last executing test programs:

6m15.325855273s ago: executing program 1 (id=436):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1})
r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="a2b2536b0513", 0x0, 0x0, 0x0, 0x0, 0x0})

6m15.238627228s ago: executing program 1 (id=439):
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001240)=ANY=[@ANYBLOB="1201010200000008ac053602600001020301090224000101e460bc0904000102030102"], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

6m13.858849249s ago: executing program 1 (id=457):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000100850000005600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m13.858421558s ago: executing program 1 (id=458):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

6m13.45457854s ago: executing program 1 (id=460):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x0, r2, 0x3d}, 0x10)

6m12.725125978s ago: executing program 1 (id=462):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r1 = fanotify_init(0x20, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = dup(r2)
fanotify_mark(r1, 0x201, 0x20, r3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6m12.510729534s ago: executing program 32 (id=462):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r1 = fanotify_init(0x20, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = dup(r2)
fanotify_mark(r1, 0x201, 0x20, r3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m33.374329841s ago: executing program 0 (id=890):
r0 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x80002101})
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001480)={0x53b, 0xd, 0x5, "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"})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)

5m33.279986251s ago: executing program 0 (id=892):
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {0x1, 0x0, 0x4000}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000)

5m33.170597807s ago: executing program 0 (id=894):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$eJzs3b9PHFceAPA3Az6Dz/ZhnwufdNKtdJbudHdC4OoSLAVjbAw2ceTELtKsF1jbJAtrwRKlcEE6S6kipYhSWImUjspCSu38CWlSOrWlpEgTKZIVop2dxcywGzaEhdj6fIod5v2G78zbN8Xw4lTt7vxyYX65UFosVGdvL58tvFetrCyUQ7xPWvZ/aP/6pzPduE5+rc0v92zktHLtwqU3b54N4au5b55ubGxshLre0NLwlp9//OH+7NZjU5yrU2+3dWt75e0Qwqlt46rrCSH0hRCiEML5NG0sPfaHEI6leTfvf3irsEejefSkfK74bPrB+siZqbWH6+1/9yiETyt/+9+dhe/+2TPy7X/2qHsAAAAAAAAAAAAAAAAAAF5wE9ev3XhjaDg8jkLvWrT9fd2J9Nju/diNPfOP7v+yAAAAAAAAAAAAAAAAAAAA8Af1/P3/QnSyxfv/4+lxtE39jde6P0a6Z/L1a+MXh4bT/d+jbfn/T5O+P98TTrTY9z2///v5XP3W+79v72e3muNr9jsQongwcx7Hg4MhfJ5u/H46OhJXqsu1/96urizO7dkwXljZ+Dd2789EJ93Qv8P4x2O59ru///9ft11N9fNbe3eJvdSy8e9pW+6LD6KO7v8LuXr7EX92Lxv/3iStf2uB0cYEUI//R707x38813634n88hFCI6mMtZGaA+hqmnt5uvUJWNv6HkrTM1Jn+Idvd/z/l4n8x1/5Bzf+r+S8iWsrG/09JWl+mxOHkM4l/vPP9fynX/kHEvz7+Vd//HcnGvxHr0JspkvwlO53/J3Ltt43/4d837htxOs7jUeYKWIsa6e3+Xx1Z2fj3bct//vwXd7T+u5yrv1/Pf81+m89/zen/31Hj+Y/WsvHvb1uu0/t/Mlev2/P/aLL+Y7ey8T+SpGXXzgPJZ6fxn8q13634J08lfc34P59Pfj7cSP/M+q8j2fj/uZEYby2xmnwm679o5/X/lVz7B7H+q49/Ne5ury+LbPyPti1Xj//XHXz/X83V6378Qxiy1t+1bPyPtS2X3P99O8d/Olev2/H/VzcbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgBjKXHgRDFg5nzOB4cDOFCen46HIlmSnPFmUp19t3lEMbT9EI4Gd2pVGdKleL8YnWuXCxVKtXZEC6m+adCX7RcqdaKC6V7lzbb6o/ulktLtZlyqRZCmEjT/x6ONduama8tlO6FEC5v5v0lri7du1taLM7NL706NDQ0FCY3x3AiKr9fKy/WGr03ckOY2qw7EG0ZXJJ9ZXMsR6N3qitLi6VKkn51S51KdbZU2VJnOs37OJyIaksri7OlWrlYqd5p9neQRtPj+OT1t65fHd6WfytqHMf2d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EaPR175JITQ2ziLQwijzR+iVuUfPSmfKz6bfrA+cmZq7eH603blAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgF3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8eoCQRRGIDfTIokXY6Rakm6tBsCISmyQfAEegwPo0fxEt7BwsLWQgTZRV13YRutvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY71E1/n97j0jxtH+MWE5X6/P8t67zz+77D3eYkdv5+au+Tn+YrvKP+mhT5mO6284m0VEbi9aetPfpss9z71x9+9Y3X9P3JVIuIqKs89eUc1EMewsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwA4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA////gRtE")
mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000022, &(0x7f0000000340)='heartbeat=none')

5m32.774199396s ago: executing program 0 (id=901):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)

5m32.584916218s ago: executing program 0 (id=904):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113b00000000008510000002000000850000001900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

5m32.188469151s ago: executing program 0 (id=910):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x5)

5m30.963373204s ago: executing program 33 (id=910):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x5)

4m9.495177063s ago: executing program 3 (id=1809):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xa006}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0)

4m8.763968994s ago: executing program 3 (id=1826):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})

4m8.692265842s ago: executing program 3 (id=1827):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000140), 0x4)

4m8.591265211s ago: executing program 3 (id=1832):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6b3, &(0x7f0000000780)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

4m8.512976605s ago: executing program 3 (id=1834):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0)

4m8.223536098s ago: executing program 3 (id=1844):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0)

4m8.114880776s ago: executing program 34 (id=1844):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0)

3m19.650334903s ago: executing program 5 (id=2480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034001"], 0xc0}}, 0x8040)

3m19.551976409s ago: executing program 5 (id=2482):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x2, 0x11, 0x1, 0x6, 0x6, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x7, 0x5200, 0x2, 0x8000000000000001, 0x3}]}, 0x30}}, 0x4000)

3m19.469686818s ago: executing program 5 (id=2484):
syz_emit_ethernet(0x106, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @private=0xa010101, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0)

3m19.414648288s ago: executing program 5 (id=2486):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000640)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x10, 0x6, 0x10001)

3m19.287315477s ago: executing program 5 (id=2488):
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3m18.773593579s ago: executing program 5 (id=2489):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

3m18.622261072s ago: executing program 35 (id=2489):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

3m13.592404998s ago: executing program 4 (id=2528):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x20, 0x0)

3m13.458892953s ago: executing program 4 (id=2530):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000200)="8dafaf", 0x3, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000000c0)={r2})

3m13.32504706s ago: executing program 4 (id=2531):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r4}})
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0)

3m13.258453268s ago: executing program 4 (id=2532):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$eJzs3d9rW+UbAPDnpO3W/fh+28EY6oUUduFkLl1bf0zwYl6J6HCg9zO0WRlNl9GkY60Dtwt3440MQcSB6L33Xg7/Af+KgQ6GjKIX3lROctKFNunSLF2z5vOBs73vOSd9z5P3PG/ek5OQAAbWRPpPLuLliPgmiRhr2jYc2caJ+n5rj2/OpksS6+uf/pVEkq1r7J9k/x/JKi9FxG9fRZzObW23srK6UCiViktZfbK6eG2ysrJ65spiYb44X7w6PTNz7q2Z6Xffebtnsb5+8Z/vP7n/4bmvT65998vDY3eTOB9Hs23NcTyDW82ViZjInpOROL9px6keNNZPkr0+ALoylOX5SKRjwFgMZVnf0vrY8zw0YJd9maY1MKAS+Q8DqjEPaFzb9+g6+IXx6P36BdDW+Ifr743EaO3a6PBaUr8yOljfml7vjveg/bSNX/+8dzddot37EAd70BDAJrduR8TZ4eGt41+SjX/dO9vBPpvbGLTXH9hL99P5zxut5j+5jflPNM9/Mkda5G43np7/uYc9aKatdP73Xsv578ZNq/GhrPa/2pxvJLl8pVRMx7b/R8SpGDmY1qci4oPWN0E+z609WG/XfvP8L13S9htzwew4Hg5vmv/NFaqFZ4+87tHtiFdazn+Tjf5PWvR/+nxc7LCNE8V7r7bb9vT4d9f6TxGvtez/J52ZbH9/crJ2Pkw2zoqt/r5z4vd27W8b/2jPw90i7f/D28c/njTfr63svI0fR/8tttvW7fl/IPmsVj6QrbtRqFaXpiIOJB9vXT/95LGNemP/NP5TJ7cf/1qd/4fSxO4w/jvH7zTvOrqz+HdXGv/cjvp/54UHH33xQ7v2O+v/N2ulU9maTsa/Tg/wWZ47AAAAAAAA6De5iDgaSS6/Uc7l8vn65zuOx+FcqVypnr5cXr46F7Xvyo7HSK5xp3us6fMQU9nnYRv16U31mYg4FhHfDh2q1fOz5dLcXgcPAAAAAAAAAAAAAAAAAAAAfeJIxGir7/+n/hhq/Zg2q4EX0TY/+Q3sc+3zP9vSi196AvqS138YXF3kv/cAYJ/w+g+DS/7D4JL/MLjkPwwu+Q+Dayf5//OFXTwQAAAAAAAAAAAAAAAAAAAAAAAAAAAA2B8uXriQLutrj2/OpvW56yvLC+XrZ+aKlYX84vJsfra8dC0/Xy7Pl4r52fLi0/5eqVy+NjUdyzcmq8VKdbKysnppsbx8tXrpymJhvnipOPJcogIAAAAAAAAAAAAAAAAAAIAXS2VldaFQKhWXFBS6Kgz3x2H0YSHXH4fRZWGvRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOK/AAAA//92vTrs")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x6, 0x0, 0x3, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c4746580820dacbf7966d61fdcf3350b3e1a311ef54ec22f51e0000000000000000000009000000000000000000000000ff070000e100", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x1]})
write$char_usb(r0, &(0x7f0000000080)="2206", 0x2)

3m13.115908491s ago: executing program 4 (id=2533):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000001440)={<r2=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000006c0)={0x8, 0x120, 0xfa00, {0x0, {0x55, 0x1, "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", 0xd, 0x81, 0x3, 0x8, 0x7, 0xf4, 0x5, 0x1}, r2}}, 0x128)

3m12.395988239s ago: executing program 4 (id=2535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x800}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0)

3m11.784562336s ago: executing program 36 (id=2535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x800}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0)

2m54.648709217s ago: executing program 6 (id=2760):
r0 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x2}}], 0x1, 0x8000)

2m54.544556081s ago: executing program 6 (id=2762):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0xb5, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x140, 0x0, 0x0)

2m53.570095843s ago: executing program 6 (id=2769):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x45, 0x1, 0x0, "b49e1b62251dd37bb50730df4749af087c17e6e724ae01b9424f5ab23870ecd4", 0x3031334d})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000009500000300000000000000000000001992f1ca56cf19bf4bd2e2f3a1e7fe3611eb8bb0b02daee7b17975a0f5271b88d834bcc7fc5a90ca753700575c77d08523692939ec121a71080d20470a2e2409fc00"/102], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400)
unshare(0x2000400)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000dbf7ce60ae61066400b702000014000000b7030000000000008500000083000000bf090000000000005509012000000000950000000000449e0000bf91000000000000b7020000020000008500000084000000b700000000000000950000000000e225f88184eeedd605c647966cfb580f9cc2c74f8e18c8c2e4bf60df9e8d05d234f53cfd581ae42f2ad89a0ebb142f144f5bcb1479c315b50e8f9b187b8033b425a3f4b88c8500b0a92feca98bd4ba17c8a42b29999135f46cdd699ae986f4c649926d58805b5174f3d1a0ed67e1c601d8649bf8a46dccf26daab2ebe84870093d57569dd7c74d73c04248ec4e1932fb64e7ca9524c0bb36"], &(0x7f0000000040)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x22, 0x3, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000340)={<r7=>0x0, 0x48, "2229c96a38b25b8da643a956fb4d1bf1756d45532e4829c3324579fa59658cc686339fb3e5f3932affd32afcbfb02ef88f70594af3e9cc2e972a41eafc4e0df85ff42cca4d2e9b16"}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000001480)={r7}, &(0x7f00000003c0)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$input_event(r8, &(0x7f0000000400)={{}, 0x2, 0x2, 0x5}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000001c0)={0x1, 0x2, 0x9, 0xd3bea750a09af01f, 0x780a})

2m53.467335202s ago: executing program 6 (id=2770):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400), 0x0, 0x29f, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

2m53.321575078s ago: executing program 6 (id=2771):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffee, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e)

2m53.076234956s ago: executing program 6 (id=2776):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x58}}, 0x8000002)

2m52.90709658s ago: executing program 37 (id=2776):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x58}}, 0x8000002)

1m40.058319727s ago: executing program 7 (id=3702):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x185242, 0x0)
stat(&(0x7f00000000c0)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
accept4$unix(r0, 0x0, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={<r7=>0xffffffffffffffff, 0x0, 0x0, 0x1})
close_range(r7, 0xffffffffffffffff, 0x0)

1m39.427645058s ago: executing program 7 (id=3707):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8)

1m39.270879266s ago: executing program 7 (id=3708):
syz_open_dev$usbfs(0x0, 0x8000000000f, 0x8041)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ptrace(0x10, r0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000010, &(0x7f0000000280), 0x4, 0x515, &(0x7f00000040c0)="$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")
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})
get_robust_list(r0, 0x0, 0x0)

1m39.099402013s ago: executing program 7 (id=3709):
syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x5, 0x6b5, &(0x7f0000001540)="$eJzs3c9vHGf9B/D3rNeOnW+Ur9MmbYSKiBKpgCISJ1YK4YJBCOVQoaocOFuJ01jZOJXtVm6FwAUEJyQO/QMKksWFExL3oHAuJ3r1sRISl4iD1YvRzM6u1951bCf+lfJ6RbPzzDzPPPOZzz4z493NagP8z7p1Oc1HKXLr8ptL5fLqymRrdWXyRF3dSlKWG0mzPUsxlxSPk6myvmivL+fpnff5ePbm2589Wf28vdRMz3aNp203wIC2y/WUC0mG6nm/4d3uYlN/t5Oc6msystu+Og2nOg+XOgtw1Nb7LO9l872ct8Ax07k7Fe37Zp/x5GSS0frvgNRXh8bhRXgw9nSVAwAAgBfUpw+POgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB48dS//1/UU6Oe50KKzu//j3TW1eUX2qOjDgAAAAAAAAAA9sHX1rKWpZzuLK8X1Wf+F6uFs/liPfm/vJeFzGQ+V7KU6SxmMfO5lmS8p6ORpenFxflr3S1Lg7e8PnDL64d1xAAAAAAAAADwpfTL3Nr4/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6DIhlqz6rpbKc8nkYz7bqRst1y8o9O+QVRDFr56PDjAAAAgOcy+gzb/P9a1rKU053l9aJ6zf9K9Xp5NO9lLouZzWJamcmd+jV0+aq/sboy2VpdmXxQTv39fv/fewqj6rF+f2Hwns9XLcZyN7PVmiu5XQVzJ41qy9L5TjyD4/qojKn4Xm2XkTXrtJY7+/127yLsi72+FTFeBpd0MzJRx1Zm40w7A0X1Rk2yNRM7PjvNrXtKI8PdPV1Lo/vOz9kDyPnJel4ez28ONOd71c1EI1UmrveMvld6spCcSt9Z8fW//vmn91pz9+/dXbh8fA6pqzFw7dDWFWO9W2yMicmeTLz69DFxzDPR3GP7iSoT57rLt/Kj/CSXcyFvZT6zeT/TWcxM1uv66Xo8l4/jT8/U1Kalt3aKZKQeoe3nbDcxXcgPq9J0Llbbns5sijzMnczkjerf9VzLt3MjN3Kz5xk+t23c1bFVZ31j61nfeab/NjD4S9+oC+UA++3GQJt62hH3jc591r72l3k905PX9qh/0m31p2++39y4Cm9k6aVOdoYHdv4s18bmV+pCuY9fbXvWHoXxKkvDa/9MuneJTnQvtzPRrO5F/eP8D9W5sdCauz9/b/rdbfpf3rL8ej0vh9XKV3cR4HD34YCV4+WljNZXkjM9V8mJqu7l7lXmzKa76kj9iUu7rtFXd66qK4rOmfrjbc/UkfpvuP6erld1rw6sm6zqzvfUbfp7Kw/Typ1DyB8Az2k8J0fG/jX26dgnY78euzf25ugPTnznxGsjGf778HebE0OvN14r/pJP8vON1/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCzW/jgw/vTrdbM/OBCY/uqHQo79bylUNQ/6PNM+zqGhdEkm9YMlysOPYyxrWH0FdZ/kRx6fjo/Iji4ze/KQjO76XBqpzYf7T3CL05sF9iXsjCUwQPgiC9MwIG7uvjg3asLH3z4rdkH0+/MvDMzN3zjxs2JmzfemLx6d7Y1M9F+POoogYOwcdM/6kgAAAAAAAAAAACA3Rr0xYCLp3b60siuvuPhfxYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA++LW5TQfpci1iSsT5fLqymSrnDrljZbNJI1GUvwsKR4nU2lPGe/prsgfH2d9wH4+nr359mdPVj/f6KvZbp806vlzWK6nXEgyVM/3q7/bz91f8Z/OEZYJu9RJHBy1/wYAAP//cjv1OA==")
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000002380)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@data_journal}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@block_validity}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$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")
ptrace$getregset(0x4205, r1, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40804)
link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m38.9515335s ago: executing program 7 (id=3710):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000001f40), 0x0, 0x41)
ioctl$BLKSECDISCARD(r1, 0x5460, 0x0)

1m38.822086089s ago: executing program 7 (id=3711):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c0}, 0x48b0)

1m38.719245103s ago: executing program 38 (id=3711):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c0}, 0x48b0)

2.090676457s ago: executing program 8 (id=4824):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01802cbd70100400090002"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20)

1.982020755s ago: executing program 8 (id=4826):
r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x401, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0x81, 0x8, 0x38414762, 0x6, 0x5, 0x1d7, 0x6, 0x0, 0x1, 0x0, 0x1, 0x4}})

