last executing test programs:

2m43.567713902s ago: executing program 2 (id=3):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m43.450329925s ago: executing program 2 (id=4):
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='/dev/net/tun\x00')
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)

2m43.281738808s ago: executing program 2 (id=5):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)

2m43.184054602s ago: executing program 2 (id=7):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

2m42.812878772s ago: executing program 2 (id=10):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_FLOW={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8814)

2m41.443990734s ago: executing program 2 (id=16):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m41.298469183s ago: executing program 32 (id=16):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m40.886553047s ago: executing program 0 (id=630):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18)

1m40.819211238s ago: executing program 0 (id=632):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)={0x228, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="fad241ac16163e3c374707fd17b5771cb771dc540494d85aac894ae2059958b8d4274e60a71d1cbda77de681f15b98daedf8c8b5eaa33f1da7ae305c4536fc16f348ea54334ab9b6af"]}, @nested={0x1c4, 0x6, 0x0, 0x1, [@nested={0x1c0, 0xce, 0x0, 0x1, [@nested={0x1bc, 0x13e, 0x0, 0x1, [@nested={0x1b8, 0xa0, 0x0, 0x1, [@nested={0x1b4, 0x61, 0x0, 0x1, [@nested={0x1b0, 0x9d, 0x0, 0x1, [@nested={0x1ac, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0x19c, 0x90, 0x0, 0x1, [@nested={0x198, 0x44, 0x0, 0x1, [@nested={0x181, 0x127, 0x0, 0x1, [@nested={0xc, 0xf0, 0x0, 0x1, [@nested={0x4, 0x10a}, @nested={0x4, 0x28}]}, @generic="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", @nested={0x20, 0xa1, 0x0, 0x1, [@typed={0xc, 0x145, 0x0, 0x0, @u64=0x5b79}, @typed={0xc, 0x34, 0x0, 0x0, @u64=0xcb52}, @nested={0x4, 0xc1}]}, @generic="79c89f90ef00f2a8d60c43421a588c2b5a1dc7b0ba2c280d0daa756e55b911c420fe6d4dca8c0730bab38a9b0115cba9c09130ba3d124347cd4e753542ea60ad3b2fc789f93f134b27c550e014d570f61a4b"]}, @typed={0x8, 0xa5, 0x0, 0x0, @u32=0x10}, @typed={0x4, 0x13a}, @nested={0x4, 0xc5}]}]}]}]}]}]}]}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0)

1m40.770249553s ago: executing program 0 (id=634):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)

1m40.671218598s ago: executing program 0 (id=636):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400004, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)

1m40.663712137s ago: executing program 0 (id=638):
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="1f000000190081054e81f782db4cb9040263cb848a0ef30b1bffff070a000a", 0x1f}], 0x1}, 0x14)

1m40.391115448s ago: executing program 0 (id=643):
r0 = timerfd_create(0x7, 0x800)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1)

1m40.213967757s ago: executing program 33 (id=643):
r0 = timerfd_create(0x7, 0x800)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1)

58.835269999s ago: executing program 3 (id=1038):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0x80, &(0x7f0000000340)={[{}, {@gid}, {@barrier}, {@nodecompose}, {@part={'part', 0x3d, 0x200}}, {@nls={'nls', 0x3d, 'macinuit'}}]}, 0x5, 0x712, &(0x7f0000002100)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.&'], 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

58.710142669s ago: executing program 3 (id=1041):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x41, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0xffffffffffffffff, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

58.551132395s ago: executing program 3 (id=1045):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
r1 = fanotify_init(0x0, 0x80000)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents(r0, 0x0, 0x0)

58.276202376s ago: executing program 3 (id=1048):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000080)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}]}, 0x5, 0x271, &(0x7f0000000780)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

58.154493078s ago: executing program 3 (id=1052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa0000b, &(0x7f0000000000)=ANY=[@ANYBLOB="6167655f657874656e745f63616368652c6e6f6c617a7974696d652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c61636c2c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c6261636b67726f756e645f67633d6f66662c6e6f626172726965722c636f6d70726573735f63616368652c6d6f64653d6c66732c00a0f136a7b12c237938b84e413b4410176f83a54dc492582695e005d110d725abbe2adec1ac2f6f77d172f0a20b3c1a8f19a6b28a8e0ba53dc3bf8ebe1ba50407cd64781927026076251050bd3ce7"], 0x1, 0x551c, &(0x7f00000005c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIude+eNo4oCAHxndmfzAJTFoC2MEEgU0JDNJiSkQxQgi4KfgGQ5m2Cy4ZG4SKIIcEOHXKdBUCKEBDJd/kPqREoTuhRbBInaaF725KH1AvHMrv190t17ZnY099wZyfKZOzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl8ft53yl3dPMuLjbvPLyxkvZ3H+tTtzbuLaYtjaM6k54Pr1Y3ol5ziQAAALCPbH0z8etW0VL3k82ltI+7Wf2flMekNf+PL+RxWc8/XveXfVn7p+2P3x+8vD1QNx8nPen51dHwxJOptP/vVOfVsV2PaGdXPnv20spuSPzR+kvjJLue0fe3b3/QycJDdWQLAPwXx8u+CMrfh9J+0GRiAOwXW7utv7crhXdZ/7e6e58YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNPG6+G5Mo5CCIvtnTh19+GNlaf1tzbuLZbtzM2bG+HbnXOmp0hCCOdXR8MTtc6meYcnfHfl2vWLy6PR8HL9wWshhKZGf6+Y/sVPpjg4hEauj+AZBXFxs2cln/kIavjBBADAgZIULa3r7yebS+m+aCGErZ8erf/frMRhyvr/wadn7lTHqtb/g9pmOPv6a5e+7F+5dv3t1UvLF4YXhp+/c3Lw7uDU2dOnz/azZyX9yU9Mrh6rNV0AAADmUKdo1fo/Xnhy/f9oJQ5T1v9f/TD4ujpWa3L939m7Wc62nUW/pjMBAAA42F58/e+/oqfsjzqdcHV5be3yIP/c3j6ZfzaQ6r92qGjV+r+10HRWAAAAQB3G69Ej6//nKnGYcv3/+Z9f+bV6zlYI4Uix/n985YvRufqmM9Pq+HPipucIAABAs44Urbr+n2Tv/8fbrzzEIYS33sjj4t8ATlX/tz787pfqWNX3/0/VN8WZFPfy65H1vRDavaYzAgAAYD87XLS02P8z2Vz67LejH3e8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt38CAAD//wcWQag=")

57.435836769s ago: executing program 3 (id=1058):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0xa, "09409400"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "004e9000"}]}}, 0x0}, 0x0)

57.209165755s ago: executing program 34 (id=1058):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0xa, "09409400"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "004e9000"}]}}, 0x0}, 0x0)

17.453695452s ago: executing program 5 (id=1341):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20)

17.391948413s ago: executing program 5 (id=1342):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000340)={[{@grpquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x1200}}, {@quota}]}, 0x1, 0x7b5, &(0x7f00000017c0)="$eJzs3c9rHNcdAPDvrH7ZslurUKjdi3VqDcYr21XtFgqV6aEUajC059pitRaqVlqjXRlL6BATAoEQkpgcEpJLzvnh3HINyTl/Qy4hBBsnkU0ccggbZn9IK620+mHtyrY+HxjpvZk3+953Z+fN253HbgAH1nD6JxNxIiJeTyKO1dcnEdFXTfVGjNXKPV5eyqVLEpXKf75LqmUeLS/lommf1JF65nhEfPZSxOlMa72lhcXp8UIhP1fPj5RnboyUFhbPTM2MT+Yn87MXzo2Onr/454sX9i7WH75YPHr/jX/+8aOxn1783d1XP09iLI7WtzXHsVeGY7j+nPSlT+Ea/9jryvZZst8NYFfSU7OndpbHiTgWPdUUAPA8S6//FQDggElc/wHggGl8DvBoeSnXWPb3E4nuenApIklq8Tfub9a29Nbv2R2q3gcdfJREb/2OaOzh/a7hiHj3k/99kC7RofuQABt54XZEXBsabu3/k5Y5Czt1dhtlhtfl9X/QPZ9eioi/bDT+y6yMf2Jl/LNqYINzdzeGI/qb863nf+behjv+fQ8qr4///lab25YG2jT+W5m0NtRTz/0qzZyMiKlCPu3bfh0Rp6Jv4PpUIX+uTR2nHv78cLNtzeO/7+/8//20/vT/aonMvd6BtftMjJfHnyTmZg9uR/y+d3Vu3+OW/v9Qday7/vin6660e+CTq8l//fXldzYrlsafxttYWuPvrMp7EX+IjeNvSNrOTxxJD//Z2t+N6/j4q7cGN6u/+finS1p/471AN6THf7B9/ENJ83zN0t7Wv3X8G7/++5P/VtONzuPWeLk8dy6iP/l36/rzq/s28o3yafy1SNfHn2n7+k/fCV7bZoy997/9cPfxr+jIFMs0/okdHf+dJ+4+nu7Zffzp8R+tpk7V12yn/yvk+2M7DXyS5w4AAAAAAAAAAAAAAAAAAAAAAAAAtisTEUcjyWRX0plMNlv7De/fxmCmUCyVT18vzs9ORPW3soeiL9P4qsvGdyw2vv90qLY9SfPn1+X/FBG/iYg3Bw5X89lcsTCxz7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMORTX7/P/XNQJsdk95uNREA6IRDW5Z4mF+TrVQqlQ62BwDovK2v/63efq0DDQEAuqbN9f9wN9sBAHTPbt7/AwDPNtd/ADh4XP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosCuXL6dL5cflpVyan7i5MD9dvHlmIl+azs7M57K54tyN7GSxOFnIZ3PFma0er1As3hiN2flbI+V8qTxSWli8OlOcny1fnZoZn8xfzfd1JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JnSwuL0eKGQn3suEq9ExNo1laejYU+eSOKpaMa+JL4+8+XxdmXubPEyHnsqonjGEvvdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G34JAAD//7M8Jlw=")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)

17.274002598s ago: executing program 5 (id=1345):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000140)=':', 0x1}, {0x0, 0x500}], 0x2)

17.068267794s ago: executing program 5 (id=1347):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00')

16.929331215s ago: executing program 5 (id=1348):
syz_emit_ethernet(0x11, &(0x7f0000001300)={@link_local, @dev, @void, {@llc_tr={0x11, {@llc={0x35419df6840579c6, 0xff, "02"}}}}}, 0x0)

16.242470105s ago: executing program 5 (id=1349):
r0 = socket(0x1e, 0x1, 0x0)
listen(r0, 0x7f)
shutdown(r0, 0x2)

16.133578793s ago: executing program 35 (id=1349):
r0 = socket(0x1e, 0x1, 0x0)
listen(r0, 0x7f)
shutdown(r0, 0x2)

12.256873255s ago: executing program 1 (id=1380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0)

12.076059851s ago: executing program 1 (id=1385):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000010000000000000000000005000000000000002e5f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28)

11.99252486s ago: executing program 1 (id=1387):
r0 = epoll_create1(0x80000)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2)

11.805080983s ago: executing program 1 (id=1388):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000001c40)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

11.680487348s ago: executing program 1 (id=1389):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x1ff, 0xb8})

11.522656273s ago: executing program 1 (id=1390):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

11.366489024s ago: executing program 36 (id=1390):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

9.512765687s ago: executing program 6 (id=1404):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})

9.41396353s ago: executing program 6 (id=1405):
syz_emit_ethernet(0x4a, &(0x7f0000002880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @empty, @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0)

9.323396756s ago: executing program 6 (id=1406):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000240)={0x180f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x800000000, 0x2, 0x20000088, 0x8, 0x0, 0x800, 0x0, 0x0, [0x2000000, 0x7fff, 0x2]})

9.32312018s ago: executing program 6 (id=1407):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000001c40)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

9.211180454s ago: executing program 6 (id=1408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x80)

8.922526962s ago: executing program 6 (id=1412):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000630000000700000a140000001100000000800058"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000)

8.713077537s ago: executing program 37 (id=1412):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000630000000700000a140000001100000000800058"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000)

3.440735226s ago: executing program 4 (id=1457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2, 0x80805, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

