last executing test programs:

9m47.584854774s ago: executing program 32 (id=81):
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0x8d, 0xc5, 0xd9, 0x8, 0x3f0, 0x1efa, 0xd9f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x7f, "", [{{0x9, 0x4, 0xd8, 0x7, 0x2, 0xff, 0x47, 0xd0, 0x7, [], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x5, 0x6, 0x2e}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x2, 0x7f, 0x5}}]}}]}}]}}, 0x0)

8m36.820895217s ago: executing program 33 (id=802):
r0 = socket(0x2a, 0x803, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]})
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
mount_setattr(r2, &(0x7f0000000180)='./file0\x00', 0x9000, &(0x7f00000001c0)={0xe, 0x100000, 0x40000, {r2}}, 0x20)
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x2004)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740))

6m40.142745464s ago: executing program 34 (id=2459):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x72, 0x50, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3bca, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x81, 0xbe, {0x8, 0x25, 0x1, 0x81, 0x36, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xa, 0x80, {0x8, 0x25, 0x1, 0xe2602781b7b86948, 0x0, 0x3, 0x7}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xd}]}})

4m15.94061336s ago: executing program 2 (id=4424):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000b00)}], 0x3}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

4m15.914327631s ago: executing program 2 (id=4425):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x434f3680a12cb3e3}, 0x4008800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m15.832463589s ago: executing program 2 (id=4427):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0x1, 0x12)

4m15.746091723s ago: executing program 2 (id=4429):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060500000000000000000007000000140007800800114000000000080012400000bfff0500010006000000050005000221000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084)

4m15.60490761s ago: executing program 2 (id=4430):
mkdir(&(0x7f0000000080)='./file1\x00', 0x14)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa1000c, &(0x7f00000000c0)={[{@grpquota}, {@gid}, {@nodiscard}, {@errors_continue}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@usrquota}, {@errors_remount}, {@gid}]}, 0x1, 0x62b5, &(0x7f00000069c0)="$eJzs3UuPHFfZB/Cn+jYXv3GsLKK8FkKTxFxCiK/BGAIkWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo/Hma4en99Pmql6+lRNn/K/qy+uqj4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Djc1VEXPlVuuFExP9FP6IXsdLUaxGxsnYiLz+IiBdiuzmej4jhUkSz/vavZyNej4iPj0fcf3Bnvbn5/D778f0//+MPPzn2o7//aXjmv3+51X9j2nK3b//2P3+9+2TbDAAAAKWp67qu0sf8k+nzfa/rTgEAc5Ff/+sk365euHpzwfqjVqvV6iNYt9WT3W0XEbHZXqd5z+BwPAAcMZvxSdddoEPyL9ogIo513QlgoVVdd4BDcf/BnfUq5Vu1Xw/WdtrzuSB78t+sdq/vmDadZfwck3k9vraiH89N6c/KnPqwSHL+vfH8r+y0j9Jyh53/vEzLf7Rz6VNxcv798fzHpPyXt38f6fx7E/MvVc5/sL/8d2z25Q8AAAAAAAss////iY6P/y4dpPMHOIjwqOO/awfpAwAAAAAAAAAsgCcd/2+X8f8AAABgYTWf1Ru/O/7wtmnfxdbcfrmKeGZseaAw6WKZ1a77AQAAAAAAAAAAAAAlGeycw3u5ihhGxDOrq3VdNz9t4/XjetL1j7rStx9K1vWTPAAA7Pj4+Ni1/FXEckRcTt/1N1xdXa3r5ZXVerVeWcrvZ0dLy/VK63Ntnja3LY328YZ4MKqbP7bcWq9t1uflWe3jf6+5r1Hd30fH5qPDwAEgInZeje57RXrK1PWz0fW7HI4G+//Tx/7PfnT9OAUAAAAOX13XdZW+zvtkOubf67pTAMBc5Nf/8eMCarVarVarn766rZ7sbruIiM32Os17BsPxA8ARsxmfdN0FOiT/og0i4oWuOwEstKrrDnAo7j+4s16lfKv260Ea3z2fC7In/81qe728/qTpLOPnmMzr8bUV/XhuSn+en1MfFknOvzee/5Wd9lFa7qD5T8u1q3OMpuXfbOeJDvrTtZx/fzz/MYe9/8/LVvQm5l+qnP/gsfLvyx8AAAAAABZY/v//Ewt1/Hd00M2Z6VHHf9cO7V4BAAAAAAAA4HDdf3BnPV/3mo//f2HCcq7/fDrl/Cv5Fynn3xvL/6tjy/Vb8/fefpj/vx/cWf/jrX/9f57uN/+lPFOlR1aVHhFVuqdqkKZPsnWftTXsj5p7Gla9fnMPa7t//3psxNk9y/bSv0c9fDeubbef29Pe9HS43V73d9rP72kf7Lbn9S/saR+mM53qldx+Otbj53E93tlub9qWZmz/8oz2ekZ7zr9v/y9Szn/Q+mnyX03t1di0ce+j3mf2+/Z00v28de2Lvzl7+Jsz01b0d7etrdm+lzroz/a/ybFR/PLmxo3Tt6/eunXjXKTJnlvPR5p8znL+w/Sz+/z/8k57ft5v76/3Pho9dv6LYisGU/N/uTXfbO8rc+5bF3L+o/ST838ntU/e/49y/tP3/1c76A8AAAAAAAAAAAAAAAA8Sl3X25eIvhURF9P1P11dmwkAzFd+/a+TfPu86v6c70+tPuJ1tWD9mWv9ab1Y/VGrj2LdVk/2ZruIiL+112neM/x60h8DABbZpxHxz647QWfkX7D8fX/N9NSeb/kFnnY3P/jwp1evX9+4cbPrngAAAAAAAAAAB5XH/1xrjf98qq7ru2PL7Rn/9e1Ye9LxPwd5ZneA0SkDVX/OpyRt9Ub9Xmu48RejPT53e4Ti4e7co8b/Hsy4v+GM9tGM9qUZ7csz2ide6NGS83+xNd75qYg4OTb8egnjv46PeV+CnP9Lrcdzk/9XxpZr51///ijn39uT/5lb7//izM0PPnzt2vtX39t4b+NnF86dO3vh4sVLly6deffa9Y2zO7877PHhyvnnsa9z/pQh558zl39Zcv5fSrX8y5Lz/3Kq5V+WnH9+vyf/suT882cf+Zcl5/9KquVflpz/11It/7Lk/F9NtfzLkvP/eqrlX5ac/2upln9Zcv6nUy3/suT8z6R6n/mvHHa/mI+cfz7CZf8vS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzfz3V8i9Lzv8bqZZ/WXL+F1Mt/7Lk/L+ZavmXJed/KdXyL0vO/1upln9Zcv7fTrX8y5LzfyPV8i9Lzv87qZZ/WXL+3021/MuS8/9equVflpz/m6mWf1kefv//os7kS+wXpT9mzJQw0/UzEwAAAAAAAAAAAAAwbh6nE3e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb27jZHjru8APvfoswOJgZA6qSEXx4SQOLmznfiBNsWEx4anEgiFPmC7vrM5cGzHZ5dAI9lRoETCqAjRNrxoCwi1kaoKq+IFrQDlBWpVqRK0L+gbRIWK1KgKKCBVaivIVTvz//9vd29u9863d96d+Xwk++fbnZ35z+x/5/Z35+8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS75Q2znxrKsqzxJ/9ra5a9qPHvzZNb89tee7VHCAAAAKzVL/K/n78u3XBoBQ9qWuYfX/mdry0sLCxk7x/547HPLyykOyazbGxTluX3RZd/+IGh5mWCJ7KJoeGmr4e7bH6ky/2jXe4f63L/eJf7N3W5f6LL/UsOwBKbi5/H5Cvbmf9za3FIs+uzsfy+nSWPemJo0/Bw/FlObih/zMLY8WwuO5nNZtMtyxfLDuXLf+OWxrbemsVtDTdta3tjhvz0sWNxDEPhGO9s2dbiOqMfvz6b/NlPHzv2l+eeu7Gsdj0MLesrxnn7jsY4PxFuKcY6lG1KxySOc7hpnNtLnpORlnEO5Y9r/Lt9nM+vcJwji8PcUO3P+UQ2nP/7u/lxGm3+sV46TtvDbf9za5ZlFxeH3b7Mkm1lw9mWlluGF5+fiWJGNtbRmEovzUZXNU9vWcE8bdSZna3ztP01EZ//W8LjRpcZQ/PT9OPHx5ue958vXMk8jRp7vdxrpX0O9vq10i9zMM6L7+Y7/WTpHNwZ9v+x25afg6Vzp2QOpv1umoM7us3B4fGRfMzpSRjKH7M4B3e3LD+Sb2kor8/e1nkOTp17+MzU/Mc+ftfcw0dPzJ6YPbV39+7pvfv2HThwYOr43MnZ6eLvKzza/W9LNpxeAzvCsYuvgVe3Lds8VRe+NL7k/Hulr8OJDq/DrW3L9vp1ONq+c0Mb84JcOqeL18Z7Gwd94tJwtsxrLH9+7lj76zDtd9PrcLTpdVj6PaXkdTi6gtdhY5kzd6zsPcto05+yMSz/vWBtc3Br0xxsfz/SPgd7/X6kX+bgRJgX379j+e8F28N4n9y12vcjI0vmYNrdcO5p3JLe708cyEvZvLypccc149n5+dmzdz969Ny5s7uzUDbEy5rmSvt83dK0T9mS+Tq86vl6aO6VT95UcvvWcKwm7mr8NbHsc9VY5p67Oz9X+Xe38uPZcuueLJQe2+jjWfbdvHE8x7PsC99+/MFvPvaFNyx7PBv95iem1v5ePPWlTeffsWXOv7Hvf6HYXlrVEyNjo8XrdyQdnbGW83HrUzWan7uG8m0/P7Wy8/FY+LPR5+PrO5yPt7Ut2+vz8Vj7zsXz8VC3n3asTfvzORHmycnpzufjxjLb9qx2To52PB/fGupQOP6vCZ1C6oua5s5y8zZta3R0LOzXaNxC6zzd27L8WOjNGtt6es+VzdPbby3WNZL2btFGzdPJtmV7PU/Tz76Wm6dD3X76dmXan8+JMC+u39t5njaWeeaetZ87N8d/Np07x7vNwbGR8caYx9IkzM/32cLmOAfvzo5lp7OT2Ux+73g+n4bybe26d2VzcDz82ehz5bYOc/D2tmV7PQfT97Hl5t7Q6NKd74H253MizIun7u08BxvLvHF/b9+73h5uScs0vXdt//nacj/zuqntMK3XXBkN4/z2/s4/m20sc/LAavvMzsfpznDLNSXHqf31u9xraibbmOO0LYzzuQPLH6fGeBrLfP7gCufToSzLLjxyf/7z3vD7lb89/72vtfzepex3Ohceuf8nLz7+D6sZPwCD74WibCm+1zX9Zmolv/8HAAAABkLs+4dDTfT/AAAAUBmx74//KzzR/wMAAEBlxL5/NNSkJv3/tjc+N/fChSwl8xeCeH86DA8Uy8WM63T4enJhUeP2+78y+99/f2Fl2x7OsuznD/xB6fLbHojjKkyGcV5+U+vtS3ztrhVt+8hDF9J2m/PrXwzrj/uz0mlQFsGdzrLsG9d9Jt/O5Acu5fWZB47k9cGLTz7RWOb5g8XX8fHPvqxY/s9C+PfQ8aMtj382HIcfhTr9tvLjER/31Uuv2b7/fYvbi48b2nFtvttPfbBYb/ycnM8+USwfj/Ny4//mp5/+amP5R19VPv4Lw+Xjfzqs9yuh/u8riuWbn4PG1/Fxnwzjb2yvMUPj4+7+8rdKx3/5U8XyZ95cLHck1Lj928PXO9/83Fzz8Xp06GjLfmVvKZaL25/+3h/l98f1xfW3j3/i8KWW49E+P57512I9U23Lx9vjdqK/a9t+Yz3N8zNu/+k/PNJynLtt//KDz76isd727d/ZttyZR+7It7+4vtZPbPrzT36mdHtxPIf+5kzL/hx6d3gdh+0/9cEwH8P9/3e5WF/7pysceXfr+Scu/8WtF1r2J3rrz4rtX37dibxumti85ZoXvfjaizc3jl2WfXdTsb5u2z/xF6dbxv+lG4rjEe+PGf327S8nbv/sR3edOj1/fm4mHdXHrss/O+ftxXjieK8L59b2rw+fPveh2bOT05PTWTZZ3Y/Qu2JfDvUnRbnYeemFJWfQOx4Kz+dNf/qNLbf9y6fj7f/23uL2S28rvm+9Oiz32XD71vD8rW77Sz11yw3563vomTDChaWfF7wW23f+14EVLRj2v/19QZzvZ17+ofw4NO7Lv2/E1/Uax/+DmWI9Xw/HdSF8MvOOGxa317x8/GyES+8pXu9rPn7hNBef178Kz/c7flSsP44r7u8PwvuYb21rPd/F+fH1C8Pt688/xeNiOJ9kF4v741LxeF96/obS4cXPIcku3ph//bm0nhtXtZvLmf/Y/NTJuVPnH506Nzt/bmr+Yx8//PDp86fOHc4/y/Pwh7s9fvH8tCU/P83M7rsny89Wp4uyzq72+M88dGxm//RtM7PHj54/fu6hM7NnTxybnz82OzN/29Hjx2c/2u3xczP37d5zcO/+PbtOzM3cd+Dgwb0Hd82dOt0YRjGoLvZNf2TXqbOH84fM33fPwd333nvP9K6HT8/M3rd/enrX+W6Pz7837Wo8+vd3nZ09efTc3MOzu+bnPj573+6D+/bt6fppgA+fOT4/OXX2/Kmp8/OzZ6eKfZk8l9/c+N7X7fFU0/y/F+9n2w0VH8SXvevOfenzWRu+8viyqyoWafsA0efCZ9H800vOHFjJ17HvHws1qUn/DwAAAHUQ+/7xUBP9PwAAAFRG7Ps3hZro/wEAAKAyYt8/EWpSk/6/cvn/bRdWtH35/8HL/2fy//L/bftzxfn/9/Rb/r84X8j/98Za8/fy/4H8v/y//L/8v/w/PdBv+f/Y92/Oslr2/wAAAFAHse/fEmqi/wcAAIDKiH3/NaEm+n8AAACojNj3vyjUpCb9v/y//L/8v/y//H/59leR/9+UrYD8/8aQ/++s5vn/4a4DkP+fyuqV/7/Yy/HXN/9f9FDy/5Tpt/x/7PtfHGpSk/4fAAAAKuU/y2+Off+1oSb6fwAAAKiM2PdfF2qi/wcAAIDKiH3/1lCTmvT/8v/y//L/8v/y/+Xbd/3/wST/31nN8//dyf+7/r/8v+v/01P9lv+Pff9LQk1q0v8DAABAHcS+/6WhJvp/AAAA6D+jV/aw2Pe/LNRkSf9/hRsAAAAArrrY91+ftQXBa/L7f/l/+X/5f/l/+f/y7a88/z+Syf/3D/n/zuT/u5D/l/+X/5f/p6f6Lf+f9/3ZRPbyUJOa9P8AAABQB7HvvyHURP8PAAAAlRH7/l8KNdH/AwAAQGXEvn9bqElN+n/5/0rm/xtPk/y//P+y269A/j8/WfdP/n9dr/8/GwKb8v8rJP/fmfx/F/L/8v/y//L/9FS/5f9j339jqElN+n8AAACog9j33xRqov8HAACAyoh9/y+Hmuj/AQAAoDJi37891KQm/b/8f5/n/2Ny1PX/5f8X8/+PyP8XapL/d/3/VZL/70z+vwv5f/l/+X/5f3qq3/L/se9/RahJTfp/AAAAqIPY978y1ET/DwAAAJUR+/6bQ030/wAAAFAZse+fDDWpSf8v/9/n+f8ru/6//H+18/+ruv7/zfL/8v81I//fmfx/F/L/8v/y//L/9FS/5f9j339LqElN+n8AAACog9j37wg10f8DAABAZcS+/9ZQE/0/AAAAVEbs+3eGmtSk/5f/l/+X/692/r9s+/L/8v9VJv/fmfx/F/L/8v/y//L/9FS/5f9j3/+qUJOa9P8AAABQB7Hvvy3URP8PAAAAlRH7/leHmuj/AQAAoDJi3397qElN+n/5f/l/+X/5/5rn/y/I/1eL/H9n8v9dyP/3Ij//Dvl/+X/5f6J+y//Hvv81oSY16f8BAACgDmLff0eoif4fAAAAKiP2/XeGmuj/AQAAoDJi378r1KQm/b/8v/y//L/8f83z/67/XzF9kP+fWMv25f/l/yuQ/3f9f/l/+X+Sq5X/z7Ly/H/s++8KNalJ/w8AAAB1EPv+u0NN9P8AAAAwgDaX3hr7/qlQE/0/AAAAVEbs+6dDTWrS/8v/y//L/9c6/39x1fn/mxfXK/9fkP/vL+uW/x/OXP9f/l/+v4tBy/+3/3awP/L/Y/L/VMoV5f+/Wrqqnlz/P/b9u0NNatL/AwAAQB3Evn9PqIn+HwAAACoj9v17Q030/wAAAFAZse+/J9SkJv2//P/G5f9HM/l/+f++y/+7/r/8f+X0wfX/17T9wcv/x12U/5f/H7z8f6/H7/r/8v8sdUX5/3I9yf/Hvv/eUJOa9P8AAABQB7Hv3xdqov8HAACAyoh9//5QE/0/AAAAVEbs+w+EmtSk/5f/d/1/+X/5f/n/8u3L/w8m+f/OXP+/C/l/+X/5f/l/eqrf8v+x7z8YalKT/h8AAADqIPb9rw010f8DAABAZcS+/1dCTfT/AAAAUBmx7//VUJOa9P/y//L/8v/y//L/5duX/x9M8v+dyf93If8v/y//L/9PT/Vb/j/2/feFmtSk/wcAAIA6iH3/r4Wa6P8BAACgMmLf/7pQE/0/AAAAVEbs+w+FmtSk/5f/X2H+f3Pn9cn/t45f/r98fsj/y//L/68/+f/O5P+7kP+X/69g/v9x+X+uon7L/8e+//WhJjXp/wEAAKAOYt9/f6iJ/h8AAAAqI/b9bwg10f8DAABAZcS+/42hJjXp/+X/Xf9f/l/+X/6/fPvy/4NJ/r8z+f8u5P/l/yuY/9+A6/+Phyr/zxIrzf/H91Xrnf+Pff+bQk1q0v8DAABAHcS+/82hJvp/AAAAqIzY978l1ET/DwAAAJUR+/63hprUpP+X/5f/l/+X/5f/L9++/P9gkv/vTP6/C/l/+f8Byf9/r+TxVzH/n3P9f8r02/X/Y9//66EmNen/AQAAoA5i3/9AqIn+HwAAACoj9v1vCzXR/wMAAEBlxL7/7aEmNen/e5f/H5f/byP/L//fPj/k/+X/5f/Xn/x/ZwOW///FteF2+f+C/P86jX/yc8WBH6D8f5nS/P8Pl8v/L2xqf7z8P+uh3/L/se9/R6hJTfp/AAAAqIPY978z1ET/DwAAAJUR+/53hZro/wEAAGDwLRTxgdj3/0aoSU36f9f/b4xjMb28zvn/v5b/l/+X/5f/l/9fX/L/nQ1Y/t/1/9vI//f3+Psy/+/6/1xl/Zb/j33/u0NNatL/AwAAQB3Evv/BUBP9PwAAAFRG7PvfE2qi/wcAAIDKiH3/e0NNatL/y/+7/r/8/4Dn/yezLJP/l/8nkf/vTP6/C/l/+f9+y///h/w/g63f8v+x738o1KQm/T8AAADUQez73xdqov8HAACAyoh9/2+Gmuj/AQAAoDJi3//+UJOa9P/y/4OS/5+U/5f/d/3/tv2R/5f/LyP/39nG5/9X94ZK/l/+f5DH7/r/8v8s1W/5/9j3fyDUZOXfriZWvCQAAABwVcS+/7dCTWry+38AAACog9j3/3aoif4fAAAAKiP2/b8TalKT/l/+f1Dy/67/n8n/y/+37Y/8v/x/mY3L/8czj/y/6//L/0fy//L/8v+067f8f+z7fzfUpCb9PwAAANRB7Ps/GGqi/wcAAICBUPZ/stvFvv9wqEn3/n/V/6cPAAAAuDpi338k1KQmv/+X/5f/l//v0/z/n+z45+9/551Hdsv/y//L/6/Khl7/v/Hid/1/+X/5/0T+X/6/NP+/Sf6/ztYh/z/WfONq8/+x7z8aalKT/h8AAADqIPb9vxdqov8HAACAyoh9/7FQE/0/AAAAVEbs+2dCTWrS/8v/y//L//dp/n+V1/8fCtvph/x/PB7y/616lv+PJ135/1Ibmv9/32JOXP5/tfn/8dJb5f9XnP/P37jJ//fX+OX/Xf+fpXqV/x9ZzP+3WG3+P/b9s6EmNen/AQAAoA5C3z98vKiLd+j/AQAAoDJi338i1ET/DwAAAJUR+/4PhZrUpP+X/5f/l/+vRv7f9f8Xl698/t/1/zuS/++sf/L/5eT/Xf9/kMcv/y//z1LrcP3/FqvN/8e+fy7UpCb9PwAAANRB7Ps/HGqi/wcAAIDKiH3/R0JN9P8AAABQGbHvPxlq8v/s3dmT5fVZx/HT2FPMFBeWVVZ54YXcW/4FXMC1/gFeeOONVZRV4gLuC4P7ivuGC7ivuIAibriCCmpCQvaQlSRkTwhJCElqUsw8zzOnu0//Tvf06enf+T6v10UeGTM5nXGcySfDu75N9r/+X/+v/9f/6/9Xf/7l/n/36r+u/n876P+n6f/X0P/r//X/+n82am79f+7+b4pbmux/AAAA6CB3/x1xi/0PAAAAw8jd/81xi/0PAAAAw8jd/y1xS5P9r//X/w/b/9+q/z/s8/X/3v8fmf5/mv5/jS3q/7/0vP5/bl+//l//z0Fz6/9z939r3NJk/wMAAEAHufu/LW6x/wEAAGAYufvvjFvsfwAAABhG7v674pYm+39f/7+z6Nn/Z8ar/x+p//f+/6Gfr//X/4/s+vb/97zyK5/+X//v/f+g/9f/6//Zb279f+7+b49bmux/AAAA6CB3/3fELfY/AAAADCN3/3fGLfY/AAAADCN3/3fFLU32/8ne/98dpf8vG+j/d7JF1//r//f//ND/6//1/6fP+//TOvX/dz5z0x0vPPLljx7n8/X/+n/9v/6fzZpb/5+7/7vjlib7HwAAADrI3f89cYv9DwAAAMPI3f+9cYv9DwAAAEN4/qsWtfu/L25psv9P1v8P8/5/8f6//v/yN+j/9f/6/62l/5/Wqf+/ls/X/+v/r+Hrr98G9f/6fw6aW/+fu//745Ym+x8AAAA6yN3/A3GL/Q8AAADDyN1/d9xi/wMAAMAwcvdfjFua7H/9/+n3/5/X/299/39uof+/Qv+v/58//f80/f8a+n/9v/f/9f9s1Nz6/9z998QtTfY/AAAAdJC7/wfjFvsfAAAAhpG7/4fiFvsfAAAAhpG7/4fjlib7X//v/X/9v/f/9f+rP1//v530/9P0/2vo/0/az5/T/+v/9f8sO2b///LEL9sb6f9z9/9I3NJk/wMAAEAHuft/NG6x/wEAAGAYuft/LG6x/wEAAGAYuft/PG5psv/1//p//b/+X/+/+vP1/9tJ/z9tNv3/zu7Kb9b/b33/7/1//b/+nz3m9v5/7v6fiFua7H8AAADoIHf/T8Yt9j8AAAAMI3f/T8Ut9j8AAAAMI3f/T8ctTfa//l//r//X/+v/V3/+VP//6NLXp/+fl432/zv6f+//6//1//p//T8nMbf+P3f/z8QtTfY/AAAAdJC7/964xf4HAACAYeTu/9m4ZWn/7/97UQEAAIDtkrv/5+KWJn/+v7r/v/q/1/8fzXXq/3f1//r/K//3vvKvqP+f7P9v8/5/T97/n7a+/89fUfX/+n/9/0b6/8XOKP3/hXXfX//PKnPr/3P3/3zc0mT/AwAAQAe5+38hbrH/AQAAYBi5+38xbrH/AQAAYBi5+38pbmmy/73/v1X9v/f/e/X/D5zz/v9lc3z/f3Hd+/9d/f8R6f+nef9/Df2//t/7/97/Z6Pm1v/n7v/luKXJ/gcAAIAOcvf/Stxi/wMAAMB2WP57Bw55xD93/6/GLfY/AAAADCN3/6/FLU32/+D9/62H/dP0//r/5R+vmfb/h77/r/+/olf/7/3/o9L/T9P/r6H/P41+fnew/v/+w77/HPr/u/X/zMye/v+xq99+Vv1/7v5fj1ua7H8AAADoIHf/fXGL/Q8AAADDyN3/G3GL/Q8AAADDyN3/m3FLk/1/6v3/hcM/2/v/+n/9v/5f/6//3zT9/zT9/xr7+/9X/qOh/t/7/97/1/9zzfb0/0vOqv/P3f9bcUuT/Q8AAAAd5O7/7bjF/gcAAIBh5O6/P26x/wEAAGAYufsfiFua7P/B3/8/lP5f/7/846X/1/+v+nz9/3bS/0/T/6/h/X/9/1n0//ETQP/PiObW/+fu/524pcn+BwAAgA5y9/9u3GL/AwAAwDBy9/9e3GL/AwAAwDBy9/9+3NJk/+v/T7f/z2/X/+v/F/p//b/+/7po2//vrPqd6KBD+v+nbr/4NXu/Rf+v/x+y/3/uVL9+7//r/zloFv3/pav/6TJ3/x/ELU32PwAAAHSQu/8P4xb7HwAAAIaRu/+P4hb7HwAAAIaRu/+P45Ym+3+p/8/kQv/v/X/9v/5f/6//31pt+/8j8v7/tJfi36/+f9T+/3S/fv2//p+DZtH/L/117v4/iVua7H8AAADoIHf/n8Yt9j8AAAAMI3f/n8Ut9j8AAAAMI3f/n8ctTfa/9/979P83LvT/+n/9v/6/B/3/NP3/Gt7/1//r//X/bNTc+v/c/Q/GLU32PwAAAHSQu/8v4hb7HwAAAIaRu/8v4xb7HwAAAIaRu/+v4pYm+1//f0j/vxir//f+v/5/of/X/zeh/5921v3/qt8vl12X/v+hiS9gVf9/6Ub9/5b3/+eP+P31//p/Nm9u/X/u/r+OW5rsfwAAAOggd/9DcYv9DwAAAMPI3f9w3GL/AwAAwDBy9/9N3NJk/+v/e7z/r//X/y/0//r/JvT/01b3/zcc/Cbv/3v/f6D+3/v/+n/Oztz6/9z9fxu3NNn/AAAA0EHu/kfiFvsfAAAAhpG7/+/iFvsfAAAAhpG7/9G4pcn+1//r//X/+n/9/+rP1/9vp9Pr/xcD9/8r6P/1//p//b/+nw2YW/+fu//v45Ym+x8AAAA6yN3/D3GL/Q8AAADDyN3/j3GL/Q8AAADDyN3/T3FLk/1/Vv3/bfp//b/+X/+v/68fVf3/5nj/f5r+fw39v/5f/6//Z6Pm1v/n7v/nuKXJ/gcAAIAOcvc/FrfY/wAAADCM3P3/ErfY/wAAADCM3P3/Grc02f/e/9f/7+3/F4uZ9//5/6T6f/3/CP3/+YX+f+P0/9P0/2vo/8fs/29YDNT/Xzj0++v/maO59f+5+/8tbmmy/wEAAKCD3P3/HrfY/wAAADCM3P3/EbfY/wAAADCM3P3/Gbc02f/6f/2/9//H6f8ff3H1z0f9/2z7//pR1f9vjv5/mv5/Df3/mP2/9//1/5yZufX/ufsfj1ua7H8AAADoIHf/E/v/DNX+BwAAgGE8cfkfzy/+K26x/wEAAGAYufv/O25psv/1//p//f84/b/3/6/Q//d2Rv3/zqY+X/+v/9f/b+/Xr//X/3PQ3Pr/3P3/E7c02f8AAADQQe7+J+MW+x8AAACGkbv/qbjF/gcAAIBh5O7/37ilyf7X/+v/9f/b2f+f1/8P3//nV6b/P565vP9/yy1f/bT+X/+v/9f/6//1/93Nrf/P3f9/cUuT/Q8AAAAd5O7//7jF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv8P9v/nFlcK1StW9f/RqOn/l+j/9379+v/VPz+8/6//9/7/6ZtL/+/9/2v7+ufW/9+l/9f/n1b/f/PB76//Z0Rz6/9z9z8dtzTZ/wAAANBB7v7XxC32PwAAAMzYqr8T+3C5+18bt9j/AAAAMIzc/c/ELU32v/f/9f/6f/2//n/156/r/5P+f170/9P0/2t4/1//3+j9//j9r36dqv7/i/T/bM7c+v/c/a+LW5rsfwAAAOggd//r4xb7HwAAAIaRu/8NcYv9DwAAAMPI3f/GuKXJ/tf/b7T/313+Nv2//n/fzw/9/2D9v/f/50n/P03/v4b+X//fqP/fz/v/nIa59f+5+98UtzTZ/wAAANBB7v43xy1H2v8XTumrAgAAADYpd/9b4hZ//g8AAADDyN3/1rilyf6fa/9/93b2/3vo/+fS/3+9/n/f5+v/9f8j0//n7+ir6f/X0P8ft59/afkv9P/6f/0/+82t/8/d/2zc0mT/AwAAQAe5+98Wt9j/AAAAMIzc/W+PW+x/AAAAGEbu/nfELU32/1z7/y19/3+POfb/O4uO/b/3/y//9c6O/l//34L+f5r+f43N9v/3NOj/99D/6//1/+w3t/4/d/8745Ym+x8AAAC21dd+5Tc+e9R/bu7+d8Ut9j8AAAAMI3f/u+MW+x8AAACGkbv/ubilyf7X//fq/3u+/6//9/6//r8T/f80/f8a3v/X/+v/9f9s1Nz6/9z974lblobf7rH/XQIAAABzkrv/vXFLkz//BwAAgA5y978vbjmw/y8d8e9qBwAAAOYmd//zcUuTP/8/cf+/2NH/n2b/v9D/6//1//p//f9x6P+nnbD/v7Sj/9f/T9D/6//1/yy7MMP+P3f/++OWJvsfAAAABrXnv1HI3f+BuMX+BwAAgGHk7v9g3GL/AwAAwDBy938obmmy/73/P/P+/5re/79Q/5P+v3n/f+/5lZ+v/9f/j0z/f6gvidvp/f9LX6z/P5az7ue3/evX/+v/OWhu/X/u/g/HLU32PwAAAHSQu/8jcYv9DwAAAMPI3f/RuMX+BwAAgGHk7v9Y3NJk/+v/R+z/vf+v/5/+/HH6/y+76eKTX/cNDz+o/+eq69n/58+FLen/Lzvh+//b1v8f5/Pvu/yP+n/9v/7/2P3/zXH1/6wyt/4/d//H45Ym+x8AAAA6yN3/Qtxi/wMAAMAwcvd/Im6x/wEAAGAYuftfjFua7P+t6v+/Qv8/cv+fP9Zn0P9f3L7+P5vi7v2/9//1/wd5/3+a/n8N/b/+X//v/X82am79f+7+T8YtTfY/AAAAdJC7/1Nxi/0PAAAAw8jd/+m4xf4HAACAYeTufyluabL/t6r/9/7/0P1/upb+Pz/f+//6/4X+vz39/5Ldg9+k/19D/6//1//r/9moufX/ufs/E7c02f8AAADQQe7+l+MW+x8AAACGkbv/s3GL/Q8AAADDyN3/ubilyf7X/+v/R+j/T/j+/9n0/6/8cqP/1//r/zdO/z9N/7+G/l//377/v13/z0bNrf/P3f+FAAAA//9/pV3V")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