1.919607742s ago: executing program 8 (id=4828):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000280)='./file0\x00', 0x100cc13, &(0x7f0000000040)={[{@hide}, {@hide}, {@nocompress}, {@utf8}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@map_off}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@nojoliet}, {@map_normal}], [{@flag='rw'}], 0x2c}, 0x3, 0x9cb, &(0x7f00000023c0)="$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")

1.821644655s ago: executing program 8 (id=4829):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffff98e3}}]}, 0x38}}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.678956959s ago: executing program 9 (id=4830):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1d, 0x2003, @remote, 0x2}, 0x1c)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4)
sendfile(r4, r5, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20000400)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4e6, &(0x7f0000001240)="$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")
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file1\x00')
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001b40)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1404c8c1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1.268656123s ago: executing program 8 (id=4831):
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xec, 0xb3, 0x4d, 0x20, 0xb95, 0x2791, 0xd2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x23, 0x86}}]}}]}}, 0x0)

701.256937ms ago: executing program 9 (id=4836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x32, 0xcb}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0xf, 0x8, 0xa}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

593.794861ms ago: executing program 9 (id=4837):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@norecovery}, {@order_relaxed}, {}, {@order_relaxed}, {@nobarrier}, {@errors_continue}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xeec, &(0x7f0000000f40)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20, 0x0, 0xfc, 0x0, &(0x7f0000000180))
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

593.485998ms ago: executing program 2 (id=4838):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40)

497.283574ms ago: executing program 2 (id=4839):
request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0)

453.05229ms ago: executing program 2 (id=4840):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c13, &(0x7f0000000e80)={[{@nocompress}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@map_normal}, {@gid}, {@check_strict}, {@check_strict}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@cruft}, {@check_relaxed}, {@uid}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020)

449.300841ms ago: executing program 9 (id=4841):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}})

324.692673ms ago: executing program 2 (id=4842):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1c802, &(0x7f0000000780)=ANY=[], 0x1, 0x603b, &(0x7f0000009140)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIaLMIrIB4ASzOsIkEoVDPnjGtqetxj7OmanvP7Se2qr0/X9Cn/p6YvdTkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMR3vv3Ds72IuPrLdMfRiE/FIKIfsVjXJ6KeuZwfP4yIY7HRHM9FxGA+ol5+459nIi5ExEdHItbW7yzXd5/bYz8unrl985Pvfuvvv/nDvWM/fvNHH7Tbf/Dp8x/+9m7E0e+/9uEnd5/MugMAAEApqqqqeulj/vH0+b7fdacAgKnIr/9Vku9Xq9Vq9ROtf98/WP1RF1o3VePdbRYRsdpcpn7PYHc8AMyY1fi46y7QIfkXbRgRT3XdCeBA63XdAfbF2vqd5V7Kt9d8PTix2Z6/p9yW/2pv6/yO3aaTtI8xmdbv170YxLO79GdxSn04SHL+/Xb+VzfbR+lx+53/tOyW/2jz1Kfi5PwH7fxbtuX/x4iY2fz7Y/MvVc5/+Cj5rw5mePuXPwAAAAAAh1/+/v/o1vf/q53s/51//FXZk932/w0erDIAAAAAAAAAzJzHHf9vi/H/AAAA4MCqP6vX/nTkwX27XYutvv9KL+Lp1uOBwqSTZZa67gcAAAAAAAAAAAAAlGS4eQzvlV7EXEQ8vbRUVVV9a2rXj+pxl591pa8/lKzrP/IAALDpoyOtc/l7EQsRcSVd629uaWmpqhYWl6qlanE+v58dzS9Ui43PtXla3zc/2sMb4uGoqn/YQmO5pkmflye1t39e/VyjarCHjk1Hh4EDQERsvhqteUU6ZKrqmej6XQ6zwfZ/+Nj+2Yuuf08BAACA/VdVVdVLl/M+nvb597vuFAAwDQv59b+9X0CtVqvVavXhq5uq8e42i4hYbS5Tv2cwHD8AzJjV+LjrLtAh+RdtGBHHuu4EcKD1uu4A+2Jt/c5yL+Xba74epPHd87Eg2/Jf7W0sl5cfN52kfYzJtH6/7sUgnt2lP89NqQ8HSc6/387/6mb7KD1uv/Oflt3yr9fzaAf96VrOf9DOv+Xw5N8fm3+pcv7DR8p/IH8AAAAAADjA8vf/R+3/zasMAAAAAAAAADNnbf3Ocj7vNe///+yYx/Wac1v7/+cjwvl/syzn39tz/s7/PUxy/v12/q0DcgaN+ftvPMj/X+t3lj+4/c/P5OnY/P+6tuOio53lPzcY1c891+sPhumYn2rurbgeN2Ilzux4/HBb+9kd7XPb2s9NaD+/o31Uty/m9lOxHD+LG/HmVvv8hAOjFia0VxPac/4D23+Rcv7Dxq3Ofym191rT2v33+zu2++Z03PNc/st/Xty5dU3fvRhsrVtTvX4nO+jPxv/JU6P4xa2Vm6d+de327ZtnI0223Xsu0uQJy/nPpVvO/6UXNtvz3/3m9nr//dEj539Q3Ivhrvm/0Jiv1/flKfetCzn/Ubrl/PMr0Pjtf5bz3337f6WD/gAAAAAAAAAAAAAAAMDDVFW1cYro5Yi4lM7/6ercTABgqn73vTRTVdsv1aFWq9Vqtfrw1U3VeK83i1jYvsyliPj1uB8GABxk/42If3TdCToj/4Ll6/3V08913Rlgqm69+95Prt24sXLzVtc9AQAAAAAAAAD+X3n8zxON8Z83jgNqjRu9bfzXN+LEjnE/BzMy/md/NNgY6zyt0PPx8PG/T8bDx/8eTni+uQntownt8xPaFya0jz3RoyHn/3zKOOd/PK1YSeO/vtRBf7qW8z+ZxnrO+X+h9bhm/tWfZzn//rb8T99+5+enb7373qvX37n29srbKz89e+bShfMXL5y/ePH0W9dvrJzZ/LfDHu+vnH8e+9pxoGXJ+efM5V+WnP/nUy3/suT8X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9OtfzLkvP/YqrlX5ac/yupln9Zcv5fSrX8y5LzfzXV8i9Lzv9UquVflpz/6VTLvyw5/7yHS/5lyfnnIxvkX5ac/7lUy78sOf/zqZZ/WXL+F1It/7Lk/C+mWv5lyflfSrX8y5Lz/3Kq5V+WnP9XUi3/suT8X0u1/MuS8/9qquVflpz/11It/7Lk/L+eavmXJef/jVTLvyw5/2+mWv5lyfm/nmr5l+XB9f/NTHnm33+LOADdMGNm3EzXf5kAAAAAAAAAAAAAgLZpHE7c9ToCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4uRq7yvh/42Td7bUjwP7wTB9bGgIHFu34FhxhMEvKnpE0pCWnTkhrHXhsnfqt3nQBCZSm0JQpSkdoLetE0RGkUqa1AUaSmEo2QGqm9K1eJuGjUSlxYKlQOSiqlArY6c57n2ZnZ2Zlde9c7c87ng8zPu3Nm5pkzZ2bnu9Z3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpt+MTEn/ZlWZb/qf1vXZZdnP99TbY3/3J610qvEAAAADhf79X+/3eXpG/sXcCZ6rb5l2v/7QczMzMz2ZfeOfP+n8/MpBNGsmxgdZbVTov+9Ve/nKnfJngmG+7rr/u6v8PVD3Q4fbDD6UMdTl/V4fTVHU4f7nD6nB0wx5ri9zG1C9tU++u6Ypdml2VDtdM2tTjXM32r+/vj73Jq+mrnmRk6lB3JjmYT2fic8/TV/suyVzfk13VfFq+rv+661mdZdvbnTx6Ia+gL+3hT1nBlNfX33dv3ZCPv/PzJA9+deuvqVrPjbpiz0izbvDFf57NZNvvrqqwvW532SVxnf90617dY50DDOvtq58v/3rzOswtcZ7zdw2Gdr7dZ5/rwvceuz7JsOpt3m2bPZP3Z2qZrTft7uDgi8svI78oPZYOLOk42LOA4yc/z5vWNx0nzMRn3/4awTwbnWUP93fH206vm7PdzPU7yW90Nx2p+2Q/kVzo8XP+r1YZjNd/myRvmPwZa3nctjoF0LNcdAxs7HQP9qwZqx0D/7Jo3NhwDW+ecpz/rq13XmRvaHwNjU8dOjk0+/sRtR47tPzxxeOL41vFdO7bv3LF9586xQ0eOToyPHRo6OjH3GCuLtVl/OgY3hueaeAze1LRt/SE589LSPQ6Gu+RxkN/2z92YL+ji/myeYzzf5tnN5/84SD/36x4Hg3WPg5bPqTNzHweDC3gc5Nuc3bywn5mDdX9arWG5ngvX1R0DK/nzML/Oh2+e/7lwfVjXc7cs9ufhwJxjIN6svvDYy7+TXu8N3xH2y9zj4pr8hItWZacnJ05teWz/1NSprVkYF8SldfdV8/Gytu42ZXOOl/5FHy97//bdG69p8f11YV8N39r+vsq32THa/r6qPbs37s9VWbE/G767LQtj4Tq9/F+R/dnqp1m+P1OWaLM/822eve38XwumXFL3/DfU6flvYGiweP4bSHtjqOH5b+5dM1BbWZadvW1hz39D4c+Ffv67rEue//J99fCW9sdAvs1zY4s9BgbbPv9dH2ZfWM/NITEM1+X+92unTxeHad192fG4GRwcCsfNYLzGxuNm+5zz5JeWX/fm8XM7bjZf33hfNbxuKeFxk++rvxhvf9zk27y29fyfO9bEv9Y9d6zqdAwMDazK1zuUDoLi+W5mTTwGtmQHshPZ0exgOk9+L+fXNbptYcfAqvDnQj93XNUlx0C+r17c1v4YyLf58falfe20OXwnbVP32qn59wvzZf5rBmcvr3m3LXXmz9f5yZ98Jn2vVYbIt3lrx2JzRvv9dGv4zkUt9lPz42e+Y/pgdmH201VhnUd3tv/dVL7NZbsWeDztzbLsjXffqP2+K/x+9/unf/KDht/7tvqd8htb37h/7MGfLmb9AACcu/dr/59eVbzWrPsX64X8+z8AAADQE2Lu7w8zkf8BAACgNGLuHwgzkf8BAACgNGLuHwwzqUj+f/SO3S+/91SW3g1wJoinx93wwF3FdrHjPR2+HpmZlX//498ZevnrTy3suvuzLHv3/g+33P7Ru+K6CifjOj/a+P05rrpuQdf/yEOz29W/f8LZ3cXlx9uz0MMgdpVfHdtWu9yRx7fW5mv3Z7X54PRzzxSXX3wdtz+zvdj+r8Kbluw91Ndw/s1hPZvCHAnvKfPA3tn9kM94vpfXX/vPl35+9vri+fo2frB2M1/8w+Jy43tEvXBpsX283fOt/5++8b2X8+0fu6H1+p/qb73+M+Fy3wzzV3uK7ev3+dfr1v/HYf3x+uL5tnz7Ry3X/8qVxfavhOPiW2E2r/+eP/vIe63ur3g9e+8szhevf/x/dtTOFy8vXn7z+oef2tqwP5ov/7V3isvZ89VfDNRvH78fryd65M7G47sv3L8NPfIsy773J1nDfs4+VpzvH5vWHy/v5J2t139r0zpP9l1XO//s7VnXcLu++TfbWt7euJ69f7+u4fa8cG/Yf++M/Ti/3DMPhuMxnP6/rxeX1/xmRq/c2/h8E7f/1rricRsvb6xp/S80rX/6unzfdV7/fe8U63/l7tUN69/7qXA83VfMTus//NeXNJz/pe8W98epr40ePzF5+sjBur1a/zhePbxm7UUXf+CDl4Tn0uav952YenTi1Mj4yHiWjfTgWwYu9/q/HeZ/F2N66a+h8NNfFMfd858ufm7d9Mvi6xfC9x8J92f8+fjNvxxqOF6b7/fpu4t5vuu/Jaxjoa78xn9et6ANz3zx1dP/8EdvNb8uiLfn5OXDtdv34oYraqf1vVac3vx81cl/XN74uP7Z4Hht/jDs15nwzswbryiur/ny43uTPP/Z4vEbX8nF82dN7yeybqDxdpzv+n8WXsf86KrG5794fPzwqaZ3c16X9eVLmA7PD9l0cXrcKu7v589e0fL64vvwZNNXL2aZ85p8fHLs6JHjpx8bm5qYnBqbfPyJfcdOnD4+ta/23qX7vtzp/LOP77W