2.542152049s ago: executing program 4 (id=1464):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="38175ed207001e865955595663236001fa07be47030889be80d49d06a746282b8fef2c2f8769f0ee07cab1907ee285d53c42e0a921f91991520631345f02a7a36722d36443983bf3d734ee9f55d2514d0eb113763bf52f582f87805a7b8867bc0400a8593f928a8194a934b7b615b30a89c87f515f708c750218968027c43480c0df58b0ed48a110ee63b82cbd218c748b7b768015a7b633cf69d3771007105ecaf6f7c9b03c1d6d2db5210febe3a652a8035515e3513046406b628d9e02d09e43895d6c93457d59"})

2.541912397s ago: executing program 4 (id=1465):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x13)

2.116069966s ago: executing program 4 (id=1466):
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x18)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18)

1.986707545s ago: executing program 4 (id=1467):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2, 0x0, 0x3}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

1.869448083s ago: executing program 4 (id=1468):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000980)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x907}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r0, 0x0, 0x0, 0xc2a)
socket$inet(0x2, 0x2, 0x1)
stat(&(0x7f0000000380)='./bus\x00', &(0x7f0000000440))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000940)="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", 0x2000, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)

1.350865402s ago: executing program 7 (id=1471):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.201643203s ago: executing program 7 (id=1472):
faccessat2(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0, 0x1100)

1.10135412s ago: executing program 7 (id=1473):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'veth0_to_hsr\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7d7d800]}})

247.952953ms ago: executing program 7 (id=1474):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)

144.081328ms ago: executing program 7 (id=1475):
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 7 (id=1476):
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6)

kernel console output (not intermixed with test programs):

