11ud43L4651eV0+l98VcAVdIVfYhY6cdewiV8QVdXF3nSvmrnfFXQlX0pVyzpV2ZVwr19q1dm3cI66ta+fau0fdo+4x95h7POG3wl0X95Tr6p523dwz7hn3rOvhnnM93fOul3vB9XZ9XJJLcv1cP9ff9XcD3UA32A12Q9wQN9QNdcPcMDfCjXAj3Ug3yo1yo91oN9aNdePcODfBTXCT3CSX7JLdFDfFTXVT3TQ3zc1wM9wsN8uluBQ3x81x89w8N9/NdwvcArfILXJL3BK31C11qS7VLXPLXJpLcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XfpLt0dcAfcQXfQHXJfusPuK3fEfe2Oum/cMfetO+6+cyfcSXfKeX3a/eDOuLPunPvRnXc/uQvuZ3fReZccezM2JfZWbGrs7di02PTYjNjM2KzY7FhK7J3YnNjc2LzYu7H5uSC2ILYwtiiA2JLY+7GlsQ9iqbEPY8tiH8XSYstjK2IrY6tiq2PeF9oe+SK+qI/763wxf70v7kv4kr6Ud760L+Nv8GX9jb6cv8mX9zf7Cv4WX9FX8pV9M9/ct/AtfSvf2j/s2/hHfFvfzrf3j/oO/jHf0T/uO/knfGf/pO/in/Jd/dO+m3/Gd/fPvvdbl30v/4Lv7fv4JN/X9/Mv+v5+gB/oB/nB/iU/xL/sh/pX/DA/3I/wr/qR/jU/yr/uR/sxfqx/w4/z4/0EP9FP8pN9sn/TT/Fv+an+bT/NT/cz/Ew/y8/2Kf4dP8fP9fP8u36+f88v8Av9Ir/YL/Hv+6X+A5/qP/TL/Ec+zS/3K/xKv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81/7Lf7HX6n3+V3+z1+r//E7/Of+v3+M5/uP/cH/F/8Qf+FP+S/9If9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lflL9ZE0IIIYT4p+g/2d/37/yf+m3L0A8AcuwocPiv59yU99fxALWvcwwAnujTvdHvW6NGSUlJvx2b1gaCogsBIHYp/5fvH/gtXg7t4THoBO2g7N+tb4Cq/Mt93z+cX0MQvxkgESDb7zkZj0eJ8Nfz3/gP5m/2Pv/Z/AsBihe9lJNxot/jS/OX+wfz7+nwJ/Nn+yIZoO1/yckOl+JL85eBR+BJ6PSHI4UQQgghhBBCiF8NUOd7/NnzbcbzeUFzKScrXIr/7Pn8T1S9HGsQQgghhBBCCCHE/9nTz/V8/OFOndp1vSyDtgBwWSe8PIOs/xll/AcMEAD+A8qQwX/+4Er/ZhJCCCGEEEJcbpdu+q90JUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghROb1739DmPqnD77SaxRCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGutP8VAAD//6cPVPA=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

137.453177ms ago: executing program 9 (id=4531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500050001000000050003"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)

137.032726ms ago: executing program 1 (id=4532):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r2 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec", 0x43, 0x0, 0x0, 0x0)
listen(r0, 0x1ff)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x30, 0x41}, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x230, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x0, 0x1e}}}}}]}}]}}, 0x0)

79.095063ms ago: executing program 9 (id=4533):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1a9bbeed934a", 0x0, 0x2000000, 0x10, 0x0, 0x0})

342.488µs ago: executing program 6 (id=4534):
r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x400)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000002c0)={"8d330ea9", 0x7, 0x5, 0x1, 0xbfffffff, 0x2, "68c8e2b10000000000006d69b28ebc", "8a9c91f2", "9ab0554c", "70b8cf05", ["a698f86c73c27e002587a2b4", "f87eeb1e1c29dfcc00bf3d00", "269fea61c3fc4d8c68b5b114", "7df748b174ae97f84f03066d"]})

0s ago: executing program 9 (id=4535):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x41, 0x75e, &(0x7f0000001100)="$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")
chdir(&(0x7f00000003c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0046686, 0x0)

kernel console output (not intermixed with test programs):

attr: e_value size too large
[  491.880391][T18044] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3899: couldn't read orphan inode 15 (err -117)
[  491.887092][T18044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  491.917790][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.058656][T18057] loop1: detected capacity change from 0 to 2048
[  492.078522][T18057] udf: Unknown parameter 'A'
[  492.505335][T18072] loop1: detected capacity change from 0 to 32768
[  492.606927][T16290] read_mapping_page failed!
[  492.608966][T16290] ERROR: (device loop1): txCommit: 
[  492.608966][T16290] 
[  492.617430][T16290] jfs_write_inode: jfs_commit_inode failed!
[  492.686733][T18082] loop0: detected capacity change from 0 to 65536
[  492.716464][T18082] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  492.749867][T18082] XFS (loop0): Ending clean mount
[  492.756039][T18082] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  492.761734][T18082] XFS (loop0): Unmount and run xfs_repair
[  492.763614][T18082] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  492.765770][T18082] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  492.768489][T18082] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  492.771701][T18082] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  492.774583][T18082] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  492.777233][T18082] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  492.780366][T18082] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  492.785015][T18082] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  492.787934][T18082] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  492.790583][T18082] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  492.842924][T18082] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  492.848498][T18082] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  492.936530][T12926] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  493.290284][T18132] netlink: 'syz.9.3917': attribute type 1 has an invalid length.
[  493.372507][T18170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3910'.
[  493.378360][T18132] bond1: (slave gretap1): making interface the new active one
[  493.387303][T18132] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  493.421113][T18172] loop1: detected capacity change from 0 to 1024
[  493.553650][T18187] loop1: detected capacity change from 0 to 512
[  493.581109][T18187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  493.603423][T18187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  493.745063][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.903560][ T5948] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  493.909768][T18199] loop9: detected capacity change from 0 to 32768
[  493.923579][T18216] loop1: detected capacity change from 0 to 512
[  493.956105][T18216] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  493.960479][T18199] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  493.964046][T18216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002]
[  493.966593][T18216] System zones: 1-12
[  493.968684][T18216] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[  493.968684][T18216] 
[  493.972284][T18216] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[  493.976457][T18216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  494.014287][T18199] XFS (loop9): Ending clean mount
[  494.026920][T18199] XFS (loop9): Quotacheck needed: Please wait.
[  494.079089][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  494.104241][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  494.108734][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  494.114363][T18199] XFS (loop9): Quotacheck: Done.
[  494.114473][ T5948] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  494.123634][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.139165][ T5948] usb 1-1: config 0 descriptor??
[  494.147494][T18201] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  494.216718][T12836] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  494.618337][ T5948] aureal 0003:0755:2626.001B: unknown main item tag 0x6
[  494.621435][ T5948] aureal 0003:0755:2626.001B: report_id 29495 is invalid
[  494.623750][ T5948] aureal 0003:0755:2626.001B: item 0 2 1 8 parsing failed
[  494.627555][ T5948] aureal 0003:0755:2626.001B: probe with driver aureal failed with error -22
[  494.844178][  T793] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  494.866769][ T5948] usb 1-1: USB disconnect, device number 30
[  495.031449][  T793] usb 10-1: unable to get BOS descriptor or descriptor too short
[  495.039883][  T793] usb 10-1: config 2 has an invalid interface number: 218 but max is 0
[  495.042506][  T793] usb 10-1: config 2 has no interface number 0
[  495.044413][  T793] usb 10-1: config 2 interface 218 has no altsetting 0
[  495.052907][  T793] usb 10-1: New USB device found, idVendor=0cf3, idProduct=7015, bcdDevice=95.ef
[  495.055753][  T793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.059672][  T793] usb 10-1: Product: syz
[  495.061096][  T793] usb 10-1: Manufacturer: syz
[  495.062623][  T793] usb 10-1: SerialNumber: syz
[  495.297985][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.341289][  T793] usb 10-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  495.363160][  T793] usb 10-1: USB disconnect, device number 28
[  495.532953][T18257] loop1: detected capacity change from 0 to 32768
[  495.558695][T18257] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  495.581255][T18257] XFS (loop1): Ending clean mount
[  495.586389][T18257] XFS (loop1): Quotacheck needed: Please wait.
[  495.639784][T18257] XFS (loop1): Quotacheck: Done.
[  495.676723][T15308] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  496.113324][T18302] loop1: detected capacity change from 0 to 4096
[  496.130545][T18302] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  496.493079][   T33] audit: type=1326 audit(524827.740:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.1.3943" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2f8ebe9 code=0x0
[  496.547648][T18310] loop9: detected capacity change from 0 to 40427
[  496.565730][T18310] F2FS-fs (loop9): Wrong segment_count / block_count (31 > 0)
[  496.570144][T18310] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  496.586116][T18310] F2FS-fs (loop9): invalid crc value
[  496.603414][T18329] loop1: detected capacity change from 0 to 16
[  496.621352][T18329] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  496.639752][T18310] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  496.657545][T18310] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[  496.660350][T18310] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  497.141735][T18349] loop1: detected capacity change from 0 to 32768
[  497.186195][T18349] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  497.215702][T18349] XFS (loop1): Ending clean mount
[  497.295513][T15308] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  497.436629][T18367] loop9: detected capacity change from 0 to 32768
[  497.454948][T18367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3951 (18367)
[  497.482741][T18367] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  497.486330][T18367] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  497.488964][T18367] BTRFS info (device loop9): using free-space-tree
[  497.509372][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3952'.
[  497.512912][T18379] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  497.515618][T18379] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  497.649006][T18390] loop1: detected capacity change from 0 to 4096
[  497.732416][T18390] ntfs3(loop1): ino=21, "file1" fiemap is not supported for compressed file (cp -r)
[  497.745719][T12836] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  498.337113][T18419] loop1: detected capacity change from 0 to 4096
[  498.395578][T18419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  498.433612][T18405] loop9: detected capacity change from 0 to 32768
[  498.452416][T18405] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3954 (18405)
[  498.498310][T18405] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  498.511003][T18405] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  498.514197][T18405] BTRFS info (device loop9): disk space caching is enabled
[  498.533493][T18405] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  498.569083][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.668207][T18405] BTRFS info (device loop9): rebuilding free space tree
[  498.685243][T18405] BTRFS info (device loop9): disabling free space tree
[  498.687663][T18405] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  498.690885][T18405] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  498.739110][   T33] audit: type=1800 audit(524829.835:679): pid=18405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3954" name="file0" dev="loop9" ino=258 res=0 errno=0
[  498.746794][T18405] Invalid ELF header magic: != ELF
[  498.815014][T12836] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  499.325570][T18449] loop1: detected capacity change from 0 to 131072
[  499.338572][T18449] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  499.341601][T18449] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  499.345881][T18449] F2FS-fs (loop1): invalid crc value
[  499.460943][T18449] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  499.473392][T18449] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  499.475603][T18449] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  499.868944][ T6291] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  500.034524][ T6291] usb 10-1: Using ep0 maxpacket: 32
[  500.037775][ T6291] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  500.045390][ T6291] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  500.049666][ T6291] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  500.069544][ T6291] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  500.083504][ T6291] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  500.086951][ T6291] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  500.090210][ T6291] usb 10-1: Product: syz
[  500.092709][ T6291] usb 10-1: Manufacturer: syz
[  500.095988][ T6291] usb 10-1: SerialNumber: syz
[  500.106109][T18463] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  500.121248][ T6291] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input31
[  500.353792][ T5889] usb 10-1: USB disconnect, device number 29
[  500.387786][ T5889] appletouch 10-1:1.0: input: appletouch disconnected
[  500.623360][T18502] loop1: detected capacity change from 0 to 32768
[  500.708869][T18502] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  500.708891][T18502]   allowing incompatible features above 0.0: (unknown version)
[  500.708901][T18502]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  500.731869][T18502] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  500.736046][T18502] bcachefs (loop1): initializing new filesystem
[  500.748560][T18502] bcachefs (loop1): going read-write
[  500.760481][T18502] bcachefs (loop1): marking superblocks
[  500.793659][T18502] bcachefs (loop1): initializing freespace
[  500.807028][T18502] bcachefs (loop1): done initializing freespace
[  500.812247][T18502] bcachefs (loop1): reading snapshots table
[  500.814240][T18502] bcachefs (loop1): reading snapshots done
[  500.844144][T18502] bcachefs (loop1): done starting filesystem
[  500.899675][   T33] audit: type=1800 audit(524831.855:680): pid=18502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3969" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  500.957624][T15308] bcachefs (loop1): shutting down
[  500.964348][T15308] bcachefs (loop1): going read-only
[  500.966467][T15308] bcachefs (loop1): finished waiting for writes to stop
[  500.975042][T15308] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  501.088282][T15308] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  501.101142][T15308] bcachefs (loop1): clean shutdown complete, journal seq 4
[  501.104669][T15308] bcachefs (loop1): marking filesystem clean
[  501.143890][T15308] bcachefs (loop1): shutdown complete
[  501.618086][T18532] loop9: detected capacity change from 0 to 65
[  501.625494][T18532] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop9
[  502.421488][T18564] loop9: detected capacity change from 0 to 2048
[  502.463106][T18564] FAT-fs (loop9): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  502.483144][T18564] FAT-fs (loop9): Filesystem has been set read-only
[  503.068695][T18595] loop9: detected capacity change from 0 to 32768
[  503.074700][T18586] loop1: detected capacity change from 0 to 32768
[  503.097984][T18595] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  503.124097][T18586] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  503.157414][T18595] XFS (loop9): Ending clean mount
[  503.169950][T18595] XFS (loop9): Quotacheck needed: Please wait.