1x/fBiV07stqj/UQxltlKr//kQwcO3j5+48GJQ/tPH5p66OTEqcMHJicPTBycvHH/oUMTX+t0/iMH92zdtnv77dtGDx85uOeO3bu37x49cvxEvoxiUR3sGv/K6PFT+2pnmdyzY/fWnTt3jI8eO3FwYs/t4+Ojpzudv/azaTQ/91dHT00c3T915NjE6OSRJyb2bN29a9e2ju/+eOzkocmRsVOnj4+dnpw4NVbclpGp2rfzn32dzk81TJ4Iz3dN+sKr8y/cuiu9P27uO0/Pe1HFJo0vT7O3w3tBxZ9vnb6OuX8ozKQi+R8AAACqIOb+8Mb/syfI/wAAAFAaMfevDjOR/wEAAKA0Yu4vkv9w+vj3quT/per/P63/X6P/r/+f6f8nXdT/j8/t+v8rQP9f/78d/X/9/15ev/6//j+ddVv/P+T+8OLQv/8DAABAGcXcvzbMZL78/+8fGt90IRYGAAAALJmY+y8KM/Hv/wAAAFAaMfdfHGZSkfzv8//1//X/2/X/47b6/1lv9//brr+H+v+b/kv/fw79f/3/TP//nK10f77X19+F/f81+v90m27r/8fc/4Ewk4rkfwAAAKiCmPs/GGYi/wMAAEBpxNx/SZiJ/A8AAAClEXP/ujCTiuR//X/9f/3/in/+/z36/z3U//f5/y3o/+v/Z/r/52yl+/O9vv4u7P/7/H+6Trf1/2Pu/39hJhXJ/wAAAFAFMfd/KMxE/gcAAIDSiLn/0jAT+R8AAABKI+b+y8JMKpL/q9n/fzPLshXt/6c+l/6//v+K9/99/r/+/zLT/9f/b0f/X/+/l9ev/6//T2fd1v+Puf/yMJOK5H8AAACogpj7rwgzkf8BAACgNGLuvzLMRP4HAACA0oi5/6owk4rk/2r2/33+v/5/Qf+/cZ36//r/y0H/X/+/Hf1//f9eXr/+v/4/nXVb/z/m/qvDTCqS/wEAAKAKYu6/JsxE/gcAAIDSiLn/w2Em8j8AAACURsz968NMKpL/9f/1//X/9f/1//X/l9JQ09e91f/vn/cU/f+C/n+jpev/T88uoAv6//ly9P/1/zudX/+fhTi//n9f/bP4kvT/Y+7/SJhJRfI/AAAAVEHM/deGmcj/AAAAUBox918XZiL/AwAAQGnE3D8SZlKR/K//r/+v/6//r/+v/7+ceqv/Pz/9/4L+fyOf/6//r/+v/0973fb5/zH3bwgzqUj+BwAAgCqIuX9jmIn8DwAAAKURc//1YSbyPwAAAJRGzP2bwkwqkv/1//X/9f/1//X/9f+Xk/6//n87+v/6/728fv1//X8667b+f8z9N4SZVCT/AwAAQBXE3H9jmIn8DwAAAN1p9eLPEnP/TWEm8j8AAACURsz9m8NMKpL/9f/1//X/e7j/P6D/n+n/d5fmnav/r//fgf6//n8vr1//X/+fzrqt/x9z/81hJhXJ/wAAAFAFMfffEmYi/wMAAEBpxNx/a5iJ/A8AAAClEXP/aJhJRfK//r/+v/5/D/f/ff5/w/r1/7uT/r/+fzv6//r/vbx+/X/9fzrrtv5/zP23hZksNPj1L3A7AAAAYMXE3L8lzKQi//4PAAAAVRBz/1iYifwPAAAApRFz/3iYSUXyv/6//r/+v/6//r/+/3LS/9f/b0f/X/+/l9e/TP3//IlA/5/S6Lb+f8z9W8NMKpL/AQAAoApi7t8WZiL/AwAAQGnE3L89zET+BwAAgNKIuX9HmElF8n+P9P+3pAKU/r/+v/6//r/+f0/R/9f/b0f/X/+/l9fv8//1/2nU6qPxL1j/v/nrefr/MffvDDOpSP4HAACAKoi5f1eYifwPAAAApRFz/+1hJvI/AAAAlEbM/XeEmVQk//dI/9/n/+v/d0P/Pz1B6P830v8v6P+3pv+v/9+O/r/+fy+vX/9f/5/Ouu3z/2Pu3x1mUpH8DwAAAFUQc/9Hw0zkfwAAACiNmPvvDDOR/wEAAKCntPocwijm/o+FmVQk/y9h//+lcJL+f1f1/2dW6//7/H/9//br1/9fXvr/+v/t6P/r//fy+vX/9f/prNv6/zH37wkzqUj+BwAAgCqIuf+uMBP5HwAAAEoj5v67w0zkfwAAACiNmPv3hplUJP/7/P+y9/99/r/+v/5/p/Xr/y8v/X/9/3b0/3uz/x9etuj/d1H/Pz+G9P/pRt3W/4+5/54wk4rkfwAAAKiCmPs/HmYi/wMAAEBpxNz/iTAT+R8AAABKI+b+T4aZVCT/6//r/+v/6//r/+v/Lyf9/2Xr/9eeCvX/C/r/52al+/O9vv5u6v/7/H+6Vbf1/2PuvzfMpCL5HwAAAKog5v5PhZnI/wAAAFAaMff//zAT+R8AAABKI+b++8JMKpL/9f/1//X/9f/1//X/l5P+v8//b0f/X/+/l9ev/6//T2fd1v+Puf/Xwkwqkv8BAACgCmLuvz/MRP4HAACA0oi5/9NhJvI/AAAA9JhV854Sc/+vh5lUJP/3Xv9/pCf7//3p8vX/9f/1//X/9f+Xkv6//n+m/3/OVro/3+vr1//X/6ezbuv/x9z/G2EmFcn/AAAAUAUx938mzET+BwAAgNKIuf83w0zkfwAAACiNmPsfCDOpSP5f6v5/8/nb8fn/+v+Z/r/+v/6//v950v/X/8/0/8/ZSvfne339+v/6/3TWbf3/mPt/K8ykIvkfAAAAqiDm/gfDTOR/AAAA6FKPLvocMfd/NsxE/gcAAIDSiLn/c2EmFcn/vff5//r/+v/6//r/+v+9RP9f/78d/X/9/15ev/6//j+ddVv/P+b+h8JMKpL/AQAAoApi7v98mIn8DwAAAKURc/9vh5nI/wAAAFAaMff/TphJRfK//r/+v/6//r/+v/7/ctL/n9v/z5/D9P8L+v/6/728fv1//X8667b+f8z9XwgzqUj+BwAAgCqIuf93w0zkfwAAACiNmPt/L8xE/gcAAIDSiLn/4TCTiuR//X/9f/1//X/9f/3/5aT/7/P/29H/1//v5fXr/+v/01m39f9j7v9imElF8j8AAABUQcz9vx9mIv8DAABAacTcvy/MRP4HAACA0oi5/5Ewk4rkf/1//X/9f/1//X/9/+Wk/6//385i+v/DLS5f///8rHR/vtfXr/+v/09n3db/j7l/f5jJ3sarAQAAAHpXzP1fCjOpyL//AwAAQBXE3H8gzET+BwAAgNKIuf9gmElF8r/+v/6//r/+v/6//v9y0v/X/2/H5//r//fy+vX/9f/prNv6/zH3T4SZVCT/AwAAQBXE3H8ozET+BwAAgNKIuf9wmIn8DwAAAKURc/+jYSYVyf/6//r/+v+V7f+//v2mder/6/8vB/1//f929P/1/3t5/fr/+v901m39/5j7j4SZVCT/AwAAQBXE3P/lMBP5HwAAAEoj5v6vhJnI/wAAAFAaMfcfDTOpSP7X/9f/1/+vbP9/YZ//v2b2evX/9f/Phf6//n87+v/6/728fv1//X8667b+f8z9x8JMKpL/AQAAoApi7j8eZiL/AwAAQGnE3H8izET+BwAAgNKIuf9kmElF8r/+/+L6/33zdAP1/1uvX/+/BP3/Ovr/+v/nQv9f/78d/X/9/15ev/6//j+ddVv/P+b+PwgzqUj+BwAAgCqIuf9UmIn8DwAAAKURc/9kmIn8DwDwf+zd145ed9XH8ed17MTWq9wBB7kFxAVwCVwDEgdcAL0m9NAh9N5C6BA6hN577723EAi9BAmU8Vor8WRm74k9zzN7/9fnc5AVxpZnD7Ylfhq+2gAwjNz9D4hbmux//b/3/+v/9f/6f/3/Nun/9f9T9P/6/zU/v/5f/8+8pfX/ufsfGLc02f8AAADQQe7+B8Ut9j8AAAAMI3f/g+MW+x8AAACGkbv/IXFLk/2v/9f/6//1//p//f826f/1/1N23P/foP+/0O76+YO/nvU8/8H0//p/5i2t/8/d/9C45dDhd+YIXyUAAACwJLn7Hxa3NPn+PwAAAHSQu//hcYv9DwAAAMPI3f+IuKXJ/tf/6//1/8fV/192l19f/6//1//r/3v0/3f8LV5c/3/5hZ9P/3+hk+7n1/78+n/9P/OW1v/n7n9k3NJk/wMAAEAHufsfFbfY/wAAADCM3P2PjlvsfwAAABhG7v6r45Ym+1//r//X/6/w/f+n9f/6//XQ/3fo/1fz/n/9/z4n3c+v/fn1//p/5i2t/8/df03c0mT/AwAAQAe5+x8Tt9j/AAAAMITT9W9nN4+NW+x/AAAAGEbu/sfFLU32v/5f/6//X2H/7/3/+v8V0f/r/6fo//X/a35+/b/+n3lL6/9z9z8+bmmy/wEAAKCD3P1PiFvsfwAAABhG7v4nxi32PwAAAAwjd/+T4pa77P9zO3yq3dH/6//1//p//b/+f5v0//r/Kfp//f+an1//r/9n3tb7//tcu3eP2v/n7r82bvH9fwAAABhG7v4nxy32PwAAAAwjd/9T4hb7HwAAAIaRu/+pcUuT/a//1//f0f//9//0//p//f8dH9f/Hw/9v/5/iv5f/7/m59f/6/+Zt/X+f6b33/+fc/c/LW5psv8BAACgg9z9T49b7H8AAAAYRu7+Z8Qt9j8AAAAMI3f/M+OWJvtf/6//9/7/Hfb/t230//p//f8x0/9fdP+//6/ehfT/R6L/1/8f1v/f+wjPr/+ng6X1/7n7nxW3NNn/AAAA0EHu/mfHLfY/AAAADCN3/3Vxi/0PAAAAw8jd/5y4pcn+X2L/f4X+X/8/av+/ivf/n2rZ/9/+Mf3/duj/F9v/T9P/H4n+X//v/f/6f6Ytrf/P3f/cuOXI+/9eZ4/6MwEAAICTkbv/eXFLk+//AwAAQAe5+58ft9j/AAAAMIzc/S+IW5rs/yX2/xv9v/5f/1+/zuLf/3/ZGP2/9/9vj/5f/z9F/6//X/Pz6//1/8xbWv+fu/+FcUuT/Q8AAADDO7Wp3f+iuMX+BwAAgGHk7n9x3GL/AwAAwDBy978kbmmy//X/+n/9v/7/kvr/Qd7/r//fHv2//n/KUfv/jf6/vhb9/3KeX/+v/2fe0vr/3P0vjVua7H8AAADoIHf/y+IW+x8AAACGkbv/5XGL/Q8AAADDyN3/irilyf7X/2+p/z+70f/r//X/+n/9v/5f/z/D+//1/2t+fv2//p95S+v/c/e/Mm5psv8BAACgg9z9r4pb7H8AAAAYRu7+V8ct9j8AAAAMI3f/a+KW/fv/1C6fanf0/97/r//X/+v/9f/bpP/X/0/R/x/c/5895PPp/5f1/Pp//T/zltb/5+6/Pm7x/X8AAAAYRu7+18Yt9j8AAAAMI3f/DXGL/Q8AAADDyN3/urilyf4/rP+/9f/P/7j+/2j0/wc/v/5f/6//1//r//X/U/T/3v+/5ufX/+v/mbe0/j93/+vjlib7HwAAADrI3f+GuMX+BwAAgGHk7n9j3GL/AwAAwDBy978pbmmy/4///f9X6f/1//r/uPp//b/+X/+v/5+m/9f/r/n59f/6f+Ytrf/P3f/muKXJ/gcAAIAOcve/JW6x/wEAAGAYufvfGrfY/wAAADCM3P1vi1ua7P/j7/+9/383/f81m2H6/1P6/6T/j99X/b/+/27Q/+v/N/r/i3bS/fzan1//r/9n3tL6/9z9N+5NvX77HwAAADq4ce+fZzdvj1vsfwAAABhG7v53xC32PwAAAAwjd/8745Ym+1//v9b+3/v/N/p//f++59f/L5P+X/8/Rf+v/1/z8+v/9f/MW1r/n7v/XXFLk/0PAAAAHeTuf3fcYv8DAADAMGL3n/8/v9v/AAAAMKT37P3z7Oa9cUuT/d+4/7/qUvv/c3f6d/3/wc+v/z+W/v/G/X/29P/6/zXR/+v/p+j/9f9rfv5L7P/zf0oeQ/8fH7ha/8/yLK3/z93/vrilyf4HAACADnL3vz9usf8BAABgGLn7b4pb7H8AAAAYRu7+D8QtTfZ/4/5/kPf/3/eWeAL9/7j9v/f/x9X/6/8Pov/X/2/0/xftpPv5tT+/9//r/5m3tP4/d/8H45Ym+x8AAAA6yN3/objF/gcAAIBh5O7/cNxi/wMAAMAwcvd/JG5psv/1/2vv/y/y/f/xG6n/1/9vttf/n96M0f9fqf+/NPp//f8U/b/+f83Pr//X/zNvaf1/7v6Pxi1N9j8AAAB0kLv/Y3GL/Q8AAADDyN3/8bjF/gcAAIBh5O7/RNzSZP/r/5v2//H5t9n/3/5J9P9N+v9rvP9/o/8/lP5f/z9F/6//X/Pz6//1/8xbWv+fu/+TcUuT/Q8AAAAd5O7/VNxi/wMAAMAwcvd/Om6x/wEAAGAYufs/Ezfc88qTe6TjdeaQj0dvrv/X/3v//4D9/+Wbzebk3/+v/9f/79H/6/+n6P/1/2t+fv2//p95S+v/c/d/Nm7x/X8AAAAYRu7+z8Ut9j8AAAAMI3f/5+MW+x8AAACGkbv/C3FLk/2v/9f/6/9X2/+fW8z7//X/e/T/B9P/6/+n6P/1/2t+fv2//p95S+v/c/d/MW5psv8BAACgg9z9X4pb7H8AAAAYRu7+L8ct9j8AAAAMI3f/V+KWJvtf/6//1/+vtv8//P3/+v89+v9l0P/r/6fo//X/a35+/b/+n3lL6/9z9381bmmy/wEAAKCD3P1fi1vsfwAAABhG7v6vxy32PwAAAAwjd/834pYm+//+pzb6/zt9XP+v/9f/6/+T/v946P/1/1P0//r/NT+//l//z7yl9f+5+78ZtzTZ/wAAANBB7v5vxS32PwAAAAwjd/+34xb7HwAAAIaRu/87cUuT/T/y+/+nfpr+/zz9v/5/o//X/2+Z/l//P0X/r/9f8/Pr//X/zFta/5+7/7txS5P9DwAAAB3k7v9e3GL/AwAAwDBy938/brH/AQAAYBi5+38QtzTZ/yP3/1OW1P/ffI+T6P/PBzf6f/3/Rv+v/98y/f+u+v/TR/r5+v8Lvw79v/5f/6//Z7tOqP8/szmk/8/d/8O4pcn+BwAAgA5y9/8obrH/AQAAYBi5+38ct9j/AAAAMIzc/T+JW8bZ//e7aeIH9f/H3v/v/SHy/n/9/0b/r//X/+/R/3v//xT9v/5/zc+v/9f/M29p7//P3f/TuGWc/Q8AAADt5e7/Wdxi/wMAAMAwcvf/PG6x/wEAAGAYuft/Ebc02f/6/5N//7/+X/+fdtD/X7bR/+v/d0z/r/+fov9fcf9/Lq7+X/+v/2fC0vr/3P2/jFua7H8AAADoIHf/r+IW+x8AAACGkbv/13GL/Q8AAADDyN3/m7ilyf7X/+v/9f+t+n/v/9f/75z+X/8/Rf+/4v7f+/+r/88/d/p//T93tbT+P3f/b+OWJvsfAAAAOsjd/7u4xf4HAACAYeTuvzlusf8BAABgGLn7fx+3NNn/x9X/539z+n/9v/5f/5/0//r/jf5f/z9D/6//X/Pze/+//p95S+v/c/ffErc02f8AAADQQe7+P8Qt9j8AAAAMI3f/H+MW+x8AAACGkbv/1rilyf73/n/9/5D9/xX6f/2//n8pTrD/3/9bfUn0/+fp/y+k/9f/6//1/0xbWv+fu/9PcUuT/Q8AAAAd5O7/c9xi/wMAAMAwcvf/JW6x/wEAAGAYufv/Grc02f/6f/3/3e//z9TXvdj+3/v/9f/6/8UY9/3/l+v/9f+X3P9fd/35D+v/1/n8+n/9P/OW1v/n7v9b3NJk/wMAAEAHufv/HrfY/wAAADCM3P3/iFvsfwAAABhG7v5/xi1N9r/+X/8/5Pv/9f/6f/3/Yozb/3v/v/7f+//1//p//T9zltb/5+7/V9zSZP8DAABAB7n7/x232P8AAAAwjNz9t8Ut9j8AAAAMI3f/f+KWJvtf/6//1//r//X/+v9t0v/r/6fo//X/a35+/b/+n3lL6/9z9/8vAAD//4a5JeY=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xb7, 0x0, &(0x7f0000000f00))