853582][ T7409] ntfs3(loop3): ino=20, mi_enum_attr
[  121.299650][ T7419] cgroup: Unknown subsys name '@﬽4*oңhoU'
[  121.376042][ T7423] loop3: detected capacity change from 0 to 16
[  121.708121][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'.
[  121.711040][ T7435] netlink: 34 bytes leftover after parsing attributes in process `syz.1.518'.
[  122.577857][ T1270] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  122.744418][ T1270] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  122.748174][ T1270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.751248][ T1270] usb 2-1: Product: syz
[  122.752971][ T1270] usb 2-1: Manufacturer: syz
[  122.754840][ T1270] usb 2-1: SerialNumber: syz
[  122.759389][ T1270] usb 2-1: config 0 descriptor??
[  122.856491][ T1270] usb 2-1: selecting invalid altsetting 3
[  122.863302][ T1270] comedi comedi5: could not set alternate setting 3 in high speed
[  122.866528][ T1270] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device.
[  122.872793][ T1270] usbdux 2-1:0.0: probe with driver usbdux failed with error -22
[  122.975436][ T1270] usb 2-1: USB disconnect, device number 7
[  123.546658][ T7466] loop0: detected capacity change from 0 to 32768
[  123.572026][ T7466] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  123.606642][ T7466] XFS (loop0): Ending clean mount
[  123.660021][ T5843] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  123.886040][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'.
[  123.955371][ T7482] syz.0.536 uses obsolete (PF_INET,SOCK_PACKET)
[  124.211708][ T7490] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  124.215254][ T7490] netlink: 172 bytes leftover after parsing attributes in process `syz.0.540'.
[  124.219716][ T7490] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  124.331934][ T7494] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  124.791243][ T1270] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  124.811588][ T7515] loop1: detected capacity change from 0 to 1764
[  124.831675][ T7515] iso9660: Corrupted directory entry in block 2 of inode 1920
[  124.960942][ T1270] usb 1-1: Using ep0 maxpacket: 8
[  124.964785][ T1270] usb 1-1: unable to get BOS descriptor or descriptor too short
[  124.969492][ T1270] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  124.972794][ T1270] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  124.980517][ T1270] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  124.984036][ T1270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.987069][ T1270] usb 1-1: Product: syz
[  124.989942][ T1270] usb 1-1: Manufacturer: syz
[  124.991507][ T1270] usb 1-1: SerialNumber: syz
[  125.431744][ T1270] usb 1-1: USB disconnect, device number 7
[  126.031760][ T7532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.559'.
[  126.905023][ T7537] loop1: detected capacity change from 0 to 256
[  126.912856][ T7537] msdos: Bad value for 'tz'
[  127.193524][ T7546] libceph: resolve '400' (ret=-3): failed
[  127.307905][ T1270] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  127.444895][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.570'.
[  127.485001][ T1270] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  127.492264][ T1270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.508689][ T1270] usb 4-1: config 0 descriptor??
[  127.564356][ T1270] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  127.570290][ T7561] loop1: detected capacity change from 0 to 128
[  127.578215][ T7561] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  127.583038][ T7561] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  128.075456][   T33] audit: type=1326 audit(1755077822.884:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.084166][ T1270] gp8psk: usb in 137 operation failed.
[  128.086771][ T1270] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  128.106349][ T1270] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  128.112155][   T33] audit: type=1326 audit(1755077822.894:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.135001][ T1270] usb 4-1: USB disconnect, device number 6
[  128.149598][   T33] audit: type=1326 audit(1755077822.894:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.183895][   T33] audit: type=1326 audit(1755077822.894:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.211742][   T33] audit: type=1326 audit(1755077822.894:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.227708][   T33] audit: type=1326 audit(1755077822.894:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.241370][ T7567] loop1: detected capacity change from 0 to 40427
[  128.245080][ T7567] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  128.248092][ T7567] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  128.257276][   T33] audit: type=1326 audit(1755077822.904:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.268848][   T33] audit: type=1326 audit(1755077822.904:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.280675][   T33] audit: type=1326 audit(1755077822.904:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.289849][   T33] audit: type=1326 audit(1755077822.904:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f392c98ebe9 code=0x7ffc0000
[  128.304968][ T7567] F2FS-fs (loop1): invalid crc value
[  128.381145][ T7567] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.390440][ T7567] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  128.393171][ T7567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  129.112352][ T5853] Bluetooth: unknown link type 128
[  129.231298][ T7593] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  129.233757][ T7593] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  129.244869][ T7593] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  129.259160][ T7593] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  129.261784][ T7593] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  129.267202][ T7599] loop1: detected capacity change from 0 to 4096
[  129.277826][ T7593] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  129.286067][ T7599] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  129.299772][ T7593] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  129.302302][ T7593] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  129.313237][ T7593] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  129.350163][ T7599] ntfs3(loop1): ino=19, mi_enum_attr
[  129.358757][ T7599] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  129.407191][ T7599] ntfs3(loop1): failed to convert "c46c" to cp852
[  129.415977][ T7599] ntfs3(loop1): ino=20, mi_enum_attr
[  129.614475][ T7610] batman_adv: batadv0: Adding interface: gretap1
[  129.616950][ T7610] batman_adv: batadv0: Interface activated: gretap1
[  130.176611][ T7638] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  130.221360][ T7640] loop3: detected capacity change from 0 to 2048
[  130.256065][ T7640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.266430][ T7640] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.606: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  130.277327][ T7640] EXT4-fs (loop3): Remounting filesystem read-only
[  130.298462][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.378087][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  130.630603][ T7650] loop0: detected capacity change from 0 to 32768
[  130.636570][ T7650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.609 (7650)
[  130.646820][ T7650] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.651028][ T7650] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  130.654043][ T7650] BTRFS info (device loop0): using free-space-tree
[  130.723836][ T7668] trusted_key: syz.3.614 sent an empty control message without MSG_MORE.
[  130.735224][ T5896] usb 2-1: Using ep0 maxpacket: 32
[  130.753780][ T5896] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  130.756459][ T5896] usb 2-1: config 0 has no interface number 0
[  130.761601][ T5896] usb 2-1: config 0 interface 89 has no altsetting 0
[  130.772532][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  130.789928][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.792587][ T5896] usb 2-1: Product: syz
[  130.794233][ T5896] usb 2-1: Manufacturer: syz
[  130.796096][ T5896] usb 2-1: SerialNumber: syz
[  130.822273][ T5896] usb 2-1: config 0 descriptor??
[  131.327826][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout
[  131.331127][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  131.348063][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout
[  131.408128][ T5896] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  131.412016][ T5896] em28xx 2-1:0.89: Video interface 89 found: bulk
[  131.478471][ T7650] BTRFS warning (device loop0 state M): remount supports changing free space tree only from RO to RW
[  131.483238][ T7650] BTRFS info (device loop0 state M): disabling log replay at mount time
[  131.486693][ T7650] BTRFS info (device loop0 state M): force clearing of disk cache
[  131.491820][ T7650] BTRFS info (device loop0 state M): ignoring bad roots
[  131.494783][ T7650] BTRFS info (device loop0 state M): ignoring data csums
[  131.497848][ T7650] BTRFS info (device loop0 state M): ignoring meta csums
[  131.500773][ T7650] BTRFS info (device loop0 state M): ignoring unknown super block flags
[  131.626833][ T5843] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.648200][ T5896] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  132.421606][ T7692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.620'.
[  132.512162][ T5896] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  132.537957][ T5896] em28xx 2-1:0.89: board has no eeprom
[  132.597899][ T5896] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  132.600876][ T5896] em28xx 2-1:0.89: analog set to bulk mode.
[  132.615308][ T1270] em28xx 2-1:0.89: Registering V4L2 extension
[  132.642841][ T5896] usb 2-1: USB disconnect, device number 8
[  132.646297][ T5896] em28xx 2-1:0.89: Disconnecting em28xx
[  132.697137][ T1270] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  132.725387][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.728067][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.734734][ T1270] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  132.746607][ T1270] em28xx 2-1:0.89: No AC97 audio processor
[  132.757341][ T7703] netlink: 'syz.3.625': attribute type 1 has an invalid length.
[  132.760769][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.3.625'.
[  132.763553][ T7703] netlink: 'syz.3.625': attribute type 2 has an invalid length.
[  132.764131][ T1270] usb 2-1: Decoder not found
[  132.766166][ T7703] netlink: 'syz.3.625': attribute type 1 has an invalid length.
[  132.772856][ T1270] em28xx 2-1:0.89: failed to create media graph
[  132.775002][ T7703] netlink: 2 bytes leftover after parsing attributes in process `syz.3.625'.
[  132.775366][ T1270] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  132.804317][ T1270] em28xx 2-1:0.89: Registering snapshot button...
[  132.820679][ T1270] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input8
[  132.837481][ T1270] em28xx 2-1:0.89: Remote control support is not available for this card.
[  132.847171][ T5896] em28xx 2-1:0.89: Closing input extension
[  132.860919][ T5896] em28xx 2-1:0.89: Deregistering snapshot button
[  132.935959][ T5896] em28xx 2-1:0.89: Freeing device
[  133.066229][ T7709] loop3: detected capacity change from 0 to 4096
[  133.216116][ T7724] netlink: 'syz.3.635': attribute type 2 has an invalid length.
[  133.349574][ T5233] Bluetooth: hci1: command 0x0c1a tx timeout
[  133.387853][ T5895] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  133.437662][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout
[  133.483038][ T7736] loop3: detected capacity change from 0 to 1024
[  133.496228][ T7736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.569081][ T5895] usb 2-1: Using ep0 maxpacket: 32
[  133.576517][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.588823][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0
[  133.595704][ T5895] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  133.602926][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.606884][ T5895] usb 2-1: Product: syz
[  133.608485][ T5895] usb 2-1: Manufacturer: syz
[  133.609995][ T5895] usb 2-1: SerialNumber: syz
[  133.632635][ T5895] usb 2-1: config 0 descriptor??
[  133.857883][ T5895] gs_usb 2-1:0.0: Couldn't send data format (err=-71)
[  133.860593][ T5895] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  133.890392][ T5895] usb 2-1: USB disconnect, device number 9
[  134.099292][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.106846][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.113046][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.119141][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.122647][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.807859][ T7745] chnl_net:caif_netlink_parms(): no params data found
[  134.974533][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.981765][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.000920][ T7745] bridge_slave_0: entered allmulticast mode
[  135.005272][ T7745] bridge_slave_0: entered promiscuous mode
[  135.015024][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.030291][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.036897][ T7745] bridge_slave_1: entered allmulticast mode
[  135.039906][   T33] kauditd_printk_skb: 34 callbacks suppressed
[  135.039919][   T33] audit: type=1326 audit(1755077830.034:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.056153][ T7745] bridge_slave_1: entered promiscuous mode
[  135.075946][   T33] audit: type=1326 audit(1755077830.034:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.086886][   T33] audit: type=1326 audit(1755077830.064:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.101425][   T33] audit: type=1326 audit(1755077830.064:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.109983][   T33] audit: type=1326 audit(1755077830.064:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.118359][   T33] audit: type=1326 audit(1755077830.074:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.126740][   T33] audit: type=1326 audit(1755077830.074:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.135746][   T33] audit: type=1326 audit(1755077830.074:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.153822][   T33] audit: type=1326 audit(1755077830.084:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.162388][   T33] audit: type=1326 audit(1755077830.084:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85dc38ebe9 code=0x7ffc0000
[  135.180112][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.200202][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.254215][ T7745] team0: Port device team_slave_0 added
[  135.261530][ T7745] team0: Port device team_slave_1 added
[  135.346757][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.357450][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.378333][ T7778] sctp: [Deprecated]: syz.1.659 (pid 7778) Use of int in maxseg socket option.
[  135.378333][ T7778] Use struct sctp_assoc_value instead
[  135.387357][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.404775][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.417682][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.441826][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.442805][ T5233] Bluetooth: hci1: command 0x0c1a tx timeout
[  135.507924][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout
[  135.852802][ T7745] hsr_slave_0: entered promiscuous mode
[  135.855476][ T7745] hsr_slave_1: entered promiscuous mode
[  136.147961][ T5233] Bluetooth: hci0: command tx timeout
[  136.394565][ T7745] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  136.408101][ T7745] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  136.415668][ T7745] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  136.429176][ T7745] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  136.637302][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.677661][ T7745] 8021q: adding VLAN 0 to HW filter on device team0
[  136.694309][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.697432][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.719788][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.722998][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.795528][ T7745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  136.801463][ T7745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  136.996003][ T7745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.205736][ T7800] loop3: detected capacity change from 0 to 32768
[  137.250227][ T7800] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  137.263025][ T7745] veth0_vlan: entered promiscuous mode
[  137.266127][ T7800] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.272190][ T7745] veth1_vlan: entered promiscuous mode
[  137.301914][ T7745] veth0_macvtap: entered promiscuous mode
[  137.307195][ T7745] veth1_macvtap: entered promiscuous mode
[  137.322785][ T7800] XFS (loop3): Ending clean mount
[  137.323790][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.335285][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.336765][ T7800] XFS (loop3): Quotacheck needed: Please wait.
[  137.349157][ T5875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.357356][ T5875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.365402][ T5875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.373051][ T5875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.407292][ T7800] XFS (loop3): Quotacheck: Done.
[  137.470417][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.472846][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.515618][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.522819][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.527135][ T5951] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.699560][ T7820] Bluetooth: MGMT ver 1.23
[  138.050146][ T7832] loop3: detected capacity change from 0 to 512
[  138.058219][ T7832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  138.089587][ T7832] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.671: invalid indirect mapped block 4294967295 (level 1)
[  138.126186][ T7832] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.671: invalid indirect mapped block 4294967295 (level 1)
[  138.138652][ T7832] EXT4-fs (loop3): 2 truncates cleaned up
[  138.142731][ T7832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.174791][ T7832] EXT4-fs (loop3): shut down requested (2)
[  138.206387][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.237761][ T5233] Bluetooth: hci0: command tx timeout
[  138.645670][ T7865] netlink: 'syz.3.686': attribute type 21 has an invalid length.
[  138.650879][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.686'.