4m15.40651678s ago: executing program 2 (id=4434):
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc29a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe2, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x62f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "88d8d0d9"}}]})

4m6.948567336s ago: executing program 5 (id=4534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

4m6.909883512s ago: executing program 5 (id=4535):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r0 = io_uring_setup(0x89a, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x10d})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m6.835720781s ago: executing program 5 (id=4536):
timerfd_create(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000)

4m6.747226609s ago: executing program 5 (id=4537):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000280), 0x0)

4m6.64075118s ago: executing program 5 (id=4538):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
write$cgroup_devices(r3, 0x0, 0x6)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000480))
rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0)

4m6.420718142s ago: executing program 5 (id=4541):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5)
setxattr$security_capability(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000140), &(0x7f0000000280)=@v3={0x3000000, [{0xffff7fff, 0xe}, {0x0, 0x81}]}, 0x18, 0x1)

4m6.133903895s ago: executing program 35 (id=4541):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5)
setxattr$security_capability(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000140), &(0x7f0000000280)=@v3={0x3000000, [{0xffff7fff, 0xe}, {0x0, 0x81}]}, 0x18, 0x1)

4m1.106508626s ago: executing program 36 (id=4434):
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc29a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe2, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x62f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "88d8d0d9"}}]})

3m31.383135936s ago: executing program 6 (id=4908):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0)
close(r1)