324.302416ms ago: executing program 9 (id=4843):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="43003300801400cd040000ffffff080211"], 0x60}}, 0x0)

263.669919ms ago: executing program 9 (id=4844):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000002100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))
bind$unix(r0, &(0x7f0000001380)=@abs={0x1, 0x5c, 0x4}, 0x6e)

40.803132ms ago: executing program 2 (id=4845):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000004060102000000000000000002000002050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

5.044055ms ago: executing program 2 (id=4846):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

0s ago: executing program 8 (id=4847):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x1, 0x0, "2742528903000000ce01f5b53018f8a813f019e300"})

kernel console output (not intermixed with test programs):

 4711
[  365.757339][T15061] tipc: Node number set to 7
[  365.969060][T15070] loop8: detected capacity change from 0 to 128
[  366.105381][T15079] netlink: 642 bytes leftover after parsing attributes in process `syz.2.3534'.
[  366.206730][T15085] loop8: detected capacity change from 0 to 1024
[  366.255573][ T1090] hfsplus: b-tree write err: -5, ino 4
[  366.335604][T15093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3541'.
[  366.346803][T15093] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  366.672131][T15103] loop8: detected capacity change from 0 to 32768
[  366.675704][T15103] BTRFS warning: excessive commit interval 2147483647, use with care
[  366.680115][T15103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3545 (15103)
[  366.688217][T15103] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  366.693228][T15103] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  366.696827][T15103] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  366.789001][T15103] BTRFS info (device loop8): rebuilding free space tree
[  366.808405][T15103] BTRFS info (device loop8): disabling free space tree
[  366.811432][T15103] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  366.815561][T15103] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  366.830327][T15103] BTRFS info (device loop8): setting nodatasum
[  366.833046][T15103] BTRFS info (device loop8): enabling ssd optimizations
[  366.835968][T15103] BTRFS info (device loop8): turning off barriers
[  366.840405][T15103] BTRFS info (device loop8): turning on flush-on-commit
[  366.843308][T15103] BTRFS info (device loop8): turning on sync discard
[  366.846189][T15103] BTRFS info (device loop8): enabling disk space caching
[  366.854390][T15103] BTRFS info (device loop8): force clearing of disk cache
[  366.857490][T15103] BTRFS info (device loop8): doing ref verification
[  366.862049][T15103] BTRFS info (device loop8): max_inline set to 0
[  366.926246][T13281] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  367.290355][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3549'.
[  368.439781][T15156] loop8: detected capacity change from 0 to 128
[  368.481714][T15156] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  368.487289][T15156] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  368.523909][T13281] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  368.753878][T15165] loop7: detected capacity change from 0 to 256
[  368.763740][T15165] exfat: Deprecated parameter 'utf8'
[  368.766508][T15165] exfat: Deprecated parameter 'namecase'
[  368.769397][T15165] exfat: Deprecated parameter 'utf8'
[  368.823536][T15165] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  369.212986][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3575'.
[  369.474098][T15197] loop7: detected capacity change from 0 to 1764
[  369.728371][T15216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3588'.
[  370.031381][T15224] lo speed is unknown, defaulting to 1000
[  372.762098][T15266] loop8: detected capacity change from 0 to 256
[  372.765568][T15266] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  372.770362][T15266] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  372.774375][T15266] exFAT-fs (loop8): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119b3d0)
[  372.778072][T15266] exFAT-fs (loop8): invalid boot region
[  372.782037][T15266] exFAT-fs (loop8): failed to recognize exfat type
[  373.325996][T15280] loop7: detected capacity change from 0 to 32768
[  373.355035][T15280] XFS (loop7): DAX unsupported by block device. Turning off DAX.
[  373.358834][T15280] XFS (loop7): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  373.386517][T15310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3627'.
[  373.416514][T12574] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  373.424005][T15310] fuse: Unknown parameter '0x000000000000000300000000000000000000'
[  373.734634][T15315] loop7: detected capacity change from 0 to 2048
[  373.834199][T15315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.857309][T15315] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  374.186490][T12574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.028941][ T5914] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  376.193025][ T5914] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  376.197620][ T5914] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  376.202228][ T5914] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  376.206017][ T5914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.218379][T15345] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  376.229140][ T5914] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  376.533374][ T5914] usb 9-1: USB disconnect, device number 13
[  377.124912][T15380] loop8: detected capacity change from 0 to 1024
[  377.127790][T15380] EXT4-fs: inline encryption not supported
[  377.130488][T15380] EXT4-fs: Ignoring removed bh option
[  377.151419][T15380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.205065][T15380] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  377.215495][T15380] EXT4-fs (loop8): Remounting filesystem read-only
[  377.247734][T13281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.856410][   T33] audit: type=1326 audit(1757266716.225:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.3674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  378.869395][   T33] audit: type=1326 audit(1757266716.225:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.3674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  378.879908][   T33] audit: type=1326 audit(1757266716.235:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.3674" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  378.901702][   T33] audit: type=1326 audit(1757266716.235:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.3674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  378.909753][   T33] audit: type=1326 audit(1757266716.235:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.3674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  378.942575][   T33] audit: type=1326 audit(1757266716.253:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.3674" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  378.976665][   T33] audit: type=1326 audit(1757266716.338:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.3674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  378.987898][   T33] audit: type=1326 audit(1757266716.338:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.3674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  379.029317][T15435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.097806][T15440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.149522][T15446] loop8: detected capacity change from 0 to 1024
[  379.152471][T15446] ext3: Unknown parameter 'context'
[  379.166258][T15440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.202004][T15446] loop8: detected capacity change from 0 to 4096
[  379.209613][T15446] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  379.236769][T15446] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  379.241568][T15452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.244846][T15446] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  379.673923][T15468] loop8: detected capacity change from 0 to 4096
[  379.718894][T15468] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  379.734446][T15468] ntfs3(loop8): ino=1a, mi_enum_attr
[  379.737753][T15468] ntfs3(loop8): ino=1a, mi_enum_attr
[  379.740044][T15468] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  379.764319][T15468] ntfs3(loop8): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  380.438143][T15487] loop7: detected capacity change from 0 to 128
[  380.442261][T15487] EXT4-fs: Ignoring removed nobh option
[  380.464243][T15487] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  380.470841][T15487] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  380.563035][   T33] audit: type=1800 audit(1757266717.751:200): pid=15487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3702" name="file1" dev="loop7" ino=12 res=0 errno=0
[  380.586244][T13424] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  380.992235][T13424] usb 9-1: Using ep0 maxpacket: 32
[  381.105676][T12574] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  381.105690][T13424] usb 9-1: config 0 has an invalid interface number: 126 but max is 0
[  381.105716][T13424] usb 9-1: config 0 has no interface number 0
[  381.116246][T13424] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  381.120630][T13424] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  381.125162][T13424] usb 9-1: config 0 interface 126 has no altsetting 0
[  381.132300][T13424] usb 9-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  381.139375][T13424] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.142893][T13424] usb 9-1: Product: syz
[  381.144678][T13424] usb 9-1: Manufacturer: syz
[  381.148472][T13424] usb 9-1: SerialNumber: syz
[  381.154003][T13424] usb 9-1: config 0 descriptor??
[  381.160667][T15477] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  381.163992][T15477] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  381.268633][T15505] loop7: detected capacity change from 0 to 512
[  381.301951][T15505] EXT4-fs error (device loop7): ext4_quota_enable:7128: inode #4: comm syz.7.3708: iget: bad i_size value: 5910974510929920
[  381.310201][T15505] EXT4-fs error (device loop7): ext4_quota_enable:7131: comm syz.7.3708: Bad quota inode: 4, type: 1
[  381.314924][T15505] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  381.323029][T15505] EXT4-fs (loop7): mount failed
[  381.413594][T15510] loop7: detected capacity change from 0 to 1024
[  381.440583][T15510] hfsplus: request for non-existent node 3 in B*Tree
[  381.448600][T15510] hfsplus: request for non-existent node 3 in B*Tree
[  381.567319][T12574] hfsplus: walked past end of dir
[  381.616559][T13424] ir_usb 9-1:0.126: IR Dongle converter detected
[  381.829439][T13424] usb 9-1: IR Dongle converter now attached to ttyUSB0
[  381.973631][T15516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3714'.
[  382.064037][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.070579][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.077730][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.081830][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.085377][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.107353][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.110792][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.113890][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.118062][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.124270][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.158014][ T5914] usb 9-1: USB disconnect, device number 14
[  382.173056][ T5914] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  382.181694][ T5914] ir_usb 9-1:0.126: device disconnected
[  382.220750][T15519] lo speed is unknown, defaulting to 1000
[  382.709955][T15519] chnl_net:caif_netlink_parms(): no params data found
[  382.784348][T15519] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.787257][T15519] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.790050][T15519] bridge_slave_0: entered allmulticast mode
[  382.793693][T15519] bridge_slave_0: entered promiscuous mode
[  382.798016][T15519] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.800603][T15519] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.804116][T15519] bridge_slave_1: entered allmulticast mode
[  382.808082][T15519] bridge_slave_1: entered promiscuous mode
[  382.844245][T15519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.852396][T15519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.999562][T15519] team0: Port device team_slave_0 added
[  383.004119][T15519] team0: Port device team_slave_1 added
[  383.073602][T15519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.076452][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.087252][T15519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.095495][T15519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.098446][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.109090][T15519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.125935][T15536] pimreg: tun_chr_ioctl cmd 1074025676
[  383.128301][T15536] pimreg: owner set to 60929
[  383.168959][T15519] hsr_slave_0: entered promiscuous mode
[  383.172408][T15519] hsr_slave_1: entered promiscuous mode
[  383.175207][T15519] debugfs: 'hsr0' already exists in 'hsr'
[  383.178623][T15519] Cannot create hsr debugfs directory
[  383.394687][T15519] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  383.401423][T15519] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  383.412295][T15519] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  383.423713][T15519] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  383.454251][T15519] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.457214][T15519] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.460299][T15519] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.463251][T15519] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.517018][T15519] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.529654][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.532694][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.542433][T15519] 8021q: adding VLAN 0 to HW filter on device team0
[  383.551188][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.553457][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.560109][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.563237][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.697109][T15519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.898626][T15519] veth0_vlan: entered promiscuous mode
[  383.911959][T15519] veth1_vlan: entered promiscuous mode
[  383.962294][T15519] veth0_macvtap: entered promiscuous mode
[  383.972123][T15519] veth1_macvtap: entered promiscuous mode
[  383.992608][T15519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.006737][T15519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.017259][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.021877][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.033468][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.037174][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.133261][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.137074][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.187988][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.193974][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.394155][ T5858] Bluetooth: hci1: command tx timeout
[  384.775336][T15599] loop9: detected capacity change from 0 to 128
[  384.788328][T15599] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  384.799567][T15599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  384.907370][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3740'.
[  385.007393][T15606] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  385.007393][T15606] The task syz.9.3741 (15606) triggered the difference, watch for misbehavior.
[  385.469222][T15609] kAFS: Can only specify source 'none' with -o dyn
[  386.605785][ T5858] Bluetooth: hci1: command tx timeout
[  387.315419][T15686] loop9: detected capacity change from 0 to 16
[  387.319854][T15686] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  387.401124][T15671] loop8: detected capacity change from 0 to 32768
[  387.418369][T15671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3771 (15671)
[  387.426993][T15690] loop9: detected capacity change from 0 to 1024
[  387.443778][T15690] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.459267][T15671] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  387.471101][T15690] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.477083][T15671] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  387.487982][T15671] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  387.494691][   T33] audit: type=1800 audit(1757266724.311:201): pid=15690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3781" name="file1" dev="loop9" ino=15 res=0 errno=0
[  387.501301][T15690] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 1: comm syz.9.3781: lblock 1 mapped to illegal pblock 1 (length 15)
[  387.533005][T15690] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  387.543890][T15690] EXT4-fs (loop9): This should not happen!! Data will be lost
[  387.543890][T15690] 
[  387.576149][T15690] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.3781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  387.598111][T15671] BTRFS info (device loop8): rebuilding free space tree
[  387.602809][T15690] EXT4-fs error (device loop9) in ext4_setattr:6071: Corrupt filesystem
[  387.617182][T15671] BTRFS info (device loop8): disabling free space tree
[  387.619522][T15671] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  387.634979][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.646935][T15671] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  387.673727][T15671] BTRFS info (device loop8): setting nodatasum
[  387.676298][T15671] BTRFS info (device loop8): setting nodatacow
[  387.678292][T15671] BTRFS info (device loop8): enabling ssd optimizations
[  387.698744][T15671] BTRFS info (device loop8): turning off barriers
[  387.700921][T15671] BTRFS info (device loop8): turning on flush-on-commit
[  387.703299][T15671] BTRFS info (device loop8): enabling disk space caching
[  387.705777][T15671] BTRFS info (device loop8): force clearing of disk cache
[  387.709591][T15671] BTRFS info (device loop8): doing ref verification
[  387.711835][T15671] BTRFS info (device loop8): max_inline set to 4096
[  387.723706][   T33] audit: type=1800 audit(1757266724.527:202): pid=15671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3771" name="file1" dev="loop8" ino=258 res=0 errno=0
[  387.790518][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3789'.
[  387.860063][T15731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3792'.
[  387.861647][T13281] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  387.929182][T15735] overlayfs: unescaped trailing colons in lowerdir mount option.
[  387.937978][T15736] netlink: 'syz.2.3792': attribute type 10 has an invalid length.
[  387.969375][    C0] vkms_vblank_simulate: vblank timer overrun
[  388.445796][T15738] loop9: detected capacity change from 0 to 40427
[  388.450259][T15738] F2FS-fs (loop9): Corrupted extension count (720933 + 1 > 64)
[  388.453479][T15738] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  388.479919][T15738] F2FS-fs (loop9): Image doesn't support compression
[  388.482892][T15738] F2FS-fs (loop9): build fault injection rate: 690
[  388.492111][T15738] F2FS-fs (loop9): invalid crc value
[  388.536526][    C0] vkms_vblank_simulate: vblank timer overrun
[  388.576297][T15738] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  388.600847][T15738] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  388.606267][T15738] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  388.700062][ T5914] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  388.830710][ T5858] Bluetooth: hci1: command tx timeout
[  388.894095][ T5914] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  388.898003][ T5914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.915699][ T5914] usb 9-1: config 0 descriptor??
[  388.926719][ T5914] gspca_main: cpia1-2.14.0 probing 0813:0001
[  388.928700][T15761] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3801'.
[  389.145514][ T5914] gspca_cpia1: usb_control_msg 05, error -71
[  389.149733][ T5914] gspca_cpia1: usb_control_msg 01, error -71
[  389.152328][ T5914] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0)
[  389.157319][ T5914] usb 9-1: USB disconnect, device number 15
[  389.319508][   T47] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  389.499084][   T47] usb 10-1: config 0 has an invalid interface number: 207 but max is 0
[  389.502725][   T47] usb 10-1: config 0 has no interface number 0
[  389.508529][   T47] usb 10-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  389.515537][   T47] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.519244][   T47] usb 10-1: Product: syz
[  389.521465][   T47] usb 10-1: Manufacturer: syz
[  389.523974][   T47] usb 10-1: SerialNumber: syz
[  389.531952][   T47] usb 10-1: config 0 descriptor??
[  389.541280][   T47] qmi_wwan 10-1:0.207: bogus CDC Union: master=0, slave=1
[  389.677659][T15783] netlink: 'syz.2.3815': attribute type 10 has an invalid length.
[  389.760882][   T47] qmi_wwan 10-1:0.207: probe with driver qmi_wwan failed with error -22
[  390.141605][ T5836] usb 10-1: USB disconnect, device number 2
[  390.575973][   T33] audit: type=1326 audit(1757266727.194:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.2.3823" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x0
[  390.981146][T15816] loop9: detected capacity change from 0 to 8192
[  391.082814][ T5858] Bluetooth: hci1: command tx timeout
[  391.425153][T15834] netlink: 'syz.8.3838': attribute type 2 has an invalid length.
[  391.554054][T15842] loop8: detected capacity change from 0 to 128
[  391.560903][T15842] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  391.566093][T15842] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  391.594413][T13281] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  391.763069][T15838] loop9: detected capacity change from 0 to 40427
[  391.767098][T15838] F2FS-fs (loop9): Image doesn't support compression
[  391.771660][T15838] F2FS-fs (loop9): build fault injection rate: 690
[  391.775238][T15838] F2FS-fs (loop9): invalid crc value
[  391.952049][T15838] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  391.956200][T15838] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  391.995741][T15838] syz.9.3841: attempt to access beyond end of device
[  391.995741][T15838] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  392.027848][T15838] syz.9.3841: attempt to access beyond end of device
[  392.027848][T15838] loop9: rw=2049, sector=77824, nr_sectors = 976 limit=40427
[  392.065009][T15519] syz-executor: attempt to access beyond end of device
[  392.065009][T15519] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  392.073348][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  392.073369][T15519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  392.073375][T15519] Call Trace:
[  392.073381][T15519]  <TASK>
[  392.073386][T15519]  dump_stack_lvl+0x189/0x250