[  139.086516][ T7888] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709510581)
[  139.090911][ T7888] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  139.641349][ T7883] loop1: detected capacity change from 0 to 32768
[  139.646577][ T7883] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section disk_groups: disk 0 has invalid label 15 (have 0)
[  139.646577][ T7883] disk_groups (size 40):
[  139.646577][ T7883] 
[  139.661246][ T7883] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  139.773562][ T7895] tmpfs: Bad value for 'mpol'
[  140.307783][ T5233] Bluetooth: hci0: command tx timeout
[  140.554932][ T7908] loop3: detected capacity change from 0 to 32768
[  140.619916][ T7908] JBD2: Ignoring recovery information on journal
[  140.669095][ T7921] loop1: detected capacity change from 0 to 4096
[  140.675425][ T7921] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  140.691112][ T7908] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  140.874403][ T7921] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  140.935426][ T7921] ntfs3(loop1): Failed to load $BadClus (-22).
[  141.063894][ T5951] ocfs2: Unmounting device (7,3) on (node local)
[  141.204714][ T7935] loop3: detected capacity change from 0 to 16
[  141.218061][ T7935] erofs (device loop3): mounted with root inode @ nid 36.
[  141.249497][ T6100] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[9000]
[  141.260598][ T7935] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192]
[  141.264535][ T7935] erofs (device loop3): read error -117 @ 1 of nid 89
[  141.270862][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  141.270875][   T33] audit: type=1800 audit(1755077836.274:74): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.714" name="file3" dev="loop3" ino=89 res=0 errno=0
[  141.411093][ T7943] syz.3.719: attempt to access beyond end of device
[  141.411093][ T7943] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[  141.416540][ T7943] gfs2: error -5 reading superblock
[  141.820546][ T7959] loop3: detected capacity change from 0 to 2048
[  141.879000][ T7964] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.898853][ T7959] NILFS (loop3): corrupt root inode
[  142.387955][ T5233] Bluetooth: hci0: command tx timeout
[  142.538542][ T7965] loop4: detected capacity change from 0 to 32768
[  144.231759][ T7987] loop1: detected capacity change from 0 to 128
[  144.424845][ T7992] usb usb1: check_ctrlrecip: process 7992 (syz.4.740) requesting ep 01 but needs 81
[  144.432126][ T7992] usb usb1: usbfs: process 7992 (syz.4.740) did not claim interface 0 before use
[  144.606311][ T8003] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0
[  145.407732][ T1270] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  145.489832][ T8018] loop4: detected capacity change from 0 to 24
[  145.530490][ T8018] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  145.584938][ T8018] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  145.604538][ T1270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  145.608228][ T1270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.612271][ T1270] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  145.615541][ T1270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.633384][ T1270] usb 4-1: config 0 descriptor??
[  146.122373][ T1270] konepure 0003:1E7D:2DBE.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0
[  146.211440][ T8022] loop1: detected capacity change from 0 to 40427
[  146.219014][ T8022] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  146.222384][ T8022] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  146.267896][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  146.302458][ T8022] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  146.309909][ T8022] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  146.312618][ T8022] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  146.325382][ T1270] usb 4-1: USB disconnect, device number 7
[  146.419251][ T5882] usb 5-1: Using ep0 maxpacket: 8
[  146.423102][ T5882] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  146.425695][ T5882] usb 5-1: config 179 has no interface number 0
[  146.427774][ T5882] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  146.431572][ T5882] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  146.435757][ T5882] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  146.442240][ T5882] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  146.446710][ T5882] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  146.451867][ T5882] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  146.454950][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.482082][ T8026] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  146.593472][ T8032] loop1: detected capacity change from 0 to 64
[  146.924239][ T1270] usb 5-1: USB disconnect, device number 2
[  146.924342][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  146.930103][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  146.973860][ T8036] loop1: detected capacity change from 0 to 32768
[  148.413869][ T8053] loop1: detected capacity change from 0 to 8192
[  148.421874][ T8053] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  148.491115][ T8053] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  148.494779][ T8053] ntfs3(loop1): Failed to load $Extend (-2).
[  148.497294][ T8053] ntfs3(loop1): Failed to initialize $Extend.
[  148.664969][ T8061] loop3: detected capacity change from 0 to 512
[  148.677216][ T8061] EXT4-fs: Ignoring removed nobh option
[  148.892687][ T8061] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  148.903669][ T8061] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  148.906996][ T8061] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.769: casefold flag without casefold feature
[  148.946279][ T8061] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.769: couldn't read orphan inode 13 (err -117)
[  148.963274][ T8063] loop4: detected capacity change from 0 to 65536
[  148.971152][ T8061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.991403][ T8061] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  149.008568][ T8063] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  149.040688][ T8063] XFS (loop4): Ending clean mount
[  149.048129][ T8063] XFS (loop4): Quotacheck needed: Please wait.
[  149.060663][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.122748][ T8063] XFS (loop4): Quotacheck: Done.
[  149.288485][ T8087] warning: `syz.3.778' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  149.352210][ T8087] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  149.358094][ T8087] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  149.382053][ T7745] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  149.712501][ T5896] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  149.875444][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.887945][ T5896] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  149.909465][ T5896] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  149.913113][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0
[  149.916263][ T5896] usb 4-1: Product: syz
[  149.946006][ T5896] usb 4-1: config 0 descriptor??
[  150.178918][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  150.187380][ T5896] usb 4-1: USB disconnect, device number 8
[  150.314763][ T8106] process 'syz.4.780' launched './file1' with NULL argv: empty string added
[  150.341703][ T8106] overlayfs: missing 'lowerdir'
[  150.969956][ T8108] loop3: detected capacity change from 0 to 256
[  151.002353][ T8108] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.032896][ T8108] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  151.058290][ T8108] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  151.548981][ T8117] loop3: detected capacity change from 0 to 32768
[  151.602698][ T8117] ERROR: (device loop3): diAllocAG: numfree > numinos
[  151.602698][ T8117] 
[  151.608731][ T8117] ialloc: diAlloc returned -5!
[  152.066683][ T8139] loop3: detected capacity change from 0 to 128
[  152.089587][ T8139] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.101165][ T8139] ext4 filesystem being mounted at /279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  152.166011][   T33] audit: type=1804 audit(1755077847.164:75): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.796" name="/newroot/279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 res=1 errno=0
[  152.236326][ T5951] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.294605][ T8146] loop1: detected capacity change from 0 to 2048
[  152.411721][ T8146] hpfs: filesystem error: improperly stopped; already mounted read-only
[  152.414434][ T8146] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  152.416764][ T8146] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  152.540218][ T8154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.805'.
[  153.202359][ T8186] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  154.435715][ T8218] loop3: detected capacity change from 0 to 1024
[  154.655006][ T8218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.731992][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.820597][ T8222] Driver unsupported XDP return value 0 on prog  (id 99) dev N/A, expect packet loss!
[  155.646871][ T8226] loop1: detected capacity change from 0 to 40427
[  155.660122][ T8226] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9)
[  155.663633][ T8226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  155.702332][ T8226] F2FS-fs (loop1): invalid crc value
[  155.767323][ T8226] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  155.780710][ T8226] F2FS-fs (loop1): Start checkpoint disabled!
[  155.798313][ T8226] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  155.800643][ T8226] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  155.880006][ T8238] loop3: detected capacity change from 0 to 32768
[  155.893566][ T8238] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.840 (8238)
[  155.920850][ T8238] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.925054][ T8238] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  155.950510][ T8238] BTRFS info (device loop3): using free-space-tree
[  156.083242][ T8238] BTRFS info (device loop3): rebuilding free space tree
[  156.150218][ T8244] loop4: detected capacity change from 0 to 32768
[  156.183025][ T8244] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.219757][ T8244] XFS (loop4): Ending clean mount
[  156.225088][ T8244] XFS (loop4): Quotacheck needed: Please wait.
[  156.654570][ T8244] XFS (loop4): Quotacheck: Done.
[  156.666570][ T5951] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  156.786589][ T7745] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.010900][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.845'.
[  157.122714][ T8282] vlan2: entered promiscuous mode
[  157.132774][ T8282] hsr0: entered promiscuous mode
[  157.331286][ T8290] loop4: detected capacity change from 0 to 8192
[  158.073749][ T8304] loop1: detected capacity change from 0 to 40427
[  158.084432][ T8304] F2FS-fs (loop1): Image doesn't support compression
[  158.095415][ T8304] F2FS-fs (loop1): build fault injection rate: 690
[  158.109550][ T8304] F2FS-fs (loop1): invalid crc value
[  158.157638][ T8304] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.162641][ T8304] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  158.204071][ T5847] syz-executor: attempt to access beyond end of device
[  158.204071][ T5847] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  158.212721][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  158.212739][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.212746][ T5847] Call Trace:
[  158.212751][ T5847]  <TASK>
[  158.212756][ T5847]  dump_stack_lvl+0x189/0x250
[  158.212776][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.212786][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  158.212795][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.212807][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  158.212822][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  158.212838][ T5847]  f2fs_write_end_io+0x886/0xb60
[  158.212859][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  158.212873][ T5847]  __submit_merged_write_cond+0x255/0x530
[  158.212886][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  158.212916][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  158.212956][ T5847]  ? folios_put_refs+0x559/0x640
[  158.213000][ T5847]  ? __lock_acquire+0xab9/0xd20
[  158.213019][ T5847]  ? do_raw_spin_lock+0x121/0x290
[  158.213035][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  158.213044][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  158.213056][ T5847]  do_writepages+0x32e/0x550
[  158.213074][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  158.213086][ T5847]  filemap_fdatawrite+0x199/0x240
[  158.213098][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  158.213133][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  158.213145][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  158.213166][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[  158.213189][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  158.213225][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[  158.213239][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[  158.213254][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  158.213264][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[  158.213278][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  158.213289][ T5847]  deactivate_locked_super+0xbc/0x130
[  158.213300][ T5847]  cleanup_mnt+0x425/0x4c0
[  158.213311][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.213323][ T5847]  task_work_run+0x1d4/0x260
[  158.213336][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  158.213345][ T5847]  ? __x64_sys_umount+0x122/0x160
[  158.213359][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[  158.213375][ T5847]  exit_to_user_mode_loop+0xec/0x110
[  158.213386][ T5847]  do_syscall_64+0x2bd/0x3b0
[  158.213397][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.213405][ T5847]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  158.213417][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.213425][ T5847] RIP: 0033:0x7f392c98ff17
[  158.213463][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  158.213472][ T5847] RSP: 002b:00007ffd67174b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  158.213482][ T5847] RAX: 0000000000000000 RBX: 00007f392ca11c05 RCX: 00007f392c98ff17
[  158.213487][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd67174c40
[  158.213493][ T5847] RBP: 00007ffd67174c40 R08: 0000000000000000 R09: 0000000000000000
[  158.213497][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd67175cd0
[  158.213502][ T5847] R13: 00007f392ca11c05 R14: 0000000000026985 R15: 00007ffd67175d10
[  158.213517][ T5847]  </TASK>
[  158.213521][ T5847] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  158.607961][ T8327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.866'.
[  158.704509][ T8333] netlink: 'syz.1.869': attribute type 1 has an invalid length.
[  158.768539][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  158.919418][ T5896] usb 4-1: Using ep0 maxpacket: 8
[  158.925239][ T5896] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.930776][ T5896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.933864][ T5896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  158.936957][ T5896] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.948085][ T5896] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  158.950798][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.174134][ T5896] usb 4-1: GET_CAPABILITIES returned 0
[  159.176068][ T5896] usbtmc 4-1:16.0: can't read capabilities
[  159.401297][ T8362] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  159.519291][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.552267][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.555650][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.561059][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.565114][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.567928][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.571902][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.576623][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.580123][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.586241][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.591463][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.600022][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.616614][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.622417][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.626278][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.631349][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  159.706854][  T790] usb 4-1: USB disconnect, device number 9
[  160.395372][ T8372] Zero length message leads to an empty skb
[  160.628012][ T5233] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  160.631544][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  161.001485][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'.
[  161.013328][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'.
[  161.025512][ T8381] netlink: 'syz.3.887': attribute type 7 has an invalid length.
[  161.824369][ T8392] loop3: detected capacity change from 0 to 40427
[  161.831597][ T8392] F2FS-fs (loop3): invalid crc value
[  161.901786][ T8392] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  161.905848][ T8392] F2FS-fs (loop3): Start checkpoint disabled!
[  161.913401][ T8392] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  161.980562][ T1088] kworker/u10:5: attempt to access beyond end of device
[  161.980562][ T1088] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  161.990948][ T1088] CPU: 1 UID: 0 PID: 1088 Comm: kworker/u10:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  161.990973][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.990983][ T1088] Workqueue: writeback wb_workfn (flush-7:3)
[  161.991009][ T1088] Call Trace:
[  161.991016][ T1088]  <TASK>
[  161.991022][ T1088]  dump_stack_lvl+0x189/0x250
[  161.991045][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.991060][ T1088]  ? __pfx_queue_work_on+0x10/0x10
[  161.991075][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  161.991092][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.991116][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[  161.991141][ T1088]  f2fs_write_end_io+0x886/0xb60
[  161.991174][ T1088]  __submit_merged_bio+0x27a/0x6a0
[  161.991196][ T1088]  __submit_merged_write_cond+0x255/0x530
[  161.991219][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[  161.991265][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  161.991294][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  161.991340][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  161.991357][ T1088]  ? look_up_lock_class+0x74/0x170