3m30.498752095s ago: executing program 6 (id=4923):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x7, 0x8, 0x3}, 0x10)
sendmmsg(r0, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c00)="9e3a18381927e24062c83029ef13a9de36aa68265996f884ef191048e6ee845be5a2eba657fa489ab6e211718d8e591da7c3cb4f7f89e40741cacc8145cc29c4d1fa3d6e15873a0f3c5df4c8c16a84ff9ca998bada9153cbdf62192ad3bef58264f45c7281f0f23baf606f239c3a0459af043f63d793cf3ecc8aa65bf15fe41f7d879505af50f206b8452b5cc9942939d1d52b41ae01a5b32f2d226df644e4d7b93145411f281c443434b3a82c4909bd421ce7b406452dcaca19b9ec7e32845e51537b0540151a4a20f4ca2313412e37a47ec9fca80ea384c59808788899523acb4cfbbe29e51916c9f5e29e16ee10749ada1ee13af0c75633856e540bd47b0f87e8b207076044628d0e9a6d0db337c008642e7cb8d39c7a64f3767292a3c37576d615b9d90930a165edb8405071ae87b11398724c345c032ac68a306996af584496b1233d55c8e7cf8d69faff00f9d79fa849ca368df79b3770b22f8ab2e3f53c91f50dc5969cf2bba9e5b3f62b59d3e4ff9e5b249c72d168a5ad2807849770c2978a1ba40d9d7e0a1c38bfd604ba1083a3ce9b49288b03a9f5f83eb7e87231e0e5c93c7b5a4903a54cfca4d7a643ec4d0dcd02a11850642e57fac283af7cbc964b6e7bf21f532b2265202dd2cad336eea300c21b21f1e3f007cbf57d932f849e9620a7f1da8ae8000f7a86f31fae1f0bc0753e226e670f43023f64d7253b945ffb53d4d94c9f4e4a05b6f17626caf47eb6dd2bb7b0dd57adc5bbbd67f63c742c646ea98550f9531c83f2eadf42f751165b40fe146a7ebff9601583d09636bf650cbe6165d360f12d48487b94b980aef28f3ee501d594f1503e0f1274bbfd9711b7e163f118ce5a636799a24334911a9fa4b84ea4be1a8b0ccbf1cca27b873e75cfa5f5556d3729b379163bb760a13e348ee609a48915de49d79d7d8cffc88b0ac012e3228337c8619ebeb9a93be80eda789fa4cecf262966be77d063cd29a7e0aa804ef2945400c49e7b96fc87092cc0d5ae450ec25d20b6c9c0128cb7e951bd83a8af130e27aa281c639489a7cd005acad8cea8978eb916227c70cbd8f66850510195673fb39b43f6ab6cade1e37db047af5a190617696803f13423fb851c47fabb1d40d2fbfe4c77e9ceff952ee0f2f66117b828d4beec24fb7b84317dc29d121a69e32d8047b5dbfe2b71e10bd19a84edf9512d2994769b9c54500fc80897a5964546453821ffeaab1dc5ab7c06fb40349a368e92334ddad92c4606a908f0b45d9157d4608079c40c413e510338510d41f22ab27162f03ea980d167b9e5d5e5b1245f6c71e56bb2d29d7e85d76834538b48711a1e6f3813ce496c8c3024a0d085653a6ac2e2d24b726efbbca10da67f05a5eb6565bca572c6821b94f8cbc34af05253ab40683cef88961646c76cf48b1ef1d79e11d1a0215a1a7dfbd9ade6", 0x401}], 0x1}}], 0x1, 0x0)

3m29.697886564s ago: executing program 6 (id=4934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x0)

3m29.609623486s ago: executing program 6 (id=4936):
r0 = socket(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)

3m29.609260843s ago: executing program 6 (id=4938):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

3m28.755386559s ago: executing program 6 (id=4943):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x3}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)

3m14.432877269s ago: executing program 37 (id=4943):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x3}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)

3m13.735063921s ago: executing program 7 (id=5153):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='quota,iocharset=cp437,noquota,errors=continue,discard=0x00000\x00\x00000000004,errors=continue,quota,discard,grpquota,\x00'], 0x1, 0x60b9, &(0x7f0000013cc0)="$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")
fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x1000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0x1}]}}}], 0x18}}], 0x1, 0x44008004)
write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef)

3m12.826578681s ago: executing program 7 (id=5160):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7ffffdbd}]})
r0 = gettid()
r1 = getpgid(r0)
rt_tgsigqueueinfo(r1, r0, 0x31, &(0x7f0000000200)={0x2c, 0x1ff, 0x5})

3m12.553930045s ago: executing program 7 (id=5161):
r0 = socket$netlink(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r0, 0x5, &(0x7f00000005c0)={0x2, 0x1, 0x1, 0x1})

3m12.483623576s ago: executing program 7 (id=5162):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x2, @win={{0x91d, 0x8, 0x1, 0x7ff}, 0x1, 0x7fffffff, 0x0, 0x5, 0x0, 0x8f}})

3m12.483326393s ago: executing program 7 (id=5163):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3)
symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00')

3m12.021014242s ago: executing program 7 (id=5164):
r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x21, 0x3, 0x0, 0x4bf, 0x404, 0x0})

2m57.732235986s ago: executing program 38 (id=5164):
r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x21, 0x3, 0x0, 0x4bf, 0x404, 0x0})

2m29.672101133s ago: executing program 8 (id=5638):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004801400030076657468315f6d61637674617000000008"], 0x130}}, 0x0)

2m29.604409184s ago: executing program 8 (id=5643):
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x23, 0x0, 0x1)

2m29.442463283s ago: executing program 8 (id=5646):
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f)

2m29.442244826s ago: executing program 8 (id=5647):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

2m27.969688535s ago: executing program 8 (id=5670):
unshare(0x26020480)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

2m27.886791348s ago: executing program 8 (id=5672):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
sync()

2m25.917700244s ago: executing program 9 (id=5699):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

2m24.971159704s ago: executing program 9 (id=5705):
io_uring_setup(0x6d3e, &(0x7f0000000280)={0x0, 0x58b2, 0x0, 0x1, 0x180})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800044000000000080007400000000008000640000000010500020000000000080003400000000088000540000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

2m24.968283386s ago: executing program 9 (id=5706):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000001c0)=[{0x1, 0x2, {0x1, 0x0, 0x2}, {0x2, 0x0, 0x1}, 0xfd, 0xff}], 0x20)

2m24.899737577s ago: executing program 9 (id=5707):
r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000003c0)="0004", 0x2, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000004c0)={0x0, r0, r1}, 0x0, 0x0, 0x0)

2m24.899528765s ago: executing program 9 (id=5708):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r0, r1)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @remote, 0x4}, 0x1c)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="48000000150081fb7042ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c49388a562af5745e17b8c119418f03000000d6e74703c48f93b8ecf6d65b223d", 0x48}], 0x1}, 0x0)

2m24.850034251s ago: executing program 9 (id=5709):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

2m13.41320292s ago: executing program 39 (id=5672):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
sync()

2m10.44729401s ago: executing program 40 (id=5709):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

1m42.728488112s ago: executing program 3 (id=6123):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3a, 0x1c, 0x7ffd, 0x0, 0x0, 0x2, 0x0, @broadcast, @loopback}, {0x16, 0x7c, 0x0, @multicast2}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

1m42.681700563s ago: executing program 3 (id=6124):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x3301, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})

1m42.594522068s ago: executing program 3 (id=6125):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

1m42.510061248s ago: executing program 3 (id=6126):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0)

1m42.413410489s ago: executing program 3 (id=6127):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc5e48aa31086b87003000000000000000160af365040014000d0002008be3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24044054)

1m42.137000971s ago: executing program 3 (id=6128):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp0\x00', {}, {0xff}}, 0x0, 0x248, 0x270, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xff000000, 0xff, 0xffffffff], @ipv4=@broadcast, [0x0, 0xff, 0xff, 0xffffffff], 0x4d5, 0x3501, 0x6, 0x1, 0x12, 0x4}, {@ipv4=@multicast1, [0xffff00, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xc833bdd85bb93771, 0xffffff00, 0xff000000], 0x4d5, 0x3500, 0x11, 0x0, 0x1, 0x30}, {@ipv4=@remote, [0x0, 0xff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x7fffffff], 0x4d3, 0x3502, 0x5c, 0x0, 0x19, 0x9}, {@ipv4=@multicast1, [0xffffffff, 0xff, 0xffffff00, 0xff000000], @ipv4=@multicast2, [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 0x4d5, 0x3504, 0x4, 0x0, 0x1, 0x1d}], 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x867, 0xeab}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@limit={{0x48}, {0x0, 0x9, 0x2, 0x8, 0x8, 0x4, 0x6c}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x3c, "604f88f1ee83205458834342fd25bc4d4549b59a405614c54926919c4c22"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8)

1m41.941391337s ago: executing program 41 (id=6128):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp0\x00', {}, {0xff}}, 0x0, 0x248, 0x270, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xff000000, 0xff, 0xffffffff], @ipv4=@broadcast, [0x0, 0xff, 0xff, 0xffffffff], 0x4d5, 0x3501, 0x6, 0x1, 0x12, 0x4}, {@ipv4=@multicast1, [0xffff00, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xc833bdd85bb93771, 0xffffff00, 0xff000000], 0x4d5, 0x3500, 0x11, 0x0, 0x1, 0x30}, {@ipv4=@remote, [0x0, 0xff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x7fffffff], 0x4d3, 0x3502, 0x5c, 0x0, 0x19, 0x9}, {@ipv4=@multicast1, [0xffffffff, 0xff, 0xffffff00, 0xff000000], @ipv4=@multicast2, [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 0x4d5, 0x3504, 0x4, 0x0, 0x1, 0x1d}], 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x867, 0xeab}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@limit={{0x48}, {0x0, 0x9, 0x2, 0x8, 0x8, 0x4, 0x6c}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x3c, "604f88f1ee83205458834342fd25bc4d4549b59a405614c54926919c4c22"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8)

2.439169798s ago: executing program 0 (id=7326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0)

2.302100223s ago: executing program 0 (id=7327):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001a40)={@ifindex, 0xffffffffffffffff, 0x17}, 0x20)

2.248794977s ago: executing program 0 (id=7329):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0)

2.248523637s ago: executing program 1 (id=7330):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/347], 0x1, 0x368, &(0x7f0000000600)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x192)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.162043337s ago: executing program 1 (id=7331):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x3, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xa}, {0x0, 0xfff3}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)

2.161782476s ago: executing program 0 (id=7332):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.047490663s ago: executing program 1 (id=7334):
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
creat(0x0, 0x2b)
acct(&(0x7f0000000100)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_open_dev$MSR(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)

1.894828022s ago: executing program 0 (id=7335):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x1, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14)

1.776751432s ago: executing program 0 (id=7337):
syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c240701050000c80975f9070d24070101000005cf1f0000050924030000000001"], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1.124513662s ago: executing program 1 (id=7341):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
tee(r2, r1, 0x2000200000000, 0x3)

256.757115ms ago: executing program 4 (id=7350):
add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

199.919092ms ago: executing program 4 (id=7351):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x30, 0x40}], 0x1, 0x880)

152.546566ms ago: executing program 1 (id=7352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0)

152.29328ms ago: executing program 4 (id=7353):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
timer_create(0x2, &(0x7f0000000200)={0x0, 0x21, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f00000004c0)={{}, {0x77359400}}, &(0x7f0000000500))

152.053763ms ago: executing program 1 (id=7354):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000010180c200"], 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

76.356273ms ago: executing program 4 (id=7355):
syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
fchdir(r0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

76.197926ms ago: executing program 4 (id=7356):
file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100)