[  392.073408][T15519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.073420][T15519]  ? __pfx_queue_work_on+0x10/0x10
[  392.073431][T15519]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  392.073447][T15519]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  392.073470][T15519]  f2fs_handle_critical_error+0x37c/0x540
[  392.073493][T15519]  f2fs_write_end_io+0x886/0xb60
[  392.073517][T15519]  __submit_merged_bio+0x27a/0x6a0
[  392.073538][T15519]  __submit_merged_write_cond+0x255/0x530
[  392.073555][T15519]  f2fs_write_data_pages+0x261d/0x3000
[  392.073569][T15519]  ? __lock_acquire+0xab9/0xd20
[  392.073609][T15519]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  392.073656][T15519]  ? __mod_zone_page_state+0xd7/0x140
[  392.073678][T15519]  ? folios_put_refs+0x560/0x640
[  392.073697][T15519]  ? __pfx_folios_put_refs+0x10/0x10
[  392.073716][T15519]  ? rcu_is_watching+0x15/0xb0
[  392.073734][T15519]  ? __lock_acquire+0xab9/0xd20
[  392.073757][T15519]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  392.073775][T15519]  do_writepages+0x32e/0x550
[  392.073831][T15519]  ? do_raw_spin_unlock+0x4d/0x240
[  392.073848][T15519]  filemap_fdatawrite+0x199/0x240
[  392.073866][T15519]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  392.073918][T15519]  ? do_raw_spin_unlock+0x4d/0x240
[  392.073935][T15519]  f2fs_sync_dirty_inodes+0x31f/0x830
[  392.073959][T15519]  f2fs_write_checkpoint+0x95a/0x1df0
[  392.073989][T15519]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  392.074040][T15519]  ? kill_f2fs_super+0x298/0x6c0
[  392.074057][T15519]  kill_f2fs_super+0x2c3/0x6c0
[  392.074073][T15519]  ? __pfx_kill_f2fs_super+0x10/0x10
[  392.074084][T15519]  ? radix_tree_delete_item+0x2b6/0x400
[  392.074109][T15519]  ? shrinker_free+0x2ce/0x3e0
[  392.074125][T15519]  deactivate_locked_super+0xbc/0x130
[  392.074142][T15519]  cleanup_mnt+0x425/0x4c0
[  392.074156][T15519]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.074176][T15519]  task_work_run+0x1d4/0x260
[  392.074196][T15519]  ? __pfx_task_work_run+0x10/0x10
[  392.074209][T15519]  ? __x64_sys_umount+0x122/0x160
[  392.074230][T15519]  ? exit_to_user_mode_loop+0x40/0x110
[  392.074251][T15519]  exit_to_user_mode_loop+0xec/0x110
[  392.074268][T15519]  do_syscall_64+0x2bd/0x3b0
[  392.074278][T15519]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.074294][T15519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.074307][T15519]  ? exc_page_fault+0x9f/0xf0
[  392.074325][T15519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.074336][T15519] RIP: 0033:0x7fef2ff8ff17
[  392.074349][T15519] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  392.074359][T15519] RSP: 002b:00007ffdc18112a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  392.074374][T15519] RAX: 0000000000000000 RBX: 00007fef30011c05 RCX: 00007fef2ff8ff17
[  392.074382][T15519] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc1811360
[  392.074389][T15519] RBP: 00007ffdc1811360 R08: 0000000000000000 R09: 0000000000000000
[  392.074397][T15519] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc18123f0
[  392.074404][T15519] R13: 00007fef30011c05 R14: 000000000005abb0 R15: 00007ffdc1812430
[  392.074428][T15519]  </TASK>
[  392.074434][T15519] F2FS-fs (loop9): Remounting filesystem read-only
[  393.366017][T15896] loop9: detected capacity change from 0 to 512
[  393.374892][T15896] EXT4-fs (loop9): bad s_want_extra_isize: 11962
[  393.559669][T15898] loop9: detected capacity change from 0 to 32768
[  393.569456][T15898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3865 (15898)
[  393.581071][T15898] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  393.594065][T15898] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  393.612557][T15898] BTRFS info (device loop9): enabling ssd optimizations
[  393.617096][T15898] BTRFS info (device loop9): enabling free space tree
[  393.670441][T15519] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  394.082651][T15926] loop8: detected capacity change from 0 to 4096
[  394.158902][T15926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.283367][T15937] netlink: 'syz.2.3869': attribute type 29 has an invalid length.
[  394.300330][T15926] fs-verity (loop8, inode 16): fs-verity keyring is empty, rejecting signed file!
[  394.454728][T13281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.946261][T15975] netlink: 'syz.8.3878': attribute type 21 has an invalid length.
[  394.949407][T15975] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3878'.
[  394.955161][T15975] netlink: 'syz.8.3878': attribute type 5 has an invalid length.
[  394.958388][T15975] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3878'.
[  395.002262][T15978] loop8: detected capacity change from 0 to 512
[  395.055069][T15978] EXT4-fs (loop8): 1 orphan inode deleted
[  395.059469][T15978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.065750][T15978] ext4 filesystem being mounted at /syzcgroup/cpu/syz8/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff)
[  395.072131][T14453] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  395.081307][T14453] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u9:7: Failed to release dquot type 1
[  395.098476][T14453] EXT4-fs (loop8): Remounting filesystem read-only
[  395.104239][T15978] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.694693][T16028] loop8: detected capacity change from 0 to 256
[  395.734255][T16028] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x44396dfa, utbl_chksum : 0xe619d30d)
[  396.388279][T16058] loop9: detected capacity change from 0 to 32768
[  396.554205][T16058] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  396.554226][T16058]   allowing incompatible features above 0.0: (unknown version)
[  396.554235][T16058]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  396.570311][T16058] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  396.573636][T16058] bcachefs (loop9): initializing new filesystem
[  396.585494][T16058] bcachefs (loop9): going read-write
[  396.590274][T16058] bcachefs (loop9): marking superblocks
[  396.598132][T16058] bcachefs (loop9): initializing freespace
[  396.603066][T16058] bcachefs (loop9): done initializing freespace
[  396.608993][T16058] bcachefs (loop9): reading snapshots table
[  396.611391][T16058] bcachefs (loop9): reading snapshots done
[  396.920253][T16058] bcachefs (loop9): done starting filesystem
[  398.212536][T15519] bcachefs (loop9): shutting down
[  398.214469][T15519] bcachefs (loop9): going read-only
[  398.216237][T15519] bcachefs (loop9): finished waiting for writes to stop
[  398.219678][T15519] bcachefs (loop9): flushing journal and stopping allocators, journal seq 4
[  398.260604][T15519] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 5
[  398.268290][T15519] bcachefs (loop9): clean shutdown complete, journal seq 6
[  398.272007][T15519] bcachefs (loop9): marking filesystem clean
[  398.308181][T15519] bcachefs (loop9): shutdown complete
[  399.257862][T16116] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  399.261329][T16116] overlayfs: failed to set xattr on upper
[  399.263953][T16116] overlayfs: ...falling back to redirect_dir=nofollow.
[  399.267122][T16116] overlayfs: ...falling back to index=off.
[  399.269583][T16116] overlayfs: ...falling back to uuid=null.
[  399.327030][T16117] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  399.352602][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  399.355387][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  399.505092][T16119] overlayfs: failed to resolve './file0/../file0': -2
[  400.070417][T16126] loop8: detected capacity change from 0 to 512
[  400.103233][T16126] EXT4-fs (loop8): corrupt root inode, run e2fsck
[  400.106110][T16126] EXT4-fs (loop8): mount failed
[  400.379191][T16130] loop9: detected capacity change from 0 to 40427
[  400.394893][T16130] F2FS-fs (loop9): Image doesn't support compression
[  400.398071][T16130] F2FS-fs (loop9): build fault injection type: 0x2
[  400.401689][T16132] loop8: detected capacity change from 0 to 32768
[  400.405530][T16132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3920 (16132)
[  400.421817][T16130] F2FS-fs (loop9): invalid crc value
[  400.433009][T16132] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  400.448829][T16132] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  400.519878][T16130] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  400.532481][T16130] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  400.586541][T16132] BTRFS info (device loop8): enabling ssd optimizations
[  400.589485][T16132] BTRFS info (device loop8): enabling free space tree
[  400.600028][T16132] BTRFS info (device loop8): use zlib compression, level 3
[  400.675890][   T33] audit: type=1804 audit(1757266736.647:204): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3920" name="/newroot/354/file0/bus" dev="loop8" ino=263 res=1 errno=0
[  400.764256][   T33] audit: type=1804 audit(1757266736.712:205): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3920" name="/newroot/354/file0/bus" dev="loop8" ino=263 res=1 errno=0
[  401.475680][T13281] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  401.654368][T16187] loop9: detected capacity change from 0 to 2048
[  401.658249][T16187] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=3932051, location=3932051
[  401.704208][T16187] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  401.910548][T16195] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3931'.
[  401.941058][T16197] lo speed is unknown, defaulting to 1000
[  402.095181][T16204] loop8: detected capacity change from 0 to 8192
[  402.098407][T16204] msdos: Unknown parameter 'do>
[  402.098407][T16204] Fts'
[  402.258924][ T5997] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  402.533595][ T5997] usb 10-1: config 0 has no interfaces?
[  402.538714][ T5997] usb 10-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e
[  402.542370][ T5997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.545850][ T5997] usb 10-1: Product: syz
[  402.547914][ T5997] usb 10-1: Manufacturer: syz
[  402.549941][ T5997] usb 10-1: SerialNumber: syz
[  402.555255][ T5997] usb 10-1: config 0 descriptor??
[  403.037242][ T5997] usb 10-1: USB disconnect, device number 3
[  403.252685][   T47] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  403.457083][   T47] usb 9-1: Using ep0 maxpacket: 8
[  403.469044][   T47] usb 9-1: unable to get BOS descriptor or descriptor too short
[  403.474688][   T47] usb 9-1: config 8 has an invalid interface number: 154 but max is 0
[  403.488026][   T47] usb 9-1: config 8 has no interface number 0
[  403.490845][   T47] usb 9-1: config 8 interface 154 has no altsetting 0
[  403.496448][   T47] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=4f.f6
[  403.505393][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.509030][   T47] usb 9-1: Product: syz
[  403.510850][   T47] usb 9-1: Manufacturer: syz
[  403.514243][   T47] usb 9-1: SerialNumber: syz
[  403.790962][   T47] mdc800 9-1:8.154: probe fails -> wrong Interface
[  403.803887][   T47] usb 9-1: USB disconnect, device number 16
[  404.275982][T16252] loop9: detected capacity change from 0 to 32768
[  404.289630][T16252] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3965 (16252)
[  404.301994][T16252] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  404.306386][T16252] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  404.429353][T16252] BTRFS info (device loop9): enabling ssd optimizations
[  404.432282][T16252] BTRFS info (device loop9): enabling free space tree
[  404.435043][T16252] BTRFS info (device loop9): max_inline set to 4096
[  404.559931][T15519] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  405.487082][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3973'.
[  405.858180][T16289] loop8: detected capacity change from 0 to 32768
[  405.905327][T16289] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3974 (16289)
[  406.066803][T16289] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  406.071648][T16289] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  406.483103][T16289] BTRFS info (device loop8): enabling ssd optimizations
[  406.491516][T16289] BTRFS info (device loop8): enabling free space tree
[  406.554649][T13281] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  406.820332][T16309] loop9: detected capacity change from 0 to 32768
[  406.838175][T16309] jfs_mount: dbMount failed w/rc = -22
[  406.842285][T16309] Mount JFS Failure: -22
[  406.844178][T16309] jfs_mount failed w/return code = -22
[  407.377203][   T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  407.544405][T16337] loop9: detected capacity change from 0 to 1764
[  407.635897][T16337] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  407.659735][   T10] usb 9-1: Using ep0 maxpacket: 8
[  407.773482][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  407.785489][   T10] usb 9-1: config 6 has an invalid interface number: 81 but max is 0
[  407.789618][   T10] usb 9-1: config 6 has no interface number 0
[  407.792539][   T10] usb 9-1: config 6 interface 81 has no altsetting 0
[  407.799329][   T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=f7.ec
[  407.803182][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.808619][   T10] usb 9-1: Product: syz
[  407.810552][   T10] usb 9-1: Manufacturer: syz
[  407.812612][   T10] usb 9-1: SerialNumber: syz
[  408.166371][   T10] quatech2 9-1:6.81: Quatech 2nd gen USB to Serial Driver converter detected
[  408.172033][   T10] usb 9-1: qt2_attach - failed to power on unit: -71
[  408.175221][   T10] quatech2 9-1:6.81: probe with driver quatech2 failed with error -71
[  408.184621][   T10] usb 9-1: USB disconnect, device number 17
[  408.704311][T16352] pim6reg1: entered promiscuous mode
[  408.706345][T16352] pim6reg1: entered allmulticast mode
[  409.208662][T16376] loop9: detected capacity change from 0 to 256
[  409.362054][T16384] loop8: detected capacity change from 0 to 16
[  409.459819][T16388] loop9: detected capacity change from 0 to 64
[  409.468934][T16388] minix: Unknown parameter './file1'
[  409.572807][T16396] loop8: detected capacity change from 0 to 16
[  409.595416][T16396] erofs (device loop8): mounted with root inode @ nid 36.
[  409.707607][T16399] syz.8.4012: attempt to access beyond end of device
[  409.707607][T16399] loop8: rw=524288, sector=128, nr_sectors = 8 limit=16
[  409.722919][T16399] syz.8.4012: attempt to access beyond end of device
[  409.722919][T16399] loop8: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  409.769984][T16399] erofs (device loop8): read error -95 @ 1 of nid 89
[  409.782881][   T33] audit: type=1800 audit(1757266745.163:206): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4012" name="file2" dev="loop8" ino=89 res=0 errno=0
[  410.769227][T16414] loop9: detected capacity change from 0 to 1024
[  410.792106][T16414] EXT4-fs: inline encryption not supported
[  410.804052][T16414] EXT4-fs: Ignoring removed bh option
[  410.848042][T16414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.874576][   T33] audit: type=1800 audit(1757266746.193:207): pid=16414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4020" name="bus" dev="loop9" ino=18 res=0 errno=0
[  410.913064][   T33] audit: type=1800 audit(1757266746.193:208): pid=16414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4020" name="file2" dev="loop9" ino=19 res=0 errno=0
[  410.997640][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.593155][T16432] netem: unknown loss type 0
[  412.596041][T16432] netem: change failed
[  413.120314][T16441] loop8: detected capacity change from 0 to 32768
[  413.133589][T16441] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  413.213117][T16441] XFS (loop8): Ending clean mount
[  413.218935][T16441] XFS (loop8): Quotacheck needed: Please wait.
[  413.323370][T16441] XFS (loop8): Quotacheck: Done.
[  413.356719][T13281] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  413.969588][   T47] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  414.129919][   T47] usb 9-1: Using ep0 maxpacket: 16
[  414.133918][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.138480][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.142597][   T47] usb 9-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.00
[  414.146282][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.151954][   T47] usb 9-1: config 0 descriptor??
[  414.376542][   T47] usb 9-1: USB disconnect, device number 18
[  414.531859][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4047'.
[  414.823359][T16494] loop9: detected capacity change from 0 to 32768
[  415.235366][T16507] loop8: detected capacity change from 0 to 32768
[  415.238347][T16507] XFS (loop8): invalid logbufsize: 73 [not 16k,32k,64k,128k or 256k]
[  415.756671][T16523] loop8: detected capacity change from 0 to 32768
[  415.794459][T16523] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  415.863270][T16523] XFS (loop8): Ending clean mount
[  415.870483][T16523] XFS (loop8): Quotacheck needed: Please wait.
[  415.920793][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.031000][T16523] XFS (loop8): Quotacheck: Done.
[  416.145929][T13281] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  416.213221][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.556755][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.699532][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.084523][T16557] loop8: detected capacity change from 0 to 1024
[  417.094132][T16554] loop9: detected capacity change from 0 to 131072
[  417.103665][T16554] F2FS-fs (loop9): Segment count (31) mismatch with total segments from devices (0)
[  417.107053][T16554] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  417.136225][T16557] EXT4-fs: Ignoring removed nomblk_io_submit option
[  417.146393][T16554] F2FS-fs (loop9): invalid crc value
[  417.218883][T16554] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  417.243875][T16557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.252360][T16554] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  417.255281][T16554] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  417.365121][   T13] bridge_slave_1: left allmulticast mode
[  417.375914][   T13] bridge_slave_1: left promiscuous mode
[  417.386833][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.401856][   T13] bridge_slave_0: left allmulticast mode
[  417.404358][   T13] bridge_slave_0: left promiscuous mode
[  417.421194][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.547566][T13281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.811209][T16583] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  417.916560][T16587] loop9: detected capacity change from 0 to 2048
[  417.930514][T16587] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  417.935355][T16587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.592405][T16600] loop8: detected capacity change from 0 to 32768
[  418.597258][T16600] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4091 (16600)
[  418.616268][T16600] BTRFS info (device loop8): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  418.624936][T16600] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  418.644099][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.657188][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.664109][   T13] bond0 (unregistering): Released all slaves
[  418.713448][T16600] BTRFS info (device loop8): enabling ssd optimizations
[  418.735153][T16600] BTRFS info (device loop8): enabling free space tree
[  418.939939][T16632] sch_fq: defrate 4294967295 ignored.
[  419.233754][T13281] BTRFS info (device loop8): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  419.796053][T16657] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  420.012099][   T13] hsr_slave_0: left promiscuous mode
[  420.014405][   T13] hsr_slave_1: left promiscuous mode
[  420.016914][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  420.026307][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.046702][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.061895][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  420.101471][   T13] veth1_macvtap: left promiscuous mode
[  420.112936][   T13] veth0_macvtap: left promiscuous mode
[  420.117863][   T13] veth1_vlan: left promiscuous mode
[  420.127098][   T13] veth0_vlan: left promiscuous mode
[  421.028246][   T13] team0 (unregistering): Port device team_slave_1 removed
[  421.134198][   T13] team0 (unregistering): Port device team_slave_0 removed
[  421.863501][   T65] smc: removing ib device syz0
[  421.880270][T16665] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4108'.
[  421.890650][T16665] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4108'.
[  421.894023][ T5997] lo speed is unknown, defaulting to 1000
[  421.899227][ T5997] syz0: Port: 1 Link DOWN
[  422.588354][   T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  422.786706][   T10] usb 9-1: Using ep0 maxpacket: 16
[  422.795947][   T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  422.806161][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  422.838659][   T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  422.841705][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.845064][   T10] usb 9-1: Product: syz
[  422.846809][   T10] usb 9-1: Manufacturer: syz
[  422.848589][   T10] usb 9-1: SerialNumber: syz
[  422.877531][   T10] usb 9-1: config 0 descriptor??
[  422.971825][   T10] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  422.986077][   T10] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  423.390114][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4143'.
[  423.534285][   T10] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  423.538015][   T10] em28xx 9-1:0.0: Config register raw data: 0x41
[  423.754579][   T10] usb 9-1: USB disconnect, device number 19
[  423.801971][   T10] em28xx 9-1:0.0: Disconnecting em28xx
[  423.871822][   T10] em28xx 9-1:0.0: Freeing device
[  424.551337][T16797] loop8: detected capacity change from 0 to 256
[  424.575433][T16798] loop9: detected capacity change from 0 to 16
[  424.585788][T16798] erofs (device loop9): mounted with root inode @ nid 36.
[  424.895181][T16811] loop9: detected capacity change from 0 to 4096
[  424.908952][T16813] loop8: detected capacity change from 0 to 512
[  424.940375][T16811] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  424.966473][T16813] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  425.038390][T16813] EXT4-fs (loop8): 1 truncate cleaned up
[  425.040099][T16811] ntfs3(loop9): Failed to initialize $Extend/$Reparse.
[  425.046877][T16813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.120106][T13281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.187429][T16818] loop9: detected capacity change from 0 to 2048
[  425.202960][T16818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  425.524471][T12579] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  425.527912][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'.
[  425.660838][  T975] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  425.680277][T12579] usb 9-1: Using ep0 maxpacket: 32
[  425.684897][T16843] netlink: 'syz.2.4186': attribute type 2 has an invalid length.
[  425.687894][T12579] usb 9-1: config 0 has an invalid interface number: 155 but max is 0
[  425.688408][T16843] netlink: 'syz.2.4186': attribute type 8 has an invalid length.
[  425.693748][T12579] usb 9-1: config 0 has no interface number 0