[  161.991383][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[  161.991400][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[  161.991420][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  161.991447][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  161.991467][ T1088]  do_writepages+0x32e/0x550
[  161.991491][ T1088]  ? reacquire_held_locks+0x127/0x1d0
[  161.991506][ T1088]  ? writeback_sb_inodes+0x384/0x1010
[  161.991531][ T1088]  __writeback_single_inode+0x145/0xff0
[  161.991548][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[  161.991581][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[  161.991600][ T1088]  ? unwind_next_frame+0xa5/0x2390
[  161.991620][ T1088]  ? unwind_next_frame+0xa5/0x2390
[  161.991647][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  161.991728][ T1088]  ? rcu_is_watching+0x15/0xb0
[  161.991753][ T1088]  wb_writeback+0x43b/0xaf0
[  161.991777][ T1088]  ? queue_io+0x391/0x590
[  161.991797][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[  161.991821][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  161.991840][ T1088]  wb_workfn+0x409/0xef0
[  161.991868][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[  161.991887][ T1088]  ? __lock_acquire+0xab9/0xd20
[  161.991916][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  161.991936][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  161.991949][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  161.991961][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  161.991977][ T1088]  process_scheduled_works+0xae1/0x17b0
[  161.992015][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[  161.992051][ T1088]  worker_thread+0x8a0/0xda0
[  161.992077][ T1088]  ? __kthread_parkme+0x7b/0x200
[  161.992101][ T1088]  kthread+0x711/0x8a0
[  161.992121][ T1088]  ? __pfx_worker_thread+0x10/0x10
[  161.992134][ T1088]  ? __pfx_kthread+0x10/0x10
[  161.992153][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  161.992167][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.992182][ T1088]  ? __pfx_kthread+0x10/0x10
[  161.992200][ T1088]  ret_from_fork+0x3fc/0x770
[  161.992217][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[  161.992237][ T1088]  ? __switch_to_asm+0x39/0x70
[  161.992253][ T1088]  ? __switch_to_asm+0x33/0x70
[  161.992270][ T1088]  ? __pfx_kthread+0x10/0x10
[  161.992287][ T1088]  ret_from_fork_asm+0x1a/0x30
[  161.992317][ T1088]  </TASK>
[  161.992323][ T1088] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  162.426499][ T8413] loop1: detected capacity change from 0 to 32768
[  162.489987][ T8419] loop3: detected capacity change from 0 to 128
[  162.510381][ T8419] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.516404][ T8419] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  162.539787][ T8423] netlink: 32 bytes leftover after parsing attributes in process `syz.4.903'.
[  162.558008][ T8419] EXT4-fs warning (device loop3): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  162.633391][ T5951] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.031575][   T33] audit: type=1800 audit(1755077858.034:76): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.908" name="/newroot/320/file0" dev="tmpfs" ino=1682 res=0 errno=0
[  164.682665][ T8483] loop1: detected capacity change from 0 to 1024
[  164.696336][ T8483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.972420][ T8483] syz.1.925: attempt to access beyond end of device
[  164.972420][ T8483] loop1: rw=2049, sector=1024, nr_sectors = 1 limit=1024
[  164.980082][ T8483] Buffer I/O error on dev loop1, logical block 1024, lost async page write
[  164.983889][ T8483] syz.1.925: attempt to access beyond end of device
[  164.983889][ T8483] loop1: rw=2049, sector=1024, nr_sectors = 1 limit=1024
[  164.990827][ T8483] Buffer I/O error on dev loop1, logical block 1024, lost async page write
[  164.994391][ T8483] syz.1.925: attempt to access beyond end of device
[  164.994391][ T8483] loop1: rw=2049, sector=1024, nr_sectors = 1 limit=1024
[  165.001952][ T8483] Buffer I/O error on dev loop1, logical block 1024, lost async page write
[  165.006601][ T8483] syz.1.925: attempt to access beyond end of device
[  165.006601][ T8483] loop1: rw=2049, sector=1024, nr_sectors = 1 limit=1024
[  165.030303][ T8483] Buffer I/O error on dev loop1, logical block 1024, lost async page write
[  165.076780][ T8482] UDF-fs: error (device loop1): udf_truncate_tail_extent: Extent after EOF in inode 818
[  165.103424][ T1387] kworker/u9:4: attempt to access beyond end of device
[  165.103424][ T1387] loop1: rw=1, sector=1025, nr_sectors = 1 limit=1024
[  165.111769][ T1387] Buffer I/O error on dev loop1, logical block 1025, lost async page write
[  165.115415][ T1387] kworker/u9:4: attempt to access beyond end of device
[  165.115415][ T1387] loop1: rw=1, sector=1025, nr_sectors = 1 limit=1024
[  165.120642][ T1387] Buffer I/O error on dev loop1, logical block 1025, lost async page write
[  165.212951][ T8489] Device name cannot be null; rc = [-22]
[  165.487818][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'.
[  165.560415][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.575355][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.587986][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.600896][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.603281][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.618738][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.623858][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.626556][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.635666][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.641056][ T5895] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0
[  165.663614][ T5895] hid-generic 00A0:0006:0003.0004: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  165.669144][ T8504] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.934'.
[  165.835930][ T5895] IPVS: starting estimator thread 0...
[  165.927973][ T8516] IPVS: using max 62 ests per chain, 148800 per kthread
[  166.113253][ T8524] loop3: detected capacity change from 0 to 32768
[  166.118203][ T8524] bcachefs (/dev/loop3): error validating superblock: Filesystem has incompatible feature bit 96, highest supported small_image (22)
[  166.122353][ T8524] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  166.419150][ T8529] capability: warning: `syz.3.945' uses deprecated v2 capabilities in a way that may be insecure
[  166.960210][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.963163][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.108316][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.130446][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.227851][ T1270] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  167.373906][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.377269][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.380888][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.384171][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.390290][ T1270] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice= 5.76
[  167.395509][ T1270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.407453][ T1270] usb 2-1: config 0 descriptor??
[  167.461106][ T1270] usb_8dev 2-1:0.0 can0: sending command message failed
[  167.467683][ T1270] usb_8dev 2-1:0.0 can0: can't get firmware version
[  167.496018][ T8560] loop4: detected capacity change from 0 to 512
[  167.514293][ T8560] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  167.520271][ T8560] EXT4-fs (loop4): 1 truncate cleaned up
[  167.526566][ T8560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.543543][ T1270] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22
[  167.564384][ T7745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.645982][ T1270] usb 2-1: USB disconnect, device number 10
[  167.671866][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  167.818791][   T24] usb 4-1: Using ep0 maxpacket: 8
[  167.823329][   T24] usb 4-1: config 105 has an invalid interface number: 212 but max is 0
[  167.826588][   T24] usb 4-1: config 105 has no interface number 0
[  167.829721][   T24] usb 4-1: config 105 interface 212 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[  167.833880][   T24] usb 4-1: config 105 interface 212 altsetting 0 endpoint 0x5 has invalid maxpacket 431, setting to 64
[  167.846372][   T24] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=72.73
[  167.850252][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.853222][   T24] usb 4-1: Product: syz
[  167.854673][   T24] usb 4-1: Manufacturer: syz
[  167.856389][   T24] usb 4-1: SerialNumber: syz
[  167.862611][ T8558] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  168.075898][   T24] port100 4-1:105.212: NFC: Could not find bulk-in or bulk-out endpoint
[  168.082514][   T24] usb 4-1: USB disconnect, device number 10
[  168.694286][ T8583] loop3: detected capacity change from 0 to 256
[  169.055058][ T8593] IPv6: Can't replace route, no match found
[  169.302281][ T8599] mmap: syz.4.972 (8599) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  169.322356][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'.
[  169.325818][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'.
[  170.707348][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'.
[  171.136964][ T8637] netlink: 'syz.1.988': attribute type 11 has an invalid length.
[  171.741237][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  171.911735][   T10] usb 2-1: Using ep0 maxpacket: 16
[  171.918731][   T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  171.924320][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.938189][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.944638][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  171.954740][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.960263][   T10] usb 2-1: Product: syz
[  171.963043][   T10] usb 2-1: Manufacturer: syz
[  171.964867][   T10] usb 2-1: SerialNumber: syz
[  172.361877][   T33] audit: type=1326 audit(1755077867.364:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1011" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85dc38ebe9 code=0x0
[  172.382679][   T10] usb 2-1: 0:2 : does not exist
[  173.016360][   T10] usb 2-1: USB disconnect, device number 11
[  173.075201][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.595155][ T8707] loop3: detected capacity change from 0 to 1024
[  173.709585][   T36] hfsplus: b-tree write err: -5, ino 4
[  174.530511][ T8734] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1031'.
[  175.131188][ T8753] loop3: detected capacity change from 0 to 1024
[  175.227448][ T8759] netlink: 'syz.1.1040': attribute type 64 has an invalid length.
[  175.228068][ T1387] hfsplus: b-tree write err: -5, ino 4
[  175.236272][ T8759] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1040'.
[  175.329229][ T8767] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1041'.
[  175.680747][ T8784] loop3: detected capacity change from 0 to 256
[  175.754838][ T8792] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1051'.
[  175.794206][ T8795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1053'.
[  175.817356][ T8795] vlan2: entered promiscuous mode
[  175.827796][ T8795] bridge0: entered promiscuous mode
[  176.565520][ T5874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.655442][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  176.721937][ T5874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.832301][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  176.835445][   T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  176.843284][ T5874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.848538][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.856777][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  176.862243][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  176.864927][   T10] usb 2-1: Product: syz
[  176.866277][   T10] usb 2-1: Manufacturer: syz
[  176.868773][   T10] usb 2-1: SerialNumber: syz
[  176.909317][ T5874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.022263][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.031045][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.035233][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.042510][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.046125][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.105366][   T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  177.133447][ T5874] bridge_slave_1: left allmulticast mode
[  177.142637][ T5874] bridge_slave_1: left promiscuous mode
[  177.148015][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.160729][ T5874] bridge_slave_0: left allmulticast mode
[  177.162497][ T5874] bridge_slave_0: left promiscuous mode
[  177.164349][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.333070][   T24] usb 2-1: USB disconnect, device number 12
[  177.343671][   T24] usblp0: removed
[  177.639279][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.645398][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.651302][ T5874] bond0 (unregistering): Released all slaves
[  177.882026][ T5874] IPVS: stopping backup sync thread 8003 ...
[  177.923761][ T8827] chnl_net:caif_netlink_parms(): no params data found
[  178.200045][ T8858] loop1: detected capacity change from 0 to 512
[  178.238455][ T8858] EXT4-fs error (device loop1): ext4_init_orphan_info:585: comm syz.1.1068: inode #0: comm syz.1.1068: iget: illegal inode #
[  178.244265][ T8858] EXT4-fs (loop1): get orphan inode failed
[  178.246812][ T8858] EXT4-fs (loop1): mount failed
[  178.410764][ T5874] hsr_slave_0: left promiscuous mode
[  178.413155][ T5874] hsr_slave_1: left promiscuous mode
[  178.415230][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.417401][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.420675][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.423039][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.440793][ T5874] veth1_macvtap: left promiscuous mode
[  178.442552][ T5874] veth0_macvtap: left promiscuous mode
[  178.444388][ T5874] veth1_vlan: left promiscuous mode
[  178.446026][ T5874] veth0_vlan: left promiscuous mode
[  178.926670][ T8866] loop1: detected capacity change from 0 to 32768
[  178.951806][ T8866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1070 (8866)
[  178.973693][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  179.010804][ T8866] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.014808][ T8866] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  179.037895][ T8866] BTRFS info (device loop1): using free-space-tree
[  179.082956][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  179.108492][ T5853] Bluetooth: hci2: command tx timeout
[  179.272934][   T33] audit: type=1804 audit(1755077874.274:78): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1070" name="/newroot/346/file1/file1" dev="loop1" ino=260 res=1 errno=0
[  179.388171][ T5847] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.884919][ T8827] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.891024][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.894122][ T8827] bridge_slave_0: entered allmulticast mode
[  179.898343][ T8827] bridge_slave_0: entered promiscuous mode
[  179.928125][ T8827] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.931515][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.934076][ T8827] bridge_slave_1: entered allmulticast mode
[  179.942466][ T8827] bridge_slave_1: entered promiscuous mode
[  180.070288][ T8827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.112167][ T8827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.164915][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1080'.
[  180.284173][ T8827] team0: Port device team_slave_0 added
[  180.316647][ T8827] team0: Port device team_slave_1 added
[  180.420413][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.423041][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.454919][ T8827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.478528][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.481207][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.492609][ T8827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.552872][ T8827] hsr_slave_0: entered promiscuous mode
[  180.559585][ T8827] hsr_slave_1: entered promiscuous mode
[  180.561752][ T8827] debugfs: 'hsr0' already exists in 'hsr'
[  180.563501][ T8827] Cannot create hsr debugfs directory
[  180.607228][ T5874] IPVS: stop unused estimator thread 0...
[  181.000451][ T8827] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  181.012567][ T8827] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  181.021277][ T8827] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  181.027358][ T8827] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  181.146879][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.169804][ T8827] 8021q: adding VLAN 0 to HW filter on device team0
[  181.186838][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.189896][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.193548][ T5853] Bluetooth: hci2: command tx timeout
[  181.210375][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.213408][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.400640][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.617401][ T8827] veth0_vlan: entered promiscuous mode
[  181.642619][ T8827] veth1_vlan: entered promiscuous mode
[  181.682089][ T8827] veth0_macvtap: entered promiscuous mode
[  181.695373][ T8827] veth1_macvtap: entered promiscuous mode
[  181.721574][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.738795][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.765650][ T5875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.776158][ T5875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.780365][ T5875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.790315][ T5875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.903992][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.909538][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.944894][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.949142][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.470736][ T1270] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  182.617711][ T1270] usb 6-1: Using ep0 maxpacket: 16
[  182.622665][ T1270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.627873][ T1270] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  182.631740][ T1270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.640895][ T1270] usb 6-1: config 0 descriptor??
[  183.061319][ T1270] creative-sb0540 0003:041E:3100.0005: unbalanced delimiter at end of report description
[  183.068400][ T1270] creative-sb0540 0003:041E:3100.0005: parse failed