0s ago: executing program 4 (id=7357):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  501.961963][T19982] BTRFS info (device loop9): using blake2b checksum algorithm
[  502.085836][T19982] BTRFS info (device loop9): enabling ssd optimizations
[  502.092473][T19982] BTRFS info (device loop9): turning on async discard
[  502.100699][T19982] BTRFS info (device loop9): enabling free space tree
[  502.103409][T19982] BTRFS info (device loop9): use zlib compression, level 3
[  502.166241][T19466] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  502.562236][T19999] loop8: detected capacity change from 0 to 32768
[  502.790100][T20020] xt_CT: You must specify a L4 protocol and not use inversions on it
[  503.437101][T20032] loop8: detected capacity change from 0 to 512
[  503.441277][T20032] EXT4-fs: Ignoring removed orlov option
[  503.444620][T20032] EXT4-fs: Ignoring removed mblk_io_submit option
[  503.474207][T20032] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.5483: corrupted in-inode xattr: e_value size too large
[  503.488734][T20032] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  503.489252][T20032] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.5483: couldn't read orphan inode 15 (err -117)
[  503.493170][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  503.493190][    C1] EXT4-fs (loop8): initial error at time 1781312430: ext4_iget_extra_inode:5128: inode 15
[  503.493213][    C1] EXT4-fs (loop8): last error at time 1781312430: ext4_iget_extra_inode:5128: inode 15
[  503.509664][T20032] loop8: lost filesystem error report for type 5 error -117
[  503.516188][T20032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  503.571101][T19087] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.650579][T20046] loop8: detected capacity change from 0 to 256
[  503.676966][T20046] FAT-fs (loop8): Directory bread(block 64) failed
[  503.679088][T20046] FAT-fs (loop8): Directory bread(block 65) failed
[  503.681156][T20046] FAT-fs (loop8): Directory bread(block 66) failed
[  503.688174][T20046] FAT-fs (loop8): Directory bread(block 67) failed
[  503.694743][T20046] FAT-fs (loop8): Directory bread(block 68) failed
[  503.698551][T20046] FAT-fs (loop8): Directory bread(block 69) failed
[  503.703828][T20046] FAT-fs (loop8): Directory bread(block 70) failed
[  503.706019][T20046] FAT-fs (loop8): Directory bread(block 71) failed
[  503.708290][T20046] FAT-fs (loop8): Directory bread(block 72) failed
[  503.710633][T20046] FAT-fs (loop8): Directory bread(block 73) failed
[  503.734348][   T33] audit: type=1800 audit(1781312430.827:440): pid=20046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5488" name="file1" dev="loop8" ino=1048746 res=0 errno=0
[  504.315932][   T54] Bluetooth: hci0: connection err: -111
[  504.419398][T20072] loop9: detected capacity change from 0 to 128
[  504.726515][T20086] netlink: 'syz.8.5506': attribute type 5 has an invalid length.
[  505.167946][T20098] loop9: detected capacity change from 0 to 32768
[  505.189604][T20098] JBD2: Ignoring recovery information on journal
[  505.248088][T20098] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  505.554102][T19466] ocfs2: Unmounting device (7,9) on (node local)
[  505.855317][T20119] ipvlan1: entered promiscuous mode
[  505.864435][T20119] ipvlan1: entered allmulticast mode
[  505.869738][T20119] veth0_vlan: entered allmulticast mode
[  506.207983][T20141] loop9: detected capacity change from 0 to 2048
[  506.552079][T20159] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.571400][T20159] 8021q: adding VLAN 0 to HW filter on device team0
[  506.591418][T20159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  506.733390][T20159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.749137][T20159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.777817][T20159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  506.788792][T20159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  506.878554][T20159] veth1_vlan: left promiscuous mode
[  506.889345][T20159] veth0_vlan: left promiscuous mode
[  506.897589][T20159] veth0_vlan: entered promiscuous mode
[  506.912386][T20170] ptrace attach of "/syz-executor exec"[5622] was attempted by "\x0a                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          
[  506.912884][T20159] veth1_vlan: entered promiscuous mode
[  507.009613][T20159] veth1_macvtap: left promiscuous mode
[  507.023592][T20159] veth0_macvtap: left promiscuous mode
[  507.034714][T20159] veth0_macvtap: entered promiscuous mode
[  507.105744][T20159] veth1_macvtap: entered promiscuous mode
[  507.132303][T20159] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  507.142199][T20159] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  507.151279][T20159] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  507.171499][T20159] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  507.215709][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.218613][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.236118][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.238586][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.351157][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5541'.
[  507.364031][T20175] netem: unknown loss type 13
[  507.374131][T20175] netem: change failed
[  507.386610][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.397745][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.418808][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.429746][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.506517][   T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  507.901582][T19272] usb 10-1: new low-speed USB device number 4 using dummy_hcd
[  508.066576][T19272] usb 10-1: unable to get BOS descriptor or descriptor too short
[  508.075823][T19272] usb 10-1: config 255 has an invalid interface number: 100 but max is 1
[  508.082535][T19272] usb 10-1: config 255 has an invalid interface number: 100 but max is 1
[  508.091636][T19272] usb 10-1: config 255 has 1 interface, different from the descriptor's value: 2
[  508.099611][T19272] usb 10-1: config 255 has no interface number 0
[  508.103122][ T6116] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  508.104712][T19272] usb 10-1: config 255 interface 100 has no altsetting 0
[  508.113723][T19272] usb 10-1: config 255 interface 100 has no altsetting 1
[  508.124293][T19272] usb 10-1: string descriptor 0 read error: -22
[  508.127124][T19272] usb 10-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81
[  508.136969][T19272] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.178844][ T5488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  508.264536][T20226] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5565'.
[  508.347621][T19272] usb 10-1: USB disconnect, device number 4
[  509.178782][ T5488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  509.188408][ T5488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  509.235727][   T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  509.399118][   T24] usb 10-1: Using ep0 maxpacket: 32
[  509.408790][   T24] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  509.423387][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.440752][   T24] usb 10-1: config 0 descriptor??
[  509.453494][   T24] gspca_main: sq930x-2.14.0 probing 041e:403c
[  509.490087][ T5687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  510.577152][   T33] audit: type=1326 audit(1781312437.997:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.1.5595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  510.602995][   T33] audit: type=1326 audit(1781312437.997:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.1.5595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  510.612836][   T33] audit: type=1326 audit(1781312438.018:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.1.5595" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  510.630781][   T33] audit: type=1326 audit(1781312438.018:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.1.5595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  510.645125][   T24] gspca_sq930x: reg_w 0105 bf00 failed -71
[  510.646645][   T33] audit: type=1326 audit(1781312438.018:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.1.5595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  510.647180][   T24] sq930x 10-1:0.0: probe with driver sq930x failed with error -71
[  510.676496][   T24] usb 10-1: USB disconnect, device number 5
[  511.290674][T20314] loop8: detected capacity change from 0 to 2048
[  511.297664][T20314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  511.452064][T20321] loop8: detected capacity change from 0 to 8
[  511.464687][T20321] squashfs image failed sanity check
[  511.691824][T20337] fuse: blksize only supported for fuseblk
[  511.738574][T20340] netlink: 1047 bytes leftover after parsing attributes in process `syz.9.5619'.
[  511.747079][T20340] veth0_to_bond: default FDB implementation only supports local addresses
[  511.954743][T20351] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5626'.
[  512.075749][T20359] 9p: Bad value for 'rfdno'
[  512.077701][T20358] loop8: detected capacity change from 0 to 512
[  512.090803][T20358] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  512.128817][T20361] loop9: detected capacity change from 0 to 256
[  512.175478][T20358] EXT4-fs (loop8): 1 truncate cleaned up
[  512.185264][T20361] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  512.198688][T20358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  512.791965][T20373] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.5632'.
[  512.979817][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  513.001514][T19087] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.082733][T20379] [U] 
[  513.084004][T20379] [U] 
[  513.084868][T20379] [U] 
[  513.085730][T20379] [U] 
[  513.101519][T20379] [U] 
[  513.102473][T20379] [U] 
[  513.103358][T20379] [U] 
[  513.104226][T20379] [U] 
[  513.114906][T20379] [U] 
[  513.115864][T20379] [U] 
[  513.116765][T20379] [U] 
[  513.124779][T20378] [U] 
[  513.191401][T20385] fuse: fd is not a fuse device
[  513.199760][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5638'.
[  513.202679][T20389] netlink: 'syz.8.5638': attribute type 1 has an invalid length.
[  513.713117][T19948] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  513.874038][T19948] usb 9-1: Using ep0 maxpacket: 16
[  513.878697][T19948] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[  513.882116][T19948] usb 9-1: config 0 has no interface number 0
[  513.884751][T19948] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  513.888849][T19948] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  513.897393][T19948] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  513.901177][T19948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.905002][T19948] usb 9-1: Product: syz
[  513.906892][T19948] usb 9-1: Manufacturer: syz
[  513.908949][T19948] usb 9-1: SerialNumber: syz
[  513.913894][T19948] usb 9-1: config 0 descriptor??
[  513.917317][T20406] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  513.920293][T20406] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  514.141455][T20406] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  514.153689][T20406] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  514.358866][T19948] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  514.373997][T19948] asix 9-1:0.34: probe with driver asix failed with error -71
[  514.391212][T19948] usb 9-1: USB disconnect, device number 5
[  514.468511][T20428] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5657'.
[  514.570310][T20436] overlayfs: failed to clone lowerpath
[  514.659174][ T5687] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  514.798112][ T5687] usb 10-1: Using ep0 maxpacket: 16
[  514.803253][ T5687] usb 10-1: unable to get BOS descriptor or descriptor too short
[  514.810521][ T5687] usb 10-1: config 6 has an invalid interface number: 150 but max is 0
[  514.815229][ T5687] usb 10-1: config 6 has no interface number 0
[  514.818726][ T5687] usb 10-1: config 6 interface 150 has no altsetting 0
[  514.824809][ T5687] usb 10-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f
[  514.832005][ T5687] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.836598][ T5687] usb 10-1: Product: syz
[  514.840297][ T5687] usb 10-1: Manufacturer: syz
[  514.843533][ T5687] usb 10-1: SerialNumber: syz
[  515.016719][T20459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5673'.
[  515.072658][ T5687] usb 10-1: USB disconnect, device number 6
[  515.215086][T20468] batadv_slave_1: entered allmulticast mode
[  515.462704][T20480] futex_wake_op: syz.1.5682 tries to shift op by 35; fix this program
[  515.643800][T20489] netlink: 'syz.1.5685': attribute type 4 has an invalid length.
[  516.900078][T20525] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5697'.
[  516.902997][T20525] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5697'.
[  520.800052][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5727'.
[  520.904471][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  521.058170][T20599] fuse: fd is not a fuse device
[  522.692174][   T33] audit: type=1326 audit(1781312450.720:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.707298][   T33] audit: type=1326 audit(1781312450.720:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.715444][   T33] audit: type=1326 audit(1781312450.741:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.725434][   T33] audit: type=1326 audit(1781312450.741:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.742701][   T33] audit: type=1326 audit(1781312450.741:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.758004][   T33] audit: type=1326 audit(1781312450.741:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.777153][   T33] audit: type=1326 audit(1781312450.741:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.786509][   T33] audit: type=1326 audit(1781312450.762:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.796023][   T33] audit: type=1326 audit(1781312450.762:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.807857][   T33] audit: type=1326 audit(1781312450.773:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20633 comm="syz.1.5747" exe="/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  522.853463][T20638] netlink: 167080 bytes leftover after parsing attributes in process `syz.1.5749'.
[  522.937497][T20642] netlink: 'syz.1.5751': attribute type 7 has an invalid length.
[  524.490477][T20668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5764'.
[  527.684170][T20715] --map-set only usable from mangle table
[  527.825334][T20723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5790'.
[  529.798347][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  529.814734][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  529.820553][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  529.825005][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  529.827913][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  530.415852][T20757] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.418252][T20757] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.421362][T20757] bridge_slave_0: entered allmulticast mode
[  530.424139][T20757] bridge_slave_0: entered promiscuous mode
[  530.428190][T20757] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.431919][T20757] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.434442][T20757] bridge_slave_1: entered allmulticast mode
[  530.437276][T20757] bridge_slave_1: entered promiscuous mode
[  530.461579][T20757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.466683][T20757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.485227][T20757] team0: Port device team_slave_0 added
[  530.488522][T20757] team0: Port device team_slave_1 added
[  530.503731][T20757] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.506942][T20757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.517880][T20757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.523550][T20757] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.527519][T20757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.537126][T20757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.568259][T20757] hsr_slave_0: entered promiscuous mode
[  530.570684][T20757] hsr_slave_1: entered promiscuous mode
[  530.573469][T20757] debugfs: 'hsr0' already exists in 'hsr'
[  530.575618][T20757] Cannot create hsr debugfs directory
[  531.811413][ T5624] Bluetooth: hci4: command tx timeout
[  532.155649][T20757] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  532.162612][T20757] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  532.168522][T20757] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  532.180029][T20757] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  532.193479][T20757] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  532.200049][T20757] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  532.203876][T20757] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  532.227123][T20757] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.291621][T20757] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.301618][T20757] 8021q: adding VLAN 0 to HW filter on device team0
[  532.308428][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.311324][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.341145][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.343500][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.633787][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  532.645856][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  532.651625][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  532.658130][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  532.662685][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  532.953620][T20757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.079576][T20757] veth0_vlan: entered promiscuous mode
[  533.096365][T20757] veth1_vlan: entered promiscuous mode
[  533.153278][T20757] veth0_macvtap: entered promiscuous mode
[  533.169471][T20757] veth1_macvtap: entered promiscuous mode
[  533.217267][T20757] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.236385][T20757] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.252594][ T5488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.256316][ T5488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.266841][ T5488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.283468][ T5488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.619119][T13610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.632322][T13610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.767270][T13610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.776578][T13610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.792485][ T5624] Bluetooth: hci4: command tx timeout
[  533.899397][T20866] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.901992][T20866] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.904446][T20866] bridge_slave_0: entered allmulticast mode
[  533.908289][T20866] bridge_slave_0: entered promiscuous mode
[  533.911925][T20866] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.914293][T20866] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.917134][T20866] bridge_slave_1: entered allmulticast mode
[  533.948761][T20866] bridge_slave_1: entered promiscuous mode
[  534.005348][T20866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.010270][T20866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.045497][T20866] team0: Port device team_slave_0 added
[  534.052391][T20866] team0: Port device team_slave_1 added
[  534.101318][T20866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.103540][T20866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  534.112108][T20866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.118508][T20866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.121494][T20866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  534.139602][T20866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.157483][T20932] fuse: fd is not a fuse device
[  534.176949][T20866] hsr_slave_0: entered promiscuous mode
[  534.179609][T20866] hsr_slave_1: entered promiscuous mode
[  534.182108][T20866] debugfs: 'hsr0' already exists in 'hsr'
[  534.186072][T20866] Cannot create hsr debugfs directory
[  534.634261][ T5624] Bluetooth: hci5: command tx timeout
[  535.363897][T20968] netlink: 'syz.1.5843': attribute type 1 has an invalid length.
[  535.683630][T20866] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  535.689672][T20866] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  535.693293][T20866] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  535.701287][T20866] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  535.705426][T20866] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  535.712547][T20866] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  535.718463][T20866] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  535.724890][T20866] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  535.773817][ T5624] Bluetooth: hci4: command tx timeout
[  535.905513][T20866] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.933064][T20866] 8021q: adding VLAN 0 to HW filter on device team0
[  535.940347][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.942724][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.955872][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.958188][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.315432][T20866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.421084][T20866] veth0_vlan: entered promiscuous mode
[  536.439947][T20866] veth1_vlan: entered promiscuous mode
[  536.480249][T20866] veth0_macvtap: entered promiscuous mode
[  536.484732][T20866] veth1_macvtap: entered promiscuous mode
[  536.513243][T20866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.531722][T20866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.573042][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.580263][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.590483][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.595298][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.602638][ T5624] Bluetooth: hci5: command tx timeout
[  536.755300][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  536.855615][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.864876][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.905503][T11300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.916985][T11300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.029545][T21033] netlink: 'syz.3.5823': attribute type 322 has an invalid length.
[  537.179013][T21045] loop3: detected capacity change from 0 to 128
[  537.372183][T21057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5861'.
[  537.755144][ T5624] Bluetooth: hci4: command tx timeout
[  537.885492][T21081] kAFS: unparsable volume name
[  538.585351][ T5624] Bluetooth: hci5: command tx timeout
[  538.796863][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  538.796878][   T33] audit: type=1326 audit(1781312467.633:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  538.822979][   T33] audit: type=1326 audit(1781312467.633:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  538.841454][   T33] audit: type=1326 audit(1781312467.633:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  538.869575][   T33] audit: type=1326 audit(1781312467.633:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  538.883744][   T33] audit: type=1326 audit(1781312467.643:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  538.899950][   T33] audit: type=1326 audit(1781312467.643:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  538.907033][   T33] audit: type=1326 audit(1781312467.643:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  538.932750][   T33] audit: type=1326 audit(1781312467.654:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  538.943693][   T33] audit: type=1326 audit(1781312467.654:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.3.5876" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feb5d79ce59 code=0x7ffc0000