[  425.695278][T16843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4186'.
[  425.701107][T12579] usb 9-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c
[  425.709302][T12579] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.715541][T12579] usb 9-1: Product: syz
[  425.718052][T12579] usb 9-1: Manufacturer: syz
[  425.720731][T12579] usb 9-1: SerialNumber: syz
[  425.729072][T12579] usb 9-1: config 0 descriptor??
[  425.831565][  T975] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  425.838017][  T975] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.842847][  T975] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.847399][  T975] usb 10-1: config 0 interface 0 has no altsetting 0
[  425.855855][  T975] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.859844][  T975] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.864697][  T975] usb 10-1: config 0 interface 0 has no altsetting 0
[  425.868937][  T975] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.873066][  T975] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.877688][  T975] usb 10-1: config 0 interface 0 has no altsetting 0
[  425.889043][  T975] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.892964][  T975] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.897927][  T975] usb 10-1: config 0 interface 0 has no altsetting 0
[  425.903312][  T975] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.907343][  T975] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.911766][  T975] usb 10-1: config 0 interface 0 has no altsetting 0
[  425.916934][  T975] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.920915][  T975] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.927564][  T975] usb 10-1: config 0 interface 0 has no altsetting 0
[  425.938296][  T975] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.942049][  T975] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.952340][  T975] usb 10-1: config 0 interface 0 has no altsetting 0
[  425.958972][  T975] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  425.967883][  T975] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  425.980922][  T975] usb 10-1: config 0 interface 0 has no altsetting 0
[  425.983289][T12579] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.155/input/input19
[  425.992154][  T975] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  425.996472][  T975] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  425.997968][ T5283] bcm5974 9-1:0.155: could not read from device
[  426.000085][  T975] usb 10-1: Product: syz
[  426.005993][  T975] usb 10-1: Manufacturer: syz
[  426.008068][  T975] usb 10-1: SerialNumber: syz
[  426.030536][  T975] usb 10-1: config 0 descriptor??
[  426.035508][T12579] usb 9-1: USB disconnect, device number 20
[  426.072949][  T975] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[  426.275530][  T975] usb 10-1: USB disconnect, device number 4
[  426.282923][  T975] yurex 10-1:0.0: USB YUREX #0 now disconnected
[  426.840364][T16869] loop8: detected capacity change from 0 to 40427
[  426.845781][T16869] F2FS-fs: heap/no_heap options were deprecated
[  426.855682][T16869] F2FS-fs (loop8): build fault injection rate: 3
[  426.858539][T16869] F2FS-fs (loop8): build fault injection type: 0x77fd1
[  426.864943][T16869] F2FS-fs (loop8): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x2e45/0x6ff0
[  426.889399][T16873] loop9: detected capacity change from 0 to 1024
[  426.899808][T16873] EXT4-fs: Ignoring removed nomblk_io_submit option
[  426.906752][T16873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  426.928794][T16873] EXT4-fs (loop9): stripe (3675) is not aligned with cluster size (16), stripe is disabled
[  426.954417][T16873] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  427.006781][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.235952][T16890] 9pnet_fd: Insufficient options for proto=fd
[  427.359318][  T975] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  427.518074][  T975] usb 10-1: Using ep0 maxpacket: 8
[  427.531342][  T975] usb 10-1: unable to get BOS descriptor or descriptor too short
[  427.536641][  T975] usb 10-1: no configurations
[  427.543002][  T975] usb 10-1: can't read configurations, error -22
[  428.386524][T16927] loop9: detected capacity change from 0 to 512
[  428.541832][T16933] loop9: detected capacity change from 0 to 512
[  428.545713][T16933] EXT4-fs: inline encryption not supported
[  428.548385][T16933] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  428.572368][T16933] EXT4-fs (loop9): 1 truncate cleaned up
[  428.579686][T16933] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.615428][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.752157][T16949] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  428.841376][T16953] loop9: detected capacity change from 0 to 2048
[  428.861896][T16953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  429.095918][T16973] loop9: detected capacity change from 0 to 128
[  429.116102][T16973] qnx6: superblock #1 checksum error
[  429.345369][T16990] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4253'.
[  429.497386][T17003] 9pnet: p9_errstr2errno: server reported unknown error n$[
[  429.497386][T17003] Q&|
[  429.517479][T17001] loop8: detected capacity change from 0 to 8192
[  429.523339][T17001] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  429.618695][T17001] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  429.621958][T17001] FAT-fs (loop8): Filesystem has been set read-only
[  429.624810][T17001] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  429.628122][T17001] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  429.676441][ T5914] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  429.711688][T13281] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  429.903734][ T5914] usb 10-1: config 241 has an invalid interface number: 0 but max is -1
[  429.906506][ T5914] usb 10-1: config 241 has 1 interface, different from the descriptor's value: 0
[  429.910068][ T5914] usb 10-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9
[  429.913746][ T5914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.924243][ T5914] pcwd_usb: The device isn't a Human Interface Device
[  430.161308][ T5900] usb 10-1: USB disconnect, device number 7
[  430.788513][T17045] 9pnet_fd: p9_fd_create_unix (17045): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  431.038201][T17059] loop8: detected capacity change from 0 to 512
[  431.094957][T17059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.165043][T13281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.305664][T17063] loop8: detected capacity change from 0 to 2048
[  431.315802][T17063] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051
[  431.353708][T17063] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  431.788373][T17077] loop9: detected capacity change from 0 to 256
[  431.794025][T17077] exfat: Deprecated parameter 'utf8'
[  431.797410][T17077] exfat: Deprecated parameter 'utf8'
[  431.805031][T17077] exfat: Deprecated parameter 'utf8'
[  431.816344][T17077] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  431.829801][T17076] loop8: detected capacity change from 0 to 4096
[  431.841331][T17076] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  431.851876][T17076] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  431.855611][T17076] ntfs3(loop8): ino=0, mi_enum_attr
[  431.866854][T17076] ntfs3(loop8): Failed to load $MFT.
[  431.966581][T17083] loop9: detected capacity change from 0 to 1024
[  432.047266][T17083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.053139][   T33] audit: type=1804 audit(1757266766.006:209): pid=17088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4296" name="file0" dev="ramfs" ino=45222 res=1 errno=0
[  432.064421][T17083] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.095209][T17083] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4293: bg 0: block 480: padding at end of block bitmap is not set
[  432.111162][T17083] EXT4-fs (loop9): Remounting filesystem read-only
[  432.158236][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.339860][T17097] bridge0: port 3(syz_tun) entered disabled state
[  432.347355][T17097] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.351137][T17097] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.450049][T17097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.459475][T17097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.529252][  T975] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  432.594061][   T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.598452][   T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.602309][   T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.606931][   T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.651093][T17108] loop2: detected capacity change from 0 to 7
[  432.655619][ T5862]  loop2:
[  432.656981][ T5862] loop2: partition table partially beyond EOD, truncated
[  432.665120][T17108]  loop2:
[  432.666504][T17108] loop2: partition table partially beyond EOD, truncated
[  432.705292][  T975] usb 10-1: Using ep0 maxpacket: 32
[  432.712520][  T975] usb 10-1: config 4 has an invalid interface number: 128 but max is 0
[  432.716058][  T975] usb 10-1: config 4 has no interface number 0
[  432.718650][  T975] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.731796][  T975] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.737426][  T975] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  432.740464][  T975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.756818][  T975] hub 10-1:4.128: USB hub found
[  432.972285][  T975] hub 10-1:4.128: 6 ports detected
[  432.974744][  T975] hub 10-1:4.128: Using single TT (err -22)
[  433.258952][  T975] hub 10-1:4.128: insufficient power available to use all downstream ports
[  433.377690][T17119] netlink: 'syz.2.4307': attribute type 30 has an invalid length.
[  433.381139][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4307'.
[  433.387677][T17119] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  433.506818][  T975] usb 10-1: USB disconnect, device number 8
[  433.825056][T17130] loop8: detected capacity change from 0 to 4096
[  433.842124][T17131] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  433.856003][T17130] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  433.868139][T17130] Remounting filesystem read-only
[  433.937885][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4311'.
[  434.097983][T17141] CIFS mount error: No usable UNC path provided in device string!
[  434.097983][T17141] 
[  434.103557][T17141] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  434.377782][ T5900] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  434.536856][T17149] loop9: detected capacity change from 0 to 40427
[  434.550214][T17149] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  434.553724][ T5900] usb 9-1: Using ep0 maxpacket: 8
[  434.561225][ T5900] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  434.567746][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.571796][T17149] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  434.580967][ T5900] usb 9-1: Product: syz
[  434.585329][T17149] F2FS-fs (loop9): invalid crc value
[  434.587745][ T5900] usb 9-1: Manufacturer: syz
[  434.589638][ T5900] usb 9-1: SerialNumber: syz
[  434.603957][ T5900] usb 9-1: config 0 descriptor??
[  434.655430][T17149] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  434.664161][T17149] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  434.670116][T17149] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  434.849186][ T5900] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  435.064349][T17192] loop9: detected capacity change from 0 to 512
[  435.086839][T17192] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  435.101262][T17192] EXT4-fs (loop9): 1 truncate cleaned up
[  435.113727][T17192] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.129719][T17192] EXT4-fs error (device loop9): swap_inode_boot_loader:384: inode #5: comm syz.9.4335: iget: bad extra_isize 46 (inode size 256)
[  435.141727][T17192] EXT4-fs (loop9): Remounting filesystem read-only
[  435.167992][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.489113][ T5917] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  435.660149][ T5917] usb 10-1: Using ep0 maxpacket: 8
[  435.685650][ T5917] usb 10-1: unable to get BOS descriptor or descriptor too short
[  435.690910][ T5917] usb 10-1: config 9 has an invalid interface number: 5 but max is 0
[  435.697078][ T5917] usb 10-1: config 9 has no interface number 0
[  435.699851][ T5917] usb 10-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87
[  435.706232][ T5917] usb 10-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  435.710502][ T5917] usb 10-1: config 9 interface 5 has no altsetting 0
[  435.718005][ T5917] usb 10-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  435.730322][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.734184][ T5917] usb 10-1: Product: syz
[  435.736195][ T5917] usb 10-1: Manufacturer: syz
[  435.738379][ T5917] usb 10-1: SerialNumber: syz
[  435.982346][ T5917] usb 10-1: USB disconnect, device number 9
[  436.163310][ T5900] gspca_sunplus: reg_w_riv err -71
[  436.165783][ T5900] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[  436.173595][ T5900] usb 9-1: USB disconnect, device number 21
[  436.786839][T17230] loop9: detected capacity change from 0 to 32768
[  436.907891][T17230] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  436.907917][T17230]   allowing incompatible features above 0.0: (unknown version)
[  436.907924][T17230]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  436.926236][T17230] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  436.929569][T17230] bcachefs (loop9): initializing new filesystem
[  436.938819][T17230] bcachefs (loop9): going read-write
[  436.955976][T17230] bcachefs (loop9): marking superblocks
[  436.964161][T17230] bcachefs (loop9): initializing freespace
[  436.969239][T17230] bcachefs (loop9): done initializing freespace
[  436.973705][T17230] bcachefs (loop9): reading snapshots table
[  436.976328][T17230] bcachefs (loop9): reading snapshots done
[  437.036579][T17230] bcachefs (loop9): done starting filesystem
[  437.815657][T15519] bcachefs (loop9): shutting down
[  437.817915][T15519] bcachefs (loop9): going read-only
[  437.825145][T15519] bcachefs (loop9): finished waiting for writes to stop
[  437.875992][T15519] bcachefs (loop9): flushing journal and stopping allocators, journal seq 2
[  437.930388][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4352'.
[  437.964637][T15519] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3
[  437.969869][T15519] bcachefs (loop9): clean shutdown complete, journal seq 4
[  437.973562][T15519] bcachefs (loop9): marking filesystem clean
[  438.028478][T15519] bcachefs (loop9): shutdown complete
[  439.368771][T17292] loop9: detected capacity change from 0 to 32768
[  439.371780][T17298] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4369'.
[  439.375397][T17298] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4369'.
[  439.387360][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4369'.
[  439.404236][T17292] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  439.503819][T15519] ocfs2: Unmounting device (7,9) on (node local)
[  439.785529][T17314] loop9: detected capacity change from 0 to 256
[  439.797202][T17314] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  439.804610][T17314] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  439.822361][T17314] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  439.834360][   T33] audit: type=1800 audit(1757266773.296:210): pid=17314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4376" name="file1" dev="loop9" ino=1048736 res=0 errno=0
[  439.842709][   T33] audit: type=1800 audit(1757266773.306:211): pid=17314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4376" name="file1" dev="loop9" ino=1048736 res=0 errno=0
[  440.009824][T17318] loop9: detected capacity change from 0 to 32768
[  440.015756][T17318] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  440.023234][T17318] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  440.112843][T15519] ocfs2: Unmounting device (7,9) on (node local)
[  440.644406][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4394'.
[  440.644764][   T33] audit: type=1326 audit(1757266774.054:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.2.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  440.648841][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4394'.
[  440.656182][   T33] audit: type=1326 audit(1757266774.054:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.2.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  440.668841][   T33] audit: type=1326 audit(1757266774.073:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.2.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  440.685917][   T33] audit: type=1326 audit(1757266774.073:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.2.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  440.703399][   T33] audit: type=1326 audit(1757266774.073:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.2.4392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71438ebe9 code=0x7ffc0000
[  441.095535][T17368] loop9: detected capacity change from 0 to 32768
[  441.110096][T17368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4400 (17368)
[  441.123550][T17368] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  441.127440][T17368] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  441.162235][T17368] BTRFS info (device loop9): enabling ssd optimizations
[  441.165272][T17368] BTRFS info (device loop9): enabling free space tree
[  441.189865][T17368] BTRFS error (device loop9): unable to set label with more than 255 bytes
[  441.231159][T15519] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  441.289853][T17386] loop8: detected capacity change from 0 to 16
[  441.313024][T17386] erofs (device loop8): rootino(nid 36) is not a directory(i_mode 25144)
[  441.746008][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4407'.
[  441.793187][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4407'.
[  441.969007][T17411] overlayfs: missing 'lowerdir'
[  442.023518][T17395] loop8: detected capacity change from 0 to 32768
[  442.067243][T17395] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  442.109103][T17395] XFS (loop8): Ending clean mount
[  442.285347][T13281] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  442.701622][T17431] loop9: detected capacity change from 0 to 32768
[  442.706285][T17431] btrfs: Deprecated parameter 'usebackuproot'
[  442.708992][T17431] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  442.755085][T17431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4418 (17431)
[  442.781508][T17431] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  442.797542][T17431] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  442.948204][T17431] BTRFS info (device loop9): rebuilding free space tree
[  442.964939][T17431] BTRFS info (device loop9): disabling free space tree
[  442.968054][T17431] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  442.988786][T17431] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  443.010961][T17431] BTRFS info (device loop9): setting nodatasum
[  443.021265][T17431] BTRFS info (device loop9): setting nodatacow
[  443.036468][T17431] BTRFS info (device loop9): enabling ssd optimizations
[  443.039605][T17431] BTRFS info (device loop9): turning off barriers
[  443.054011][T17431] BTRFS info (device loop9): force clearing of disk cache
[  443.056981][T17431] BTRFS info (device loop9): trying to use backup root at mount time
[  443.100451][T17464] netlink: 'syz.2.4423': attribute type 1 has an invalid length.
[  443.223467][T17446] loop8: detected capacity change from 0 to 32768
[  443.267241][T15519] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  443.389128][T17446] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  443.389143][T17446]   allowing incompatible features above 0.0: (unknown version)
[  443.389148][T17446]   features: lz4
[  443.429288][T17446] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  443.432671][T17446] bcachefs (loop8): initializing new filesystem
[  443.450791][T17446] bcachefs (loop8): going read-write
[  443.464305][T17475] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4425'.
[  443.492137][T17446] bcachefs (loop8): marking superblocks
[  443.540174][T17446] bcachefs (loop8): initializing freespace
[  443.551337][T17446] bcachefs (loop8): done initializing freespace
[  443.556593][T17446] bcachefs (loop8): reading snapshots table
[  443.558809][T17446] bcachefs (loop8): reading snapshots done
[  443.678934][T17446] bcachefs (loop8): done starting filesystem
[  443.713596][T17446] bcachefs (loop8): going read-only
[  443.715755][T17446] bcachefs (loop8): finished waiting for writes to stop
[  443.787987][T17446] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  444.027837][T17446] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 2
[  444.035051][T17446] bcachefs (loop8): clean shutdown complete, journal seq 3
[  444.038275][T17446] bcachefs (loop8): marking filesystem clean
[  444.075988][T13281] bcachefs (loop8): shutting down
[  444.161168][T13281] bcachefs (loop8): shutdown complete
[  444.634901][T17493] loop9: detected capacity change from 0 to 256
[  445.041542][ T5914] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  445.222942][ T5914] usb 10-1: Using ep0 maxpacket: 8
[  445.227186][ T5914] usb 10-1: config index 0 descriptor too short (expected 548, got 36)
[  445.230749][ T5914] usb 10-1: config 250 has no interfaces?
[  445.236504][ T5914] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  445.240544][ T5914] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  445.245283][ T5914] usb 10-1: Product: syz
[  445.247112][ T5914] usb 10-1: SerialNumber: syz
[  445.481370][ T5914] usb 10-1: USB disconnect, device number 10
[  446.965111][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4446'.
[  448.399016][T17602] loop9: detected capacity change from 0 to 1024
[  448.409217][T17602] hfsplus: request for non-existent node 40 in B*Tree
[  448.415171][T17602] hfsplus: request for non-existent node 40 in B*Tree
[  448.522512][T17596] loop8: detected capacity change from 0 to 32768
[  448.524206][T17606] loop9: detected capacity change from 0 to 512
[  448.540903][T17596] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4477 (17596)
[  448.545512][T17606] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.4482: bad orphan inode 15
[  448.550919][T17606] ext4_test_bit(bit=14, block=5) = 0
[  448.555083][T17606] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  448.561010][T17596] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  448.577788][T17596] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  448.613059][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.711195][T17596] BTRFS info (device loop8): enabling ssd optimizations
[  448.715626][T17596] BTRFS info (device loop8): enabling free space tree
[  448.747598][   T33] audit: type=1800 audit(1757266781.635:217): pid=17596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4477" name="file1" dev="loop8" ino=261 res=0 errno=0
[  448.812539][T13281] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  449.088668][T17637] loop8: detected capacity change from 0 to 8