[  183.070471][ T1270] creative-sb0540 0003:041E:3100.0005: probe with driver creative-sb0540 failed with error -22
[  183.258932][ T9032] ref_ctr_offset mismatch. inode: 0x2c8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  183.262647][   T24] usb 6-1: USB disconnect, device number 2
[  183.267975][ T5853] Bluetooth: hci2: command tx timeout
[  184.696484][ T9054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  184.699643][ T9054] IPv6: NLM_F_CREATE should be set when creating new route
[  184.702671][ T9054] IPv6: NLM_F_CREATE should be set when creating new route
[  185.347741][ T5853] Bluetooth: hci2: command tx timeout
[  185.591211][ T9066] macvtap1: entered promiscuous mode
[  185.593100][ T9066] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  185.616878][ T9066] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  185.816575][ T9075] use of bytesused == 0 is deprecated and will be removed in the future,
[  185.822182][ T9075] use the actual size instead.
[  186.241365][ T9080] loop5: detected capacity change from 0 to 47
[  186.897231][ T9111] loop1: detected capacity change from 0 to 1764
[  187.107016][   T33] audit: type=1107 audit(1755077882.104:79): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  188.028410][   T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  188.201160][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.204980][   T10] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  188.209022][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.214852][   T10] usb 6-1: config 0 descriptor??
[  188.387927][ T5853] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  188.390158][ T5233] Bluetooth: hci3: command 0x1003 tx timeout
[  189.354657][   T10] nintendo 0003:057E:200E.0006: unbalanced delimiter at end of report description
[  189.361162][   T10] nintendo 0003:057E:200E.0006: HID parse failed
[  189.365860][   T10] nintendo 0003:057E:200E.0006: probe - fail = -22
[  189.368272][   T10] nintendo 0003:057E:200E.0006: probe with driver nintendo failed with error -22
[  189.385040][   T10] usb 6-1: USB disconnect, device number 3
[  189.464796][ T9159] netlink: 'syz.4.1154': attribute type 1 has an invalid length.
[  189.653383][ T9166] loop4: detected capacity change from 0 to 128
[  189.668895][ T9166] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  189.676284][ T9166] EXT4-fs (loop4): Encoding requested by superblock is unknown
[  191.023659][ T9188] netlink: 'syz.4.1167': attribute type 10 has an invalid length.
[  191.030675][ T9188] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  191.219044][ T9192] cgroup: fork rejected by pids controller in /syz4
[  191.454499][ T9202] netlink: 'syz.1.1174': attribute type 1 has an invalid length.
[  192.351693][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.358787][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.363058][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.369815][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.374864][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.244327][ T9216] loop5: detected capacity change from 0 to 32768
[  193.278990][ T9210] chnl_net:caif_netlink_parms(): no params data found
[  193.381625][ T5853] Bluetooth: hci1: unexpected event for opcode 0x041b
[  193.591413][ T9216] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=gzip,str_hash=crc32c,journal_flush_disabled,recovery_pass_last=set_may_go_rw,reconstruct_alloc
[  193.591470][ T9216]   allowing incompatible features above 0.0: (unknown version)
[  193.591481][ T9216]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  193.806196][ T9216] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  193.809704][ T9216] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  193.812330][ T9216] bcachefs (loop5): Version upgrade required:
[  193.812330][ T9216] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  193.812330][ T9216] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  193.812330][ T9216]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  193.834674][    C0] vkms_vblank_simulate: vblank timer overrun
[  193.848496][ T9216] bcachefs (loop5): dropping and reconstructing all alloc info
[  193.867265][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.874217][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.879661][ T9210] bridge_slave_0: entered allmulticast mode
[  193.889229][ T9210] bridge_slave_0: entered promiscuous mode
[  193.903248][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.909877][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.917054][ T9210] bridge_slave_1: entered allmulticast mode
[  193.929950][ T9210] bridge_slave_1: entered promiscuous mode
[  193.946877][ T9216] bcachefs (loop5): accounting_read... done
[  193.954162][ T9216] bcachefs (loop5): alloc_read... done
[  193.956608][ T9216] bcachefs (loop5): snapshots_read... done
[  193.962708][ T9216] bcachefs (loop5): check_allocations...
[  193.974727][ T9210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.983606][ T9210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.013156][ T9216]  done
[  194.013564][ T9210] team0: Port device team_slave_0 added
[  194.019147][ T9216] bcachefs (loop5): going read-write
[  194.022496][ T9210] team0: Port device team_slave_1 added
[  194.065476][ T9216] bcachefs (loop5): done starting filesystem
[  194.074006][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.076231][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.090291][ T1387] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  194.090342][ T1387]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  194.107933][ T9210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.120909][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.128811][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.157038][ T9210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.163370][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.165586][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.205514][ T1387] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  194.205527][ T1387]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  194.223861][ T9210] hsr_slave_0: entered promiscuous mode
[  194.224469][ T9210] hsr_slave_1: entered promiscuous mode
[  194.233688][ T9210] debugfs: 'hsr0' already exists in 'hsr'
[  194.233708][ T9210] Cannot create hsr debugfs directory
[  194.320843][ T1387] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  194.320892][ T1387]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  194.346918][ T1387] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  194.346931][ T1387]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  194.370283][ T9216] bcachefs (loop5): inode 536870912 truncated to 0 but i_blocks 8 (ondisk 8)
[  194.389687][ T5853] Bluetooth: hci0: command tx timeout
[  194.394531][ T1387] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  194.394579][ T1387]   u64s 5 type deleted 0:44:0 len 0 ver 0, , continuing
[  194.459133][ T8827] bcachefs (loop5): shutting down
[  194.462520][ T8827] bcachefs (loop5): going read-only
[  194.466798][ T8827] bcachefs (loop5): finished waiting for writes to stop
[  194.485882][ T8827] bcachefs (loop5): flushing journal and stopping allocators, journal seq 11
[  194.544574][ T1387] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  194.544593][ T1387]   u64s 5 type deleted 0:49:0 len 0 ver 0, , continuing
[  194.592040][ T8827] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 11
[  194.602685][ T8827] bcachefs (loop5): unclean shutdown complete, journal seq 12
[  194.611798][ T8827] bcachefs (loop5): done going read-only, filesystem not clean
[  194.653409][ T8827] bcachefs (loop5): shutdown complete
[  194.963145][ T9210] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  194.970777][ T9210] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  194.975308][ T9210] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.984702][ T9210] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  195.043092][ T9210] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.061035][ T9210] 8021q: adding VLAN 0 to HW filter on device team0
[  195.066869][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.069315][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.078750][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.081093][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.221020][ T9210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.536774][ T9210] veth0_vlan: entered promiscuous mode
[  195.576246][ T9210] veth1_vlan: entered promiscuous mode
[  195.660736][ T9210] veth0_macvtap: entered promiscuous mode
[  195.675328][ T9210] veth1_macvtap: entered promiscuous mode
[  195.718593][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.759501][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.780214][ T5874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.783168][ T5874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.785925][ T5874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.790671][ T5874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.217988][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.227035][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.373698][ T1387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.376971][ T1387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.416533][   T33] audit: type=1326 audit(1755077891.414:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392c98ebe9 code=0x7fc00000
[  196.442488][   T33] audit: type=1326 audit(1755077891.424:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f392c98ebe9 code=0x7fc00000
[  196.468418][ T5853] Bluetooth: hci0: command tx timeout
[  196.605663][ T9311] loop4: detected capacity change from 0 to 8
[  197.082676][ T9325] SQUASHFS error: Failed to read block 0x2fc: -5
[  197.086057][ T9325] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  197.089596][ T9325] SQUASHFS error: Unable to read directory block [247:26]
[  197.102239][ T9325] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  197.105616][ T9325] SQUASHFS error: Unable to read directory block [247:26]
[  197.111681][ T9325] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  197.114704][ T9325] SQUASHFS error: Unable to read directory block [247:26]
[  197.365940][ T9334] input: syz1 as /devices/virtual/input/input9
[  197.615063][ T9344] Bluetooth: MGMT ver 1.23
[  197.677167][ T9347] loop1: detected capacity change from 0 to 256
[  197.696602][ T9347] FAT-fs (loop1): Directory bread(block 64) failed
[  197.700393][ T9347] FAT-fs (loop1): Directory bread(block 65) failed
[  197.702614][ T9347] FAT-fs (loop1): Directory bread(block 66) failed
[  197.704789][ T9347] FAT-fs (loop1): Directory bread(block 67) failed
[  197.706889][ T9347] FAT-fs (loop1): Directory bread(block 68) failed
[  197.713492][ T9347] FAT-fs (loop1): Directory bread(block 69) failed
[  197.716168][ T9347] FAT-fs (loop1): Directory bread(block 70) failed
[  197.719179][ T9347] FAT-fs (loop1): Directory bread(block 71) failed
[  197.721269][ T9347] FAT-fs (loop1): Directory bread(block 72) failed
[  197.723221][ T9347] FAT-fs (loop1): Directory bread(block 73) failed
[  198.207856][   T52] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  198.358833][   T52] usb 2-1: Using ep0 maxpacket: 8
[  198.368450][   T52] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17
[  198.383868][   T52] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  198.390131][   T52] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  198.394324][   T52] usb 2-1: Product: syz
[  198.396535][   T52] usb 2-1: Manufacturer: syz
[  198.402690][   T52] usb 2-1: SerialNumber: syz
[  198.433303][   T52] usb 2-1: config 0 descriptor??
[  198.547762][ T5233] Bluetooth: hci0: command tx timeout
[  198.691832][   T52] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  198.704902][   T52] gspca_sunplus: reg_w_riv err -71
[  198.707177][   T52] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  198.747048][   T52] usb 2-1: USB disconnect, device number 13
[  199.278257][   T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  199.430913][   T10] usb 6-1: not running at top speed; connect to a high speed hub
[  199.435387][   T10] usb 6-1: config 6 has an invalid interface number: 152 but max is 0
[  199.440358][   T10] usb 6-1: config 6 has an invalid interface number: 94 but max is 0
[  199.443662][   T10] usb 6-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  199.447509][   T10] usb 6-1: config 6 has no interface number 0
[  199.450689][   T10] usb 6-1: config 6 has no interface number 1
[  199.453581][   T10] usb 6-1: config 6 interface 94 altsetting 85 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  199.459273][   T10] usb 6-1: config 6 interface 152 has no altsetting 0
[  199.462137][   T10] usb 6-1: config 6 interface 94 has no altsetting 0
[  199.467858][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=e0.67
[  199.471521][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.474717][   T10] usb 6-1: Product: syz
[  199.476466][   T10] usb 6-1: Manufacturer: syz
[  199.478644][   T10] usb 6-1: SerialNumber: syz
[  199.667759][ T5853] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  199.715316][   T10] usb 6-1: USB disconnect, device number 4
[  200.627945][ T5853] Bluetooth: hci0: command 0x0419 tx timeout
[  200.688865][ T1270] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  200.837793][ T1270] usb 5-1: Using ep0 maxpacket: 8
[  200.845664][ T1270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17
[  200.852998][ T1270] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  200.856546][ T1270] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  200.861868][ T1270] usb 5-1: Product: syz
[  200.863465][ T1270] usb 5-1: Manufacturer: syz
[  200.865069][ T1270] usb 5-1: SerialNumber: syz
[  200.873302][ T1270] usb 5-1: config 0 descriptor??
[  201.109579][ T1270] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  201.121251][ T1270] gspca_sunplus: reg_w_riv err -71
[  201.123047][ T1270] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  201.142128][ T1270] usb 5-1: USB disconnect, device number 3
[  201.301611][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'.
[  201.560615][ T9418] loop5: detected capacity change from 0 to 8
[  201.944625][ T9424] SQUASHFS error: Failed to read block 0x2fc: -5
[  201.947379][ T9424] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  201.951101][ T9424] SQUASHFS error: Unable to read directory block [247:26]
[  201.956981][ T9424] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  201.960167][ T9424] SQUASHFS error: Unable to read directory block [247:26]
[  201.965346][ T9424] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  201.968541][ T9424] SQUASHFS error: Unable to read directory block [247:26]
[  202.593347][ T9430] loop4: detected capacity change from 0 to 256
[  202.670734][ T9430] FAT-fs (loop4): Directory bread(block 64) failed
[  202.681766][ T9430] FAT-fs (loop4): Directory bread(block 65) failed
[  202.691422][ T9430] FAT-fs (loop4): Directory bread(block 66) failed
[  202.708870][ T5853] Bluetooth: hci0: command 0x0419 tx timeout
[  202.711870][ T9430] FAT-fs (loop4): Directory bread(block 67) failed
[  202.714622][ T9430] FAT-fs (loop4): Directory bread(block 68) failed
[  202.734743][ T9430] FAT-fs (loop4): Directory bread(block 69) failed
[  202.737536][ T9430] FAT-fs (loop4): Directory bread(block 70) failed
[  202.743714][ T9430] FAT-fs (loop4): Directory bread(block 71) failed
[  202.746409][ T9430] FAT-fs (loop4): Directory bread(block 72) failed
[  202.759953][ T9430] FAT-fs (loop4): Directory bread(block 73) failed
[  204.442194][ T9457] loop4: detected capacity change from 0 to 32768
[  204.538558][ T9457] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  204.874604][ T9210] ocfs2: Unmounting device (7,4) on (node local)
[  205.140633][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.144141][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.343246][ T9463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.352426][ T9463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.392992][ T9477] loop1: detected capacity change from 0 to 1024
[  205.404064][ T9477] EXT4-fs: inline encryption not supported
[  205.412204][ T9477] EXT4-fs: Ignoring removed i_version option
[  205.433685][ T9477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.457141][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.471965][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.475689][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.504869][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.522160][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.590639][ T9482] loop5: detected capacity change from 0 to 2048
[  205.603217][ T9482] NILFS (loop5): invalid segment: Magic number mismatch
[  205.605993][ T9482] NILFS (loop5): trying rollback from an earlier position
[  205.615507][ T9482] NILFS (loop5): recovery complete
[  205.630352][ T9487] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.671611][ T9486] loop4: detected capacity change from 0 to 1024
[  205.708901][ T9486] EXT4-fs: Ignoring removed orlov option
[  205.785899][ T9486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.860389][ T9210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.089788][ T9494] loop1: detected capacity change from 0 to 4096
[  206.121362][ T9496] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.132470][ T9498] loop4: detected capacity change from 0 to 256
[  206.163612][ T9498] FAT-fs (loop4): Directory bread(block 64) failed
[  206.165835][ T9498] FAT-fs (loop4): Directory bread(block 65) failed
[  206.168684][ T9498] FAT-fs (loop4): Directory bread(block 66) failed
[  206.171011][ T9498] FAT-fs (loop4): Directory bread(block 67) failed
[  206.175328][ T9498] FAT-fs (loop4): Directory bread(block 68) failed
[  206.177504][ T9498] FAT-fs (loop4): Directory bread(block 69) failed
[  206.181744][ T9498] FAT-fs (loop4): Directory bread(block 70) failed
[  206.184219][ T9498] FAT-fs (loop4): Directory bread(block 71) failed
[  206.189756][ T9498] FAT-fs (loop4): Directory bread(block 72) failed
[  206.192281][ T9498] FAT-fs (loop4): Directory bread(block 73) failed
[  206.298614][ T9502] loop4: detected capacity change from 0 to 1024
[  206.303459][ T9502] EXT4-fs: inline encryption not supported
[  206.311272][ T9502] EXT4-fs: Ignoring removed i_version option
[  206.335264][ T9502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.467092][ T9210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.785334][ T9521] loop1: detected capacity change from 0 to 32768
[  207.793263][ T9521] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  207.832190][ T9526] loop5: detected capacity change from 0 to 1024
[  207.838235][ T9526] EXT4-fs: Ignoring removed orlov option
[  207.869082][ T9526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.966676][ T9531] loop4: detected capacity change from 0 to 4096