[  539.079476][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5880'.
[  539.259311][T21107] loop3: detected capacity change from 0 to 32768
[  539.270200][T21107] Bad index:114 of stbl[1] in dtroot
[  539.270200][T21107] 
[  539.274579][T21107] ERROR: (device loop3): copy_from_dinode: Corrupt dtroot
[  539.274579][T21107] 
[  539.282189][T21107] ERROR: (device loop3): remounting filesystem as read-only
[  539.571952][T21125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  540.566491][ T5624] Bluetooth: hci5: command tx timeout
[  540.595731][T21155] loop0: detected capacity change from 0 to 2048
[  540.607979][T21155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  541.189677][T21176] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5909'.
[  541.326146][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5916'.
[  541.364770][T21189] xt_hashlimit: size too large, truncated to 1048576
[  541.601079][T21209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5925'.
[  541.884924][T21219] loop0: detected capacity change from 0 to 128
[  542.082948][T21219] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  542.094158][T21219] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  542.139808][T20757] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  542.936795][T21229] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  543.014598][ T5624] Bluetooth: hci3: command 0x0406 tx timeout
[  544.048648][T21239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5936'.
[  544.061296][T21239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5936'.
[  544.071899][T21239] netlink: 39 bytes leftover after parsing attributes in process `syz.1.5936'.
[  544.078890][T21233] loop0: detected capacity change from 0 to 40427
[  544.088188][T21233] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  544.098948][T21233] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  544.109316][T21233] F2FS-fs (loop0): invalid crc value
[  544.120479][T21233] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 62
[  544.162832][T21233] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117)
[  544.432939][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5940'.
[  545.078210][T21293] program syz.0.5959 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  545.467439][T21307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5963'.
[  545.718420][ T5690] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  545.756849][T21312] loop0: detected capacity change from 0 to 164
[  545.808234][T21312] iso9660: Corrupted directory entry in block 2 of inode 1920
[  545.874222][ T5690] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[  545.878204][ T5690] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.886774][ T5690] usb 4-1: config 0 has no interface number 0
[  545.895706][ T5690] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  545.903686][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  545.903784][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  545.905000][ T1381] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  545.921599][ T5690] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[  545.937854][ T5690] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  545.953601][ T5690] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  545.963949][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.980306][ T5690] usb 4-1: config 0 descriptor??
[  545.990369][T21305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  546.008366][ T5690] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  546.193807][T12369] usb 4-1: Failed to submit usb control message: -71
[  546.200097][ T5690] usb 4-1: USB disconnect, device number 17
[  546.208815][T12369] usb 4-1: unable to send the bmi data to the device: -71
[  546.235860][T12369] usb 4-1: unable to get target info from device
[  546.252158][T12369] usb 4-1: could not get target info (-71)
[  546.260687][T12369] usb 4-1: could not probe fw (-71)
[  546.372030][   T33] audit: type=1326 audit(1781312475.580:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.401403][   T33] audit: type=1326 audit(1781312475.580:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.413888][   T33] audit: type=1326 audit(1781312475.580:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.422516][   T33] audit: type=1326 audit(1781312475.580:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.477541][   T33] audit: type=1326 audit(1781312475.580:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.492625][   T33] audit: type=1326 audit(1781312475.580:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.511685][   T33] audit: type=1326 audit(1781312475.580:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.534057][   T33] audit: type=1326 audit(1781312475.580:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.548438][   T33] audit: type=1326 audit(1781312475.580:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.559893][   T33] audit: type=1326 audit(1781312475.580:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.0.5972" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fa2d4b9ce59 code=0x7ffc0000
[  546.675068][   T54] Bluetooth: hci4: unexpected event 0x35 length: 7 > 6
[  547.160277][T21346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5980'.
[  547.344830][T21348] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5981'.
[  547.353180][T21348] netlink: 1792 bytes leftover after parsing attributes in process `syz.3.5981'.
[  547.741170][T21350] loop3: detected capacity change from 0 to 2048
[  547.834000][T21350] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  548.416859][T21370] overlayfs: failed to clone upperpath
[  548.454764][T21367] loop3: detected capacity change from 0 to 2048
[  548.485690][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5992'.
[  548.504219][T21367] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  549.488326][T21397] loop3: detected capacity change from 0 to 256
[  549.499084][T21397] FAT-fs (loop3): Directory bread(block 64) failed
[  549.504763][T21397] FAT-fs (loop3): Directory bread(block 65) failed
[  549.507080][T21397] FAT-fs (loop3): Directory bread(block 66) failed
[  549.509123][T21397] FAT-fs (loop3): Directory bread(block 67) failed
[  549.511378][T21397] FAT-fs (loop3): Directory bread(block 68) failed
[  549.513481][T21397] FAT-fs (loop3): Directory bread(block 69) failed
[  549.516238][T21397] FAT-fs (loop3): Directory bread(block 70) failed
[  549.518557][T21397] FAT-fs (loop3): Directory bread(block 71) failed
[  549.520805][T21397] FAT-fs (loop3): Directory bread(block 72) failed
[  549.522803][T21397] FAT-fs (loop3): Directory bread(block 73) failed
[  549.763939][T21411] loop3: detected capacity change from 0 to 128
[  549.824328][T21411] Bad inode number on dev loop3: 32769 is out of range
[  550.058071][T21426] lo speed is unknown, defaulting to 1000
[  550.061401][T21426] lo speed is unknown, defaulting to 1000
[  550.238427][T21428] : renamed from lo
[  550.339906][T21426]  speed is unknown, defaulting to 1000
[  550.346050][T21426] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  550.357735][T21426] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  550.365034][T21426] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  550.380662][T21426] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  550.389471][T21426] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98
[  550.452179][T21426]  speed is unknown, defaulting to 1000
[  550.457814][T21426]  speed is unknown, defaulting to 1000
[  550.460699][T21426]  speed is unknown, defaulting to 1000
[  550.466655][T21426]  speed is unknown, defaulting to 1000
[  550.474784][T21426]  speed is unknown, defaulting to 1000
[  550.477900][T21426]  speed is unknown, defaulting to 1000
[  551.146455][T21450] loop0: detected capacity change from 0 to 32768
[  551.149542][T21467] loop3: detected capacity change from 0 to 512
[  551.157912][T21467] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  551.221671][T21467] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  551.243326][T21467] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  551.252864][T21467] EXT4-fs (loop3): group descriptors corrupted!
[  551.488284][T21474] tipc: Failed to remove unknown binding: 66,1,1/0:2963274221/2963274223
[  551.504462][T21474] tipc: Failed to remove unknown binding: 66,1,1/0:2963274221/2963274223
[  552.239172][T21495] loop3: detected capacity change from 0 to 32768
[  553.696984][T21526] fuse: Bad value for 'fd'
[  553.859813][T21530] loop3: detected capacity change from 0 to 512
[  553.903278][T21530] EXT4-fs (loop3): orphan cleanup on readonly fs
[  553.930353][T21530] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  553.937370][T21530] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  553.943040][T21530] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6060: couldn't read orphan inode 26 (err -116)
[  553.952312][T21530] loop3: lost filesystem error report for type 5 error -116
[  553.952745][T21530] EXT4-fs (loop3): Remounting filesystem read-only
[  553.957917][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  553.960016][    C1] EXT4-fs (loop3): initial error at time 1781312483: ext4_orphan_get:1402
[  553.962718][    C1] EXT4-fs (loop3): last error at time 1781312483: ext4_orphan_get:1402
[  553.969556][T21530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  554.043397][T20866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.055323][T21559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6072'.
[  555.290377][T21569] loop0: detected capacity change from 0 to 1024
[  555.298684][T21569] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  555.314597][T21569] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  555.544892][T21581] No such timeout policy "syz0"
[  556.768437][T21589] netlink: 'syz.1.6086': attribute type 3 has an invalid length.
[  558.870905][T21619] loop0: detected capacity change from 0 to 256
[  558.885394][T21619] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  559.301835][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6104'.
[  559.311930][T21632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6104'.
[  559.528262][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6111'.
[  560.195822][T21671] binder: 21670:21671 ioctl c0306201 200000000080 returned -22
[  561.032786][T12369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.082486][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  561.103577][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  561.109572][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  561.115104][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  561.120319][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  561.403843][T12369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.445873][ T6116] libceph: connect (1)[c::]:6789 error -99
[  561.448228][ T6116] libceph: mon0 (1)[c::]:6789 connect error
[  561.508698][T12369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.533638][T21679]  speed is unknown, defaulting to 1000
[  561.572513][T21695] ceph: No mds server is up or the cluster is laggy
[  561.701983][T12369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.794358][ T6116] libceph: connect (1)[c::]:6789 error -99
[  561.796565][ T6116] libceph: mon0 (1)[c::]:6789 connect error
[  561.930938][T21710] netlink: 'syz.1.6135': attribute type 1 has an invalid length.
[  561.974291][T21679] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.977351][T21679] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.986280][T21679] bridge_slave_0: entered allmulticast mode
[  562.004318][T21679] bridge_slave_0: entered promiscuous mode
[  562.010129][T21679] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.016755][T21679] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.021282][T21679] bridge_slave_1: entered allmulticast mode
[  562.029739][T21679] bridge_slave_1: entered promiscuous mode
[  562.061318][T21679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.225912][T21679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.390915][T21679] team0: Port device team_slave_0 added
[  562.410847][T21679] team0: Port device team_slave_1 added
[  562.539629][T21679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.549612][T21679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.581852][T21679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.596984][T12369] bridge_slave_1: left allmulticast mode
[  562.601796][T12369] bridge_slave_1: left promiscuous mode
[  562.612038][T12369] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.627146][T12369] bridge_slave_0: left allmulticast mode
[  562.642620][T12369] bridge_slave_0: left promiscuous mode
[  562.652360][T12369] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.836234][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6140'.
[  563.035423][T12369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.041028][T12369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  563.047582][T12369] bond0 (unregistering): Released all slaves
[  563.053271][T21679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  563.056253][T21679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  563.065332][T21679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  563.078645][ T5363] 8021q: adding VLAN 0 to HW filter on device eth1
[  563.081872][T21726] syz_tun: Device is already in use.
[  563.085459][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6142'.
[  563.144103][T21681] Bluetooth: hci5: command tx timeout
[  563.175852][T21679] hsr_slave_0: entered promiscuous mode
[  563.187986][T21679] hsr_slave_1: entered promiscuous mode
[  563.191062][T21679] debugfs: 'hsr0' already exists in 'hsr'
[  563.193360][T21679] Cannot create hsr debugfs directory
[  563.585197][T12369] hsr_slave_0: left promiscuous mode
[  563.592926][T12369] hsr_slave_1: left promiscuous mode
[  563.595134][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.601138][T12369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.611644][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.618049][T12369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  563.638837][T12369] veth1_macvtap: left promiscuous mode
[  563.641909][T12369] veth0_macvtap: left promiscuous mode
[  563.644443][T12369] veth1_vlan: left promiscuous mode
[  563.647154][T12369] veth0_vlan: left promiscuous mode
[  563.965073][T12369] team0 (unregistering): Port device team_slave_1 removed
[  563.978186][T12369] team0 (unregistering): Port device team_slave_0 removed
[  564.128642][ T5363] 8021q: adding VLAN 0 to HW filter on device eth2
[  564.750101][ T5363] 8021q: adding VLAN 0 to HW filter on device eth3
[  565.138593][T21681] Bluetooth: hci5: command tx timeout
[  565.166160][ T5363] 8021q: adding VLAN 0 to HW filter on device eth4
[  565.523190][T21679] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  565.530715][T21679] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  565.534320][T21679] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  565.538488][T21679] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  565.542421][T21679] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  565.552301][T21679] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  565.555714][T21679] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  565.559864][T21679] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  565.688568][T21679] 8021q: adding VLAN 0 to HW filter on device bond0
[  565.699067][T21679] 8021q: adding VLAN 0 to HW filter on device team0
[  565.712745][T13618] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.715103][T13618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  565.726444][T13618] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.728698][T13618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  566.278670][T21679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  566.629450][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6163'.
[  566.707941][T21679] veth0_vlan: entered promiscuous mode
[  566.741797][T21679] veth1_vlan: entered promiscuous mode
[  566.841601][T21679] veth0_macvtap: entered promiscuous mode
[  566.857961][T21679] veth1_macvtap: entered promiscuous mode
[  566.915260][T21679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  566.964563][T21679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  566.993280][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  566.996635][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.025673][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.032833][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.088489][T21681] Bluetooth: hci5: command tx timeout
[  567.287876][T21874] xt_CT: No such helper "pptp"
[  567.348401][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.360129][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.477575][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.486994][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.708147][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6129'.
[  567.913989][T21918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.456155][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  568.625211][T21943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  569.067064][T21681] Bluetooth: hci5: command tx timeout
[  570.323411][T21993] loop4: detected capacity change from 0 to 4096
[  570.340431][T21993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  570.379680][T21993] __quota_error: 34 callbacks suppressed
[  570.379700][T21993] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  570.390762][T21993] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  570.394658][T21993] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.6209: Failed to acquire dquot type 1
[  570.459046][T21679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.561637][T22000] loop0: detected capacity change from 0 to 32768
[  571.311813][T22021] overlayfs: missing 'lowerdir'
[  571.342286][ T8116] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  571.485737][ T8116] usb 5-1: Using ep0 maxpacket: 16
[  571.493360][ T8116] usb 5-1: config 3 has an invalid interface number: 20 but max is 0
[  571.498349][ T8116] usb 5-1: config 3 has no interface number 0
[  571.502279][ T8116] usb 5-1: config 3 interface 20 has no altsetting 0
[  571.512288][ T8116] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  571.519261][ T8116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.523614][ T8116] usb 5-1: Product: syz
[  571.524991][ T8116] usb 5-1: Manufacturer: syz
[  571.529487][ T8116] usb 5-1: SerialNumber: syz
[  571.753494][ T8116] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input27
[  571.767110][ T5052] bcm5974 5-1:3.20: could not read from device
[  571.772463][T22027] loop0: detected capacity change from 0 to 32768
[  571.783010][ T5052] bcm5974 5-1:3.20: could not read from device
[  571.797065][ T8116] usb 5-1: USB disconnect, device number 24
[  571.845144][T22027] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  571.994719][T20757] ocfs2: Unmounting device (7,0) on (node local)
[  572.159537][T22043] loop0: detected capacity change from 0 to 512
[  572.168719][T22043] EXT4-fs: Ignoring removed oldalloc option
[  572.177155][T22043] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  572.192012][T22043] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.6231: invalid indirect mapped block 83886080 (level 1)
[  572.201759][T22043] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  572.202182][T22043] EXT4-fs (loop0): Remounting filesystem read-only
[  572.208883][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  572.210875][    C0] EXT4-fs (loop0): initial error at time 1781312502: ext4_free_branches:1023: inode 16
[  572.213807][    C0] EXT4-fs (loop0): last error at time 1781312502: ext4_free_branches:1023: inode 16
[  572.270706][T22043] EXT4-fs (loop0): 1 orphan inode deleted
[  572.274055][T22043] EXT4-fs (loop0): 1 truncate cleaned up
[  572.276738][T22043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.319306][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.895308][ T6116] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  573.034526][T22075] loop0: detected capacity change from 0 to 2048
[  573.051832][T22075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  573.085804][ T6116] usb 5-1: Using ep0 maxpacket: 32
[  573.089074][ T6116] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  573.092829][ T6116] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  573.102515][ T6116] usb 5-1: config 0 interface 0 has no altsetting 0
[  573.115812][ T6116] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  573.123782][ T6116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.131339][ T6116] usb 5-1: Product: syz
[  573.132661][ T6116] usb 5-1: Manufacturer: syz
[  573.138320][ T6116] usb 5-1: SerialNumber: syz
[  573.144471][ T6116] usb 5-1: config 0 descriptor??
[  573.241852][T22084] loop0: detected capacity change from 0 to 4096
[  573.275060][T22086] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  573.537538][ T6116] gs_usb 5-1:0.0: Configuring for 158 interfaces
[  573.724873][T22104] loop0: detected capacity change from 0 to 4096
[  573.734020][ T6116] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  573.742715][ T6116] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  573.752667][ T6116] usb 5-1: USB disconnect, device number 25
[  573.782472][T22106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  573.783164][T22104] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  573.804960][T22104] NILFS (loop0): mounting fs with errors
[  574.333544][T22116] loop4: detected capacity change from 0 to 256
[  574.379656][T22116] FAT-fs (loop4): Directory bread(block 64) failed
[  574.386605][T22116] FAT-fs (loop4): Directory bread(block 65) failed
[  574.388813][T22116] FAT-fs (loop4): Directory bread(block 66) failed
[  574.394327][T22116] FAT-fs (loop4): Directory bread(block 67) failed
[  574.396692][T22116] FAT-fs (loop4): Directory bread(block 68) failed
[  574.398937][T22116] FAT-fs (loop4): Directory bread(block 69) failed
[  574.403779][T22116] FAT-fs (loop4): Directory bread(block 70) failed
[  574.405835][T22116] FAT-fs (loop4): Directory bread(block 71) failed
[  574.407919][T22116] FAT-fs (loop4): Directory bread(block 72) failed
[  574.410284][T22116] FAT-fs (loop4): Directory bread(block 73) failed
[  574.606736][T22130] loop4: detected capacity change from 0 to 512
[  574.898740][T22148] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6276'.
[  574.961450][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6278'.
[  574.983470][T22156] raw_sendmsg: syz.4.6279 forgot to set AF_INET. Fix it!
[  575.055358][T22161] pimreg: entered allmulticast mode
[  575.072062][T22161] pimreg: left allmulticast mode
[  575.099453][T22165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6284'.
[  575.104548][T22165] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6284'.
[  575.211655][T22169] netlink: 'syz.4.6286': attribute type 1 has an invalid length.
[  575.302301][T22172] loop4: detected capacity change from 0 to 256
[  575.323186][T22172] FAT-fs (loop4): unable to read block(154618822656) for building NFS inode
[  575.697510][T22182] loop0: detected capacity change from 0 to 512
[  575.753179][T22182] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  575.788507][T22182] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  575.802111][T22182] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.6292: iget: bad i_size value: 12154757448730