[  503.182354][T18586] XFS (loop1): Ending clean mount
[  503.188707][T18586] XFS (loop1): Quotacheck needed: Please wait.
[  503.254583][T18595] XFS (loop9): Quotacheck: Done.
[  503.300654][T18586] XFS (loop1): Quotacheck: Done.
[  503.339234][T12836] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  503.382175][T15308] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  503.580466][T18626] netlink: 'syz.9.3991': attribute type 4 has an invalid length.
[  504.164481][T18652] loop9: detected capacity change from 0 to 1024
[  504.204222][T18652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  504.367044][T18666] loop1: detected capacity change from 0 to 64
[  504.392164][T18666] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  504.626812][T18679] loop9: detected capacity change from 0 to 40427
[  504.631644][T18679] F2FS-fs (loop9): invalid crc value
[  504.667702][T18679] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  504.671013][T18679] F2FS-fs (loop9): Start checkpoint disabled!
[  504.677381][T18679] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  504.832630][T18679] F2FS-fs (loop9): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  505.173520][T18694] loop1: detected capacity change from 0 to 128
[  505.217249][T18694] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  505.253870][ T1097] kworker/u9:8: attempt to access beyond end of device
[  505.253870][ T1097] loop9: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  505.269831][  T210] kworker/u10:4: attempt to access beyond end of device
[  505.269831][  T210] loop9: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  505.276555][  T210] CPU: 0 UID: 0 PID: 210 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  505.276578][  T210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  505.276588][  T210] Workqueue: writeback wb_workfn (flush-7:9)
[  505.276630][  T210] Call Trace:
[  505.276639][  T210]  <TASK>
[  505.276646][  T210]  dump_stack_lvl+0x189/0x250
[  505.276671][  T210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  505.276689][  T210]  ? __pfx_queue_work_on+0x10/0x10
[  505.276703][  T210]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  505.276724][  T210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  505.276753][  T210]  f2fs_handle_critical_error+0x37c/0x540
[  505.276782][  T210]  f2fs_write_end_io+0x886/0xb60
[  505.276814][  T210]  __submit_merged_bio+0x27a/0x6a0
[  505.276841][  T210]  __submit_merged_write_cond+0x255/0x530
[  505.276869][  T210]  f2fs_write_data_pages+0x261d/0x3000
[  505.276923][  T210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  505.277022][  T210]  ? f2fs_write_meta_pages+0x357/0x450
[  505.277053][  T210]  ? __lock_acquire+0xab9/0xd20
[  505.277079][  T210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  505.277137][  T210]  do_writepages+0x32e/0x550
[  505.277164][  T210]  ? reacquire_held_locks+0x127/0x1d0
[  505.277178][  T210]  ? writeback_sb_inodes+0x384/0x1010
[  505.277207][  T210]  __writeback_single_inode+0x145/0xff0
[  505.277226][  T210]  ? do_raw_spin_unlock+0x4d/0x240
[  505.277249][  T210]  writeback_sb_inodes+0x6c7/0x1010
[  505.277295][  T210]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  505.277353][  T210]  ? rcu_is_watching+0x15/0xb0
[  505.277376][  T210]  wb_writeback+0x43b/0xaf0
[  505.277399][  T210]  ? queue_io+0x361/0x590
[  505.277419][  T210]  ? __pfx_wb_writeback+0x10/0x10
[  505.277444][  T210]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.277468][  T210]  wb_workfn+0x409/0xef0
[  505.277500][  T210]  ? __pfx_wb_workfn+0x10/0x10
[  505.277522][  T210]  ? __lock_acquire+0xab9/0xd20
[  505.277554][  T210]  ? process_scheduled_works+0x9ef/0x17b0
[  505.277576][  T210]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.277593][  T210]  ? process_scheduled_works+0x9ef/0x17b0
[  505.277607][  T210]  ? process_scheduled_works+0x9ef/0x17b0
[  505.277624][  T210]  process_scheduled_works+0xae1/0x17b0
[  505.277669][  T210]  ? __pfx_process_scheduled_works+0x10/0x10
[  505.277702][  T210]  worker_thread+0x8a0/0xda0
[  505.277733][  T210]  ? __kthread_parkme+0x7b/0x200
[  505.277760][  T210]  kthread+0x711/0x8a0
[  505.277801][  T210]  ? __pfx_worker_thread+0x10/0x10
[  505.277817][  T210]  ? __pfx_kthread+0x10/0x10
[  505.277838][  T210]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.277855][  T210]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.277873][  T210]  ? __pfx_kthread+0x10/0x10
[  505.277893][  T210]  ret_from_fork+0x3fc/0x770
[  505.277913][  T210]  ? __pfx_ret_from_fork+0x10/0x10
[  505.277935][  T210]  ? __switch_to_asm+0x39/0x70
[  505.277956][  T210]  ? __switch_to_asm+0x33/0x70
[  505.277970][  T210]  ? __pfx_kthread+0x10/0x10
[  505.277988][  T210]  ret_from_fork_asm+0x1a/0x30
[  505.278021][  T210]  </TASK>
[  505.291769][T18694] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  505.296419][  T210] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  505.354850][T18694] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  505.357878][  T210] CPU: 0 UID: 0 PID: 210 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  505.357898][  T210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  505.357908][  T210] Workqueue: writeback wb_workfn (flush-7:9)
[  505.357931][  T210] Call Trace:
[  505.357938][  T210]  <TASK>
[  505.357945][  T210]  dump_stack_lvl+0x189/0x250
[  505.357967][  T210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  505.357983][  T210]  ? __pfx_queue_work_on+0x10/0x10
[  505.357997][  T210]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  505.358015][  T210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  505.358042][  T210]  f2fs_handle_critical_error+0x37c/0x540
[  505.358068][  T210]  f2fs_write_end_io+0x886/0xb60
[  505.358138][  T210]  __submit_merged_bio+0x27a/0x6a0
[  505.358165][  T210]  __submit_merged_write_cond+0x255/0x530
[  505.358191][  T210]  f2fs_write_data_pages+0x261d/0x3000
[  505.358241][  T210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  505.358335][  T210]  ? f2fs_write_meta_pages+0x357/0x450
[  505.358365][  T210]  ? __lock_acquire+0xab9/0xd20
[  505.358391][  T210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  505.358413][  T210]  do_writepages+0x32e/0x550
[  505.358433][  T210]  ? reacquire_held_locks+0x127/0x1d0
[  505.358444][  T210]  ? writeback_sb_inodes+0x384/0x1010
[  505.358466][  T210]  __writeback_single_inode+0x145/0xff0
[  505.358480][  T210]  ? do_raw_spin_unlock+0x4d/0x240
[  505.358497][  T210]  writeback_sb_inodes+0x6c7/0x1010
[  505.358534][  T210]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  505.358582][  T210]  ? rcu_is_watching+0x15/0xb0
[  505.358601][  T210]  wb_writeback+0x43b/0xaf0
[  505.358622][  T210]  ? queue_io+0x361/0x590
[  505.358638][  T210]  ? __pfx_wb_writeback+0x10/0x10
[  505.358659][  T210]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.358677][  T210]  wb_workfn+0x409/0xef0
[  505.358702][  T210]  ? __pfx_wb_workfn+0x10/0x10
[  505.358719][  T210]  ? __lock_acquire+0xab9/0xd20
[  505.358744][  T210]  ? process_scheduled_works+0x9ef/0x17b0
[  505.358760][  T210]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.358773][  T210]  ? process_scheduled_works+0x9ef/0x17b0
[  505.358783][  T210]  ? process_scheduled_works+0x9ef/0x17b0
[  505.358796][  T210]  process_scheduled_works+0xae1/0x17b0
[  505.358832][  T210]  ? __pfx_process_scheduled_works+0x10/0x10
[  505.358859][  T210]  worker_thread+0x8a0/0xda0
[  505.358882][  T210]  ? __kthread_parkme+0x7b/0x200
[  505.358903][  T210]  kthread+0x711/0x8a0
[  505.358921][  T210]  ? __pfx_worker_thread+0x10/0x10
[  505.358932][  T210]  ? __pfx_kthread+0x10/0x10
[  505.358947][  T210]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.358960][  T210]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.358976][  T210]  ? __pfx_kthread+0x10/0x10
[  505.358992][  T210]  ret_from_fork+0x3fc/0x770
[  505.359007][  T210]  ? __pfx_ret_from_fork+0x10/0x10
[  505.359024][  T210]  ? __switch_to_asm+0x39/0x70
[  505.359038][  T210]  ? __switch_to_asm+0x33/0x70
[  505.359051][  T210]  ? __pfx_kthread+0x10/0x10
[  505.359068][  T210]  ret_from_fork_asm+0x1a/0x30
[  505.359133][  T210]  </TASK>
[  505.359141][  T210] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  505.581345][T15308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  505.971393][T18724] can: request_module (can-proto-0) failed.
[  506.189229][T18728] loop1: detected capacity change from 0 to 32768
[  506.204722][T18728] XFS: attr2 mount option is deprecated.
[  506.206634][T18728] XFS: attr2 mount option is deprecated.
[  506.225513][T18728] XFS (loop1): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  506.257654][T18728] XFS (loop1): ro->rw transition prohibited on norecovery mount
[  506.285287][T15308] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  506.676916][T18744] loop9: detected capacity change from 0 to 256
[  506.683907][T18744] exfat: Deprecated parameter 'namecase'
[  506.685770][T18744] exfat: Deprecated parameter 'utf8'
[  506.698392][T18744] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  506.702843][T18747] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  506.707995][T18747] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  506.709983][T18747] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  506.715103][T18747] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  506.730399][T18747] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  506.733039][T18747] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  506.738457][T18747] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  506.740728][T18747] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  506.743104][T18747] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  506.747732][T18747] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  506.749764][T18747] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  507.263318][T18759] loop9: detected capacity change from 0 to 4096
[  507.292140][T18759] ntfs3(loop9): ino=0, mi_enum_attr
[  507.356203][T18759] ntfs3(loop9): ino=0, mi_enum_attr
[  507.676265][T18765] binder: 18764:18765 ioctl c018620c 200000000040 returned -22
[  508.285553][T18785] loop1: detected capacity change from 0 to 16
[  508.292259][T18785] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  508.335286][T18789] loop9: detected capacity change from 0 to 8
[  508.378030][T18789] SQUASHFS error: xz decompression failed, data probably corrupt
[  508.383565][T18789] SQUASHFS error: Failed to read block 0x108: -5
[  508.386007][T18789] SQUASHFS error: Unable to read metadata cache entry [106]
[  508.390733][T18789] SQUASHFS error: Unable to read inode 0x11f
[  508.536413][T18801] netlink: 'syz.9.4033': attribute type 1 has an invalid length.
[  508.539501][T18801] netlink: 168864 bytes leftover after parsing attributes in process `syz.9.4033'.
[  509.006763][T18817] lo speed is unknown, defaulting to 1000
[  509.008961][T18817] lo speed is unknown, defaulting to 1000
[  509.031312][T18817] lo speed is unknown, defaulting to 1000
[  509.065946][T18817] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  509.104336][T18817] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  509.232067][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  509.234640][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  509.245465][T18817] lo speed is unknown, defaulting to 1000
[  509.249431][T18817] lo speed is unknown, defaulting to 1000
[  509.253210][T18817] lo speed is unknown, defaulting to 1000
[  509.257082][T18817] lo speed is unknown, defaulting to 1000
[  509.260888][T18817] lo speed is unknown, defaulting to 1000
[  509.326921][T18820] loop1: detected capacity change from 0 to 1024
[  509.333200][T18820] EXT4-fs: Ignoring removed nobh option
[  509.342529][T18820] EXT4-fs: Ignoring removed bh option
[  509.375417][T18820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  510.283507][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.474357][T18850] loop9: detected capacity change from 0 to 128
[  510.506069][T18850] EXT4-fs (loop9): Test dummy encryption mode enabled
[  510.528824][T18850] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  510.572583][T18850] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  510.606557][T12836] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  511.495617][T18889] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4054'.
[  511.498688][T18889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4054'.
[  511.513821][T18889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4054'.
[  511.733141][T18902] sit0: Caught tx_queue_len zero misconfig
[  511.973617][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  511.980110][T18896] loop1: detected capacity change from 0 to 32768
[  511.983662][T18896] XFS: ikeep mount option is deprecated.
[  511.990867][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  511.992876][T18896] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  511.997811][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  512.002763][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  512.009601][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  512.017707][T18896] XFS (loop1): Ending clean mount
[  512.023002][T18896] XFS (loop1): Quotacheck needed: Please wait.
[  512.084218][T18896] XFS (loop1): Quotacheck: Done.
[  512.109333][   T33] audit: type=1800 audit(525610.338:681): pid=18896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4056" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  512.127347][T18908] lo speed is unknown, defaulting to 1000
[  512.227874][T15308] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  512.273605][ T5880] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.278597][ T5880] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.461600][ T5880] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.468406][ T5880] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.477016][ T5902] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  512.649046][ T5902] usb 10-1: config 0 has an invalid interface number: 216 but max is 0
[  512.657841][ T5902] usb 10-1: config 0 has no interface number 0
[  512.662607][ T5902] usb 10-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[  512.670841][ T5902] usb 10-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0
[  512.674997][ T5902] usb 10-1: config 0 interface 216 has no altsetting 0
[  512.679016][ T5902] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[  512.682908][ T5902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.717367][ T5902] usb 10-1: config 0 descriptor??