[  449.102409][T17637] SQUASHFS error: zlib decompression failed, data probably corrupt
[  449.109495][T17637] SQUASHFS error: Failed to read block 0x9b: -5
[  449.117058][T17637] SQUASHFS error: Unable to read metadata cache entry [99]
[  449.125756][T17637] SQUASHFS error: Unable to read inode 0x127
[  449.206418][T17641] 9p: Unknown uid 00000000004294967295
[  449.244558][T17643] netlink: 'syz.2.4491': attribute type 1 has an invalid length.
[  449.274196][T17643] 8021q: adding VLAN 0 to HW filter on device bond5
[  449.319843][   T33] audit: type=1326 audit(1757266782.178:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17645 comm="syz.8.4492" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc12758ebe9 code=0x0
[  449.805605][T17669] loop8: detected capacity change from 0 to 32768
[  449.811184][T17669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4503 (17669)
[  449.832216][T17669] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  449.839053][T17669] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  449.899873][T17669] BTRFS info (device loop8): enabling ssd optimizations
[  449.909807][T17669] BTRFS info (device loop8): enabling free space tree
[  449.927717][T17688] vlan2: entered promiscuous mode
[  449.930033][T17688] bond0: entered promiscuous mode
[  449.932041][T17688] bond_slave_0: entered promiscuous mode
[  449.934121][T17688] bond_slave_1: entered promiscuous mode
[  449.945086][T13281] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  451.830398][T17720] netlink: 'syz.8.4518': attribute type 10 has an invalid length.
[  451.841365][T17720] team0: Port device geneve1 added
[  451.844018][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.848200][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.851675][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.855140][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.288740][T17745] loop9: detected capacity change from 0 to 512
[  452.311687][T17745] EXT4-fs: journaled quota format not specified
[  452.447258][T17724] loop8: detected capacity change from 0 to 131072
[  452.452300][T17724] F2FS-fs (loop8): Invalid log sectorsize (67108873)
[  452.454535][T17724] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  452.458027][T17724] F2FS-fs (loop8): invalid crc value
[  452.498072][T17724] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  452.504002][T17724] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  452.506470][T17724] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  452.545655][T17752] syzkaller1: entered promiscuous mode
[  452.548014][T17752] syzkaller1: entered allmulticast mode
[  452.575536][T17724] F2FS-fs (loop8): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  452.649598][ T5738] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  452.653397][ T5738] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  452.682083][T12579] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  452.982759][ T5917] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  453.153639][ T5917] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.162034][ T5917] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  453.167820][ T5917] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  453.182502][ T5917] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.194547][ T5917] usb 10-1: config 0 descriptor??
[  453.237498][T12579] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  453.301173][T12579] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  453.435315][T17773] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4541'.
[  453.641855][ T5917] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0
[  453.647069][ T5917] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0
[  453.649816][ T5917] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0
[  453.652510][ T5917] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0
[  453.655945][ T5917] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0
[  453.661957][ T5917] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0
[  454.099197][T17766] binfmt_misc: register: failed to install interpreter file ./file0
[  454.286956][ T5917] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 5: -71
[  454.290680][ T5917] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense calibration info: -71
[  454.293965][ T5917] playstation 0003:054C:0DF2.0017: Failed to get calibration data from DualSense
[  454.297834][ T5917] playstation 0003:054C:0DF2.0017: Failed to create dualsense.
[  454.302286][ T5917] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -71
[  454.308798][ T5917] usb 10-1: USB disconnect, device number 11
[  454.402052][T12579] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  454.564485][T12579] usb 9-1: config 0 has an invalid interface number: 69 but max is 0
[  454.568013][T12579] usb 9-1: config 0 has no interface number 0
[  454.570718][T12579] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  454.575183][T12579] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  454.581918][T12579] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  454.585747][T12579] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.589007][T12579] usb 9-1: Product: syz
[  454.590753][T12579] usb 9-1: Manufacturer: syz
[  454.592723][T12579] usb 9-1: SerialNumber: syz
[  454.598594][T12579] usb 9-1: config 0 descriptor??
[  454.606070][T17788] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  454.610359][T12579] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  454.617610][T12579] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  454.832735][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  454.904315][T17796] netlink: 'syz.2.4552': attribute type 4 has an invalid length.
[  455.048867][ T5914] usb 9-1: USB disconnect, device number 22
[  455.054252][ T5914] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  455.071817][ T5914] cyberjack 9-1:0.69: device disconnected
[  456.173267][T17801] syz.9.4553 (17801): drop_caches: 2
[  456.414325][T17813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4560'.
[  456.812281][T17827] loop8: detected capacity change from 0 to 40427
[  456.820253][T17827] F2FS-fs (loop8): invalid crc value
[  456.870995][T17827] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  456.875325][T17827] F2FS-fs (loop8): Start checkpoint disabled!
[  456.880909][T17827] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  456.959947][T12579] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  457.126021][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  458.600741][T12579] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  458.604089][T12579] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  458.607809][T12579] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  458.613163][T12579] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  458.616405][T12579] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.619188][T12579] usb 10-1: Product: syz
[  458.620981][T12579] usb 10-1: Manufacturer: syz
[  458.623294][T12579] usb 10-1: SerialNumber: syz
[  458.873775][T12579] usb 10-1: USB disconnect, device number 12
[  458.914772][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  459.443493][T17854] netlink: 'syz.9.4577': attribute type 11 has an invalid length.
[  459.807783][ T5917] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  459.867838][ T3553] kworker/u9:4: attempt to access beyond end of device
[  459.867838][ T3553] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  459.875638][ T3553] CPU: 0 UID: 0 PID: 3553 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  459.875661][ T3553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  459.875670][ T3553] Workqueue: writeback wb_workfn (flush-7:8)
[  459.875696][ T3553] Call Trace:
[  459.875703][ T3553]  <TASK>
[  459.875711][ T3553]  dump_stack_lvl+0x189/0x250
[  459.875732][ T3553]  ? __pfx_dump_stack_lvl+0x10/0x10
[  459.875747][ T3553]  ? __pfx_queue_work_on+0x10/0x10
[  459.875761][ T3553]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  459.875779][ T3553]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  459.875806][ T3553]  f2fs_handle_critical_error+0x37c/0x540
[  459.875831][ T3553]  f2fs_write_end_io+0x886/0xb60
[  459.875860][ T3553]  __submit_merged_bio+0x27a/0x6a0
[  459.875884][ T3553]  __submit_merged_write_cond+0x255/0x530
[  459.875907][ T3553]  f2fs_write_data_pages+0x261d/0x3000
[  459.875954][ T3553]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  459.875984][ T3553]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  459.876027][ T3553]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  459.876045][ T3553]  ? look_up_lock_class+0x74/0x170
[  459.876072][ T3553]  ? trace_f2fs_writepages+0x7f/0x200
[  459.876088][ T3553]  ? f2fs_write_node_pages+0x478/0x6e0
[  459.876109][ T3553]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  459.876138][ T3553]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  459.876157][ T3553]  do_writepages+0x32e/0x550
[  459.876178][ T3553]  ? reacquire_held_locks+0x127/0x1d0
[  459.876191][ T3553]  ? writeback_sb_inodes+0x384/0x1010
[  459.876214][ T3553]  __writeback_single_inode+0x145/0xff0
[  459.876229][ T3553]  ? do_raw_spin_unlock+0x4d/0x240
[  459.876248][ T3553]  writeback_sb_inodes+0x6c7/0x1010
[  459.876269][ T3553]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  459.876299][ T3553]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  459.876359][ T3553]  ? rcu_is_watching+0x15/0xb0
[  459.876410][ T3553]  wb_writeback+0x43b/0xaf0
[  459.876433][ T3553]  ? queue_io+0x331/0x590
[  459.876451][ T3553]  ? __pfx_wb_writeback+0x10/0x10
[  459.876474][ T3553]  ? _raw_spin_unlock_irq+0x23/0x50
[  459.876494][ T3553]  wb_workfn+0x409/0xef0
[  459.876521][ T3553]  ? __pfx_wb_workfn+0x10/0x10
[  459.876539][ T3553]  ? __lock_acquire+0xab9/0xd20
[  459.876566][ T3553]  ? process_scheduled_works+0x9ef/0x17b0
[  459.876585][ T3553]  ? _raw_spin_unlock_irq+0x23/0x50
[  459.876599][ T3553]  ? process_scheduled_works+0x9ef/0x17b0
[  459.876610][ T3553]  ? process_scheduled_works+0x9ef/0x17b0
[  459.876624][ T3553]  process_scheduled_works+0xae1/0x17b0
[  459.876662][ T3553]  ? __pfx_process_scheduled_works+0x10/0x10
[  459.876690][ T3553]  worker_thread+0x8a0/0xda0
[  459.876727][ T3553]  kthread+0x711/0x8a0
[  459.876745][ T3553]  ? __pfx_worker_thread+0x10/0x10
[  459.876757][ T3553]  ? __pfx_kthread+0x10/0x10
[  459.876774][ T3553]  ? _raw_spin_unlock_irq+0x23/0x50
[  459.876789][ T3553]  ? lockdep_hardirqs_on+0x9c/0x150
[  459.876804][ T3553]  ? __pfx_kthread+0x10/0x10
[  459.876820][ T3553]  ret_from_fork+0x3fc/0x770
[  459.876836][ T3553]  ? __pfx_ret_from_fork+0x10/0x10
[  459.876854][ T3553]  ? __switch_to_asm+0x39/0x70
[  459.876868][ T3553]  ? __switch_to_asm+0x33/0x70
[  459.876882][ T3553]  ? __pfx_kthread+0x10/0x10
[  459.876898][ T3553]  ret_from_fork_asm+0x1a/0x30
[  459.876927][ T3553]  </TASK>
[  459.876933][ T3553] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  459.989539][ T5917] usb 10-1: Using ep0 maxpacket: 32
[  460.015036][ T5917] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.020264][ T5917] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  460.025329][ T5917] usb 10-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  460.028548][ T5917] usb 10-1: Product: syz
[  460.029943][ T5917] usb 10-1: Manufacturer: syz
[  460.031585][ T5917] usb 10-1: SerialNumber: syz
[  460.047188][ T5917] usb 10-1: config 0 descriptor??
[  460.055252][ T5917] gs_usb 10-1:0.0: Required endpoints not found
[  460.284729][ T5917] usb 10-1: USB disconnect, device number 13
[  460.440413][T17878] loop8: detected capacity change from 0 to 1024
[  460.444316][T17878] EXT4-fs: Ignoring removed bh option
[  460.487101][T17878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.553203][T13281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.743740][T17895] loop8: detected capacity change from 0 to 128
[  460.937608][T17901] loop9: detected capacity change from 0 to 1024
[  460.959856][T17901] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  460.966839][T17901] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869)
[  460.970469][T17901] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  460.975308][T17901] EXT4-fs error (device loop9): ext4_get_journal_inode:5800: inode #5: comm syz.9.4599: unexpected bad inode w/o EXT4_IGET_BAD
[  460.979776][T17901] EXT4-fs (loop9): no journal found
[  460.982101][T17901] EXT4-fs (loop9): can't get journal size
[  460.990014][T17901] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  461.017506][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.108742][T17910] loop9: detected capacity change from 0 to 512
[  461.148096][T17910] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  461.171906][T17910] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4603: bg 0: block 16: invalid block bitmap
[  461.214520][T17910] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  461.230908][T17910] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4603: invalid indirect mapped block 5 (level 0)
[  461.238841][T17910] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4603: invalid indirect mapped block 4294967295 (level 1)
[  461.245194][T17910] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4603: invalid indirect mapped block 4294967295 (level 2)
[  461.259625][T17910] EXT4-fs (loop9): 1 truncate cleaned up
[  461.264877][T17910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.375706][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.456716][T17927] loop8: detected capacity change from 0 to 4096
[  461.588826][T17927] ntfs3(loop8): ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  461.923561][T13442] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[  462.100396][T13442] usb 10-1: unable to get BOS descriptor or descriptor too short
[  462.104256][T13442] usb 10-1: not running at top speed; connect to a high speed hub
[  462.111207][T13442] usb 10-1: config 8 has an invalid interface number: 247 but max is 0
[  462.114708][T13442] usb 10-1: config 8 has no interface number 0
[  462.120870][T13442] usb 10-1: config 8 interface 247 has no altsetting 0
[  462.127389][T13442] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0005, bcdDevice=53.f1
[  462.131239][T13442] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.134921][T13442] usb 10-1: Product: syz
[  462.136780][T13442] usb 10-1: Manufacturer: syz
[  462.141709][T13442] usb 10-1: SerialNumber: syz
[  462.325121][T17966] loop8: detected capacity change from 0 to 40427
[  462.368705][T17966] F2FS-fs (loop8): build fault injection rate: 14
[  462.371518][T17966] F2FS-fs (loop8): build fault injection type: 0x3bfe8c
[  462.377833][T13442] ati_remote 10-1:8.247: ati_remote_probe: Unexpected desc.bNumEndpoints
[  462.378522][T17966] F2FS-fs (loop8): invalid crc value
[  462.386575][    C1] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  462.403328][    C1] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  462.403539][T13442] usb 10-1: USB disconnect, device number 14
[  462.478350][T17966] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  462.482657][T17966] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  462.493460][T17966] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  462.516647][T17966] F2FS-fs (loop8): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  462.524986][T17966] F2FS-fs (loop8): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x14c/0x5c0
[  462.537129][T17966] F2FS-fs (loop8): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  462.542532][T17966] F2FS-fs (loop8): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  462.577662][T13281] syz-executor: attempt to access beyond end of device
[  462.577662][T13281] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  462.595606][T13281] CPU: 1 UID: 0 PID: 13281 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  462.595632][T13281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  462.595641][T13281] Call Trace:
[  462.595646][T13281]  <TASK>
[  462.595652][T13281]  dump_stack_lvl+0x189/0x250
[  462.595678][T13281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.595693][T13281]  ? __pfx_queue_work_on+0x10/0x10
[  462.595706][T13281]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  462.595725][T13281]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  462.595750][T13281]  f2fs_handle_critical_error+0x37c/0x540
[  462.595793][T13281]  f2fs_write_end_io+0x886/0xb60
[  462.595820][T13281]  __submit_merged_bio+0x27a/0x6a0
[  462.595842][T13281]  __submit_merged_write_cond+0x255/0x530
[  462.595864][T13281]  f2fs_write_data_pages+0x261d/0x3000
[  462.595904][T13281]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  462.595932][T13281]  ? is_bpf_text_address+0x26/0x2b0
[  462.595969][T13281]  ? kernel_text_address+0xa5/0xe0
[  462.595986][T13281]  ? __kernel_text_address+0xd/0x40
[  462.596003][T13281]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  462.596029][T13281]  ? stack_trace_save+0x9c/0xe0
[  462.596049][T13281]  ? __lock_acquire+0xab9/0xd20
[  462.596085][T13281]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  462.596103][T13281]  do_writepages+0x32e/0x550
[  462.596129][T13281]  ? do_raw_spin_unlock+0x4d/0x240
[  462.596147][T13281]  filemap_fdatawrite+0x199/0x240
[  462.596165][T13281]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  462.596209][T13281]  ? do_raw_spin_unlock+0x4d/0x240
[  462.596225][T13281]  f2fs_sync_dirty_inodes+0x31f/0x830
[  462.596249][T13281]  f2fs_write_checkpoint+0x95a/0x1df0
[  462.596279][T13281]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  462.596322][T13281]  ? kill_f2fs_super+0x298/0x6c0
[  462.596339][T13281]  kill_f2fs_super+0x2c3/0x6c0
[  462.596379][T13281]  ? __pfx_kill_f2fs_super+0x10/0x10
[  462.596392][T13281]  ? radix_tree_delete_item+0x2b6/0x400
[  462.596414][T13281]  ? shrinker_free+0x2ce/0x3e0
[  462.596430][T13281]  deactivate_locked_super+0xbc/0x130
[  462.596449][T13281]  cleanup_mnt+0x425/0x4c0
[  462.596462][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.596481][T13281]  task_work_run+0x1d4/0x260
[  462.596499][T13281]  ? __pfx_task_work_run+0x10/0x10
[  462.596512][T13281]  ? __x64_sys_umount+0x122/0x160
[  462.596532][T13281]  ? exit_to_user_mode_loop+0x40/0x110
[  462.596551][T13281]  exit_to_user_mode_loop+0xec/0x110
[  462.596568][T13281]  do_syscall_64+0x2bd/0x3b0
[  462.596580][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.596594][T13281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.596607][T13281]  ? exc_page_fault+0x9f/0xf0
[  462.596624][T13281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.596636][T13281] RIP: 0033:0x7fc12758ff17
[  462.596650][T13281] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  462.596659][T13281] RSP: 002b:00007ffc7ae4f668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  462.596674][T13281] RAX: 0000000000000000 RBX: 00007fc127611c05 RCX: 00007fc12758ff17
[  462.596683][T13281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7ae4f720
[  462.596690][T13281] RBP: 00007ffc7ae4f720 R08: 0000000000000000 R09: 0000000000000000
[  462.596696][T13281] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7ae507b0
[  462.596704][T13281] R13: 00007fc127611c05 R14: 000000000006ada4 R15: 00007ffc7ae507f0
[  462.596725][T13281]  </TASK>
[  462.754124][T13281] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  463.227403][ T5914] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  463.366903][T13442] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  463.387569][ T5914] usb 9-1: Using ep0 maxpacket: 16
[  463.398990][ T5914] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00
[  463.402822][ T5914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.406177][ T5914] usb 9-1: Product: syz
[  463.407926][ T5914] usb 9-1: Manufacturer: syz
[  463.410026][ T5914] usb 9-1: SerialNumber: syz
[  463.414492][ T5914] usb 9-1: config 0 descriptor??
[  463.424118][ T5914] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  463.428274][ T5914] usb 9-1: Detected FT4233HP
[  463.531024][T13442] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  463.537106][T13442] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  463.557755][T13442] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  463.562143][T13442] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  463.565566][T13442] usb 10-1: SerialNumber: syz
[  463.638747][ T5914] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  463.647406][ T5914] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  463.659233][ T5914] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  463.671960][ T5914] usb 9-1: USB disconnect, device number 23
[  463.689791][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  463.693673][ T5914] ftdi_sio 9-1:0.0: device disconnected
[  463.803617][T13442] usb 10-1: 0:2 : does not exist
[  463.839771][T13442] usb 10-1: USB disconnect, device number 15
[  463.841550][T17987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4638'.
[  463.878030][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  464.420291][T18022] /dev/nullb0: Can't lookup blockdev
[  464.760305][T18038] overlayfs: failed to clone upperpath
[  464.915758][ T5917] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[  465.005196][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  465.008523][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  465.112403][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  465.116534][ T5917] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  465.120165][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.126624][ T5917] usb 9-1: config 0 descriptor??
[  465.132582][ T5917] usb 9-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  465.135672][ T5917] usb 9-1: No valid video chain found.
[  465.355704][ T5917] usb 9-1: USB disconnect, device number 24
[  465.529269][T18048] loop9: detected capacity change from 0 to 256
[  465.538387][T18048] exFAT-fs (loop9): error, The cluster chain has a loop
[  465.542239][T18048] exFAT-fs (loop9): failed to count the number of clusters in root
[  465.545806][T18048] exFAT-fs (loop9): failed to recognize exfat type
[  466.061666][T18061] loop8: detected capacity change from 0 to 32768
[  466.093204][T18061] XFS (loop8): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  466.102053][T18061] XFS (loop8): Log size 624 blocks too small, minimum size is 816 blocks
[  466.105491][T18061] XFS (loop8): AAIEEE! Log failed size checks. Abort!
[  466.122286][T18061] XFS (loop8): log mount failed
[  466.141233][T18059] loop9: detected capacity change from 0 to 32768
[  466.248305][T18059] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  466.357767][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  466.378434][T18059] XFS (loop9): Ending clean mount
[  466.396625][T18059] XFS (loop9): Quotacheck needed: Please wait.
[  466.446808][T18059] XFS (loop9): Quotacheck: Done.
[  466.458705][T18086] netlink: 'syz.2.4679': attribute type 1 has an invalid length.
[  466.492481][T15519] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  466.685153][T18096] veth2: entered promiscuous mode
[  466.698080][T18096] veth2: entered allmulticast mode
[  467.004033][T18108] loop9: detected capacity change from 0 to 128
[  467.040869][T18108] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  467.049288][T18108] hpfs: filesystem error: improperly stopped
[  467.051817][T18108] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  467.055294][T18108] hpfs: You really don't want any checks? You are crazy...