[  575.807964][T22182] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  575.808474][T22182] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.6292: couldn't read orphan inode 13 (err -117)
[  575.811603][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  575.811623][    C1] EXT4-fs (loop0): initial error at time 1781312506: ext4_orphan_get:1397: inode 13
[  575.811644][    C1] EXT4-fs (loop0): last error at time 1781312506: ext4_orphan_get:1397: inode 13
[  575.825464][T22182] loop0: lost filesystem error report for type 5 error -117
[  575.826754][T22182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  575.843495][T22182] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  575.884748][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.951765][T19947] kernel write not supported for file /input/mice (pid: 19947 comm: kworker/0:10)
[  576.014134][T22202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  576.216893][T22212] loop0: detected capacity change from 0 to 1024
[  576.223546][T22212] EXT4-fs: Ignoring removed orlov option
[  576.231975][T22212] EXT4-fs: Ignoring removed orlov option
[  576.244382][T22212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.253396][   T33] audit: type=1800 audit(1781312506.958:514): pid=22212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6305" name="file1" dev="loop0" ino=15 res=0 errno=0
[  576.640544][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.778206][T22236] loop0: detected capacity change from 0 to 512
[  576.903531][T22238] loop0: detected capacity change from 0 to 8
[  576.915096][T22238] unable to read inode lookup table
[  577.041925][T22232] loop4: detected capacity change from 0 to 32768
[  577.055008][T22232] btrfs: Deprecated parameter 'usebackuproot'
[  577.066046][T22232] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  577.077164][T22232] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6313 (22232)
[  577.101935][T22232] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  577.114900][T22232] BTRFS info (device loop4): using crc32c checksum algorithm
[  577.174904][T13619] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  577.185631][T22232] BTRFS error (device loop4): failed to load root extent
[  577.198667][T22232] BTRFS warning (device loop4): try to load backup roots slot 1
[  577.225104][   T36] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xc092cdc2 level 0
[  577.335682][T22232] BTRFS warning (device loop4): couldn't read tree root
[  577.338019][T22232] BTRFS warning (device loop4): try to load backup roots slot 2
[  577.347945][ T1115] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  577.360577][T22232] BTRFS warning (device loop4): couldn't read tree root
[  577.368894][T22263] loop0: detected capacity change from 0 to 1024
[  577.372646][T22232] BTRFS warning (device loop4): try to load backup roots slot 3
[  577.383188][T22263] EXT4-fs: Ignoring removed bh option
[  577.394782][T22263] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  577.408938][T22232] BTRFS info (device loop4): rebuilding free space tree
[  577.445181][T22263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  577.498288][T22232] BTRFS info (device loop4): checking UUID tree
[  577.511026][T22232] BTRFS info (device loop4): enabling ssd optimizations
[  577.521406][T22232] BTRFS info (device loop4): turning on async discard
[  577.533593][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.539195][T22232] BTRFS info (device loop4): enabling free space tree
[  577.547893][T22232] BTRFS info (device loop4): force clearing of disk cache
[  577.582609][T22232] BTRFS info (device loop4): enabling auto defrag
[  577.586600][T22232] BTRFS info (device loop4): trying to use backup root at mount time
[  577.593762][T22232] BTRFS info (device loop4): use zstd compression, level 3
[  577.892165][T21679] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  577.913620][T22289] loop0: detected capacity change from 0 to 4096
[  578.288430][T17477] Bluetooth: hci5: command 0x2016 tx timeout
[  578.437738][T22301] loop0: detected capacity change from 0 to 128
[  578.890141][T22318] loop4: detected capacity change from 0 to 512
[  578.893741][T22318] EXT4-fs: Ignoring removed i_version option
[  578.899542][T22318] EXT4-fs: Ignoring removed bh option
[  578.940196][T22318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  578.946557][T22318] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  579.153633][T22329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6341'.
[  579.158269][T22329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6341'.
[  579.162133][T21679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.364254][T22336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6344'.
[  580.268536][T17477] Bluetooth: hci5: command 0x2016 tx timeout
[  580.862406][T22361] loop4: detected capacity change from 0 to 131072
[  580.866964][T22361] F2FS-fs (loop4): invalid crc value
[  580.875859][T22361] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:5, blkofs:7
[  580.883417][T22361] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  581.553919][T19271] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  581.709732][T19271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  581.719874][T19271] usb 5-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44
[  581.727113][T19271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.844941][T19271] usb 5-1: config 0 descriptor??
[  581.856634][T19271] pwc: Samsung MPC-C30 USB webcam detected.
[  582.043922][T19271] pwc: send_video_command error -71
[  582.049058][T19271] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  582.055522][T19271] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  582.071436][T19271] usb 5-1: USB disconnect, device number 26
[  582.613073][T22438] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6384'.
[  582.624513][T22438] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6384'.
[  582.653794][T22439] loop4: detected capacity change from 0 to 4096
[  582.663136][T22439] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  582.690768][T22438] vlan0: entered promiscuous mode
[  582.693023][T22439] ntfs3(loop4): ino=1a, mi_enum_attr
[  582.695253][T22439] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  582.848496][T22438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.858732][T22438] batadv_slave_0: entered promiscuous mode
[  582.880510][T22445] loop4: detected capacity change from 0 to 1024
[  583.137532][T22453] bridge1: entered promiscuous mode
[  583.328103][T22461] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6395'.
[  583.519829][T22449] loop0: detected capacity change from 0 to 40427
[  583.531822][T22449] F2FS-fs (loop0): Image doesn't support compression
[  583.547534][T22449] F2FS-fs (loop0): build fault injection rate: 690
[  583.562601][T22449] F2FS-fs (loop0): build fault injection type: 0x4
[  583.605986][T22449] F2FS-fs (loop0): invalid crc value
[  583.964600][T22449] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  583.981521][T22449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  584.691824][T22482] loop4: detected capacity change from 0 to 164
[  584.958474][T22487] loop4: detected capacity change from 0 to 32768
[  584.986370][T22487] jfs_strtoUCS: char2uni returned -22.
[  585.012287][T22487] charset = euc-jp, char = 0xd4
[  585.134726][T22494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6406'.
[  585.153097][T22494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6406'.
[  585.492248][T22514] netlink: 'syz.0.6416': attribute type 10 has an invalid length.
[  585.592273][T22512] loop4: detected capacity change from 0 to 40427
[  585.596687][T22512] F2FS-fs (loop4): invalid crc value
[  585.627266][T22512] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  585.638995][T22512] F2FS-fs (loop4): checkpoint=disable on readonly fs
[  586.179968][T22549] loop0: detected capacity change from 0 to 128
[  586.218430][T22549] ufs: You didn't specify the type of your ufs filesystem
[  586.218430][T22549] 
[  586.218430][T22549] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  586.218430][T22549] 
[  586.218430][T22549] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  586.250937][T22549] ufs: ufstype=old is supported read-only
[  586.279780][T22549] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  586.487321][T22561] fuse: fd is not a fuse device
[  586.898606][T17477] Bluetooth: hci0: command 0x0406 tx timeout
[  587.148926][T22585] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6450'.
[  587.271482][T17820] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  587.447509][T17820] usb 5-1: Using ep0 maxpacket: 32
[  587.453325][T17820] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  587.464820][T17820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.477074][T17820] usb 5-1: config 0 descriptor??
[  587.506339][T17820] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  587.978450][T22613] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  588.474517][T22622] loop0: detected capacity change from 0 to 32768
[  588.478558][T22622] BTRFS error: failed to parse compression option 'no:nobarrier'
[  588.646222][T17820] gspca_vc032x: reg_w err -71
[  588.652577][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.658883][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.667499][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.673392][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.677223][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.683261][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.687417][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.695269][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.699925][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.704224][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.709576][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.713993][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.720792][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.725154][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.731604][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.736296][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.743763][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.746169][T17820] gspca_vc032x: I2c Bus Busy Wait 00
[  588.749963][T17820] gspca_vc032x: Unknown sensor...
[  588.755092][T17820] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  588.769190][T17820] usb 5-1: USB disconnect, device number 27
[  589.462341][T19947] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  589.604252][T19947] usb 5-1: Using ep0 maxpacket: 16
[  589.609321][T19947] usb 5-1: config index 0 descriptor too short (expected 65, got 36)
[  589.617315][T19947] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  589.627310][T19947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  589.637717][T19947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  589.643505][T19947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  589.648458][T19947] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  589.652206][T19947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.659045][T19947] usb 5-1: config 0 descriptor??
[  589.664455][T22641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  589.678368][T19947] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28
[  589.884821][T19947] usb 5-1: USB disconnect, device number 28
[  589.903477][ T5052] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  589.992243][T22659] loop0: detected capacity change from 0 to 1024
[  589.999258][T22659] EXT4-fs: Ignoring removed nomblk_io_submit option
[  590.028775][T22659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  590.033089][T22659] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.082921][T22659] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6483: bg 0: block 112: padding at end of block bitmap is not set
[  590.089004][T22659] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[  590.093184][T22659] EXT4-fs (loop0): This should not happen!! Data will be lost
[  590.093184][T22659] 
[  590.096256][T22659] EXT4-fs (loop0): Total free blocks count 0
[  590.104817][T22659] EXT4-fs (loop0): Free/Dirty block details
[  590.106845][T22659] EXT4-fs (loop0): free_blocks=0
[  590.108753][T22659] EXT4-fs (loop0): dirty_blocks=64
[  590.110921][T22659] EXT4-fs (loop0): Block reservation details
[  590.113180][T22659] EXT4-fs (loop0): i_reserved_data_blocks=4
[  590.119617][T22659] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.6483: lblock 0 mapped to illegal pblock 0 (length 4)
[  590.128593][T22659] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.6483: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  590.162230][T20757] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  590.169895][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  590.290085][T22665] loop0: detected capacity change from 0 to 2048
[  590.301307][T22665] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  590.307239][T22665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  590.623457][T22673] loop0: detected capacity change from 0 to 32768
[  590.626738][T22673] btrfs: Deprecated parameter 'usebackuproot'
[  590.629083][T22673] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  590.633809][T22673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6488 (22673)
[  590.640158][T22673] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  590.645157][T22673] BTRFS info (device loop0): using crc32c checksum algorithm
[  590.737744][ T1248] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  590.780871][T22673] BTRFS error (device loop0): failed to load root extent
[  590.783713][T22673] BTRFS warning (device loop0): try to load backup roots slot 1
[  590.787770][T13608] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  590.792764][T22673] BTRFS warning (device loop0): couldn't read tree root
[  590.795683][T22673] BTRFS warning (device loop0): try to load backup roots slot 2
[  590.799869][T13619] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  590.804910][T22673] BTRFS warning (device loop0): couldn't read tree root
[  590.808618][T22673] BTRFS warning (device loop0): try to load backup roots slot 3
[  590.823125][T22673] BTRFS info (device loop0): rebuilding free space tree
[  590.843472][T22673] BTRFS info (device loop0): checking UUID tree
[  590.846742][T22673] BTRFS info (device loop0): enabling ssd optimizations
[  590.849298][T22673] BTRFS info (device loop0): turning on async discard
[  590.851959][T22673] BTRFS info (device loop0): enabling free space tree
[  590.854194][T22673] BTRFS info (device loop0): force clearing of disk cache
[  590.856842][T22673] BTRFS info (device loop0): enabling auto defrag
[  590.859307][T22673] BTRFS info (device loop0): trying to use backup root at mount time
[  590.863550][T22673] BTRFS info (device loop0): use zstd compression, level 3
[  590.995801][T22703] netlink: 'syz.1.6493': attribute type 6 has an invalid length.
[  591.374123][T20757] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  591.636735][T22724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6502'.
[  591.738980][T22730] loop4: detected capacity change from 0 to 256
[  591.775462][T22730] FAT-fs (loop4): Directory bread(block 64) failed
[  591.778409][T22730] FAT-fs (loop4): Directory bread(block 65) failed
[  591.786824][T22730] FAT-fs (loop4): Directory bread(block 66) failed
[  591.793988][T22730] FAT-fs (loop4): Directory bread(block 67) failed
[  591.796937][T22730] FAT-fs (loop4): Directory bread(block 68) failed
[  591.802866][T22730] FAT-fs (loop4): Directory bread(block 69) failed
[  591.808699][T22730] FAT-fs (loop4): Directory bread(block 70) failed
[  591.814221][T22730] FAT-fs (loop4): Directory bread(block 71) failed
[  591.818100][T22730] FAT-fs (loop4): Directory bread(block 72) failed
[  591.822457][T22730] FAT-fs (loop4): Directory bread(block 73) failed
[  591.915109][T22735] sg_write: data in/out 142300/42 bytes for SCSI command 0x0-- guessing data in;
[  591.915109][T22735]    program syz.0.6508 not setting count and/or reply_len properly
[  592.203948][T22748] loop4: detected capacity change from 0 to 16
[  592.210632][T22748] erofs (device loop4): mounted with root inode @ nid 36.
[  592.238926][   T33] audit: type=1800 audit(1781312523.734:515): pid=22748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6510" name="file1" dev="loop4" ino=86 res=0 errno=0
[  592.554455][   T33] audit: type=1326 audit(1781312524.059:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.1.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  592.563546][   T33] audit: type=1326 audit(1781312524.059:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.1.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  592.570644][   T33] audit: type=1326 audit(1781312524.070:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.1.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  592.578353][   T33] audit: type=1326 audit(1781312524.070:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.1.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  592.589430][   T33] audit: type=1326 audit(1781312524.070:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.1.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  594.365833][T17477] Bluetooth: hci6: command 0x1003 tx timeout
[  594.373027][T21681] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  594.889783][T17820] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  595.034645][T17820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  595.039090][T17820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  595.051800][T17820] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  595.058560][T17820] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  595.067202][T17820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.075834][T17820] usb 5-1: Product: syz
[  595.077598][T17820] usb 5-1: Manufacturer: syz
[  595.079504][T17820] usb 5-1: SerialNumber: syz
[  595.093252][T22800] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  595.312326][T22800] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  595.897676][T22800] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  596.262824][T17820] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  596.300641][T17820] cdc_ncm 5-1:1.0: setting tx_max = 184
[  596.369447][T17820] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  596.487223][ T5690] usb 5-1: USB disconnect, device number 29
[  596.495913][ T5690] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  596.621506][T22824] loop0: detected capacity change from 0 to 256
[  596.646269][T22824] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  597.290161][T22852] binder: 22851:22852 ioctl 4018620d 0 returned -22
[  597.865589][T22862] loop0: detected capacity change from 0 to 128
[  598.064637][T22862] syz.0.6558: attempt to access beyond end of device
[  598.064637][T22862] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[  598.078252][T22862] syz.0.6558: attempt to access beyond end of device
[  598.078252][T22862] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  598.097396][T22862] syz.0.6558: attempt to access beyond end of device
[  598.097396][T22862] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  598.167922][T22862] syz.0.6558: attempt to access beyond end of device
[  598.167922][T22862] loop0: rw=524288, sector=145, nr_sectors = 16 limit=128
[  598.184627][T22862] syz.0.6558: attempt to access beyond end of device
[  598.184627][T22862] loop0: rw=524288, sector=169, nr_sectors = 8 limit=128
[  598.200634][T22862] syz.0.6558: attempt to access beyond end of device
[  598.200634][T22862] loop0: rw=524288, sector=185, nr_sectors = 8 limit=128
[  598.204624][T22864] syz.0.6558: attempt to access beyond end of device
[  598.204624][T22864] loop0: rw=0, sector=174, nr_sectors = 1 limit=128
[  598.332939][T22874] netlink: 'syz.4.6562': attribute type 6 has an invalid length.
[  598.336635][T22862] syz.0.6558: attempt to access beyond end of device
[  598.336635][T22862] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  598.373722][T22862] syz.0.6558: attempt to access beyond end of device
[  598.373722][T22862] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  598.389425][T22862] syz.0.6558: attempt to access beyond end of device
[  598.389425][T22862] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  598.698177][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6563'.
[  598.868842][T22887] IPVS: fo: FWM 3 0x00000003 - no destination available
[  598.873603][T19947] IPVS: starting estimator thread 0...
[  598.957402][T22888] IPVS: using max 46 ests per chain, 110400 per kthread
[  599.157232][T22892] loop0: detected capacity change from 0 to 32768
[  599.191283][T22892] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  599.266428][T22892] XFS (loop0): Ending clean mount
[  599.300447][T20757] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  600.589035][T22934] netlink: 'syz.0.6584': attribute type 4 has an invalid length.
[  600.592441][T22934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6584'.
[  601.741312][T22971] loop0: detected capacity change from 0 to 4096
[  601.775936][T22974] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  601.808875][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6602'.
[  601.826506][T22976] batadv0: entered promiscuous mode
[  601.846560][T22976] macsec1: entered promiscuous mode
[  601.851137][T22976] macsec1: entered allmulticast mode
[  601.855413][T22976] batadv0: entered allmulticast mode
[  601.870533][T22976] 8021q: adding VLAN 0 to HW filter on device macsec1
[  601.884571][T22976] batadv0: left allmulticast mode
[  601.892402][T22976] batadv0: left promiscuous mode
[  602.199149][T22994] loop4: detected capacity change from 0 to 256
[  602.239773][T22994] FAT-fs (loop4): Directory bread(block 64) failed
[  602.243044][T22994] FAT-fs (loop4): Directory bread(block 65) failed
[  602.247389][T22994] FAT-fs (loop4): Directory bread(block 66) failed
[  602.250168][T22994] FAT-fs (loop4): Directory bread(block 67) failed
[  602.253594][T22994] FAT-fs (loop4): Directory bread(block 68) failed
[  602.256607][T22994] FAT-fs (loop4): Directory bread(block 69) failed
[  602.259364][T22994] FAT-fs (loop4): Directory bread(block 70) failed
[  602.261873][T22994] FAT-fs (loop4): Directory bread(block 71) failed
[  602.266309][T22994] FAT-fs (loop4): Directory bread(block 72) failed
[  602.269057][T22994] FAT-fs (loop4): Directory bread(block 73) failed
[  602.598409][T23007] Bluetooth: MGMT ver 1.23
[  602.728039][T23009] loop4: detected capacity change from 0 to 128
[  602.751634][T23009] FAT-fs (loop4): bogus sectors per cluster 0
[  602.764396][T23009] FAT-fs (loop4): Can't find a valid FAT filesystem
[  602.981867][T23013] loop0: detected capacity change from 0 to 4096
[  603.073603][T23013] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  604.438964][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  604.441979][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  604.446664][ T1381] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  605.464352][T23119] loop0: detected capacity change from 0 to 512
[  605.467493][T23119] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  605.477103][T23119] EXT4-fs (loop0): 1 truncate cleaned up
[  605.481161][T23119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  605.624529][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.770869][T23129] loop0: detected capacity change from 0 to 16
[  605.810245][T23129] erofs (device loop0): mounted with root inode @ nid 36.
[  605.866343][T23129] erofs (device loop0): readahead error at folio 7 @ nid 36
[  605.872827][T23129] erofs (device loop0): readahead error at folio 6 @ nid 36
[  605.876238][T23129] erofs (device loop0): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel
[  605.880316][T23129] erofs (device loop0): readahead error at folio 5 @ nid 36