[  512.723563][T18942] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  512.735493][ T5902] usb 10-1: NFC: intf ffff88801d2c2000 id ffffffff8eb53b60
[  512.736884][ T5880] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.749329][ T5880] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.930623][ T5880] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.939860][ T5880] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.966330][ T5902] usb 10-1: USB disconnect, device number 30
[  513.001217][T18908] chnl_net:caif_netlink_parms(): no params data found
[  513.382782][T18908] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.390281][T18908] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.392753][T18908] bridge_slave_0: entered allmulticast mode
[  513.396140][T18908] bridge_slave_0: entered promiscuous mode
[  513.427766][T18908] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.433746][T18908] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.436259][T18908] bridge_slave_1: entered allmulticast mode
[  513.442026][T18908] bridge_slave_1: entered promiscuous mode
[  513.551574][T18908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.558021][ T5880] bridge_slave_1: left allmulticast mode
[  513.560261][ T5880] bridge_slave_1: left promiscuous mode
[  513.562412][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.569179][ T5880] bridge_slave_0: left allmulticast mode
[  513.571294][ T5880] bridge_slave_0: left promiscuous mode
[  513.573486][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.013026][T19174] loop9: detected capacity change from 0 to 8
[  514.023795][T19174] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  514.157644][T19180] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4073'.
[  514.246987][ T5237] Bluetooth: hci0: command tx timeout
[  514.260646][  T793] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  514.452641][  T793] usb 2-1: Using ep0 maxpacket: 8
[  514.457184][  T793] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  514.460213][  T793] usb 2-1: config 0 has no interface number 0
[  514.465951][  T793] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d
[  514.469211][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.472233][  T793] usb 2-1: Product: syz
[  514.474851][  T793] usb 2-1: Manufacturer: syz
[  514.476624][  T793] usb 2-1: SerialNumber: syz
[  514.483649][  T793] usb 2-1: config 0 descriptor??
[  514.493686][  T793] usb 2-1: selecting invalid altsetting 2
[  514.496119][  T793] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  514.655597][T10118] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  514.722153][ T6291] usb 2-1: USB disconnect, device number 17
[  514.853562][T10118] usb 10-1: config 0 has an invalid interface number: 170 but max is 0
[  514.856876][T10118] usb 10-1: config 0 has no interface number 0
[  514.877300][T10118] usb 10-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7
[  514.882126][T10118] usb 10-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[  514.885678][T10118] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.891695][T10118] usb 10-1: config 0 descriptor??
[  514.915472][T10118] HFC-S_USB 10-1:0.170: probe with driver HFC-S_USB failed with error -5
[  514.977929][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  514.983680][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  514.989250][ T5880] bond0 (unregistering): Released all slaves
[  515.002575][ T5880] bond1 (unregistering): Released all slaves
[  515.015654][T18908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.121402][T18908] team0: Port device team_slave_0 added
[  515.143625][T18908] team0: Port device team_slave_1 added
[  515.155154][ T6291] usb 10-1: USB disconnect, device number 31
[  515.272141][T18908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.274258][T18908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.283877][T18908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.294453][T18908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.297336][T18908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.305751][T18908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.419519][T19266] loop1: detected capacity change from 0 to 1024
[  515.440269][T19266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.466679][T18908] hsr_slave_0: entered promiscuous mode
[  515.473358][T18908] hsr_slave_1: entered promiscuous mode
[  515.475979][T18908] debugfs: 'hsr0' already exists in 'hsr'
[  515.478229][T18908] Cannot create hsr debugfs directory
[  515.517480][ T5880] hsr_slave_0: left promiscuous mode
[  515.520197][ T5880] hsr_slave_1: left promiscuous mode
[  515.523313][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  515.526605][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  515.538766][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  515.541090][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.541474][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  515.624197][ T5880] veth1_macvtap: left promiscuous mode
[  515.625938][ T5880] veth0_macvtap: left promiscuous mode
[  515.627707][ T5880] veth1_vlan: left promiscuous mode
[  515.630921][ T5880] veth0_vlan: left promiscuous mode
[  516.462857][ T5237] Bluetooth: hci0: command tx timeout
[  516.547613][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  516.639358][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  517.746818][T19339] loop1: detected capacity change from 0 to 512
[  517.766022][T19339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.858908][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.104798][ T5948] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  518.273133][ T5948] usb 10-1: Using ep0 maxpacket: 32
[  518.314468][ T5948] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.318870][ T5948] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.330042][ T5948] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  518.334318][ T5948] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  518.337538][ T5948] usb 10-1: Product: syz
[  518.339193][ T5948] usb 10-1: Manufacturer: syz
[  518.386843][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'.
[  518.395501][ T5948] hub 10-1:4.0: USB hub found
[  518.523428][ T5880] IPVS: stop unused estimator thread 0...
[  518.596825][ T5948] hub 10-1:4.0: config failed, hub has too many ports! (err -19)
[  518.599592][   T33] audit: type=1326 audit(525616.408:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.1.4087" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2f8ebe9 code=0x7ffc0000
[  518.633309][   T33] audit: type=1326 audit(525616.408:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.1.4087" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2f8ebe9 code=0x7ffc0000
[  518.642451][   T33] audit: type=1326 audit(525616.426:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.1.4087" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9ac2f8ebe9 code=0x7ffc0000
[  518.653411][   T33] audit: type=1326 audit(525616.426:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.1.4087" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2f8ebe9 code=0x7ffc0000
[  518.676416][ T5237] Bluetooth: hci0: command tx timeout
[  518.679288][   T33] audit: type=1326 audit(525616.426:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.1.4087" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2f8ebe9 code=0x7ffc0000
[  518.689984][   T33] audit: type=1326 audit(525616.426:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.1.4087" exe="/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f9ac2f8ebe9 code=0x7ffc0000
[  518.699807][   T33] audit: type=1326 audit(525616.426:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.1.4087" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2f8ebe9 code=0x7ffc0000
[  518.708775][   T33] audit: type=1326 audit(525616.426:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.1.4087" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2f8ebe9 code=0x7ffc0000
[  518.943277][  T793] usb 10-1: USB disconnect, device number 32
[  518.988495][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  519.046539][T18908] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  519.053156][T18908] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  519.059762][T18908] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  519.066706][T18908] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  519.144637][T18908] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.163889][T18908] 8021q: adding VLAN 0 to HW filter on device team0
[  519.172929][T16290] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.175686][T16290] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.181935][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.186229][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.191614][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=a95b, bcdDevice= 0.00
[  519.200616][T16290] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.203560][T16290] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.209404][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.221440][   T10] usb 2-1: config 0 descriptor??
[  519.480665][T18908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.663495][   T10] hid-generic 0003:046D:A95B.001C: unbalanced collection at end of report description
[  519.674690][   T10] hid-generic 0003:046D:A95B.001C: probe with driver hid-generic failed with error -22
[  519.698742][T18908] veth0_vlan: entered promiscuous mode
[  519.707717][T18908] veth1_vlan: entered promiscuous mode
[  519.744984][T18908] veth0_macvtap: entered promiscuous mode
[  519.751303][T18908] veth1_macvtap: entered promiscuous mode
[  519.771229][T18908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.786012][T18908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.803384][T15347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.812554][T15347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.816163][T15347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.823370][T15347] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.881335][ T5948] usb 2-1: USB disconnect, device number 18
[  519.992306][  T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.995061][  T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.039056][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.042246][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.464857][T19527] loop4: detected capacity change from 0 to 40427
[  520.479919][T19527] F2FS-fs (loop4): build fault injection rate: 14
[  520.485421][T19527] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  520.492120][T19527] F2FS-fs (loop4): invalid crc value
[  520.500572][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  520.517799][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  520.597524][T19527] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  520.606500][T19527] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  520.616339][T19527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  520.644375][T19527] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  520.668374][T19527] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[  520.711408][T18908] syz-executor: attempt to access beyond end of device
[  520.711408][T18908] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  520.725756][T18908] CPU: 1 UID: 0 PID: 18908 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  520.725773][T18908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  520.725785][T18908] Call Trace:
[  520.725789][T18908]  <TASK>
[  520.725793][T18908]  dump_stack_lvl+0x189/0x250
[  520.725811][T18908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  520.725821][T18908]  ? __pfx_queue_work_on+0x10/0x10
[  520.725830][T18908]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  520.725841][T18908]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  520.725858][T18908]  f2fs_handle_critical_error+0x37c/0x540
[  520.725874][T18908]  f2fs_write_end_io+0x886/0xb60
[  520.725909][T18908]  __submit_merged_bio+0x27a/0x6a0
[  520.725924][T18908]  __submit_merged_write_cond+0x255/0x530
[  520.725940][T18908]  f2fs_write_data_pages+0x261d/0x3000
[  520.725970][T18908]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  520.726012][T18908]  ? folios_put_refs+0x559/0x640
[  520.726029][T18908]  ? __lock_acquire+0xab9/0xd20
[  520.726046][T18908]  ? do_raw_spin_lock+0x121/0x290
[  520.726062][T18908]  ? do_raw_spin_unlock+0x4d/0x240
[  520.726072][T18908]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  520.726085][T18908]  do_writepages+0x32e/0x550
[  520.726103][T18908]  ? do_raw_spin_unlock+0x4d/0x240
[  520.726115][T18908]  filemap_fdatawrite+0x199/0x240
[  520.726127][T18908]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  520.726164][T18908]  ? do_raw_spin_unlock+0x4d/0x240
[  520.726176][T18908]  f2fs_sync_dirty_inodes+0x31f/0x830
[  520.726193][T18908]  f2fs_write_checkpoint+0x95a/0x1df0
[  520.726215][T18908]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  520.726249][T18908]  ? kill_f2fs_super+0x298/0x6c0
[  520.726260][T18908]  kill_f2fs_super+0x2c3/0x6c0
[  520.726272][T18908]  ? __pfx_kill_f2fs_super+0x10/0x10
[  520.726279][T18908]  ? radix_tree_delete_item+0x2b6/0x400
[  520.726294][T18908]  ? shrinker_free+0x2ce/0x3e0
[  520.726305][T18908]  deactivate_locked_super+0xbc/0x130
[  520.726317][T18908]  cleanup_mnt+0x425/0x4c0
[  520.726326][T18908]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.726339][T18908]  task_work_run+0x1d4/0x260
[  520.726352][T18908]  ? __pfx_task_work_run+0x10/0x10
[  520.726362][T18908]  ? __x64_sys_umount+0x122/0x160
[  520.726376][T18908]  ? exit_to_user_mode_loop+0x40/0x110
[  520.726390][T18908]  exit_to_user_mode_loop+0xec/0x110
[  520.726402][T18908]  do_syscall_64+0x2bd/0x3b0
[  520.726413][T18908]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.726423][T18908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.726432][T18908]  ? exc_page_fault+0x9f/0xf0
[  520.726443][T18908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.726452][T18908] RIP: 0033:0x7f724b38ff17
[  520.726462][T18908] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  520.726470][T18908] RSP: 002b:00007ffe760cc118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  520.726480][T18908] RAX: 0000000000000000 RBX: 00007f724b411c05 RCX: 00007f724b38ff17
[  520.726486][T18908] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe760cc1d0
[  520.726491][T18908] RBP: 00007ffe760cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  520.726496][T18908] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe760cd260
[  520.726502][T18908] R13: 00007f724b411c05 R14: 000000000007cf09 R15: 00007ffe760cd2a0
[  520.726518][T18908]  </TASK>
[  520.727253][T18908] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  520.909817][ T5237] Bluetooth: hci0: command tx timeout
[  520.923098][T19536] loop1: detected capacity change from 0 to 32768
[  521.260185][T19562] Bluetooth: MGMT ver 1.23
[  522.140100][  T793] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  522.332674][  T793] usb 2-1: Using ep0 maxpacket: 16
[  522.343558][  T793] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  522.351240][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.358710][  T793] usb 2-1: Product: syz
[  522.360592][  T793] usb 2-1: Manufacturer: syz
[  522.362267][  T793] usb 2-1: SerialNumber: syz
[  522.370705][  T793] usb 2-1: config 0 descriptor??
[  522.383794][T19588] loop9: detected capacity change from 0 to 4096
[  522.385200][  T793] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  522.419327][T19588] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  522.442010][T19588] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  522.502210][T19588] ntfs3(loop9): volume is dirty and "force" flag is not set!
[  522.607762][  T793] usb 2-1: USB disconnect, device number 19
[  522.712379][T19611] loop4: detected capacity change from 0 to 64
[  522.738281][T19611] syz.4.4109: attempt to access beyond end of device
[  522.738281][T19611] loop4: rw=0, sector=128, nr_sectors = 2 limit=64
[  522.743351][T19611] Trying to free block not in datazone
[  522.745125][T19611] Trying to free block not in datazone
[  522.747029][T19611] Trying to free block not in datazone
[  522.748783][T19611] Trying to free block not in datazone
[  522.754008][T19611] Trying to free block not in datazone
[  522.756302][T19611] Trying to free block not in datazone
[  522.758464][T19611] minix_free_block (loop4:6): bit already cleared
[  522.833804][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4112'.