[  208.044202][ T9532] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.094557][ T8827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.216927][ T5847] ocfs2: Unmounting device (7,1) on (node local)
[  208.589918][ T9543] loop5: detected capacity change from 0 to 32768
[  208.620994][ T9543] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  208.858395][ T9543] XFS (loop5): Ending clean mount
[  208.866370][ T9543] XFS (loop5): Quotacheck needed: Please wait.
[  208.911508][ T9543] XFS (loop5): Quotacheck: Done.
[  208.932381][   T33] audit: type=1800 audit(1755077903.934:82): pid=9543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1271" name="file2" dev="loop5" ino=9287 res=0 errno=0
[  209.047210][ T8827] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.114130][ T9557] netlink: 'syz.4.1273': attribute type 11 has an invalid length.
[  209.534049][ T9570] loop5: detected capacity change from 0 to 32768
[  209.547137][ T9570] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  209.657666][   T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  209.843791][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  209.868459][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  209.882309][   T10] usb 5-1: config 8 has an invalid interface number: 24 but max is 0
[  209.897877][   T10] usb 5-1: config 8 has no interface number 0
[  209.903945][   T10] usb 5-1: config 8 interface 24 has no altsetting 0
[  209.918640][   T10] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  209.930128][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.936609][   T10] usb 5-1: Product: syz
[  209.943786][   T10] usb 5-1: Manufacturer: syz
[  209.949645][   T10] usb 5-1: SerialNumber: syz
[  210.242543][   T10] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  210.272817][   T10] usb 5-1: USB disconnect, device number 4
[  210.401970][ T8827] ocfs2: Unmounting device (7,5) on (node local)
[  210.573495][ T9576] loop1: detected capacity change from 0 to 40427
[  210.590630][ T9576] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384)
[  210.593109][ T9576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  210.631695][ T9576] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.637418][ T9576] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  210.639908][ T9576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  210.673822][ T5847] syz-executor: attempt to access beyond end of device
[  210.673822][ T5847] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  210.681187][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  210.681225][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.681232][ T5847] Call Trace:
[  210.681236][ T5847]  <TASK>
[  210.681241][ T5847]  dump_stack_lvl+0x189/0x250
[  210.681260][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.681270][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  210.681280][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  210.681291][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  210.681306][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  210.681323][ T5847]  f2fs_write_end_io+0x886/0xb60
[  210.681345][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  210.681358][ T5847]  __submit_merged_write_cond+0x255/0x530
[  210.681372][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  210.681401][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.681441][ T5847]  ? folios_put_refs+0x559/0x640
[  210.681458][ T5847]  ? __lock_acquire+0xab9/0xd20
[  210.681476][ T5847]  ? do_raw_spin_lock+0x121/0x290
[  210.681491][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  210.681501][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.681512][ T5847]  do_writepages+0x32e/0x550
[  210.681530][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  210.681542][ T5847]  filemap_fdatawrite+0x199/0x240
[  210.681554][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.681590][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  210.681601][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  210.681622][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[  210.681646][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  210.681682][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[  210.681696][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[  210.681710][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.681720][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[  210.681733][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  210.681744][ T5847]  deactivate_locked_super+0xbc/0x130
[  210.681755][ T5847]  cleanup_mnt+0x425/0x4c0
[  210.681764][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.681776][ T5847]  task_work_run+0x1d4/0x260
[  210.681789][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  210.681798][ T5847]  ? __x64_sys_umount+0x122/0x160
[  210.681811][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[  210.681825][ T5847]  exit_to_user_mode_loop+0xec/0x110
[  210.681836][ T5847]  do_syscall_64+0x2bd/0x3b0
[  210.681846][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.681854][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.681862][ T5847]  ? exc_page_fault+0x9f/0xf0
[  210.681873][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.681881][ T5847] RIP: 0033:0x7f392c98ff17
[  210.681891][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  210.681899][ T5847] RSP: 002b:00007ffd67174b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.681908][ T5847] RAX: 0000000000000000 RBX: 00007f392ca11c05 RCX: 00007f392c98ff17
[  210.681914][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd67174c40
[  210.681918][ T5847] RBP: 00007ffd67174c40 R08: 0000000000000000 R09: 0000000000000000
[  210.681923][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd67175cd0
[  210.681928][ T5847] R13: 00007f392ca11c05 R14: 0000000000033677 R15: 00007ffd67175d10
[  210.681944][ T5847]  </TASK>
[  210.681948][ T5847] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  210.948005][ T9590] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  211.364320][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.366991][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.370469][ T9591] loop5: detected capacity change from 0 to 32768
[  211.373944][ T9591] btrfs: Unknown parameter 'seclabel'
[  211.557491][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.575432][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.808393][ T9593] batman_adv: batadv0: Interface deactivated: gretap1
[  211.816846][ T5874] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.842641][ T5874] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.846285][ T5874] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.863997][ T5874] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.285123][ T9612] loop4: detected capacity change from 0 to 4096
[  212.296105][ T9615] loop1: detected capacity change from 0 to 256
[  212.310718][ T9615] FAT-fs (loop1): Directory bread(block 64) failed
[  212.314029][ T9615] FAT-fs (loop1): Directory bread(block 65) failed
[  212.317160][ T9615] FAT-fs (loop1): Directory bread(block 66) failed
[  212.321992][ T9615] FAT-fs (loop1): Directory bread(block 67) failed
[  212.324204][ T9615] FAT-fs (loop1): Directory bread(block 68) failed
[  212.326380][ T9615] FAT-fs (loop1): Directory bread(block 69) failed
[  212.330265][ T9615] FAT-fs (loop1): Directory bread(block 70) failed
[  212.334061][ T9615] FAT-fs (loop1): Directory bread(block 71) failed
[  212.336261][ T9615] FAT-fs (loop1): Directory bread(block 72) failed
[  212.340126][ T9615] FAT-fs (loop1): Directory bread(block 73) failed
[  212.796946][ T9638] netlink: 'syz.5.1303': attribute type 64 has an invalid length.
[  212.806314][ T9638] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1303'.
[  212.897662][ T9642] loop1: detected capacity change from 0 to 1024
[  212.973873][ T9645] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1307'.
[  212.982379][ T5957] hfsplus: b-tree write err: -5, ino 4
[  213.062720][ T5853] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  213.119435][ T9652] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  213.480560][ T9675] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1319'.
[  213.550500][ T9679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1322'.
[  213.560364][ T9679] vlan2: entered promiscuous mode
[  213.562049][ T9679] bridge0: entered promiscuous mode
[  213.697381][ T9688] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  215.013675][ T9721] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  215.997770][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  216.259091][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  216.263026][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  216.266882][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  216.291499][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  216.295434][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  216.306588][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.319061][   T10] usb 2-1: config 0 descriptor??
[  216.410097][ T9755] netlink: 'syz.5.1340': attribute type 21 has an invalid length.
[  216.413654][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1340'.
[  216.530843][   T10] hdpvr 2-1:0.0: firmware version 0x20 dated %@
[  216.537171][   T10] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  216.563625][ T9759] loop5: detected capacity change from 0 to 2048
[  216.592922][ T9759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.612222][ T9759] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1342: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  216.681381][ T8827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.973513][   T10] hdpvr 2-1:0.0: Could not setup controls
[  216.975644][   T10] hdpvr 2-1:0.0: registering videodev failed
[  217.517137][ T9772] loop4: detected capacity change from 0 to 32768
[  217.520759][ T9772] btrfs: Unknown parameter 'seclabel'
[  217.540141][   T10] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71
[  217.648514][   T10] usb 2-1: USB disconnect, device number 14
[  218.052155][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  218.057998][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  218.064401][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  218.067901][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  218.071961][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  218.176456][ T9790] loop4: detected capacity change from 0 to 256
[  218.185782][ T9790] exfat: Deprecated parameter 'utf8'
[  218.199324][ T9790] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[  218.286542][ T9784] chnl_net:caif_netlink_parms(): no params data found
[  218.487396][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.490142][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.493358][ T9784] bridge_slave_0: entered allmulticast mode
[  218.499198][ T9784] bridge_slave_0: entered promiscuous mode
[  218.506089][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.509353][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.511943][ T9784] bridge_slave_1: entered allmulticast mode
[  218.516615][ T9784] bridge_slave_1: entered promiscuous mode
[  218.573413][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.581271][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.676704][ T9784] team0: Port device team_slave_0 added
[  218.686290][ T9784] team0: Port device team_slave_1 added
[  218.765759][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.769181][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.787732][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.794539][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.797350][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.807897][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.864814][ T9784] hsr_slave_0: entered promiscuous mode
[  218.868407][ T9784] hsr_slave_1: entered promiscuous mode
[  218.870894][ T9784] debugfs: 'hsr0' already exists in 'hsr'
[  218.872744][ T9784] Cannot create hsr debugfs directory
[  219.195344][ T9784] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  219.204128][ T9784] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  219.215750][ T9784] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  219.224483][ T9784] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  219.391181][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.432453][ T9784] 8021q: adding VLAN 0 to HW filter on device team0
[  219.451383][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.453688][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.475289][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.477744][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.664649][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.839140][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  219.850607][ T9784] veth0_vlan: entered promiscuous mode
[  219.859890][ T9784] veth1_vlan: entered promiscuous mode
[  219.882316][ T9784] veth0_macvtap: entered promiscuous mode
[  219.886843][ T9784] veth1_macvtap: entered promiscuous mode
[  219.897101][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.909098][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.915887][ T5714] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.920866][ T5714] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.925262][ T5714] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.929918][ T5714] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.957751][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  219.989394][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  219.992375][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  219.995469][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  220.002079][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  220.005137][ T5896] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  220.008872][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.012186][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.012700][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.019554][ T5896] usb 5-1: config 0 descriptor??
[  220.051373][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.053847][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.122369][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.137020][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.141288][   T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  220.144296][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.148447][ T5853] Bluetooth: hci2: command tx timeout
[  220.152438][   T10] usb 2-1: config 0 descriptor??
[  220.278098][ T5896] hdpvr 5-1:0.0: firmware version 0x20 dated %@
[  220.280809][ T5896] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  220.848365][   T10] lenovo 0003:17EF:60EE.0007: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0
[  220.860703][ T5896] hdpvr 5-1:0.0: Could not setup controls
[  220.863371][ T5896] hdpvr 5-1:0.0: registering videodev failed
[  220.881755][ T5896] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71
[  220.889969][ T5896] usb 5-1: USB disconnect, device number 5
[  221.084750][   T10] lenovo 0003:17EF:60EE.0007: Failed to switch middle button: -71
[  221.094138][   T10] lenovo 0003:17EF:60EE.0007: Fn-lock setting failed: -71
[  221.100350][   T10] lenovo 0003:17EF:60EE.0007: Sensitivity setting failed: -71
[  221.113217][   T10] usb 2-1: USB disconnect, device number 15
[  222.187680][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  222.209719][ T9889] loop1: detected capacity change from 0 to 2048
[  222.220093][ T9889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.227758][ T5853] Bluetooth: hci2: command tx timeout
[  222.268674][ T5847] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  222.271840][ T5847] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  222.339488][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.342975][ T5896] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.347532][ T5896] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  222.350649][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.358232][ T5896] usb 7-1: config 0 descriptor??
[  222.781778][ T5896] lenovo 0003:17EF:60EE.0008: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.6-1/input0
[  222.808045][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  222.814483][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  222.820295][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  222.827137][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  222.832063][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  222.979472][ T5896] lenovo 0003:17EF:60EE.0008: Failed to switch middle button: -71
[  222.982263][ T9892] chnl_net:caif_netlink_parms(): no params data found
[  222.985203][ T5896] lenovo 0003:17EF:60EE.0008: Fn-lock setting failed: -71
[  222.991903][ T5896] lenovo 0003:17EF:60EE.0008: Sensitivity setting failed: -71
[  222.999686][ T5896] usb 7-1: USB disconnect, device number 2
[  223.084126][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.087088][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.091000][ T9892] bridge_slave_0: entered allmulticast mode
[  223.095634][ T9892] bridge_slave_0: entered promiscuous mode
[  223.100790][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.103708][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.106765][ T9892] bridge_slave_1: entered allmulticast mode
[  223.112801][ T9892] bridge_slave_1: entered promiscuous mode
[  223.136856][ T9892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.142037][ T9892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.176946][ T9892] team0: Port device team_slave_0 added
[  223.184523][ T9892] team0: Port device team_slave_1 added
[  223.218450][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.221277][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.231615][ T9892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.238009][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.240882][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.254666][ T9892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.299824][ T9892] hsr_slave_0: entered promiscuous mode
[  223.302871][ T9892] hsr_slave_1: entered promiscuous mode
[  223.305863][ T9892] debugfs: 'hsr0' already exists in 'hsr'
[  223.308318][ T9892] Cannot create hsr debugfs directory
[  223.484624][ T9892] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  223.489362][ T9892] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  223.495569][ T9892] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  223.505936][ T9892] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  223.632700][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.682159][ T9892] 8021q: adding VLAN 0 to HW filter on device team0