[  605.883583][T23129] erofs (device loop0): readahead error at folio 4 @ nid 36
[  605.886597][T23129] erofs (device loop0): not enough plain data on disk @ la 15360 of nid 36
[  605.890120][T23129] erofs (device loop0): readahead error at folio 3 @ nid 36
[  605.893567][T23129] erofs (device loop0): readahead error at folio 2 @ nid 36
[  605.896753][T23129] erofs (device loop0): readahead error at folio 1 @ nid 36
[  605.899860][T23129] erofs (device loop0): readahead error at folio 0 @ nid 36
[  605.905964][T23129] erofs (device loop0): read error -117 @ 0 of nid 36
[  605.914001][T23129] erofs (device loop0): failed to readdir of logical block 0 of nid 36
[  606.420281][T17477] Bluetooth: hci1: command 0x0406 tx timeout
[  606.770381][T23159] fuse: fd is not a fuse device
[  607.259404][T23163] loop0: detected capacity change from 0 to 1024
[  607.737119][T23183] loop0: detected capacity change from 0 to 1764
[  607.749450][T23183] iso9660: Unexpected value for 'showassoc'
[  607.752767][   T33] audit: type=1326 audit(1781312540.016:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.776396][   T33] audit: type=1326 audit(1781312540.016:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.791501][T23183] smb3: Unexpected value for 'nocase'
[  607.802565][   T33] audit: type=1326 audit(1781312540.027:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.821350][   T33] audit: type=1326 audit(1781312540.027:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.857982][   T33] audit: type=1326 audit(1781312540.027:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.886217][   T33] audit: type=1326 audit(1781312540.027:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.895429][   T33] audit: type=1326 audit(1781312540.027:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.904624][   T33] audit: type=1326 audit(1781312540.037:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.913505][   T33] audit: type=1326 audit(1781312540.037:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.928341][   T33] audit: type=1326 audit(1781312540.037:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.1.6696" exe="/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  607.998342][T23196] loop0: detected capacity change from 0 to 256
[  608.020480][T23196] FAT-fs (loop0): Directory bread(block 1285) failed
[  608.035595][T23196] FAT-fs (loop0): Directory bread(block 1286) failed
[  608.050285][T23196] FAT-fs (loop0): Directory bread(block 1287) failed
[  608.060092][T23196] FAT-fs (loop0): Directory bread(block 1288) failed
[  608.600074][T23203] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  610.325453][T23286] loop4: detected capacity change from 0 to 2048
[  610.333424][T23286] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  610.337172][T20762] udevd[20762]: incorrect nilfs2 checksum on /dev/loop4
[  610.340297][T23286] NILFS (loop4): mounting unchecked fs
[  610.345016][T23286] NILFS (loop4): recovery required for readonly filesystem
[  610.348005][T23286] NILFS (loop4): write access will be enabled during recovery
[  610.355187][T23286] NILFS (loop4): norecovery option specified, skipping roll-forward recovery
[  610.504812][T23294] loop4: detected capacity change from 0 to 512
[  610.544953][T23294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  610.555144][T23294] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  610.582962][T21679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.670452][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6747'.
[  611.000448][T23307] loop4: detected capacity change from 0 to 32768
[  611.011554][T23307] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  611.043834][T23307] XFS (loop4): Ending clean mount
[  611.070388][T21679] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  611.968966][T23333] loop4: detected capacity change from 0 to 2048
[  611.981222][T23333] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  612.103599][T23341] loop4: detected capacity change from 0 to 256
[  612.119088][T23341] exfat: Deprecated parameter 'namecase'
[  612.127354][T23341] exfat: Deprecated parameter 'namecase'
[  612.137395][T23341] exfat: Deprecated parameter 'namecase'
[  612.271088][T23341] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d)
[  613.788953][T23349] loop0: detected capacity change from 0 to 32768
[  613.814883][T23349] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  613.928089][T23349] XFS (loop0): Ending clean mount
[  613.987861][T17820] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  614.026638][T20757] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  614.149520][T17820] usb 5-1: Using ep0 maxpacket: 16
[  614.154323][T17820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  614.157860][T17820] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  614.196996][T17820] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  614.207102][T17820] usb 5-1: config 0 interface 0 has no altsetting 0
[  614.224515][T17820] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  614.227774][T17820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.232074][T17820] usb 5-1: Product: syz
[  614.233468][T17820] usb 5-1: Manufacturer: syz
[  614.239202][T17820] usb 5-1: SerialNumber: syz
[  614.256935][T17820] usb 5-1: config 0 descriptor??
[  614.671326][T17820] usb 5-1: USB disconnect, device number 30
[  614.889034][T23382] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  614.902680][T23382] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  614.924349][T23382] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  615.007636][T23382] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  615.420211][T23385] 9pnet_fd: p9_fd_create_tcp (23385): problem connecting socket to 127.0.0.1
[  616.222894][T23395] netlink: 'syz.1.6782': attribute type 1 has an invalid length.
[  616.226485][T23395] netlink: 'syz.1.6782': attribute type 2 has an invalid length.
[  616.352240][T23401] xt_hashlimit: size too large, truncated to 1048576
[  617.341721][T23424] loop0: detected capacity change from 0 to 131072
[  617.346627][T23424] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  617.348971][T23424] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  617.353405][T23424] F2FS-fs (loop0): invalid crc value
[  617.382255][T23424] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  617.395327][T23424] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  617.397683][T23424] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  617.436028][T23424] F2FS-fs (loop0): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  617.690512][T23453] overlayfs: failed to clone upperpath
[  617.863402][T23458] loop4: detected capacity change from 0 to 1024
[  617.933399][T23458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  617.997355][T21679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  618.230935][T23470] loop4: detected capacity change from 0 to 512
[  618.244702][T23470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  618.260744][T23470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.279254][T23470] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  618.322023][T21679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.490996][T23484] SET target dimension over the limit!
[  619.295816][T23536] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  620.013005][T23550] loop0: detected capacity change from 0 to 8
[  620.022988][T23550] SQUASHFS error: lzo decompression failed, data probably corrupt
[  620.027550][T23550] SQUASHFS error: Failed to read block 0x91: -5
[  620.033627][T23550] SQUASHFS error: Unable to read metadata cache entry [8f]
[  620.043466][T23550] SQUASHFS error: Unable to read inode 0x11f
[  620.267977][T19271] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  620.422579][T23570] loop0: detected capacity change from 0 to 512
[  620.438090][T19271] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  620.444490][T19271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.448692][T23570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  620.451320][T19271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.454849][T19271] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  620.460522][T19271] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  620.463683][T19271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.471438][T19271] usb 5-1: config 0 descriptor??
[  620.490348][T23570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  620.495388][T23570] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  620.520237][T23570] EXT4-fs error (device loop0): __ext4_remount:6837: comm syz.0.6857: Abort forced by user
[  620.526637][T23570] EXT4-fs (loop0): Remounting filesystem read-only
[  620.529497][T23570] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000.
[  620.549004][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  620.732035][T23575] loop0: detected capacity change from 0 to 512
[  620.736557][T23575] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  620.741072][T23575] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  620.753580][T23575] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.6858: Invalid inode table block 1 in block_group 0
[  620.769408][T23575] loop0: lost filesystem error report for type 5 error -117
[  620.769805][T23575] EXT4-fs (loop0): Remounting filesystem read-only
[  620.774348][T23575] EXT4-fs (loop0): get root inode failed
[  620.776177][T23575] EXT4-fs (loop0): mount failed
[  620.778733][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  620.780959][    C1] EXT4-fs (loop0): initial error at time 1781312553: __ext4_get_inode_loc:4885
[  620.783861][    C1] EXT4-fs (loop0): last error at time 1781312553: __ext4_get_inode_loc:4885
[  621.004951][T19271] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd
[  621.019831][T19271] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  621.666855][T19271] usb 5-1: USB disconnect, device number 31
[  621.819343][T23584] loop0: detected capacity change from 0 to 512
[  621.823047][T23584] EXT4-fs: Ignoring removed nomblk_io_submit option
[  621.837062][T23584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  621.842524][T23584] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  621.941627][T23584] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.6860: Allocating blocks 41-42 which overlap fs metadata
[  621.947978][T23584] loop0: lost filesystem error report for type 5 error -117
[  621.951293][    C0] EXT4-fs (loop0): initial error at time 1781312554: ext4_mb_mark_diskspace_used:4222
[  621.956679][    C0] EXT4-fs (loop0): last error at time 1781312554: ext4_mb_mark_diskspace_used:4222
[  621.961672][T23584] EXT4-fs (loop0): Remounting filesystem read-only
[  621.963915][T23584] __quota_error: 4 callbacks suppressed
[  621.963926][T23584] Quota error (device loop0): write_blk: dquota write failed
[  621.968254][T23584] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  621.968863][T23591] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  621.971566][T23584] Quota error (device loop0): write_blk: dquota write failed
[  621.971655][T23584] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  621.971728][T23584] EXT4-fs (loop0): 1 truncate cleaned up
[  621.972533][T23584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  621.975696][T23591] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  622.028164][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.208244][T23598] x_tables: ip6_tables: mh match: only valid for protocol 135
[  622.344616][T23606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6869'.
[  622.980573][T23622] vlan0: entered promiscuous mode
[  623.433530][T23638] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  625.008098][T23672] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6900'.
[  625.251205][T23610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  625.278291][T23692] xt_hashlimit: size too large, truncated to 1048576
[  626.246233][T19271] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  626.411290][T19271] usb 5-1: config index 0 descriptor too short (expected 149, got 148)
[  626.417864][T19271] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  626.431054][T19271] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  626.442894][T19271] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  626.450820][T19271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  626.460348][T19271] usb 5-1: SerialNumber: syz
[  626.469968][T19271] usb 5-1: 0:2 : does not exist
[  626.471984][T19271] usb 5-1: unit 4 not found!
[  626.664379][T23707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.668194][T23707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.050537][T23738] tipc: Cannot configure node identity twice
[  627.228571][T23744] overlayfs: failed to clone upperpath
[  627.242422][T23744] overlayfs: failed to clone upperpath
[  628.007997][T23767] : renamed from team_slave_1 (while UP)
[  628.086260][T23769] loop0: detected capacity change from 0 to 2048
[  628.109242][T20762] udevd[20762]: incorrect nilfs2 checksum on /dev/loop0
[  628.133072][T23769] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  628.179946][T23770] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  628.184487][T20762] udevd[20762]: incorrect nilfs2 checksum on /dev/loop0
[  628.540024][T17820] usb 5-1: USB disconnect, device number 32
[  628.932000][T23806] loop4: detected capacity change from 0 to 128
[  628.955781][T23804] xt_hashlimit: size too large, truncated to 1048576
[  629.028706][T23808] --map-set only usable from mangle table
[  629.591474][T23840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6970'.
[  629.708267][T23842] syzkaller0: entered promiscuous mode
[  629.715071][T23842] syzkaller0: entered allmulticast mode
[  629.748988][T23846] netlink: 'syz.1.6974': attribute type 21 has an invalid length.
[  630.628203][T23872] loop4: detected capacity change from 0 to 128
[  630.652926][T23872] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  630.657888][T23872] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  630.685355][T21679] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  631.227502][T23878] loop4: detected capacity change from 0 to 40427
[  631.265415][T23878] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  631.274744][T23878] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  631.286425][T23878] F2FS-fs (loop4): invalid crc value
[  631.383389][T23878] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  631.425141][T23878] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  631.428101][T23878] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  631.447831][T21679] bio_check_eod: 94 callbacks suppressed
[  631.447869][T21679] syz-executor: attempt to access beyond end of device
[  631.447869][T21679] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  631.462920][T21679] CPU: 0 UID: 0 PID: 21679 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  631.462942][T21679] Tainted: [L]=SOFTLOCKUP
[  631.462945][T21679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  631.462950][T21679] Call Trace:
[  631.462956][T21679]  <TASK>
[  631.462962][T21679]  dump_stack_lvl+0xe8/0x150
[  631.462987][T21679]  f2fs_stop_checkpoint+0x3c7/0x590
[  631.463005][T21679]  f2fs_write_end_io+0x1274/0x1740
[  631.463028][T21679]  __submit_merged_bio+0x256/0x6a0
[  631.463040][T21679]  __submit_merged_write_cond+0x3c9/0x4e0
[  631.463053][T21679]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  631.463072][T21679]  f2fs_write_data_pages+0x287e/0x34f0
[  631.463095][T21679]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  631.463120][T21679]  ? unwind_next_frame+0xa6/0x2550
[  631.463132][T21679]  ? rcu_is_watching+0x15/0xb0
[  631.463144][T21679]  ? __kasan_check_byte+0x12/0x40
[  631.463160][T21679]  ? __pfx_hlock_conflict+0x10/0x10
[  631.463172][T21679]  ? __bfs+0x153/0x290
[  631.463179][T21679]  ? __pfx_hlock_conflict+0x10/0x10
[  631.463194][T21679]  ? lockdep_unlock+0x5d/0xd0
[  631.463201][T21679]  ? __lock_acquire+0x146e/0x2cf0
[  631.463219][T21679]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  631.463230][T21679]  do_writepages+0x32e/0x550
[  631.463248][T21679]  ? do_raw_spin_unlock+0x4d/0x210
[  631.463261][T21679]  filemap_fdatawrite+0x1e9/0x2f0
[  631.463273][T21679]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  631.463297][T21679]  ? do_raw_spin_unlock+0x4d/0x210
[  631.463309][T21679]  f2fs_sync_dirty_inodes+0x30e/0x830
[  631.463328][T21679]  f2fs_write_checkpoint+0x9df/0x26a0
[  631.463350][T21679]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  631.463379][T21679]  kill_f2fs_super+0x314/0x730
[  631.463392][T21679]  ? __pfx_kill_f2fs_super+0x10/0x10
[  631.463407][T21679]  ? lockdep_hardirqs_on+0x7a/0x110
[  631.463427][T21679]  deactivate_locked_super+0xbc/0x130
[  631.463441][T21679]  cleanup_mnt+0x437/0x4d0
[  631.463454][T21679]  ? _raw_spin_unlock_irq+0x23/0x50
[  631.463468][T21679]  task_work_run+0x1d9/0x270
[  631.463491][T21679]  ? __pfx_task_work_run+0x10/0x10
[  631.463505][T21679]  exit_to_user_mode_loop+0x193/0x680
[  631.463514][T21679]  ? rcu_is_watching+0x15/0xb0
[  631.463523][T21679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.463534][T21679]  do_syscall_64+0x353/0x580
[  631.463542][T21679]  ? trace_irq_disable+0x3b/0x140
[  631.463559][T21679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.463567][T21679] RIP: 0033:0x7f768239e097
[  631.463577][T21679] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  631.463584][T21679] RSP: 002b:00007ffebe9459d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  631.463595][T21679] RAX: 0000000000000000 RBX: 00007f76824321ca RCX: 00007f768239e097
[  631.463600][T21679] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebe945a90
[  631.463604][T21679] RBP: 00007ffebe945a90 R08: 00007ffebe946a90 R09: 00000000ffffffff
[  631.463609][T21679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffebe946b20
[  631.463614][T21679] R13: 00007f76824321ca R14: 00000000000a0b8b R15: 00007ffebe946b60
[  631.463627][T21679]  </TASK>
[  631.463631][T21679] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  632.030236][   T33] audit: type=1326 audit(1781312565.509:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.048370][   T33] audit: type=1326 audit(1781312565.519:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.063607][   T33] audit: type=1326 audit(1781312565.519:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.075295][T19271] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  632.078884][   T33] audit: type=1326 audit(1781312565.519:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.093764][   T33] audit: type=1326 audit(1781312565.519:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.110797][   T33] audit: type=1326 audit(1781312565.561:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.121966][   T33] audit: type=1326 audit(1781312565.561:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.129704][   T33] audit: type=1326 audit(1781312565.572:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.137307][   T33] audit: type=1326 audit(1781312565.572:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.1.6996" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b4119ce59 code=0x7ffc0000
[  632.250173][T19271] usb 5-1: not running at top speed; connect to a high speed hub
[  632.254531][T19271] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 204, changing to 4
[  632.267287][T19271] usb 5-1: string descriptor 0 read error: -22
[  632.271748][T19271] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  632.286496][T23907] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  632.288449][T19271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.316083][T19271] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  632.499041][T19271] usb 5-1: 2:1: invalid format type 0x1003 is detected, processed as PCM
[  632.502608][T19271] usb 5-1: 2:1 : sample bitwidth 255 in over sample bytes 3
[  632.509271][T19271] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  632.573890][T19271] usb 5-1: USB disconnect, device number 33
[  632.864248][T23914] loop0: detected capacity change from 0 to 2048
[  632.877415][T23914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  633.684835][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  633.885772][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7015'.
[  634.058672][T23965] loop0: detected capacity change from 0 to 512
[  634.062286][T23965] EXT4-fs: Ignoring removed oldalloc option
[  634.067837][T23965] EXT4-fs: Ignoring removed nobh option
[  634.110144][T23965] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.7018: ea_inode file size=7 entry size=6
[  634.130303][T23965] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.7018: iget: bad extra_isize 90 (inode size 256)
[  634.140548][T23965] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  634.141068][T23965] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.7018: error while reading EA inode 11 err=-117
[  634.144572][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  634.144591][    C0] EXT4-fs (loop0): initial error at time 1781312567: ext4_xattr_inode_iget:441: inode 11
[  634.144643][    C0] EXT4-fs (loop0): last error at time 1781312567: ext4_xattr_inode_iget:441: inode 11
[  634.177267][T23965] loop0: lost filesystem error report for type 5 error -117
[  634.177682][T23965] EXT4-fs (loop0): 1 orphan inode deleted
[  634.185965][T23965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.261205][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.502260][T23985] loop0: detected capacity change from 0 to 2048
[  634.530430][T23985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.568965][T23985] EXT4-fs (loop0): shut down requested (2)
[  634.669064][T20757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.922109][T24014] loop4: detected capacity change from 0 to 256
[  637.453315][T24085] loop4: detected capacity change from 0 to 2048
[  637.493177][T24086] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  637.570647][T24085] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12
[  637.664051][T24085] Remounting filesystem read-only
[  637.999771][ T8116] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  638.076535][T24104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7065'.
[  638.088432][T24104] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7065'.
[  638.092709][T24104] netlink: 'syz.1.7065': attribute type 5 has an invalid length.
[  638.096900][T24104] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7065'.
[  638.161484][ T8116] usb 5-1: Using ep0 maxpacket: 16
[  638.168813][ T8116] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30
[  638.174843][ T8116] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252
[  638.186960][ T8116] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  638.192183][ T8116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.208551][ T8116] usb 5-1: config 0 descriptor??
[  638.619460][ T8116] hid_parser_main: 30 callbacks suppressed
[  638.619482][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.632063][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.637191][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.642959][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.648511][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.654003][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.659035][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.664170][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.670942][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.675885][ T8116] elecom 0003:056E:010D.0014: unknown main item tag 0x0
[  638.695739][ T8116] elecom 0003:056E:010D.0014: hidraw0: USB HID v0.01 Device [HID 056e:010d] on usb-dummy_hcd.4-1/input0
[  638.799365][ T8116] usb 5-1: USB disconnect, device number 34
[  638.804707][T24115] loop0: detected capacity change from 0 to 32768