[  522.875103][  T126] block nbd0: Possible stuck request ffff888020ee0000: control (read@0,1024B). Runtime 180 seconds
[  522.880105][  T126] block nbd0: Possible stuck request ffff888020ee0200: control (read@1024,1024B). Runtime 180 seconds
[  522.884279][  T126] block nbd0: Possible stuck request ffff888020ee0400: control (read@2048,1024B). Runtime 180 seconds
[  522.888887][  T126] block nbd0: Possible stuck request ffff888020ee0600: control (read@3072,1024B). Runtime 180 seconds
[  523.105065][T19634] loop4: detected capacity change from 0 to 16
[  523.143593][T19634] erofs (device loop4): mounted with root inode @ nid 36.
[  523.160988][T19634] syz.4.4115: attempt to access beyond end of device
[  523.160988][T19634] loop4: rw=0, sector=48, nr_sectors = 16 limit=16
[  523.174067][T19634] erofs (device loop4): read error -5 @ 43 of nid 36
[  523.180245][T19634] syz.4.4115: attempt to access beyond end of device
[  523.180245][T19634] loop4: rw=0, sector=48, nr_sectors = 16 limit=16
[  523.185319][T19634] erofs (device loop4): read error -5 @ 43 of nid 36
[  523.593334][T19659] loop4: detected capacity change from 0 to 256
[  523.603819][T19659] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  523.614303][T19659] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  523.851747][T19655] loop1: detected capacity change from 0 to 32768
[  523.857809][T19655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4121 (19655)
[  523.898758][T19655] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  523.930215][T19655] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  523.944442][T19655] BTRFS info (device loop1): using free-space-tree
[  524.177888][T19655] BTRFS info (device loop1): rebuilding free space tree
[  524.390599][T15308] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  524.898954][T19715] binder: 19714:19715 ioctl c018620c 0 returned -14
[  525.055796][T19725] loop1: detected capacity change from 0 to 2048
[  525.110037][T19725] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  525.120656][T19728] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  525.133643][T19725] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=5
[  525.202229][T19725] Remounting filesystem read-only
[  525.785902][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  525.949028][T19757] cgroup: fork rejected by pids controller in /syz9
[  525.957606][ T5915] usb 2-1: Using ep0 maxpacket: 16
[  525.961561][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  525.965865][ T5915] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  525.977899][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.998723][T19764] loop4: detected capacity change from 0 to 256
[  526.000518][ T5915] usb 2-1: config 0 descriptor??
[  526.228440][ T5915] usbhid 2-1:0.0: can't add hid device: -71
[  526.243478][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  526.249858][ T5915] usb 2-1: USB disconnect, device number 20
[  526.385952][T19774] loop4: detected capacity change from 0 to 32768
[  526.397212][T19774] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4146 (19774)
[  526.415328][T19774] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  526.420211][T19774] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  526.422967][T19774] BTRFS info (device loop4): using free-space-tree
[  526.448328][T19774] BTRFS info (device loop4): rebuilding free space tree
[  526.493316][T19774] BTRFS info (device loop4 state M): max_inline set to 0
[  526.520256][T18908] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  526.718708][ T5881] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.888940][ T5881] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.153303][ T5881] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.170559][T19815] loop4: detected capacity change from 0 to 4096
[  527.232680][T19815] ntfs3(loop4): ino=19, mi_enum_attr
[  527.234739][T19815] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  527.271655][ T5881] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.336692][T19815] ntfs3: Cannot use different iocharset when remounting!
[  527.465782][T19831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4153'.
[  527.477994][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  527.488014][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  527.494008][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  527.503274][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  527.506454][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  527.662731][T19833] lo speed is unknown, defaulting to 1000
[  527.848060][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  527.938317][ T5881] bond1 (unregistering): (slave gretap1): Releasing active interface
[  528.032750][   T10] usb 2-1: Using ep0 maxpacket: 32
[  528.035832][   T10] usb 2-1: config 1 has an invalid interface number: 211 but max is 0
[  528.038267][   T10] usb 2-1: config 1 has no interface number 0
[  528.040142][   T10] usb 2-1: config 1 interface 211 has no altsetting 0
[  528.044914][   T10] usb 2-1: New USB device found, idVendor=33f7, idProduct=0004, bcdDevice=64.d9
[  528.047895][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.050285][   T10] usb 2-1: Product: syz
[  528.051598][   T10] usb 2-1: Manufacturer: syz
[  528.053334][   T10] usb 2-1: SerialNumber: syz
[  528.074817][ T5881] team0: Port device geneve1 removed
[  528.306522][   T10] asix 2-1:1.211 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  528.310706][   T10] asix 2-1:1.211: probe with driver asix failed with error -71
[  528.334451][   T10] usb 2-1: USB disconnect, device number 21
[  528.641778][ T5881] bond0 (unregistering): Released all slaves
[  528.657790][ T5881] bond1 (unregistering): Released all slaves
[  528.820578][T19895] loop4: detected capacity change from 0 to 32768
[  529.050436][T19895] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,str_hash=crc32c,wide_macs,norecovery,version_upgrade=incompatible
[  529.050459][T19895]   allowing incompatible features above 0.0: (unknown version)
[  529.050470][T19895]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  529.157235][T19895] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  529.166373][T19895] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  529.169648][T19895] bcachefs (loop4): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete
[  529.169648][T19895] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive
[  529.169648][T19895]   running recovery passes: check_extents_to_backpointers,check_inodes
[  529.194090][T19895] bcachefs (loop4): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version)
[  529.194090][T19895] 
[  529.270949][T19895] bcachefs (loop4): accounting_read... done
[  529.278334][T19833] chnl_net:caif_netlink_parms(): no params data found
[  529.281407][T19895] bcachefs (loop4): alloc_read... done
[  529.290422][T19895] bcachefs (loop4): snapshots_read... done
[  529.297882][T19895] bcachefs (loop4): done starting filesystem
[  529.342737][ T5881] hsr_slave_0: left promiscuous mode
[  529.347560][ T5881] hsr_slave_1: left promiscuous mode
[  529.369996][T18908] bcachefs (loop4): shutting down
[  529.393489][ T5881] veth1_macvtap: left promiscuous mode
[  529.395282][ T5881] veth0_macvtap: left promiscuous mode
[  529.399941][ T5881] veth1_vlan: left promiscuous mode
[  529.404557][T18908] bcachefs (loop4): shutdown complete
[  529.716243][   T55] Bluetooth: hci2: command tx timeout
[  530.538900][T20030] loop1: detected capacity change from 0 to 32768
[  530.546753][T20030] (syz.1.4169,20030,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  530.555172][T20030] (syz.1.4169,20030,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  530.610398][T20030] JBD2: Ignoring recovery information on journal
[  530.685609][T20030] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  530.840973][T15308] ocfs2: Unmounting device (7,1) on (node local)
[  531.038697][T20038] loop1: detected capacity change from 0 to 64
[  531.216802][T20048] vivid-000: =================  START STATUS  =================
[  531.236826][T20048] vivid-000: Test Pattern: 75% Colorbar
[  531.252930][T20048] vivid-000: Fill Percentage of Frame: 100
[  531.255054][T20048] vivid-000: Horizontal Movement: No Movement
[  531.256943][T20048] vivid-000: Vertical Movement: No Movement
[  531.258796][T20048] vivid-000: OSD Text Mode: Counters Only
[  531.261476][T20048] vivid-000: Show Border: false
[  531.263259][T20048] vivid-000: Show Square: false
[  531.265274][T20048] vivid-000: Sensor Flipped Horizontally: false
[  531.285905][T20048] vivid-000: Sensor Flipped Vertically: false
[  531.290511][T20048] vivid-000: Insert SAV Code in Image: false
[  531.293364][T20048] vivid-000: Insert EAV Code in Image: false
[  531.295571][T20048] vivid-000: Insert Video Guard Band: false
[  531.297913][T20048] vivid-000: Reduced Framerate: false
[  531.300197][T20048] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  531.311164][T20048] vivid-000: S-Video 000-0 Is Connected To: None
[  531.333354][T20048] vivid-000: Enable Capture Cropping: true grabbed
[  531.335759][T20048] vivid-000: Enable Capture Composing: true grabbed
[  531.337837][T20048] vivid-000: Enable Capture Scaler: true grabbed
[  531.340064][T20048] vivid-000: Timestamp Source: End of Frame
[  531.342175][T20048] vivid-000: Colorspace: SMPTE 170M
[  531.344002][T20048] vivid-000: Transfer Function: Default
[  531.356433][T20048] vivid-000: Y'CbCr Encoding: Default
[  531.358252][T20048] vivid-000: HSV Encoding: Hue 0-179
[  531.360103][T20048] vivid-000: Quantization: Default
[  531.361668][T20048] vivid-000: Apply Alpha To Red Only: true
[  531.363408][T20048] vivid-000: Standard Aspect Ratio: 4x3
[  531.365408][T20048] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  531.369970][T20048] vivid-000: DV Timings: 640x480p59 inactive
[  531.372000][T20048] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  531.374825][T20048] vivid-000: Maximum EDID Blocks: 2
[  531.376585][T20048] vivid-000: Limited RGB Range (16-235): false
[  531.379649][T20048] vivid-000: Rx RGB Quantization Range: Automatic
[  531.383133][T20048] vivid-000: Power Present: 0x00000001
[  531.384993][T20048] tpg source WxH: 720x576 (R'G'B)
[  531.386729][T20048] tpg field: 4
[  531.388074][T20048] tpg crop: (0,0)/64x64
[  531.389997][T20048] tpg compose: (0,0)/16x16
[  531.391471][T20048] tpg colorspace: 1
[  531.392696][T20048] tpg transfer function: 0/1
[  531.394450][T20048] tpg quantization: 0/1
[  531.395753][T20048] tpg RGB range: 0/2
[  531.396919][T20048] vivid-000: ==================  END STATUS  ==================
[  531.707360][T20060] loop1: detected capacity change from 0 to 32768
[  531.728737][T20060] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  531.776076][T20060] XFS (loop1): Ending clean mount
[  531.833108][T15308] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  531.962114][   T55] Bluetooth: hci2: command tx timeout
[  532.880468][T20087] loop1: detected capacity change from 0 to 4096
[  533.489839][T19833] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.492283][T19833] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.494567][T19833] bridge_slave_0: entered allmulticast mode
[  533.529194][T19833] bridge_slave_0: entered promiscuous mode
[  533.544109][T19833] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.546465][T19833] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.556752][T19833] bridge_slave_1: entered allmulticast mode
[  533.581804][T19833] bridge_slave_1: entered promiscuous mode
[  533.588400][T20159] mmap: syz.4.4183 (20159): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  533.693380][T19833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.727307][T19833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.842161][T19833] team0: Port device team_slave_0 added
[  533.845816][T19833] team0: Port device team_slave_1 added
[  533.944693][T19833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.947169][T19833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.966281][T20098] loop1: detected capacity change from 0 to 131072
[  533.975394][T20098] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  533.978627][T20098] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  533.983839][T20098] F2FS-fs (loop1): invalid crc value
[  533.986875][T19833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.022828][T19833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.025256][T19833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.055551][T20098] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  534.060593][T20098] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  534.063543][T20098] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  534.067106][T19833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.114489][ T5881] IPVS: stop unused estimator thread 0...
[  534.159277][   T55] Bluetooth: hci2: command tx timeout
[  534.181208][T19833] hsr_slave_0: entered promiscuous mode
[  534.188314][T19833] hsr_slave_1: entered promiscuous mode
[  534.212307][T19833] debugfs: 'hsr0' already exists in 'hsr'
[  534.214405][T19833] Cannot create hsr debugfs directory
[  534.342851][T20186] loop4: detected capacity change from 0 to 40427
[  534.359880][T20186] F2FS-fs: heap/no_heap options were deprecated
[  534.397777][T20186] F2FS-fs (loop4): build fault injection rate: 19
[  534.400341][T20186] F2FS-fs (loop4): build fault injection type: 0xb23a
[  534.433339][T20186] F2FS-fs (loop4): invalid crc value
[  534.450747][T20186] F2FS-fs (loop4): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4462/0x6ff0
[  534.454367][T20186] F2FS-fs (loop4): Failed to initialize F2FS node manager (-12)
[  534.873562][T20359] loop4: detected capacity change from 0 to 8
[  534.885666][T20359] SQUASHFS error: Unable to read inode 0x127
[  534.967747][T20369] loop4: detected capacity change from 0 to 1024
[  534.998049][T20369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  535.037049][T19833] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  535.043587][T18908] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.080714][T19833] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  535.093420][T19833] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  535.125457][T19833] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  535.257513][T19833] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.276482][T19833] 8021q: adding VLAN 0 to HW filter on device team0
[  535.291563][   T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  535.301230][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.304118][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.309499][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.312503][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.403993][T20404] loop4: detected capacity change from 0 to 4096
[  535.409567][T20404] nilfs2: Bad value for 'cp'
[  535.482605][   T10] usb 2-1: config 0 has an invalid interface number: 189 but max is 0
[  535.495171][   T10] usb 2-1: config 0 has no interface number 0
[  535.497483][   T10] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  535.501558][   T10] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  535.524606][   T10] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  535.536237][   T10] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  535.544794][   T10] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  535.554980][   T10] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  535.559951][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.561265][T19833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.563141][   T10] usb 2-1: Product: syz
[  535.567647][   T10] usb 2-1: Manufacturer: syz
[  535.570550][   T10] usb 2-1: SerialNumber: syz
[  535.576171][   T10] usb 2-1: config 0 descriptor??