[  223.697296][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.700164][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.732424][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.735251][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.792329][ T9892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.796214][ T9892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.802628][ T9914] loop4: detected capacity change from 0 to 1024
[  223.852373][ T9914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.871984][ T9922] loop6: detected capacity change from 0 to 16
[  223.896403][ T9922] erofs (device loop6): mounted with root inode @ nid 36.
[  223.930308][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.006595][ T9210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.050398][ T9928] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  224.200074][ T9939] loop4: detected capacity change from 0 to 128
[  224.220642][ T9939] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  224.244718][ T9939] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  224.244746][ T9892] veth0_vlan: entered promiscuous mode
[  224.252834][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1402'.
[  224.260133][ T9892] veth1_vlan: entered promiscuous mode
[  224.279990][ T9939] EXT4-fs (loop4): shut down requested (1)
[  224.284723][ T9892] veth0_macvtap: entered promiscuous mode
[  224.292268][ T9939] fscrypt (loop4, inode 12): Error -5 getting encryption context
[  224.292598][ T9892] veth1_macvtap: entered promiscuous mode
[  224.310649][ T5233] Bluetooth: hci2: command tx timeout
[  224.336014][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.345250][ T9210] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.370368][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.388454][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.392674][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.396757][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.414153][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.496056][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.515118][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.567317][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.573136][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.643573][ T9956] loop6: detected capacity change from 0 to 2048
[  224.660112][ T9956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.740434][ T9784] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh
[  224.743792][ T9784] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh
[  224.869312][ T5233] Bluetooth: hci1: command tx timeout
[  225.059000][ T5874] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.154903][ T5874] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.239185][ T5874] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.357457][ T5874] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.376278][ T9971] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  225.597284][ T5874] bridge_slave_1: left allmulticast mode
[  225.599255][ T5874] bridge_slave_1: left promiscuous mode
[  225.601103][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.619658][ T5874] bridge_slave_0: left allmulticast mode
[  225.621747][ T5874] bridge_slave_0: left promiscuous mode
[  225.623899][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.632045][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  225.643756][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  225.649665][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  225.656930][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  225.662752][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  225.995540][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.002041][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.011301][ T5874] bond0 (unregistering): Released all slaves
[  226.401462][ T5874] hsr_slave_0: left promiscuous mode
[  226.411821][ T5874] hsr_slave_1: left promiscuous mode
[  226.416901][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.422386][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.425954][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.430005][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.460416][ T5874] veth1_macvtap: left promiscuous mode
[  226.462548][ T5874] veth0_macvtap: left promiscuous mode
[  226.464733][ T5874] veth1_vlan: left promiscuous mode
[  226.466804][ T5874] veth0_vlan: left promiscuous mode
[  226.948632][ T5233] Bluetooth: hci1: command tx timeout
[  227.004498][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  227.060004][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  227.597445][ T9974] chnl_net:caif_netlink_parms(): no params data found
[  227.677802][ T9993] loop4: detected capacity change from 0 to 16
[  227.700518][ T9993] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  227.741528][ T9993] erofs (device loop4): mounted with root inode @ nid 36.
[  227.748164][ T5233] Bluetooth: hci2: command tx timeout
[  227.923785][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.934350][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.955543][ T9974] bridge_slave_0: entered allmulticast mode
[  227.967369][ T9974] bridge_slave_0: entered promiscuous mode
[  227.983288][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.986245][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.991856][ T9974] bridge_slave_1: entered allmulticast mode
[  227.995048][ T9974] bridge_slave_1: entered promiscuous mode
[  228.146820][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.194560][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.303099][ T9974] team0: Port device team_slave_0 added
[  228.317149][ T9974] team0: Port device team_slave_1 added
[  228.324921][   T33] audit: type=1326 audit(1755077923.324:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.365411][   T33] audit: type=1326 audit(1755077923.324:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.421496][   T33] audit: type=1326 audit(1755077923.324:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.466582][   T33] audit: type=1326 audit(1755077923.324:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.505416][   T33] audit: type=1326 audit(1755077923.344:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.528105][   T33] audit: type=1326 audit(1755077923.344:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.535002][   T33] audit: type=1326 audit(1755077923.344:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.597389][   T33] audit: type=1326 audit(1755077923.344:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.615504][   T33] audit: type=1326 audit(1755077923.344:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.636484][   T33] audit: type=1326 audit(1755077923.344:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.4.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcc7018ebe9 code=0x7ffc0000
[  228.889340][T10022] loop4: detected capacity change from 0 to 32768
[  228.961857][T10022] read_mapping_page failed!
[  228.965576][T10022] ERROR: (device loop4): txCommit: 
[  228.965576][T10022] 
[  228.997335][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.011352][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.028424][ T5233] Bluetooth: hci1: command tx timeout
[  229.049869][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.153790][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.156526][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.199975][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.235463][ T9974] hsr_slave_0: entered promiscuous mode
[  229.242178][ T9974] hsr_slave_1: entered promiscuous mode
[  229.245845][ T9974] debugfs: 'hsr0' already exists in 'hsr'
[  229.250925][ T9974] Cannot create hsr debugfs directory
[  229.404411][T10036] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1436'.
[  229.550757][T10044] loop7: detected capacity change from 0 to 512
[  229.552791][T10047] loop4: detected capacity change from 0 to 8
[  229.575246][T10044] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1440: corrupted in-inode xattr: e_value size too large
[  229.583720][T10047] SQUASHFS error: xz decompression failed, data probably corrupt
[  229.586152][T10047] SQUASHFS error: Failed to read block 0x108: -5
[  229.592508][T10044] EXT4-fs (loop7): Remounting filesystem read-only
[  229.594835][T10047] SQUASHFS error: Unable to read metadata cache entry [106]
[  229.597136][T10047] SQUASHFS error: Unable to read inode 0x11f
[  229.600778][T10044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.626005][ T9974] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  229.652991][ T9892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.686163][ T9974] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  229.698733][ T9974] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  229.716780][ T9974] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  229.830237][ T5233] Bluetooth: hci2: command tx timeout
[  229.867168][ T9974] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.893939][ T9974] 8021q: adding VLAN 0 to HW filter on device team0
[  229.901216][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.903544][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.912072][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.914345][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.021277][   T12] bridge_slave_1: left allmulticast mode
[  230.023116][   T12] bridge_slave_1: left promiscuous mode
[  230.025009][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.052779][   T12] bridge_slave_0: left allmulticast mode
[  230.054582][   T12] bridge_slave_0: left promiscuous mode
[  230.059854][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.493426][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.501663][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.505182][   T12] bond0 (unregistering): Released all slaves
[  230.835059][ T9974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.108239][ T5233] Bluetooth: hci1: command tx timeout
[  231.193716][   T12] hsr_slave_0: left promiscuous mode
[  231.198421][   T12] hsr_slave_1: left promiscuous mode
[  231.201140][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.217295][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.911814][ T5233] Bluetooth: hci2: command tx timeout
[  232.080839][T10141] loop4: detected capacity change from 0 to 2048
[  232.099791][T10141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.467028][   T12] team0 (unregistering): Port device team_slave_1 removed
[  232.541660][   T12] team0 (unregistering): Port device team_slave_0 removed
[  233.711522][ T9974] veth0_vlan: entered promiscuous mode
[  233.800173][ T9974] veth1_vlan: entered promiscuous mode
[  233.900835][ T9974] veth0_macvtap: entered promiscuous mode
[  233.936342][ T9974] veth1_macvtap: entered promiscuous mode
[  233.951703][   T12] IPVS: stop unused estimator thread 0...
[  233.989460][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.996411][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.999062][ T5233] Bluetooth: hci2: command tx timeout
[  234.017147][   T12] ------------[ cut here ]------------
[  234.019776][   T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  234.023271][   T12] Modules linked in:
[  234.025214][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  234.030231][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.033474][   T12] Workqueue: netns cleanup_net
[  234.035000][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  234.036786][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  234.043397][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  234.045817][   T12] RAX: ffffffff8a2135bf RBX: ffff888111104880 RCX: ffff88801c2e5640
[  234.048623][   T12] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801c2e5640
[  234.051562][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  234.054339][   T12] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  234.055426][ T9976] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.056845][   T12] R13: 1ffff9200001ef40 R14: ffff888111105d00 R15: dffffc0000000000
[  234.056887][   T12] FS:  0000000000000000(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  234.056895][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.056901][   T12] CR2: 00007fefa54593b0 CR3: 0000000106942000 CR4: 00000000000006f0
[  234.056925][   T12] Call Trace:
[  234.071555][   T12]  <TASK>
[  234.072560][   T12]  xfrm_net_exit+0x2d/0x70
[  234.073997][   T12]  ops_undo_list+0x49a/0x990
[  234.075563][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  234.077129][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  234.078926][   T12]  cleanup_net+0x4c5/0x800
[  234.080355][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  234.082031][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.083691][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  234.085485][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  234.087294][   T12]  process_scheduled_works+0xae1/0x17b0
[  234.089162][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.091118][   T12]  worker_thread+0x8a0/0xda0
[  234.092611][   T12]  kthread+0x711/0x8a0
[  234.093937][   T12]  ? __pfx_worker_thread+0x10/0x10
[  234.095599][   T12]  ? __pfx_kthread+0x10/0x10
[  234.097080][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.098341][ T9976] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.098827][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.103675][   T12]  ? __pfx_kthread+0x10/0x10
[  234.105148][   T12]  ret_from_fork+0x3fc/0x770
[  234.106660][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  234.108375][   T12]  ? __switch_to_asm+0x39/0x70
[  234.109966][   T12]  ? __switch_to_asm+0x33/0x70
[  234.111502][   T12]  ? __pfx_kthread+0x10/0x10
[  234.113002][   T12]  ret_from_fork_asm+0x1a/0x30
[  234.114581][   T12]  </TASK>
[  234.115640][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  234.117914][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  234.121652][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.124738][   T12] Workqueue: netns cleanup_net
[  234.126191][   T12] Call Trace:
[  234.127231][   T12]  <TASK>
[  234.128148][   T12]  dump_stack_lvl+0x99/0x250
[  234.129598][   T12]  ? __asan_memcpy+0x40/0x70
[  234.131037][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.132660][   T12]  ? __pfx__printk+0x10/0x10
[  234.134101][   T12]  vpanic+0x281/0x750
[  234.135357][   T12]  ? __pfx__printk+0x10/0x10
[  234.136807][   T12]  ? __pfx_vpanic+0x10/0x10
[  234.138210][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  234.139851][   T12]  panic+0xb9/0xc0
[  234.141044][   T12]  ? __pfx_panic+0x10/0x10
[  234.142432][   T12]  __warn+0x31b/0x4b0
[  234.143674][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  234.145185][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  234.146740][   T12]  report_bug+0x2be/0x4f0
[  234.148108][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  234.149660][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  234.151190][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  234.152693][   T12]  handle_bug+0x84/0x160
[  234.153990][   T12]  exc_invalid_op+0x1a/0x50
[  234.155385][   T12]  asm_exc_invalid_op+0x1a/0x20
[  234.156876][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  234.158974][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  234.164895][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  234.166782][   T12] RAX: ffffffff8a2135bf RBX: ffff888111104880 RCX: ffff88801c2e5640
[  234.169305][   T12] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801c2e5640
[  234.171733][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  234.174221][   T12] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  234.176616][   T12] R13: 1ffff9200001ef40 R14: ffff888111105d00 R15: dffffc0000000000
[  234.178939][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  234.180463][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  234.181973][   T12]  xfrm_net_exit+0x2d/0x70
[  234.183481][   T12]  ops_undo_list+0x49a/0x990
[  234.185083][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  234.186670][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  234.188534][   T12]  cleanup_net+0x4c5/0x800
[  234.190099][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  234.191896][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.193610][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  234.195367][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  234.197112][   T12]  process_scheduled_works+0xae1/0x17b0
[  234.198831][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.200693][   T12]  worker_thread+0x8a0/0xda0
[  234.202551][   T12]  kthread+0x711/0x8a0
[  234.203984][   T12]  ? __pfx_worker_thread+0x10/0x10
[  234.205502][   T12]  ? __pfx_kthread+0x10/0x10
[  234.207061][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.208625][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.210584][   T12]  ? __pfx_kthread+0x10/0x10
[  234.212297][   T12]  ret_from_fork+0x3fc/0x770
[  234.213791][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  234.215343][   T12]  ? __switch_to_asm+0x39/0x70
[  234.216763][   T12]  ? __switch_to_asm+0x33/0x70
[  234.218239][   T12]  ? __pfx_kthread+0x10/0x10
[  234.219685][   T12]  ret_from_fork_asm+0x1a/0x30
[  234.221186][   T12]  </TASK>
[  234.222781][   T12] Kernel Offset: disabled
[  234.224122][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:38:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff88801ffd0237 R9 =1ffff11003ffa046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18e4 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fefa54593b0 CR3=0000000106942000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa212612e53
XMM06=0000000000000000 00007fa212612e4d XMM07=0000000000000000 00007fa212612e61
XMM08=0000000000000000 00007fa212612ee7 XMM09=0000000000000000 00007fa212612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000010000 RBX=dffffc0000000000 RCX=0000000000010000 RDX=0000000000000000
RSI=0000000000000004 RDI=00000000ffffffff RBP=00000000ffffe593 RSP=ffffc900001e0c48
R8 =ffff888136639f83 R9 =1ffff11026cc73f0 R10=dffffc0000000000 R11=ffffed1026cc73f1
R12=ffff888022469cc0 R13=0000000000000000 R14=ffff888136639f80 R15=ffff88802246a218
RIP=ffffffff81edf434 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fefa53ae380 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e222bdba18 CR3=0000000105bfe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688372 ffffffff8168832d
XMM02=ffffffff816883ed ffffffff81688372 XMM03=ffffffff8168832d ffffffff8167986f
XMM04=00007fcc70eed100 00007fcc70387460 XMM05=00007fcc70387478 00007fcc703874c0
XMM06=00007fcc703874b8 00007fcc703874b0 XMM07=00007fcc703874a8 00007fcc703874a0
XMM08=77355e70408d3b2d 6cec9e05b1e363a4 XMM09=0000000000000000 00007fcc70212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