[  638.903363][T24115] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  639.018785][T20757] ocfs2: Unmounting device (7,0) on (node local)
[  639.178242][T24125] loop0: detected capacity change from 0 to 256
[  639.217722][T24125] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  639.510644][T24142] loop4: detected capacity change from 0 to 2048
[  639.518658][T24142] udf: Bad value for 'volume'
[  639.532642][T24142] gfs2: Unexpected value for 'discard'
[  639.606769][T24146] loop4: detected capacity change from 0 to 256
[  639.679988][T24146] FAT-fs (loop4): Directory bread(block 64) failed
[  639.686684][T24146] FAT-fs (loop4): Directory bread(block 65) failed
[  639.692217][T24146] FAT-fs (loop4): Directory bread(block 66) failed
[  639.697944][T24146] FAT-fs (loop4): Directory bread(block 67) failed
[  639.705781][T24146] FAT-fs (loop4): Directory bread(block 68) failed
[  639.712132][T24146] FAT-fs (loop4): Directory bread(block 69) failed
[  639.719972][T24146] FAT-fs (loop4): Directory bread(block 70) failed
[  639.725754][T24146] FAT-fs (loop4): Directory bread(block 71) failed
[  639.731166][T24146] FAT-fs (loop4): Directory bread(block 72) failed
[  639.739147][T24146] FAT-fs (loop4): Directory bread(block 73) failed
[  640.676701][T24168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7091'.
[  640.946504][T24181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7097'.
[  641.998210][T24212] loop0: detected capacity change from 0 to 4096
[  642.001875][T24212] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  642.014310][T24212] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  642.017437][T24212] ntfs3(loop0): ino=19, mi_enum_attr
[  642.025332][T24212] ntfs3(loop0): failed to convert "c46c" to cp861
[  642.028191][T24212] ntfs3(loop0): ino=20, mi_enum_attr
[  642.708606][T24230] tipc: Started in network mode
[  642.712126][T24230] tipc: Node identity ac14140f, cluster identity 4711
[  642.719015][T24230] tipc: New replicast peer: 255.255.255.255
[  642.728513][T24230] tipc: Enabled bearer <udp:syz2>, priority 10
[  642.801150][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7121'.
[  643.016603][T24245] xt_hashlimit: max too large, truncated to 1048576
[  643.231475][T24253] loop4: detected capacity change from 0 to 2048
[  643.288133][T24253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.326080][T24253] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  643.488931][T24263] : renamed from bond_slave_0 (while UP)
[  643.780420][ T5704] tipc: Node number set to 2886997007
[  643.918918][T21679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.294640][ T8116] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  644.627446][T24290] loop0: detected capacity change from 0 to 1024
[  644.632572][T24290] hfsplus: Bad value for 'uid'
[  644.638495][ T8116] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  644.677484][ T8116] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  644.681536][ T8116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.687422][ T8116] usb 5-1: Product: syz
[  644.691080][ T8116] usb 5-1: Manufacturer: syz
[  644.695317][ T8116] usb 5-1: SerialNumber: syz
[  644.705383][ T8116] usb 5-1: config 0 descriptor??
[  645.693619][ T8116] cdc_subset 5-1:0.0: probe with driver cdc_subset failed with error -22
[  645.898269][ T5704] usb 5-1: USB disconnect, device number 35
[  647.609825][T24331] loop0: detected capacity change from 0 to 4096
[  647.628727][T24331] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  647.987981][T24338] loop0: detected capacity change from 0 to 128
[  648.066737][T24338] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000)
[  648.073202][T24338] FAT-fs (loop0): Filesystem has been set read-only
[  648.199267][T24345] loop0: detected capacity change from 0 to 512
[  648.738347][T24349] loop4: detected capacity change from 0 to 131072
[  648.748933][T24349] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  648.790846][T24349] XFS (loop4): Starting recovery (logdev: internal)
[  648.806914][T24349] XFS (loop4): Ending recovery (logdev: internal)
[  648.876740][T21679] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  648.997977][T24363] wg1: entered promiscuous mode
[  649.000244][T24363] wg1: entered allmulticast mode
[  649.574103][T24382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7180'.
[  649.622716][T24382] vxlan0: entered promiscuous mode
[  649.631675][T24164] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  649.636087][T24164] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  649.649815][T24164] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  649.656983][T24164] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  650.343078][T17477] Bluetooth: hci4: command 0x0406 tx timeout
[  650.478408][   T33] audit: type=1326 audit(1781312584.869:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.4.7183" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768239ce59 code=0x7ffc0000
[  650.519958][   T33] audit: type=1326 audit(1781312584.869:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.4.7183" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768239ce59 code=0x7ffc0000
[  650.557227][   T33] audit: type=1326 audit(1781312584.890:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.4.7183" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768239ce59 code=0x7ffc0000
[  650.607337][   T33] audit: type=1326 audit(1781312584.932:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.4.7183" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768239ce59 code=0x7ffc0000
[  650.644360][   T33] audit: type=1326 audit(1781312584.932:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.4.7183" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768239ce59 code=0x7ffc0000
[  650.820754][ T1112] Bluetooth: hci6: Frame reassembly failed (-84)
[  652.559894][T24432] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7205'.
[  652.563203][T24432] veth0_to_bond: default FDB implementation only supports local addresses
[  652.677368][T24443] netlink: 'syz.0.7208': attribute type 8 has an invalid length.
[  652.740533][T17477] Bluetooth: hci6: command 0x1003 tx timeout
[  652.745177][T21681] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  654.981729][T24503] sctp: [Deprecated]: syz.4.7233 (pid 24503) Use of struct sctp_assoc_value in delayed_ack socket option.
[  654.981729][T24503] Use struct sctp_sack_info instead
[  655.133096][T24507] overlayfs: failed to resolve 'w5T)`)YFnA@T<3ڂ$rcnH<pr>wC" -8/': -2
[  655.741057][T24525] loop4: detected capacity change from 0 to 128
[  655.761487][T24525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  655.769060][T24525] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  655.790170][T24525] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3 (only 1 groups)
[  655.815011][T21679] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  656.104266][T24535] loop4: detected capacity change from 0 to 128
[  656.123872][T24535] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  656.133825][T24535] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  656.235009][T21679] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  656.386870][T24544] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  656.401200][T24544] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  656.428166][T24544] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  657.305065][T24593] trusted_key: encrypted_key: keyword 'ne' not recognized
[  658.005061][T24615] loop0: detected capacity change from 0 to 4096
[  658.034538][T24615] ntfs3(loop0): ino=0, ni_load_mi_ex
[  658.043857][T24615] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  658.131762][T24615] ntfs3(loop0): volume is dirty and "force" flag is not set!
[  658.584522][T24633] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7288'.
[  658.612072][T24631] loop4: detected capacity change from 0 to 4096
[  658.627489][T24631] EXT4-fs: inline encryption not supported
[  658.630573][T24631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  658.633896][T24631] EXT4-fs (loop4): Test dummy encryption mode enabled
[  658.645101][T24631] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  658.650195][T24631] System zones: 0-5
[  658.655021][T24631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  658.733522][T21679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.958000][T24649] loop0: detected capacity change from 0 to 1024
[  659.006575][T24645] libceph: resolve '96.' (ret=-3): failed
[  659.253963][T24671] fuse: fd is not a fuse device
[  659.344516][T24679] loop4: detected capacity change from 0 to 16
[  659.354179][T24679] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  659.399439][T24681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7308'.
[  659.406761][T24681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7308'.
[  659.423433][T24681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7308'.
[  660.422372][T24718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7326'.
[  661.020062][T24740] tun0: tun_chr_ioctl cmd 1074025677
[  661.028617][T24740] tun0: linktype set to 6
[  662.242131][T24759] trusted_key: syz.4.7344 sent an empty control message without MSG_MORE.
[  662.288188][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7345'.
[  662.291721][T24761] netlink: 'syz.4.7345': attribute type 5 has an invalid length.
[  662.294271][T24761] netlink: 'syz.4.7345': attribute type 8 has an invalid length.
[  662.300550][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7345'.
[  662.314433][T24761] geneve2: entered promiscuous mode
[  662.317184][T24761] geneve2: entered allmulticast mode
[  662.320168][T24170] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  662.327130][T24170] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  662.331582][T24170] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  662.344182][T24170] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  662.957378][   T34] INFO: task syz.8.5672:20461 blocked for more than 143 seconds.
[  662.961166][   T34]       Tainted: G             L      syzkaller #0
[  662.964034][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  662.967509][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  662.969920][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  662.972717][ T1381] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  662.975262][   T34] task:syz.8.5672      state:D stack:28064 pid:20461 tgid:20460 ppid:19087  task_flags:0x400140 flags:0x00080002
[  662.982028][   T34] Call Trace:
[  662.983713][   T34]  <TASK>
[  662.985169][   T34]  __schedule+0x1821/0x5740
[  662.987339][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  662.989608][   T34]  ? __pfx___schedule+0x10/0x10
[  662.992404][   T34]  ? schedule+0x90/0x360
[  662.994448][   T34]  schedule+0x164/0x360
[  662.996410][   T34]  schedule_preempt_disabled+0x13/0x30
[  662.998831][   T34]  rwsem_down_read_slowpath+0x6d9/0x940
[  663.001814][   T34]  ? rwsem_down_read_slowpath+0x596/0x940
[  663.004417][   T34]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  663.007128][   T34]  ? super_lock+0x2d6/0x3d0
[  663.009199][   T34]  down_read+0x99/0x2e0
[  663.011506][   T34]  ? super_lock+0x263/0x3d0
[  663.013688][   T34]  super_lock+0x2d6/0x3d0
[  663.015682][   T34]  ? __pfx_super_lock+0x10/0x10
[  663.017853][   T34]  ? do_raw_spin_lock+0x12b/0x2f0
[  663.020679][   T34]  ? do_raw_spin_unlock+0x4d/0x210
[  663.023047][   T34]  __iterate_supers+0x126/0x250
[  663.025157][   T34]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  663.027643][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.031283][   T34]  __ia32_sys_sync+0xa0/0x120
[  663.033514][   T34]  ? __pfx___ia32_sys_sync+0x10/0x10
[  663.035870][   T34]  do_syscall_64+0x174/0x580
[  663.037938][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.040885][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.043532][   T34] RIP: 0033:0x7fe4a519ce59
[  663.045506][   T34] RSP: 002b:00007fe4a6029028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  663.049343][   T34] RAX: ffffffffffffffda RBX: 00007fe4a5415fa0 RCX: 00007fe4a519ce59
[  663.052679][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  663.056105][   T34] RBP: 00007fe4a5415fa0 R08: 0000000000000000 R09: 0000000000000000
[  663.059891][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  663.063300][   T34] R13: 00007fe4a5416038 R14: 00007fe4a5415fa0 R15: 00007ffe4718ea58
[  663.066789][   T34]  </TASK>
[  663.067773][ T5704] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  663.072606][   T34] INFO: task syz.9.5709:20551 blocked for more than 143 seconds.
[  663.076753][   T34]       Tainted: G             L      syzkaller #0
[  663.082693][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  663.086958][   T34] task:syz.9.5709      state:D stack:26768 pid:20551 tgid:20550 ppid:19466  task_flags:0x400040 flags:0x00080002
[  663.091814][   T34] Call Trace:
[  663.093365][   T34]  <TASK>
[  663.094640][   T34]  __schedule+0x1821/0x5740
[  663.097210][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  663.099429][   T34]  ? __pfx___schedule+0x10/0x10
[  663.101608][   T34]  ? schedule+0x90/0x360
[  663.103554][   T34]  schedule+0x164/0x360
[  663.106327][   T34]  schedule_preempt_disabled+0x13/0x30
[  663.108785][   T34]  rwsem_down_read_slowpath+0x6d9/0x940
[  663.111179][   T34]  ? rwsem_down_read_slowpath+0x596/0x940
[  663.113692][   T34]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  663.116716][   T34]  ? super_lock+0x2d6/0x3d0
[  663.118818][   T34]  down_read+0x99/0x2e0
[  663.120644][   T34]  ? super_lock+0x263/0x3d0
[  663.122573][   T34]  super_lock+0x2d6/0x3d0
[  663.124886][   T34]  ? __pfx_super_lock+0x10/0x10
[  663.126979][   T34]  ? do_raw_spin_unlock+0x4d/0x210
[  663.129262][   T34]  __iterate_supers+0x126/0x250
[  663.131395][   T34]  ? __pfx_drop_pagecache_sb+0x10/0x10
[  663.133766][   T34]  drop_caches_sysctl_handler+0x97/0x170
[  663.137464][   T34]  proc_sys_call_handler+0x4c8/0x830
[  663.139899][   T34]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  663.142442][   T34]  vfs_write+0x61d/0xb90
[  663.144700][   T34]  ? __pfx_vfs_write+0x10/0x10
[  663.146835][   T34]  ? __fget_files+0x2a/0x420
[  663.148839][   T34]  ksys_write+0x150/0x270
[  663.150925][   T34]  ? __pfx_ksys_write+0x10/0x10
[  663.153467][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.156128][   T34]  do_syscall_64+0x174/0x580
[  663.158256][   T34]  ? trace_irq_disable+0x3b/0x140
[  663.160323][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.163193][   T34] RIP: 0033:0x7febbdf9ce59
[  663.165210][   T34] RSP: 002b:00007febbc1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  663.168780][   T34] RAX: ffffffffffffffda RBX: 00007febbe215fa0 RCX: 00007febbdf9ce59
[  663.178571][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  663.183542][   T34] RBP: 00007febbe032d6f R08: 0000000000000000 R09: 0000000000000000
[  663.186964][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  663.190328][   T34] R13: 00007febbe216038 R14: 00007febbe215fa0 R15: 00007fff576f8898
[  663.194067][   T34]  </TASK>
[  663.195616][   T34] 
[  663.195616][   T34] Showing all locks held in the system:
[  663.198999][   T34] 1 lock held by khungtaskd/34:
[  663.201805][   T34]  #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  663.205960][   T34] 2 locks held by getty/5447:
[  663.208132][   T34]  #0: ffff88816f9dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  663.212773][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  663.217232][   T34] 6 locks held by kworker/1:4/5704:
[  663.219574][   T34]  #0: ffff888168a8e540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  663.224973][   T34]  #1: ffffc9000480fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  663.230402][   T34]  #2: ffff888170f9b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  663.234352][   T34]  #3: ffff888171000568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[  663.239881][   T34]  #4: ffff88823c624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  663.242881][ T5704] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  663.243834][   T34]  #5: ffffffff8e94f0a0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x123/0xb20
[  663.251816][   T34] 2 locks held by syz-executor/17628:
[  663.251968][ T5704] usb 5-1: config 0 has no interface number 0
[  663.254324][   T34] 1 lock held by syz.8.5672/20461:
[  663.259492][   T34]  #0: ffff8881702520d8 (&type->s_umount_key#92){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  663.261247][ T5704] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  663.263932][   T34] 3 locks held by syz.9.5709/20551:
[  663.271500][   T34]  #0: ffff8881716db6f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  663.276754][   T34]  #1: ffff88810d362410 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  663.276942][ T5704] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  663.285124][   T34]  #2: ffff8881702520d8 (&type->s_umount_key#92){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  663.291741][   T34] 
[  663.292908][   T34] =============================================
[  663.292908][   T34] 
[  663.294523][ T5704] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  663.296725][   T34] NMI backtrace for cpu 0
[  663.296742][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  663.296758][   T34] Tainted: [L]=SOFTLOCKUP
[  663.296763][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  663.296771][   T34] Call Trace:
[  663.296778][   T34]  <TASK>
[  663.296784][   T34]  dump_stack_lvl+0xe8/0x150
[  663.296807][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  663.296834][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  663.296852][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  663.296869][   T34]  sys_info+0x135/0x170
[  663.296884][   T34]  watchdog+0xfd3/0x1030
[  663.296908][   T34]  ? watchdog+0x1c9/0x1030
[  663.296929][   T34]  kthread+0x389/0x470
[  663.296948][   T34]  ? __pfx_watchdog+0x10/0x10
[  663.296963][   T34]  ? __pfx_kthread+0x10/0x10
[  663.296980][   T34]  ret_from_fork+0x514/0xb70
[  663.296997][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  663.297010][   T34]  ? __switch_to+0xc79/0x1410
[  663.297031][   T34]  ? __pfx_kthread+0x10/0x10
[  663.297047][   T34]  ret_from_fork_asm+0x1a/0x30
[  663.297071][   T34]  </TASK>
[  663.297076][   T34] Sending NMI from CPU 0 to CPUs 1:
[  663.305740][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  663.306703][    C1] NMI backtrace for cpu 1
[  663.306721][    C1] CPU: 1 UID: 0 PID: 5704 Comm: kworker/1:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  663.306737][    C1] Tainted: [L]=SOFTLOCKUP
[  663.306741][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  663.306751][    C1] Workqueue: usb_hub_wq hub_event
[  663.306777][    C1] RIP: 0010:io_serial_out+0x7c/0xc0
[  663.306800][    C1] Code: ef 80 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3c 47 ec fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 17 52 65 06 cc 44 89 f9 80 e1 07 38 c1
[  663.306810][    C1] RSP: 0018:ffffc9000480ef10 EFLAGS: 00000002
[  663.306820][    C1] RAX: 0000000000000033 RBX: 0000000000000033 RCX: 0000000000000000
[  663.306827][    C1] RDX: 00000000000003f8 RSI: 000000000005049e RDI: 000000000005049f
[  663.306835][    C1] RBP: 00000000000003f8 R08: ffff8881046e0237 R09: 1ffff110208dc046
[  663.306842][    C1] R10: dffffc0000000000 R11: ffffffff8544c7c0 R12: dffffc0000000000
[  663.306850][    C1] R13: ffffffff9a4779a6 R14: ffffffff9a78dac0 R15: 0000000000000000
[  663.306857][    C1] FS:  0000000000000000(0000) GS:ffff8882a929f000(0000) knlGS:0000000000000000
[  663.306865][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  663.306873][    C1] CR2: 00007f4b413e8158 CR3: 0000000104352000 CR4: 00000000000006f0
[  663.306909][    C1] Call Trace:
[  663.306918][    C1]  <TASK>
[  663.306926][    C1]  serial8250_console_write+0x140c/0x1ba0
[  663.306948][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  663.306963][    C1]  ? console_flush_all+0x123/0xb20
[  663.306981][    C1]  ? do_raw_spin_unlock+0x4d/0x210
[  663.306996][    C1]  ? console_flush_all+0x123/0xb20
[  663.307009][    C1]  console_flush_all+0x718/0xb20
[  663.307025][    C1]  ? console_flush_all+0x123/0xb20
[  663.307040][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  663.307055][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  663.307071][    C1]  console_unlock+0xd1/0x1c0
[  663.307084][    C1]  ? vprintk_emit+0x2cf/0x560
[  663.307097][    C1]  ? __pfx_console_unlock+0x10/0x10
[  663.307111][    C1]  ? vprintk_emit+0x2cf/0x560
[  663.307122][    C1]  ? vprintk_emit+0x2cf/0x560
[  663.307135][    C1]  vprintk_emit+0x485/0x560
[  663.307149][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  663.307163][    C1]  dev_vprintk_emit+0x355/0x420
[  663.307213][    C1]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  663.307232][    C1]  dev_printk_emit+0xee/0x140
[  663.307243][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  663.307259][    C1]  ? __pfx_dev_printk_emit+0x10/0x10
[  663.307273][    C1]  ? __dev_printk+0x131/0x190
[  663.307289][    C1]  _dev_info+0x11e/0x180
[  663.307328][    C1]  ? __pfx__dev_info+0x10/0x10
[  663.307341][    C1]  ? usb_match_device+0x19f/0x550
[  663.307353][    C1]  ? usb_detect_static_quirks+0x430/0x470
[  663.307371][    C1]  ? krealloc_node_align_noprof+0x220/0x390
[  663.307392][    C1]  announce_device+0x117/0x2c0
[  663.307408][    C1]  usb_new_device+0x4d8/0x16f0
[  663.307424][    C1]  ? __pfx_usb_new_device+0x10/0x10
[  663.307439][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  663.307456][    C1]  hub_event+0x2a1c/0x4f30
[  663.307470][    C1]  ? do_raw_spin_unlock+0x4d/0x210
[  663.307504][    C1]  ? __pfx_hub_event+0x10/0x10
[  663.307518][    C1]  ? process_scheduled_works+0xa70/0x1860
[  663.307532][    C1]  ? process_scheduled_works+0xa70/0x1860
[  663.307543][    C1]  ? process_scheduled_works+0xa70/0x1860
[  663.307554][    C1]  process_scheduled_works+0xb5d/0x1860
[  663.307573][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  663.307586][    C1]  ? assign_work+0x3d5/0x5e0
[  663.307598][    C1]  worker_thread+0xa53/0xfc0
[  663.307618][    C1]  kthread+0x389/0x470
[  663.307632][    C1]  ? __pfx_worker_thread+0x10/0x10
[  663.307642][    C1]  ? __pfx_kthread+0x10/0x10
[  663.307655][    C1]  ret_from_fork+0x514/0xb70
[  663.307670][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  663.307680][    C1]  ? __switch_to+0xc79/0x1410
[  663.307695][    C1]  ? __pfx_kthread+0x10/0x10
[  663.307706][    C1]  ret_from_fork_asm+0x1a/0x30
[  663.307721][    C1]  </TASK>
[  663.309496][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  663.309515][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  663.309533][   T34] Tainted: [L]=SOFTLOCKUP
[  663.309538][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  663.309547][   T34] Call Trace:
[  663.309553][   T34]  <TASK>
[  663.309560][   T34]  vpanic+0x56c/0xa60
[  663.309581][   T34]  ? __pfx___schedule+0x10/0x10
[  663.309603][   T34]  ? __pfx_vpanic+0x10/0x10
[  663.309623][   T34]  panic+0xc5/0xd0
[  663.309638][   T34]  ? __pfx_panic+0x10/0x10
[  663.309653][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  663.309675][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  663.309695][   T34]  watchdog+0x102c/0x1030
[  663.309718][   T34]  ? watchdog+0x1c9/0x1030
[  663.309740][   T34]  kthread+0x389/0x470
[  663.309758][   T34]  ? __pfx_watchdog+0x10/0x10
[  663.309774][   T34]  ? __pfx_kthread+0x10/0x10
[  663.309791][   T34]  ret_from_fork+0x514/0xb70
[  663.309809][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  663.309831][   T34]  ? __switch_to+0xc79/0x1410
[  663.309852][   T34]  ? __pfx_kthread+0x10/0x10
[  663.309869][   T34]  ret_from_fork_asm+0x1a/0x30
[  663.309894][   T34]  </TASK>
[  663.313879][   T34] Kernel Offset: disabled