[  535.580974][T20379] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  535.613278][   T10] ums-alauda 2-1:0.189: USB Mass Storage device detected
[  535.633412][   T10] scsi host6: usb-storage 2-1:0.189
[  535.820135][   T10] usb 2-1: USB disconnect, device number 22
[  535.877789][T19833] veth0_vlan: entered promiscuous mode
[  535.885815][T19833] veth1_vlan: entered promiscuous mode
[  535.940833][T19833] veth0_macvtap: entered promiscuous mode
[  535.958683][T19833] veth1_macvtap: entered promiscuous mode
[  535.978912][T19833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.993850][T19833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.006221][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.017378][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.022844][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.042607][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.163066][T16290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.178299][T16290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.219610][T16290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.231573][T20445] loop4: detected capacity change from 0 to 32768
[  536.232495][T16290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.236784][T20445] XFS: ikeep mount option is deprecated.
[  536.281015][T20445] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  536.329228][T20445] XFS (loop4): Ending clean mount
[  536.333128][T20445] XFS (loop4): Quotacheck needed: Please wait.
[  536.406328][   T55] Bluetooth: hci2: command tx timeout
[  536.408677][T20445] XFS (loop4): Quotacheck: Done.
[  536.484874][T18908] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  536.924973][T20505] loop9: detected capacity change from 0 to 64
[  536.976324][T20505] overlayfs: upper fs needs to support d_type.
[  537.013025][T10118] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  537.025083][T20505] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  537.041267][T20505] overlayfs: failed to set xattr on upper
[  537.043570][T20505] overlayfs: ...falling back to redirect_dir=nofollow.
[  537.053714][T20505] overlayfs: ...falling back to index=off.
[  537.056883][T20505] overlayfs: ...falling back to uuid=null.
[  537.163713][T19833] Trying to free block not in datazone
[  537.180499][T19833] Trying to free block not in datazone
[  537.186168][T10118] usb 2-1: Using ep0 maxpacket: 32
[  537.198540][T19833] Trying to free block not in datazone
[  537.198797][T10118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  537.220891][T10118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.224666][T10118] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  537.239418][T10118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.249852][T10118] usb 2-1: config 0 descriptor??
[  537.788074][T10118] glorious 0003:258A:0033.001D: unknown main item tag 0x2
[  537.805378][T10118] glorious 0003:258A:0033.001D: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.1-1/input0
[  537.832012][T20537] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4212'.
[  537.992821][T10118] usb 2-1: USB disconnect, device number 23
[  538.291288][T20582] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  538.294282][T20582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.707422][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4229'.
[  538.710267][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'.
[  538.733703][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  538.744227][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  538.747975][T11294] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  538.752660][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  538.761555][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  538.905036][T11294] usb 10-1: Using ep0 maxpacket: 32
[  538.908297][T11294] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  538.912537][T11294] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  538.925657][T11294] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  538.928724][T11294] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.931316][T11294] usb 10-1: Product: syz
[  538.932839][T11294] usb 10-1: Manufacturer: syz
[  538.934349][T11294] usb 10-1: SerialNumber: syz
[  538.949946][T11294] usb 10-1: config 0 descriptor??
[  538.955712][T11294] usb 10-1: no audio or video endpoints found
[  538.964107][T20608] loop4: detected capacity change from 0 to 32768
[  538.969393][T20608] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4230 (20608)
[  538.985273][T20608] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  538.988488][T20608] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  538.991798][T20608] BTRFS info (device loop4): using free-space-tree
[  539.175201][T11294] usb 10-1: USB disconnect, device number 33
[  539.212884][T18908] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  539.552410][T20657] loop4: detected capacity change from 0 to 4096
[  539.559423][T20657] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  539.566844][T20657] ntfs3(loop4): Failed to initialize MFT zone (-22).
[  539.695531][T20668] loop4: detected capacity change from 0 to 128
[  539.723888][T20668] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  539.751928][T20668] EXT4-fs error (device loop4): swap_inode_boot_loader:384: inode #5: comm syz.4.4238: iget: checksum invalid
[  539.801897][T18908] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  539.904800][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4240'.
[  540.139885][T20703] delete_channel: no stack
[  540.178448][  T793] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  540.316416][   T47] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  540.337748][  T793] usb 10-1: Using ep0 maxpacket: 32
[  540.341714][  T793] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  540.344851][  T793] usb 10-1: config 0 has no interface number 0
[  540.350250][  T793] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  540.353671][  T793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.356670][  T793] usb 10-1: Product: syz
[  540.358457][  T793] usb 10-1: Manufacturer: syz
[  540.361708][  T793] usb 10-1: SerialNumber: syz
[  540.366353][  T793] usb 10-1: config 0 descriptor??
[  540.372295][  T793] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  540.375546][  T793] usb 10-1: selecting invalid altsetting 1
[  540.377748][  T793] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  540.388679][  T793] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  540.394369][  T793] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  540.397557][  T793] usb 10-1: media controller created
[  540.421315][  T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  540.477084][   T47] usb 2-1: Using ep0 maxpacket: 16
[  540.481695][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  540.494043][   T47] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  540.498292][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.501747][   T47] usb 2-1: Product: syz
[  540.503484][   T47] usb 2-1: Manufacturer: syz
[  540.505327][   T47] usb 2-1: SerialNumber: syz
[  540.514843][   T47] usb 2-1: config 0 descriptor??
[  540.525244][   T47] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  540.528823][   T47] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  540.541088][T10118] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  540.809540][  T793] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  540.847584][  T793] usb 10-1: USB disconnect, device number 34
[  540.853563][ T5976] udevd[5976]: setting mode of /dev/bus/usb/010/034 to 020664 failed: No such file or directory
[  540.859367][ T5976] udevd[5976]: setting owner of /dev/bus/usb/010/034 to uid=0, gid=0 failed: No such file or directory
[  541.166399][   T47] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  541.321592][T20742] loop4: detected capacity change from 0 to 32768
[  541.340678][T20742] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  541.370775][T20742] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  541.409632][   T33] audit: type=1800 audit(525637.751:690): pid=20742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4249" name="bus" dev="loop4" ino=17058 res=0 errno=0
[  541.445724][T18908] ocfs2: Unmounting device (7,4) on (node local)
[  541.701169][T20762] loop4: detected capacity change from 0 to 4096
[  541.705419][T20762] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  541.727476][T20762] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  541.734454][T20762] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  541.766121][T20752] loop9: detected capacity change from 0 to 32768
[  541.782978][T20752] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  541.817576][   T47] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  541.829588][   T47] em28xx 2-1:0.0: board has no eeprom
[  541.846458][T20752] XFS (loop9): Ending clean mount
[  541.865624][T20752] XFS (loop9): User initiated shutdown received.
[  541.870324][T20752] XFS (loop9): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  541.874466][T20752] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[  541.893603][T19833] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  541.919906][   T47] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  541.926382][   T47] em28xx 2-1:0.0: dvb set to bulk mode.
[  541.945237][T11294] em28xx 2-1:0.0: Binding DVB extension
[  541.958714][   T47] usb 2-1: USB disconnect, device number 24
[  541.977049][   T47] em28xx 2-1:0.0: Disconnecting em28xx
[  542.022860][T11294] em28xx 2-1:0.0: Registering input extension
[  542.026877][   T47] em28xx 2-1:0.0: Closing input extension
[  542.089981][   T47] em28xx 2-1:0.0: Freeing device
[  542.954216][T20821] loop1: detected capacity change from 0 to 4096
[  542.967346][T20821] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  543.059715][T20821] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  543.088063][T20821] ntfs3(loop1): ino=1a, mi_enum_attr
[  543.090495][T20821] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  544.800619][T20879] loop1: detected capacity change from 0 to 1024
[  544.826450][T20879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  544.890278][T20889] loop4: detected capacity change from 0 to 8
[  544.913105][T20889] SQUASHFS error: lzo decompression failed, data probably corrupt
[  544.916727][T20889] SQUASHFS error: Failed to read block 0x1b2: -5
[  544.919055][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.919142][T20889] SQUASHFS error: Unable to read metadata cache entry [1b0]
[  544.919177][T20889] SQUASHFS error: Unable to read inode 0x11f
[  545.058310][T20903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4282'.
[  545.153525][T20915] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  545.320363][ T5948] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  545.493831][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.503216][ T5948] usb 2-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=57.66
[  545.512059][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.515800][ T5948] usb 2-1: Product: syz
[  545.517141][ T5948] usb 2-1: Manufacturer: syz
[  545.518532][ T5948] usb 2-1: SerialNumber: syz
[  545.525056][ T5948] usb 2-1: config 0 descriptor??
[  545.551203][ T5948] belkin_sa 2-1:0.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  545.572555][ T5948] usb 2-1: bcdDevice: 5766, bfc: 0
[  545.760375][ T5948] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  545.894489][ T5948] usb 2-1: USB disconnect, device number 25
[  545.907877][ T5948] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  545.909623][T20940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4288'.
[  545.923203][ T5948] belkin_sa 2-1:0.0: device disconnected
[  546.471698][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.559757][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.674008][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.750969][T20978] sch_tbf: burst 8256 is lower than device lo mtu (65550) !
[  546.865752][T20981] loop1: detected capacity change from 0 to 128
[  546.888959][T20981] vfat: Unknown parameter 'rtdir'
[  546.962558][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.055687][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  547.069553][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  547.076232][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  547.087437][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  547.090747][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  547.347161][T21035] loop9: detected capacity change from 0 to 1024
[  547.374611][T21035] hfsplus: request for non-existent node 40 in B*Tree
[  547.382123][   T12] bridge_slave_1: left allmulticast mode
[  547.385403][T21035] hfsplus: request for non-existent node 40 in B*Tree
[  547.394037][   T12] bridge_slave_1: left promiscuous mode
[  547.405366][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.419866][   T12] bridge_slave_0: left allmulticast mode
[  547.421743][   T12] bridge_slave_0: left promiscuous mode
[  547.423637][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.310578][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.319077][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.323558][   T12] bond0 (unregistering): Released all slaves
[  548.338357][T21053] netlink: 'syz.9.4307': attribute type 29 has an invalid length.
[  548.691162][T21140] loop9: detected capacity change from 0 to 1024
[  548.778607][T20993] chnl_net:caif_netlink_parms(): no params data found
[  548.860366][T21124] loop1: detected capacity change from 0 to 32768
[  548.900664][T21124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4309 (21124)
[  549.058760][T21124] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  549.068380][T21124] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  549.076291][T21124] BTRFS info (device loop1): disk space caching is enabled
[  549.082657][T21124] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  549.292639][T21124] BTRFS info (device loop1): rebuilding free space tree
[  549.300237][ T5237] Bluetooth: hci0: command tx timeout
[  549.366349][   T12] hsr_slave_0: left promiscuous mode
[  549.374459][   T12] hsr_slave_1: left promiscuous mode
[  549.381489][T21124] BTRFS info (device loop1): disabling free space tree
[  549.382201][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  549.388900][T21124] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  549.389000][T21124] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  549.424416][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.444953][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.458468][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.535544][   T12] veth1_macvtap: left promiscuous mode
[  549.537869][   T12] veth0_macvtap: left promiscuous mode
[  549.540450][   T12] veth1_vlan: left promiscuous mode
[  549.542654][   T12] veth0_vlan: left promiscuous mode
[  550.076729][T15308] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  550.999529][ T1094] hfsplus: b-tree write err: -5, ino 4
[  551.077516][T21204] loop9: detected capacity change from 0 to 256
[  551.097066][T21204] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  551.101986][T21204] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  551.257616][   T12] team0 (unregistering): Port device team_slave_1 removed
[  551.381130][   T12] team0 (unregistering): Port device team_slave_0 removed
[  551.534595][ T5237] Bluetooth: hci0: command tx timeout
[  551.793258][T21218] loop9: detected capacity change from 0 to 32768
[  552.522875][T21242] loop9: detected capacity change from 0 to 1024
[  552.551382][T21242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  552.646166][T19833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.822740][T20993] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.829264][T20993] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.833566][T20993] bridge_slave_0: entered allmulticast mode
[  552.842258][T20993] bridge_slave_0: entered promiscuous mode
[  552.846961][T21284] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[  552.853427][T21284] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[  552.931527][T21284] 8021q: adding VLAN 0 to HW filter on device bond1
[  552.936854][T20993] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.939934][T20993] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.952394][T20993] bridge_slave_1: entered allmulticast mode
[  552.956183][T20993] bridge_slave_1: entered promiscuous mode
[  553.071704][T20993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  553.080130][T20993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  553.180263][T20993] team0: Port device team_slave_0 added
[  553.187316][T20993] team0: Port device team_slave_1 added
[  553.194443][T21361] loop1: detected capacity change from 0 to 4096
[  553.208152][T21361] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  553.228507][T21361] ntfs3(loop1): Looks like $AttrDef is corrupted (size=0).
[  553.287506][T20993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  553.290358][T20993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  553.300609][T20993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  553.309856][T20993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  553.312745][T20993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  553.322102][T20993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  553.390479][T20993] hsr_slave_0: entered promiscuous mode
[  553.394617][T20993] hsr_slave_1: entered promiscuous mode
[  553.398144][T20993] debugfs: 'hsr0' already exists in 'hsr'
[  553.400594][T20993] Cannot create hsr debugfs directory
[  553.564965][T21420] loop1: detected capacity change from 0 to 32768
[  553.568882][T21420] XFS: attr2 mount option is deprecated.
[  553.579256][T21420] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  553.583746][T21420] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  553.616480][T21420] XFS (loop1): Ending clean mount
[  553.641123][T21420] XFS (loop1): Quotacheck needed: Please wait.
[  553.699658][T21420] XFS (loop1): Quotacheck: Done.
[  553.745729][ T5237] Bluetooth: hci0: command tx timeout
[  553.783638][T15308] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  554.428155][T21547] loop9: detected capacity change from 0 to 2048
[  554.444422][T21547] UDF-fs: warning (device loop9): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  554.448878][T21547] UDF-fs: warning (device loop9): udf_fill_super: No fileset found
[  554.682119][T21574] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  554.785827][T21561] loop9: detected capacity change from 0 to 32768
[  554.929274][T21561] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  554.929291][T21561]   allowing incompatible features above 0.0: (unknown version)
[  554.929297][T21561]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  554.950010][T21561] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  554.953249][T21561] bcachefs (loop9): initializing new filesystem
[  554.969894][T21561] bcachefs (loop9): going read-write
[  554.972489][T20993] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  554.978331][T21561] bcachefs (loop9): marking superblocks
[  554.979101][T20993] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  554.992725][T20993] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  555.003252][T20993] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  555.023812][T21561] bcachefs (loop9): initializing freespace
[  555.042936][T21561] bcachefs (loop9): done initializing freespace
[  555.058012][T21561] bcachefs (loop9): reading snapshots table
[  555.061833][  T126] block nbd0: Possible stuck request ffff888020ee0000: control (read@0,1024B). Runtime 210 seconds
[  555.061929][T21561] bcachefs (loop9): reading snapshots done
[  555.065180][  T126] block nbd0: Possible stuck request ffff888020ee0200: control (read@1024,1024B). Runtime 210 seconds
[  555.071491][  T126] block nbd0: Possible stuck request ffff888020ee0400: control (read@2048,1024B). Runtime 210 seconds
[  555.075659][  T126] block nbd0: Possible stuck request ffff888020ee0600: control (read@3072,1024B). Runtime 210 seconds
[  555.114675][T21561] bcachefs (loop9): done starting filesystem
[  555.120408][T20993] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.177570][T20993] 8021q: adding VLAN 0 to HW filter on device team0
[  555.192762][T16290] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.195744][T16290] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.218489][T16290] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.221200][T16290] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.242463][T19833] bcachefs (loop9): shutting down
[  555.252259][T19833] bcachefs (loop9): going read-only
[  555.266397][T19833] bcachefs (loop9): finished waiting for writes to stop
[  555.302797][T19833] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3
[  555.425795][T19833] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 4
[  555.433011][T19833] bcachefs (loop9): clean shutdown complete, journal seq 5
[  555.436076][T19833] bcachefs (loop9): marking filesystem clean
[  555.463128][T19833] bcachefs (loop9): shutdown complete
[  555.600784][T20993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.640700][T20993] veth0_vlan: entered promiscuous mode
[  555.646041][T20993] veth1_vlan: entered promiscuous mode
[  555.672607][T20993] veth0_macvtap: entered promiscuous mode
[  555.684539][T20993] veth1_macvtap: entered promiscuous mode
[  555.711301][T20993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  555.726603][T20993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  555.748147][T20081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.762622][T20081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.780070][T21637] loop1: detected capacity change from 0 to 512
[  555.782603][T20081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.783392][T21637] EXT4-fs: Ignoring removed orlov option
[  555.786036][T20081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.801891][T21637] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  555.849415][T21637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  555.871361][T21637] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.4344: corrupted in-inode xattr: e_value size too large
[  555.887405][T21637] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4344: couldn't read orphan inode 15 (err -117)
[  555.914453][T21637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  555.945403][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.961653][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.981120][ T5237] Bluetooth: hci0: command tx timeout
[  556.009636][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  556.009963][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.014942][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  556.154625][T21658] loop2: detected capacity change from 0 to 8
[  556.180716][T21658] squashfs image failed sanity check
[  556.643313][T21669] loop2: detected capacity change from 0 to 4096
[  556.712612][T21669] ntfs3(loop2): $Secure::$SDH is corrupted.
[  556.715224][T21669] ntfs3(loop2): Failed to initialize $Secure (-22).
[  557.750362][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4353'.
[  557.769722][ T5748] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  557.773495][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4353'.
[  557.778876][ T5748] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  557.782453][ T5748] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  557.785925][ T5748] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  557.890070][T21689] loop9: detected capacity change from 0 to 32768
[  557.895531][T21689] bcachefs (/dev/loop9): error validating superblock: Not a bcachefs superblock layout
[  557.899550][T21689] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout
[  558.208091][T21700] loop2: detected capacity change from 0 to 32768
[  558.234710][T21700] overlayfs: upper fs needs to support d_type.
[  558.239121][T21700] overlayfs: upper fs does not support tmpfile.
[  558.254609][T21700] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  558.351296][T20993] non-latin1 character 0x2e66 found in JFS file name
[  558.356899][T20993] mount with iocharset=utf8 to access
[  558.485375][   T33] audit: type=1326 audit(525653.716:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21706 comm="syz.9.4355" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cde98ebe9 code=0x0
[  558.667967][T21742] loop1: detected capacity change from 0 to 1024
[  558.672456][T21742] EXT4-fs: Ignoring removed nomblk_io_submit option
[  558.709185][T21742] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  558.738065][T21742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.803905][T15308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.326434][T21780] loop9: detected capacity change from 0 to 256
[  559.364255][T21780] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  559.541855][T20081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  559.546805][T20081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.755404][T20081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  559.762820][T21798] loop1: detected capacity change from 0 to 1024
[  559.768511][T20081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.838306][   T33] audit: type=1800 audit(525654.978:692): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4375" name="file1" dev="loop1" ino=20 res=0 errno=0
[  559.864311][T21798] syz.1.4375: attempt to access beyond end of device
[  559.864311][T21798] loop1: rw=34817, sector=5778, nr_sectors = 2 limit=1024
[  560.003118][T20081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  560.007566][T20081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.142468][T21812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.153389][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  560.160429][T20081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  560.168162][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  560.173772][T20081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.178799][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  560.193129][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  560.198356][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  560.544332][T20081] bridge_slave_1: left allmulticast mode
[  560.552859][T20081] bridge_slave_1: left promiscuous mode
[  560.555373][T20081] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.560030][T20081] bridge_slave_0: left allmulticast mode
[  560.562191][T20081] bridge_slave_0: left promiscuous mode
[  560.564534][T20081] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.588937][ T6291] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  560.775314][ T6291] usb 10-1: Using ep0 maxpacket: 16
[  560.778464][ T6291] usb 10-1: descriptor type invalid, skip
[  560.780267][ T6291] usb 10-1: descriptor type invalid, skip
[  560.785753][ T6291] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.788916][ T6291] usb 10-1: config 0 has no interfaces?
[  560.810841][ T6291] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  560.814794][ T6291] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.817329][ T6291] usb 10-1: Product: syz
[  560.819043][ T6291] usb 10-1: Manufacturer: syz
[  560.820877][ T6291] usb 10-1: SerialNumber: syz
[  560.843169][ T6291] usb 10-1: config 0 descriptor??
[  560.850837][T21882] loop1: detected capacity change from 0 to 32768
[  560.859274][T21882] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  560.859274][T21882] clean (size 2912):
[  560.859274][T21882] flags:          0
[  560.859274][T21882] journal_seq:    10
[  560.859274][T21882] usage: type=inodes v=8
[  560.859274][T21882] usage: type=key_version v=0
[  560.859274][T21882] usage: type=reserved v=0
[  560.859274][T21882] usage: type=reserved v=0
[  560.859274][T21882] usage: type=reserved v=0
[  560.859274][T21882] usage: type=reserved v=0
[  560.859274][T21882] data_usage: btree: 1/1 [0]=2816
[  560.859274][T21882] data_usage: journal: 1/1 [0]=0
[  560.859274][T21882] data_usage: user: 1/1 [0]=16
[  560.859274][T21882] dev_usage: dev=0  
[  560.859274][T21882]   free: buckets=83 sectors=0 fragmented=0
[  560.859274][T21882]   sb: buckets=25 sectors=6152 fragmented=248
[  560.859274][T21882]   journal: buckets=8 sectors=2048 fragmented=0
[  560.859274][T21882]   btree: buckets=11 sectors=2816 fragmented=0
[  560.859274][T21882]   user: buckets=1 sectors=16 fragmented=240
[  560.859274][T21882]   cached: buckets=0 sectors=0 fragmented=0
[  560.859274][T21882]   parity: buckets=458752 sectors=0 fragmented=0
[  560.859274][T21882]   stripe: buckets=0 sectors=0 fragmented=0
[  560.859274][T21882]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  560.859274][T21882]   need_discard: buckets=0 sectors=0 fragmented=0
[  560.859274][T21882] clock: read=0
[  560.859274][T21882] clock: write=1280
[  560.859274][T21882] blacklist: seq=0
[  560.859274][T21882] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA
[  560.859472][T21882] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  561.074727][ T5948] usb 10-1: USB disconnect, device number 35
[  561.351715][T20081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.355924][T20081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.361435][T20081] bond0 (unregistering): Released all slaves
[  561.520476][T21926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'.
[  561.598338][T21813] chnl_net:caif_netlink_parms(): no params data found
[  561.934343][T21813] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.940537][T21813] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.946468][T21813] bridge_slave_0: entered allmulticast mode
[  561.959012][T21813] bridge_slave_0: entered promiscuous mode
[  561.971270][T20081] hsr_slave_0: left promiscuous mode
[  561.973515][T20081] hsr_slave_1: left promiscuous mode
[  561.977537][T20081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  561.980817][T20081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  561.986998][T20081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  561.992249][T20081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.035229][T20081] veth1_macvtap: left promiscuous mode
[  562.037101][T20081] veth0_macvtap: left promiscuous mode
[  562.040129][T20081] veth1_vlan: left promiscuous mode
[  562.042083][T20081] veth0_vlan: left promiscuous mode
[  562.134673][T22007] loop9: detected capacity change from 0 to 32768
[  562.188925][T22007] XFS (loop9): invalid log iosize: 1 [not 12-30]
[  562.411649][   T55] Bluetooth: hci0: command tx timeout
[  562.960029][T22055] Falling back ldisc for ttyprintk.
[  563.173260][T22060] loop1: detected capacity change from 0 to 4096
[  563.237218][T22060] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  563.256435][T22060] ntfs3(loop1): Failed to load $Extend (-22).
[  563.258837][T22060] ntfs3(loop1): Failed to initialize $Extend.
[  563.302510][T22060] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB
[  563.367514][T22067] loop9: detected capacity change from 0 to 1024
[  563.438615][T22067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  563.531607][T20081] team0 (unregistering): Port device team_slave_1 removed
[  563.606235][T19833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.662224][T20081] team0 (unregistering): Port device team_slave_0 removed
[  563.734807][   T10] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  563.950285][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  563.954191][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  563.978257][   T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  563.981134][   T10] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  563.983800][   T10] usb 2-1: Manufacturer: syz
[  563.985591][   T10] usb 2-1: SerialNumber: syz
[  564.003798][   T10] usb 2-1: config 0 descriptor??
[  564.006449][T22075] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  564.014505][   T10] usb 2-1: ucan: probing device on interface #0
[  564.016997][   T10] usb 2-1: ucan: invalid endpoint configuration
[  564.019427][   T10] usb 2-1: ucan: probe failed; try to update the device firmware
[  564.245317][   T10] usb 2-1: USB disconnect, device number 26
[  564.616929][ T5237] Bluetooth: hci0: command tx timeout
[  564.676060][T21813] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.679014][T21813] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.681935][T21813] bridge_slave_1: entered allmulticast mode
[  564.687381][T21813] bridge_slave_1: entered promiscuous mode
[  564.789911][T21813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.808498][T21813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.842760][T22123] loop9: detected capacity change from 0 to 2048
[  564.913320][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'.
[  564.914623][T22123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.975688][T22123] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  564.997612][T22123] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  565.031867][T22123] EXT4-fs (loop9): This should not happen!! Data will be lost
[  565.031867][T22123] 
[  565.052288][T22123] EXT4-fs (loop9): Total free blocks count 0
[  565.057156][T22123] EXT4-fs (loop9): Free/Dirty block details
[  565.062941][T22123] EXT4-fs (loop9): free_blocks=66060288
[  565.065556][T22123] EXT4-fs (loop9): dirty_blocks=16
[  565.069459][T22123] EXT4-fs (loop9): Block reservation details
[  565.072151][T22123] EXT4-fs (loop9): i_reserved_data_blocks=1
[  565.083108][T22122] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  565.089472][T21813] team0: Port device team_slave_0 added
[  565.102612][T21813] team0: Port device team_slave_1 added
[  565.285499][T21813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.288332][T21813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.301199][T21813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.344991][T21813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.357634][T21813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.377292][T21813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.545320][T21813] hsr_slave_0: entered promiscuous mode
[  565.548557][T21813] hsr_slave_1: entered promiscuous mode
[  565.563149][T21813] debugfs: 'hsr0' already exists in 'hsr'
[  565.566680][T21813] Cannot create hsr debugfs directory
[  566.148600][ T5237] Bluetooth: hci3: command 0x0406 tx timeout
[  566.414262][T22213] syz.1.4408 (22213): drop_caches: 2
[  566.836414][   T55] Bluetooth: hci0: command tx timeout
[  566.882407][T21813] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  566.901738][T21813] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  566.912949][T21813] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  566.927892][T21813] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  567.070997][T21813] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.084398][T21813] 8021q: adding VLAN 0 to HW filter on device team0
[  567.092036][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.094553][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.109648][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.112686][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.170994][T22368] loop1: detected capacity change from 0 to 32768
[  567.181233][T22368] (syz.1.4429,22368,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  567.187729][T22368] (syz.1.4429,22368,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  567.200338][T22368] JBD2: Ignoring recovery information on journal
[  567.236012][T22368] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  567.330399][T21813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.369981][T15308] ocfs2: Unmounting device (7,1) on (node local)
[  567.490453][T21813] veth0_vlan: entered promiscuous mode
[  567.502667][T21813] veth1_vlan: entered promiscuous mode
[  567.523604][T21813] veth0_macvtap: entered promiscuous mode
[  567.528894][T21813] veth1_macvtap: entered promiscuous mode
[  567.541719][T21813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  567.552050][T21813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  567.561531][ T5881] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.564964][ T5881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.573011][ T5881] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.578670][ T5881] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.729321][T16298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.736326][T16298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.769416][T16298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.772566][T16298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.965058][T22436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  567.968782][T22436] IPv6: NLM_F_CREATE should be set when creating new route
[  568.190809][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  568.284196][T22454] loop6: detected capacity change from 0 to 32768
[  568.288204][T22454] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section replicas_v0: duplicate replicas entry journal: 1/1 [0]
[  568.288204][T22454] replicas_v0 (size 24):
[  568.288204][T22454] journal: 1 [0] journal: 1 [0] user: 1 [0]
[  568.288204][T22454] 
[  568.300996][T22454] bcachefs: bch2_fs_get_tree() error: invalid_sb_replicas
[  568.319412][   T24] usb 10-1: new full-speed USB device number 36 using dummy_hcd
[  568.358088][   T10] usb 2-1: Using ep0 maxpacket: 16
[  568.369556][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  568.382466][T22463] sctp: [Deprecated]: syz.6.4445 (pid 22463) Use of struct sctp_assoc_value in delayed_ack socket option.
[  568.382466][T22463] Use struct sctp_sack_info instead
[  568.388403][   T10] usb 2-1: config 0 has no interface number 0
[  568.395497][   T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  568.399118][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.402340][   T10] usb 2-1: Product: syz
[  568.404071][   T10] usb 2-1: Manufacturer: syz
[  568.424600][   T10] usb 2-1: SerialNumber: syz
[  568.435343][   T10] usb 2-1: config 0 descriptor??
[  568.442269][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  568.502596][   T24] usb 10-1: config index 0 descriptor too short (expected 63524, got 36)
[  568.506039][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  568.514212][   T24] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  568.518074][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.521421][   T24] usb 10-1: Product: syz
[  568.523915][   T24] usb 10-1: Manufacturer: syz
[  568.525883][   T24] usb 10-1: SerialNumber: syz
[  568.534453][   T24] usb 10-1: config 0 descriptor??
[  568.550675][   T24] usb 10-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  568.841628][   T24] usb 10-1: USB disconnect, device number 36
[  568.916340][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  569.056730][   T55] Bluetooth: hci0: command tx timeout
[  569.391737][T22509] tc_dump_action: action bad kind
[  569.596864][T22518] loop9: detected capacity change from 0 to 8
[  569.607451][T22518] SQUASHFS error: Unable to read inode 0x11f
[  569.765917][   T10] gspca_spca1528: reg_w err -71
[  569.768056][   T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  569.790845][   T10] usb 2-1: USB disconnect, device number 27
[  570.170144][T22553] loop6: detected capacity change from 0 to 128
[  570.174863][T22553] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  570.190306][T22553] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  570.262827][T22555] cgroup: Unknown subsys name 'cpuset'
[  570.582639][ T1094] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  571.382225][T22587] loop9: detected capacity change from 0 to 32768
[  571.500225][T22589] loop1: detected capacity change from 0 to 32768
[  571.552516][T22589] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  571.582080][T22589] (syz.1.4469,22589,0):ocfs2_mknod:505 ERROR: status = -2
[  571.589269][T22589] (syz.1.4469,22589,0):ocfs2_create:678 ERROR: status = -2
[  571.621874][T22587] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  571.621896][T22587]   allowing incompatible features above 0.0: (unknown version)
[  571.621906][T22587]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  571.638401][T15308] (syz-executor,15308,1):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode.
[  571.639119][T22587] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  571.653831][T15308] ocfs2: Unmounting device (7,1) on (node local)
[  571.656574][T22587] bcachefs (loop9): initializing new filesystem
[  571.690419][T22587] bcachefs (loop9): going read-write
[  571.701255][T22587] bcachefs (loop9): marking superblocks
[  572.130479][T22587] bcachefs (loop9): initializing freespace
[  572.142935][T22587] bcachefs (loop9): done initializing freespace
[  572.178917][T22587] bcachefs (loop9): reading snapshots table
[  572.184372][T22587] bcachefs (loop9): reading snapshots done
[  572.224026][T22587] bcachefs (loop9): done starting filesystem
[  572.318884][T22633] loop1: detected capacity change from 0 to 4096
[  572.323677][T22633] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  572.753059][T19833] bcachefs (loop9): shutting down
[  572.755186][T19833] bcachefs (loop9): going read-only
[  572.764821][T19833] bcachefs (loop9): finished waiting for writes to stop
[  572.779574][T19833] bcachefs (loop9): flushing journal and stopping allocators, journal seq 4
[  572.912734][T19833] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 5
[  572.935356][T19833] bcachefs (loop9): clean shutdown complete, journal seq 6
[  572.972173][T19833] bcachefs (loop9): marking filesystem clean
[  573.257167][T19833] bcachefs (loop9): shutdown complete
[  573.427150][T22640] loop6: detected capacity change from 0 to 40427
[  573.542622][T22640] F2FS-fs (loop6): invalid crc value
[  573.684037][T22640] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  573.694345][T22640] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  573.748478][T22640] F2FS-fs (loop6): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  573.760202][T22640] CPU: 0 UID: 0 PID: 22640 Comm: syz.6.4479 Not tainted syzkaller #0 PREEMPT(full) 
[  573.760231][T22640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  573.760238][T22640] Call Trace:
[  573.760243][T22640]  <TASK>
[  573.760249][T22640]  dump_stack_lvl+0x189/0x250
[  573.760266][T22640]  ? __pfx_dump_stack_lvl+0x10/0x10
[  573.760294][T22640]  ? __pfx_queue_work_on+0x10/0x10
[  573.760305][T22640]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  573.760317][T22640]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  573.760330][T22640]  ? f2fs_hw_is_readonly+0x39b/0x470
[  573.760346][T22640]  f2fs_handle_critical_error+0x37c/0x540
[  573.760364][T22640]  do_garbage_collect+0xf22/0x6410
[  573.760384][T22640]  ? f2fs_get_victim+0x5a9a/0x6260
[  573.760396][T22640]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  573.760420][T22640]  ? __pfx_do_garbage_collect+0x10/0x10
[  573.760429][T22640]  ? f2fs_get_victim+0x5a9a/0x6260
[  573.760466][T22640]  ? up_write+0x1c4/0x420
[  573.760478][T22640]  f2fs_gc+0xc87/0x2590
[  573.760486][T22640]  ? look_up_lock_class+0x74/0x170
[  573.760499][T22640]  ? register_lock_class+0x51/0x320
[  573.760523][T22640]  ? __pfx_f2fs_gc+0x10/0x10
[  573.760539][T22640]  ? sb_start_write+0x114/0x1c0
[  573.760550][T22640]  ? mnt_want_write_file+0x164/0x200
[  573.760561][T22640]  __f2fs_ioc_gc_range+0x754/0xb10
[  573.760579][T22640]  ? __pfx___f2fs_ioc_gc_range+0x10/0x10
[  573.760594][T22640]  __f2fs_ioctl+0x2e00/0xb610
[  573.760610][T22640]  ? file_ioctl+0x22d/0x780
[  573.760622][T22640]  ? __pfx_file_ioctl+0x10/0x10
[  573.760637][T22640]  ? kasan_quarantine_put+0xdd/0x220
[  573.760651][T22640]  ? __pfx___f2fs_ioctl+0x10/0x10
[  573.760661][T22640]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  573.760673][T22640]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  573.760685][T22640]  ? do_vfs_ioctl+0xb33/0x1430
[  573.760696][T22640]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  573.760713][T22640]  ? __lock_acquire+0xab9/0xd20
[  573.760734][T22640]  ? __fget_files+0x2a/0x420
[  573.760748][T22640]  ? __fget_files+0x2a/0x420
[  573.760758][T22640]  ? __fget_files+0x3a0/0x420
[  573.760770][T22640]  ? __fget_files+0x2a/0x420
[  573.760782][T22640]  ? f2fs_ioctl+0x135/0x250
[  573.760791][T22640]  ? __pfx_f2fs_ioctl+0x10/0x10
[  573.760800][T22640]  __se_sys_ioctl+0xfc/0x170
[  573.760811][T22640]  do_syscall_64+0xfa/0x3b0
[  573.760823][T22640]  ? lockdep_hardirqs_on+0x9c/0x150
[  573.760857][T22640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.760866][T22640]  ? exc_page_fault+0x9f/0xf0
[  573.760878][T22640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.760887][T22640] RIP: 0033:0x7f4ddf18ebe9
[  573.760898][T22640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  573.760906][T22640] RSP: 002b:00007f4ddff0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  573.760917][T22640] RAX: ffffffffffffffda RBX: 00007f4ddf3b5fa0 RCX: 00007f4ddf18ebe9
[  573.760924][T22640] RDX: 0000200000000000 RSI: 000000004018f50b RDI: 0000000000000004
[  573.760930][T22640] RBP: 00007f4ddf211e19 R08: 0000000000000000 R09: 0000000000000000
[  573.760936][T22640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.760941][T22640] R13: 00007f4ddf3b6038 R14: 00007f4ddf3b5fa0 R15: 00007ffff875f338
[  573.760956][T22640]  </TASK>
[  573.898986][T22640] F2FS-fs (loop6): Stopped filesystem due to reason: 4
[  574.117619][T22656] ALSA: mixer_oss: invalid OSS volume '49'
[  574.119945][T22656] ALSA: mixer_oss: invalid OSS volume 'Invalid'
[  574.851567][   T47] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  574.878640][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  574.887884][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  575.044709][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  575.049297][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  575.053361][   T47] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  575.058004][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.066962][   T47] usb 7-1: config 0 descriptor??
[  575.070045][T22664] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  575.421035][T22680] loop9: detected capacity change from 0 to 1024
[  575.457207][T22680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.474992][T22680] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4478: bg 0: block 280: padding at end of block bitmap is not set
[  575.487316][T22680] EXT4-fs (loop9): Remounting filesystem read-only
[  575.491557][T22680] EXT4-fs warning (device loop9): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.9.4478: cleanup dec ref error -28
[  575.530842][   T47] glorious 0003:22D4:1503.001E: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.6-1/input0
[  575.532174][T19833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.736382][   T47] usb 7-1: USB disconnect, device number 6
[  575.793400][T22721] loop9: detected capacity change from 0 to 128
[  575.897248][T22728] syz_tun: entered allmulticast mode
[  575.957417][T22727] syz_tun: left allmulticast mode
[  576.319061][ T5889] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  576.472662][T22755] loop1: detected capacity change from 0 to 256
[  576.480792][T22755] exfat: Deprecated parameter 'namecase'
[  576.483470][T22755] exfat: Deprecated parameter 'utf8'
[  576.498436][ T5889] usb 10-1: Using ep0 maxpacket: 16
[  576.503252][ T5889] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  576.504951][T22755] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  576.507823][ T5889] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  576.528546][ T5889] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  576.549486][ T5889] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  576.567072][ T5889] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  576.578035][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.581285][ T5889] usb 10-1: Product: syz
[  576.585782][ T5889] usb 10-1: Manufacturer: syz
[  576.588273][ T5889] usb 10-1: SerialNumber: syz
[  576.601971][T22764] netlink: 'syz.6.4497': attribute type 3 has an invalid length.
[  576.606646][T22764] netlink: 'syz.6.4497': attribute type 1 has an invalid length.
[  576.616543][T22764] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4497'.
[  576.849175][T22774] loop1: detected capacity change from 0 to 2048
[  576.908509][T22774] EXT4-fs (loop1): failed to initialize system zone (-117)
[  576.921222][T22774] EXT4-fs (loop1): mount failed
[  577.003741][ T5889] usb 10-1: USB disconnect, device number 37
[  577.149772][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  577.959066][T22819] loop9: detected capacity change from 0 to 1024
[  578.013624][   T33] audit: type=1800 audit(525671.972:693): pid=22819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4506" name="file1" dev="loop9" ino=20 res=0 errno=0
[  578.080588][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4508'.
[  578.090376][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4508'.
[  578.149874][T22831] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  578.340941][T22850] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4515'.
[  578.352666][T22852] loop6: detected capacity change from 0 to 65
[  578.368333][T22852] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway
[  578.695240][T22862] loop9: detected capacity change from 0 to 40427
[  578.701929][T22862] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  578.705170][T22862] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  578.994008][T22862] F2FS-fs (loop9): invalid crc value
[  579.106085][T22862] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  579.113136][T22862] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  579.115997][T22862] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  579.224105][T22891] loop6: detected capacity change from 0 to 16
[  579.252381][T22891] erofs (device loop6): mounted with root inode @ nid 36.
[  579.839208][T22908] loop1: detected capacity change from 0 to 16
[  579.850475][T22908] erofs (device loop1): mounted with root inode @ nid 36.
[  580.070624][T22918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4529'.
[  580.132619][T22925] loop6: detected capacity change from 0 to 256
[  580.193774][T22925] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53d99, utbl_chksum : 0xe619d30d)
[  580.224790][T22925] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff)
[  580.367106][   T34] INFO: task syz.7.3237:14965 blocked for more than 143 seconds.
[  580.372891][   T34]       Not tainted syzkaller #0
[  580.375532][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  580.381692][   T34] task:syz.7.3237      state:D stack:25128 pid:14965 tgid:14964 ppid:11292  task_flags:0x400040 flags:0x00004004
[  580.386932][   T34] Call Trace:
[  580.388801][   T34]  <TASK>
[  580.392507][   T34]  __schedule+0x1798/0x4cc0
[  580.394406][   T34]  ? __lock_acquire+0xab9/0xd20
[  580.396401][   T34]  ? __lock_acquire+0xab9/0xd20
[  580.402830][   T34]  ? __pfx___schedule+0x10/0x10
[  580.403065][T22946] loop9: detected capacity change from 0 to 2048
[  580.407512][   T34]  ? schedule+0x91/0x360
[  580.409192][   T34]  schedule+0x165/0x360
[  580.410913][   T34]  schedule_preempt_disabled+0x13/0x30
[  580.422338][   T34]  __mutex_lock+0x7e6/0x1360
[  580.424422][   T34]  ? __mutex_lock+0x5b6/0x1360
[  580.426311][   T34]  ? sync_bdevs+0x1ac/0x340
[  580.432105][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  580.435096][   T34]  ? iput+0x398/0x9d0
[  580.436761][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  580.438788][   T34]  sync_bdevs+0x1ac/0x340
[  580.440584][   T34]  ksys_sync+0xb9/0x150
[  580.442332][   T34]  ? __pfx_ksys_sync+0x10/0x10
[  580.445607][   T34]  ? rcu_is_watching+0x15/0xb0
[  580.447601][   T34]  ? do_syscall_64+0xbe/0x3b0
[  580.448995][T22946] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  580.449541][   T34]  __ia32_sys_sync+0xe/0x20
[  580.449562][   T34]  do_syscall_64+0xfa/0x3b0
[  580.449584][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.465907][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.468439][   T34]  ? exc_page_fault+0x9f/0xf0
[  580.470363][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.472806][   T34] RIP: 0033:0x7ffb6b78ebe9
[  580.486628][   T34] RSP: 002b:00007ffb6c52d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  580.490060][   T34] RAX: ffffffffffffffda RBX: 00007ffb6b9b5fa0 RCX: 00007ffb6b78ebe9
[  580.493172][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  580.496517][   T34] RBP: 00007ffb6b9b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  580.502585][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  580.505700][   T34] R13: 00007ffb6b9b6038 R14: 00007ffb6b9b5fa0 R15: 00007ffe03fd7cc8
[  580.509849][   T34]  </TASK>
[  580.513453][   T34] 
[  580.513453][   T34] Showing all locks held in the system:
[  580.516609][   T34] 1 lock held by rcu_tasks_trace/31:
[  580.522000][   T34]  #0: ffffffff8e13abd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  580.522910][T19833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.526397][   T34] 1 lock held by khungtaskd/34:
[  580.526413][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  580.530273][T11294] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  580.558409][   T34] 2 locks held by getty/5678:
[  580.560435][   T34]  #0: ffff888024c020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  580.572248][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  580.576328][   T34] 1 lock held by udevd/5854:
[  580.578201][   T34]  #0: ffff8881091f7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  580.582009][   T34] 6 locks held by kworker/1:7/11294:
[  580.590050][   T34]  #0: ffff88810006a948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  580.595912][   T34]  #1: ffffc900032dfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  580.601148][   T34]  #2: ffff888023873198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  580.606614][   T34]  #3: ffff888023876518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[  580.610566][   T34]  #4: ffff88810986c968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[  580.614383][   T34]  #5: ffffffff8eddff90 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750
[  580.619068][   T34] 1 lock held by syz.7.3237/14965:
[  580.621281][   T34]  #0: ffff8881091f7358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  580.626043][   T34] 
[  580.627294][   T34] =============================================
[  580.627294][   T34] 
[  580.630804][   T34] NMI backtrace for cpu 0
[  580.630815][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  580.630828][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  580.630835][   T34] Call Trace:
[  580.630840][   T34]  <TASK>
[  580.630846][   T34]  dump_stack_lvl+0x189/0x250
[  580.630865][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  580.630879][   T34]  ? __pfx__printk+0x10/0x10
[  580.630903][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  580.630918][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  580.630932][   T34]  ? __pfx__printk+0x10/0x10
[  580.630950][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  580.630968][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  580.630983][   T34]  watchdog+0xf93/0xfe0
[  580.631002][   T34]  ? watchdog+0x1de/0xfe0
[  580.631023][   T34]  kthread+0x711/0x8a0
[  580.631042][   T34]  ? __pfx_watchdog+0x10/0x10
[  580.631059][   T34]  ? __pfx_kthread+0x10/0x10
[  580.631079][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  580.631098][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.631113][   T34]  ? __pfx_kthread+0x10/0x10
[  580.631131][   T34]  ret_from_fork+0x3fc/0x770
[  580.631149][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  580.631169][   T34]  ? __switch_to_asm+0x39/0x70
[  580.631186][   T34]  ? __switch_to_asm+0x33/0x70
[  580.631237][   T34]  ? __pfx_kthread+0x10/0x10
[  580.631256][   T34]  ret_from_fork_asm+0x1a/0x30
[  580.631284][   T34]  </TASK>
[  580.631291][   T34] Sending NMI from CPU 0 to CPUs 1:
[  580.695011][    C1] NMI backtrace for cpu 1
[  580.695028][    C1] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  580.695043][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  580.695052][    C1] RIP: 0010:update_curr+0x33d/0x730
[  580.695073][    C1] Code: 8e 00 49 8b 6d 00 49 89 ed 4d 29 f5 4d 85 ed 7e 57 4c 8b 34 24 49 8d 7e 28 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 78 08 8e 00 4d 0f af 6e 28 4d 8d 7e 20 4c 89
[  580.695085][    C1] RSP: 0018:ffffc9000324f760 EFLAGS: 00000802
[  580.695098][    C1] RAX: 1ffff11026cc740d RBX: ffff8880223756c0 RCX: dffffc0000000000
[  580.695108][    C1] RDX: 0000000000000000 RSI: ffffffff8dba5bba RDI: ffff88813663a068
[  580.695118][    C1] RBP: 000000371b1c2ec6 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  580.695127][    C1] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: 1ffff11026cc740e
[  580.695135][    C1] R13: 000000000000a8b5 R14: ffff88813663a040 R15: ffff88813663a070
[  580.695143][    C1] FS:  000055555f71a500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  580.695153][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  580.695161][    C1] CR2: 000055558e707608 CR3: 000000010fde8000 CR4: 00000000000006f0
[  580.695250][    C1] Call Trace:
[  580.695257][    C1]  <TASK>
[  580.695270][    C1]  dequeue_entity+0x27/0x1690
[  580.695285][    C1]  ? __lock_acquire+0xab9/0xd20
[  580.695305][    C1]  dequeue_entities+0x1c0/0x13d0
[  580.695320][    C1]  ? do_raw_spin_lock+0x121/0x290
[  580.695334][    C1]  ? arch_scale_cpu_capacity+0x18/0xb0
[  580.695352][    C1]  dequeue_task_fair+0x205/0x580
[  580.695368][    C1]  __schedule+0x5f1/0x4cc0
[  580.695386][    C1]  ? ktime_get+0x3e/0x1f0
[  580.695401][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  580.695418][    C1]  ? __lock_acquire+0xab9/0xd20
[  580.695436][    C1]  ? __pfx___schedule+0x10/0x10
[  580.695456][    C1]  ? schedule+0x91/0x360
[  580.695471][    C1]  schedule+0x165/0x360
[  580.695493][    C1]  do_nanosleep+0x1c7/0x600
[  580.695509][    C1]  ? do_nanosleep+0x7f/0x600
[  580.695522][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  580.695537][    C1]  ? __hrtimer_setup+0x187/0x210
[  580.695547][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  580.695561][    C1]  hrtimer_nanosleep+0x169/0x360
[  580.695574][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  580.695587][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  580.695600][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  580.695616][    C1]  ? __rseq_handle_notify_resume+0x37e/0x11f0
[  580.695639][    C1]  __se_sys_clock_nanosleep+0x2f1/0x380
[  580.695659][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  580.695679][    C1]  ? do_syscall_64+0xbe/0x3b0
[  580.695698][    C1]  do_syscall_64+0xfa/0x3b0
[  580.695714][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.695729][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.695742][    C1]  ? exc_page_fault+0x9f/0xf0
[  580.695757][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.695769][    C1] RIP: 0033:0x7fa838bc1463
[  580.695781][    C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 <f7> d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10
[  580.695792][    C1] RSP: 002b:00007ffcb4745f18 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6
[  580.695805][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa838bc1463
[  580.695814][    C1] RDX: 00007ffcb4745f30 RSI: 0000000000000000 RDI: 0000000000000000
[  580.695822][    C1] RBP: 0000000000000000 R08: 0000000022065097 R09: 7fffffffffffffff
[  580.695831][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcb4746380
[  580.695839][    C1] R13: 0000000000000004 R14: 00007ffcb4745f6c R15: 00007ffcb4746000
[  580.695854][    C1]  </TASK>
[  580.696553][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  580.838749][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  580.842418][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  580.846423][   T34] Call Trace:
[  580.847783][   T34]  <TASK>
[  580.848998][   T34]  dump_stack_lvl+0x99/0x250
[  580.850903][   T34]  ? __asan_memcpy+0x40/0x70
[  580.852778][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  580.854909][   T34]  ? __pfx__printk+0x10/0x10
[  580.856807][   T34]  vpanic+0x281/0x750
[  580.858456][   T34]  ? __pfx_vpanic+0x10/0x10
[  580.860321][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  580.862548][   T34]  ? preempt_schedule+0xae/0xc0
[  580.864537][   T34]  ? preempt_schedule_common+0x83/0xd0
[  580.866756][   T34]  panic+0xb9/0xc0
[  580.868318][   T34]  ? __pfx_panic+0x10/0x10
[  580.870129][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  580.872317][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  580.874812][   T34]  watchdog+0xfd2/0xfe0
[  580.876519][   T34]  ? watchdog+0x1de/0xfe0
[  580.878300][   T34]  kthread+0x711/0x8a0
[  580.879943][   T34]  ? __pfx_watchdog+0x10/0x10
[  580.881850][   T34]  ? __pfx_kthread+0x10/0x10
[  580.883722][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  580.885816][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.887937][   T34]  ? __pfx_kthread+0x10/0x10
[  580.889807][   T34]  ret_from_fork+0x3fc/0x770
[  580.891580][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  580.893666][   T34]  ? __switch_to_asm+0x39/0x70
[  580.895619][   T34]  ? __switch_to_asm+0x33/0x70
[  580.897502][   T34]  ? __pfx_kthread+0x10/0x10
[  580.899239][   T34]  ret_from_fork_asm+0x1a/0x30
[  580.901096][   T34]  </TASK>
[  580.903054][   T34] Kernel Offset: disabled
[  580.904811][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:09:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888108160237 R9 =1ffff1102102c046 R10=dffffc0000000000 R11=ffffffff854f0030
R12=dffffc0000000000 R13=ffffffff99af98f3 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f00ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3cd4640000 CR3=00000000299dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffff000000 0000000000000000
XMM02=00007f9ac3187498 00007f9ac3187470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f9ac3187478 00007f9ac31874c0
XMM06=00007f9ac31874b8 00007f9ac31874b0 XMM07=00007f9ac31874a8 00007f9ac31874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9ac3012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000e3ea9 RBX=00007f3cdf797540 RCX=00000000000000a8 RDX=0000000000000000
RSI=0000000000000001 RDI=00007f3cdf7975e0 RBP=0000000000000102 RSP=00007f3cdf7974a0
R8 =00007f3cd4600000 R9 =0000000000000000 R10=0000000000000000 R11=00007f3cdf797550
R12=0000000000000001 R13=00007f3cdea2d980 R14=0000000000000000 R15=00007f3cdf7975e0
RIP=00007f3cde850c38 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3cdf7986c0 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3cd46e3000 CR3=0000000046e3b000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f3cdf7975a0 00007f3cdf797580
XMM02=00007f3cdf7976e0 00007f3cdf797560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f3cdf7975a0 XMM05=0000000000000000 00007f3cdf7976e0
XMM06=00007f3cdf7976e0 00007f3cdf797560 XMM07=00007f3cdf7975a0 00007f3cdf797580
XMM08=5cc31ee6ffff0000 0067f1e780000000 XMM09=0000000000000000 00007f3cdea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