[  467.059805][T18108] hpfs: hpfs_map_sector(): read error
[  467.062025][T18108] hpfs: code page support is disabled
[  467.065317][T18108] hpfs: hpfs_map_4sectors(): unaligned read
[  467.068022][T18108] hpfs: hpfs_map_4sectors(): unaligned read
[  467.070802][T18108] hpfs: filesystem error: unable to find root dir
[  468.268102][T18127] loop9: detected capacity change from 0 to 128
[  468.610698][T18132] loop9: detected capacity change from 0 to 4096
[  468.630529][T18132] ntfs3(loop9): ino=0, mi_enum_attr
[  468.640155][T18132] ntfs3(loop9): ino=0, mi_enum_attr
[  468.642876][T18132] ntfs3(loop9): Failed to load $MFT (-22).
[  469.331069][T18155] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4712'.
[  469.674073][T18162] loop9: detected capacity change from 0 to 32768
[  469.678476][T18162] XFS: noikeep mount option is deprecated.
[  469.727886][T18162] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  469.744505][T18162] XFS (loop9): Ending clean mount
[  469.753782][T18162] XFS (loop9): Quotacheck needed: Please wait.
[  469.806583][T18162] XFS (loop9): Quotacheck: Done.
[  469.837072][T15519] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  470.725162][T18210] netlink: 'syz.2.4733': attribute type 29 has an invalid length.
[  470.730059][T18210] netlink: 'syz.2.4733': attribute type 29 has an invalid length.
[  471.233271][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4739'.
[  471.360875][T18231] loop9: detected capacity change from 0 to 128
[  471.365233][T18231] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  471.451364][T18231] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  471.525076][T18221] loop8: detected capacity change from 0 to 40427
[  471.536796][T18221] F2FS-fs (loop8): Image doesn't support compression
[  471.552111][T18221] F2FS-fs (loop8): invalid crc value
[  471.618751][T18221] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  471.637083][T18221] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  471.745793][T13281] syz-executor: attempt to access beyond end of device
[  471.745793][T13281] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  471.757596][T13281] CPU: 1 UID: 0 PID: 13281 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  471.757619][T13281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.757627][T13281] Call Trace:
[  471.757633][T13281]  <TASK>
[  471.757639][T13281]  dump_stack_lvl+0x189/0x250
[  471.757681][T13281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.757697][T13281]  ? __pfx_queue_work_on+0x10/0x10
[  471.757709][T13281]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  471.757726][T13281]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  471.757748][T13281]  f2fs_handle_critical_error+0x37c/0x540
[  471.757770][T13281]  f2fs_write_end_io+0x886/0xb60
[  471.757797][T13281]  __submit_merged_bio+0x27a/0x6a0
[  471.757821][T13281]  __submit_merged_write_cond+0x255/0x530
[  471.757839][T13281]  f2fs_write_data_pages+0x261d/0x3000
[  471.757850][T13281]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  471.757874][T13281]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  471.757905][T13281]  ? rcu_is_watching+0x15/0xb0
[  471.757913][T13281]  ? trace_sched_exit_tp+0x36/0x110
[  471.757923][T13281]  ? __schedule+0x17ae/0x4cc0
[  471.757935][T13281]  ? folios_put_refs+0x559/0x640
[  471.757950][T13281]  ? __lock_acquire+0xab9/0xd20
[  471.757965][T13281]  ? do_raw_spin_lock+0x121/0x290
[  471.757979][T13281]  ? do_raw_spin_unlock+0x4d/0x240
[  471.757988][T13281]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  471.757998][T13281]  do_writepages+0x32e/0x550
[  471.758019][T13281]  ? do_raw_spin_unlock+0x4d/0x240
[  471.758030][T13281]  filemap_fdatawrite+0x199/0x240
[  471.758041][T13281]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  471.758077][T13281]  ? do_raw_spin_unlock+0x4d/0x240
[  471.758092][T13281]  f2fs_sync_dirty_inodes+0x31f/0x830
[  471.758113][T13281]  f2fs_write_checkpoint+0x95a/0x1df0
[  471.758132][T13281]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  471.758161][T13281]  ? kill_f2fs_super+0x298/0x6c0
[  471.758172][T13281]  kill_f2fs_super+0x2c3/0x6c0
[  471.758184][T13281]  ? __pfx_kill_f2fs_super+0x10/0x10
[  471.758194][T13281]  ? radix_tree_delete_item+0x2b6/0x400
[  471.758213][T13281]  ? shrinker_free+0x2ce/0x3e0
[  471.758227][T13281]  deactivate_locked_super+0xbc/0x130
[  471.758243][T13281]  cleanup_mnt+0x425/0x4c0
[  471.758254][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.758266][T13281]  task_work_run+0x1d4/0x260
[  471.758278][T13281]  ? __pfx_task_work_run+0x10/0x10
[  471.758287][T13281]  ? __x64_sys_umount+0x122/0x160
[  471.758328][T13281]  ? exit_to_user_mode_loop+0x40/0x110
[  471.758347][T13281]  exit_to_user_mode_loop+0xec/0x110
[  471.758364][T13281]  do_syscall_64+0x2bd/0x3b0
[  471.758374][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.758388][T13281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.758400][T13281]  ? exc_page_fault+0x9f/0xf0
[  471.758417][T13281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.758428][T13281] RIP: 0033:0x7fc12758ff17
[  471.758441][T13281] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  471.758451][T13281] RSP: 002b:00007ffc7ae4f668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  471.758466][T13281] RAX: 0000000000000000 RBX: 00007fc127611c05 RCX: 00007fc12758ff17
[  471.758474][T13281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7ae4f720
[  471.758482][T13281] RBP: 00007ffc7ae4f720 R08: 0000000000000000 R09: 0000000000000000
[  471.758489][T13281] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7ae507b0
[  471.758496][T13281] R13: 00007fc127611c05 R14: 000000000006cf0a R15: 00007ffc7ae507f0
[  471.758518][T13281]  </TASK>
[  471.758657][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4751'.
[  471.781134][T13281] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  471.867759][T18257] gre1: entered allmulticast mode
[  471.883638][T13281] CPU: 0 UID: 0 PID: 13281 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  471.883658][T13281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.883665][T13281] Call Trace:
[  471.883670][T13281]  <TASK>
[  471.883676][T13281]  dump_stack_lvl+0x189/0x250
[  471.883699][T13281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.883713][T13281]  ? __pfx_queue_work_on+0x10/0x10
[  471.883724][T13281]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  471.883741][T13281]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  471.883767][T13281]  f2fs_handle_critical_error+0x37c/0x540
[  471.883790][T13281]  f2fs_write_end_io+0x886/0xb60
[  471.883817][T13281]  __submit_merged_bio+0x27a/0x6a0
[  471.883839][T13281]  __submit_merged_write_cond+0x255/0x530
[  471.883861][T13281]  f2fs_write_data_pages+0x261d/0x3000
[  471.883877][T13281]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  471.883928][T13281]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  471.883984][T13281]  ? rcu_is_watching+0x15/0xb0
[  471.883995][T13281]  ? trace_sched_exit_tp+0x36/0x110
[  471.884010][T13281]  ? __schedule+0x17ae/0x4cc0
[  471.884030][T13281]  ? folios_put_refs+0x559/0x640
[  471.884056][T13281]  ? __lock_acquire+0xab9/0xd20
[  471.884080][T13281]  ? do_raw_spin_lock+0x121/0x290
[  471.884104][T13281]  ? do_raw_spin_unlock+0x4d/0x240
[  471.884118][T13281]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  471.884135][T13281]  do_writepages+0x32e/0x550
[  471.884161][T13281]  ? do_raw_spin_unlock+0x4d/0x240
[  471.884177][T13281]  filemap_fdatawrite+0x199/0x240
[  471.884193][T13281]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  471.884251][T13281]  ? do_raw_spin_unlock+0x4d/0x240
[  471.884269][T13281]  f2fs_sync_dirty_inodes+0x31f/0x830
[  471.884326][T13281]  f2fs_write_checkpoint+0x95a/0x1df0
[  471.884362][T13281]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  471.884417][T13281]  ? kill_f2fs_super+0x298/0x6c0
[  471.884435][T13281]  kill_f2fs_super+0x2c3/0x6c0
[  471.884452][T13281]  ? __pfx_kill_f2fs_super+0x10/0x10
[  471.884461][T13281]  ? radix_tree_delete_item+0x2b6/0x400
[  471.884485][T13281]  ? shrinker_free+0x2ce/0x3e0
[  471.884501][T13281]  deactivate_locked_super+0xbc/0x130
[  471.884518][T13281]  cleanup_mnt+0x425/0x4c0
[  471.884532][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.884551][T13281]  task_work_run+0x1d4/0x260
[  471.884569][T13281]  ? __pfx_task_work_run+0x10/0x10
[  471.884581][T13281]  ? __x64_sys_umount+0x122/0x160
[  471.884601][T13281]  ? exit_to_user_mode_loop+0x40/0x110
[  471.884621][T13281]  exit_to_user_mode_loop+0xec/0x110
[  471.884636][T13281]  do_syscall_64+0x2bd/0x3b0
[  471.884646][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.884661][T13281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.884673][T13281]  ? exc_page_fault+0x9f/0xf0
[  471.884690][T13281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.884700][T13281] RIP: 0033:0x7fc12758ff17
[  471.884713][T13281] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  471.884723][T13281] RSP: 002b:00007ffc7ae4f668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  471.884736][T13281] RAX: 0000000000000000 RBX: 00007fc127611c05 RCX: 00007fc12758ff17
[  471.884744][T13281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7ae4f720
[  471.884751][T13281] RBP: 00007ffc7ae4f720 R08: 0000000000000000 R09: 0000000000000000
[  471.884758][T13281] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7ae507b0
[  471.884766][T13281] R13: 00007fc127611c05 R14: 000000000006cf0a R15: 00007ffc7ae507f0
[  471.884790][T13281]  </TASK>
[  471.884795][T13281] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  472.630786][ T5917] usb 10-1: new full-speed USB device number 16 using dummy_hcd
[  472.708642][T18295] [U] +H
[  472.972367][ T5917] usb 10-1: not running at top speed; connect to a high speed hub
[  472.996040][ T5917] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  473.008648][ T5917] usb 10-1: config 1 has no interface number 1
[  473.016995][ T5917] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  473.084338][ T5917] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  473.092924][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.096414][ T5917] usb 10-1: Product: syz
[  473.098442][ T5917] usb 10-1: Manufacturer: syz
[  473.103133][ T5917] usb 10-1: SerialNumber: syz
[  473.355223][T18277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.363256][T18277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.375567][ T5917] usb 10-1: failed to enable PITCH for EP 0x82
[  473.395964][ T5917] usb 10-1: USB disconnect, device number 16
[  473.441324][ T7694] udevd[7694]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  474.087926][T18324] netlink: 'syz.9.4784': attribute type 83 has an invalid length.
[  474.095889][T18323] loop8: detected capacity change from 0 to 2048
[  474.156645][T18323] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.164630][T18323] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.202557][T18328] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  474.216039][T18328] EXT4-fs (loop8): Remounting filesystem read-only
[  474.219856][T18323] EXT4-fs warning (device loop8): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.8.4785: cleanup dec ref error -117
[  474.287894][T13281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.310536][T18335] loop9: detected capacity change from 0 to 512
[  474.317440][T18335] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  474.394398][T18335] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.450060][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.651876][T18345] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4792'.
[  474.755771][T18348] binder: BC_ATTEMPT_ACQUIRE not supported
[  474.758463][T18348] binder: 18339:18348 ioctl c0306201 2000000001c0 returned -22
[  474.775243][T18348] delete_channel: no stack
[  475.256908][T18354] loop9: detected capacity change from 0 to 16384
[  475.372982][T18354] bcachefs (loop9): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,norecovery,reconstruct_alloc,version_upgrade=incompatible
[  475.373000][T18354]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  475.399035][T18354] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  475.402538][T18354] bcachefs (loop9): recovering from clean shutdown, journal seq 18
[  475.405735][T18354] bcachefs (loop9): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  475.405735][T18354]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  475.414594][T18354] bcachefs (loop9): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.13: inode_has_child_snapshots
[  475.414594][T18354] 
[  475.422455][T18354] bcachefs (loop9): dropping and reconstructing all alloc info
[  475.453239][T18354] bcachefs (loop9): accounting_read... done
[  475.458014][T18354] bcachefs (loop9): alloc_read... done
[  475.460347][T18354] bcachefs (loop9): snapshots_read... done
[  475.466637][T18354] bcachefs (loop9): done starting filesystem
[  475.522868][T15519] bcachefs (loop9): shutting down
[  475.568129][T15519] bcachefs (loop9): shutdown complete
[  475.942006][T18378] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  475.946539][T18378] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  476.461585][T18381] syzkaller1: entered promiscuous mode
[  476.463975][T18381] syzkaller1: entered allmulticast mode
[  476.609359][T18383] capability: warning: `syz.8.4804' uses 32-bit capabilities (legacy support in use)
[  476.695113][T18385] loop8: detected capacity change from 0 to 1024
[  476.738577][T18385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.794709][   T33] audit: type=1800 audit(1757266807.887:219): pid=18385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4805" name="bus" dev="loop8" ino=18 res=0 errno=0
[  476.812410][T13281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.088131][T18393] loop8: detected capacity change from 0 to 128
[  477.116154][T18393] msdos: Unexpected value for 'dots'
[  477.885663][T18402] loop8: detected capacity change from 0 to 8
[  478.257288][T18429] netlink: 'syz.2.4820': attribute type 11 has an invalid length.
[  478.378412][T18431] support for the xor transformation has been removed.
[  478.433401][T18438] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4824'.
[  478.589052][T18445] loop8: detected capacity change from 0 to 1764
[  478.746471][T18449] tipc: Started in network mode
[  478.748715][T18449] tipc: Node identity 3ed6a5dc7a6, cluster identity 4711
[  478.763177][T18449] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.772552][T18449] syzkaller0: entered promiscuous mode
[  478.779750][T18449] syzkaller0: entered allmulticast mode
[  478.845192][T18449] tipc: Resetting bearer <eth:syzkaller0>
[  478.853128][T18448] tipc: Resetting bearer <eth:syzkaller0>
[  478.868711][T18448] tipc: Disabling bearer <eth:syzkaller0>
[  479.048438][T18453] loop9: detected capacity change from 0 to 512
[  479.188082][T18453] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.193907][T18453] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.223244][T18452] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4830: bg 0: block 96: padding at end of block bitmap is not set
[  479.232787][T18452] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  479.478840][   T10] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  479.639074][   T10] usb 9-1: Using ep0 maxpacket: 32
[  479.650815][   T10] usb 9-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d
[  479.659569][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.663312][   T10] usb 9-1: Product: syz
[  479.665381][   T10] usb 9-1: Manufacturer: syz
[  479.667633][   T10] usb 9-1: SerialNumber: syz
[  479.766222][T15519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.903284][   T10] aqc111 9-1:1.0: probe with driver aqc111 failed with error -22
[  479.935120][   T10] usb 9-1: USB disconnect, device number 25
[  479.960836][T18470] loop9: detected capacity change from 0 to 4096
[  479.993607][T18473] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  479.993758][T18470] NILFS error (device loop9): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  480.010996][T18470] NILFS (loop9): mounting fs with errors
[  480.428688][T18486] loop9: detected capacity change from 0 to 32768
[  480.447661][T18486] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  480.465156][T18486] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  480.576541][T18486] 
[  480.577538][T18486] ======================================================
[  480.580102][T18486] WARNING: possible circular locking dependency detected
[  480.583281][T18486] syzkaller #0 Not tainted
[  480.585267][T18486] ------------------------------------------------------
[  480.589066][T18486] syz.9.4844/18486 is trying to acquire lock:
[  480.591275][T18486] ffff888034d84f78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  480.595178][T18486] 
[  480.595178][T18486] but task is already holding lock:
[  480.597871][T18486] ffff8881120b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  480.601617][T18486] 
[  480.601617][T18486] which lock already depends on the new lock.
[  480.601617][T18486] 
[  480.605663][T18486] 
[  480.605663][T18486] the existing dependency chain (in reverse order) is:
[  480.608915][T18486] 
[  480.608915][T18486] -> #4 (jbd2_handle){++++}-{0:0}:
[  480.611651][T18486]        lock_acquire+0x120/0x360
[  480.613798][T18486]        start_this_handle+0x1fa7/0x21c0
[  480.616328][T18486]        jbd2__journal_start+0x2c1/0x5b0
[  480.618754][T18486]        jbd2_journal_start+0x2a/0x40
[  480.621048][T18486]        ocfs2_start_trans+0x376/0x6d0
[  480.623402][T18486]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  480.625850][T18486]        ocfs2_dismount_volume+0x201/0x8d0
[  480.627957][T18486]        generic_shutdown_super+0x135/0x2c0
[  480.629996][T18486]        kill_block_super+0x44/0x90
[  480.631764][T18486]        deactivate_locked_super+0xbc/0x130
[  480.633751][T18486]        cleanup_mnt+0x425/0x4c0
[  480.635417][T18486]        task_work_run+0x1d4/0x260
[  480.637106][T18486]        exit_to_user_mode_loop+0xec/0x110
[  480.639357][T18486]        do_syscall_64+0x2bd/0x3b0
[  480.641516][T18486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.644199][T18486] 
[  480.644199][T18486] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  480.647692][T18486]        lock_acquire+0x120/0x360
[  480.649406][T18486]        down_read+0x46/0x2e0
[  480.650975][T18486]        ocfs2_start_trans+0x36a/0x6d0
[  480.652781][T18486]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  480.654920][T18486]        ocfs2_dismount_volume+0x201/0x8d0
[  480.656908][T18486]        generic_shutdown_super+0x135/0x2c0
[  480.658832][T18486]        kill_block_super+0x44/0x90
[  480.660579][T18486]        deactivate_locked_super+0xbc/0x130
[  480.662587][T18486]        cleanup_mnt+0x425/0x4c0
[  480.664731][T18486]        task_work_run+0x1d4/0x260
[  480.666934][T18486]        exit_to_user_mode_loop+0xec/0x110
[  480.669378][T18486]        do_syscall_64+0x2bd/0x3b0
[  480.671472][T18486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.674077][T18486] 
[  480.674077][T18486] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  480.676737][T18486]        lock_acquire+0x120/0x360
[  480.678671][T18486]        ocfs2_start_trans+0x26b/0x6d0
[  480.680737][T18486]        ocfs2_xattr_set+0xd69/0x11f0
[  480.682522][T18486]        ocfs2_set_acl+0x701/0x7b0
[  480.684199][T18486]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  480.686117][T18486]        vfs_set_acl+0x887/0xb00
[  480.687863][T18486]        do_set_acl+0xf6/0x190
[  480.689759][T18486]        filename_setxattr+0x2e0/0x600
[  480.692029][T18486]        path_setxattrat+0x364/0x3a0
[  480.694084][T18486]        __x64_sys_setxattr+0xbc/0xe0
[  480.695880][T18486]        do_syscall_64+0xfa/0x3b0
[  480.697548][T18486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.699562][T18486] 
[  480.699562][T18486] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  480.703503][T18486]        lock_acquire+0x120/0x360
[  480.705556][T18486]        down_write+0x96/0x1f0
[  480.707484][T18486]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  480.709817][T18486]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  480.711979][T18486]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  480.713942][T18486]        ocfs2_xattr_set+0xb70/0x11f0
[  480.716055][T18486]        ocfs2_set_acl+0x701/0x7b0
[  480.718089][T18486]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  480.720356][T18486]        vfs_set_acl+0x887/0xb00
[  480.722230][T18486]        do_set_acl+0xf6/0x190
[  480.723795][T18486]        filename_setxattr+0x2e0/0x600
[  480.725644][T18486]        path_setxattrat+0x364/0x3a0
[  480.727408][T18486]        __x64_sys_setxattr+0xbc/0xe0
[  480.729398][T18486]        do_syscall_64+0xfa/0x3b0
[  480.731451][T18486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.733631][T18486] 
[  480.733631][T18486] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  480.736555][T18486]        validate_chain+0xb9b/0x2140
[  480.738673][T18486]        __lock_acquire+0xab9/0xd20
[  480.740629][T18486]        lock_acquire+0x120/0x360
[  480.742699][T18486]        down_read+0x46/0x2e0
[  480.744668][T18486]        ocfs2_init_acl+0x2f9/0x720
[  480.746618][T18486]        ocfs2_mknod+0x1321/0x2050
[  480.748616][T18486]        ocfs2_mkdir+0x191/0x440
[  480.750275][T18486]        vfs_mkdir+0x306/0x510
[  480.751834][T18486]        do_mkdirat+0x247/0x590
[  480.753480][T18486]        __x64_sys_mkdirat+0x87/0xa0
[  480.755392][T18486]        do_syscall_64+0xfa/0x3b0
[  480.757087][T18486]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.759211][T18486] 
[  480.759211][T18486] other info that might help us debug this:
[  480.759211][T18486] 
[  480.762900][T18486] Chain exists of:
[  480.762900][T18486]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  480.762900][T18486] 
[  480.767404][T18486]  Possible unsafe locking scenario:
[  480.767404][T18486] 
[  480.770150][T18486]        CPU0                    CPU1
[  480.772305][T18486]        ----                    ----
[  480.774416][T18486]   rlock(jbd2_handle);
[  480.776074][T18486]                                lock(&journal->j_trans_barrier);
[  480.778861][T18486]                                lock(jbd2_handle);
[  480.781304][T18486]   rlock(&oi->ip_xattr_sem);
[  480.783044][T18486] 
[  480.783044][T18486]  *** DEADLOCK ***
[  480.783044][T18486] 
[  480.785933][T18486] 8 locks held by syz.9.4844/18486:
[  480.787595][T18486]  #0: ffff8881278ec428 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  480.790594][T18486]  #1: ffff888034d85240 (&type->i_mutex_dir_key#16/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
[  480.794982][T18486]  #2: ffff888112fa3540 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  480.799367][T18486]  #3: ffff888034d843c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  480.804047][T18486]  #4: ffff888112fa6f40 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  480.808685][T18486]  #5: ffff8881278ec618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  480.811723][T18486]  #6: ffff88810b7df0e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  480.815314][T18486]  #7: ffff8881120b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  480.818263][T18486] 
[  480.818263][T18486] stack backtrace:
[  480.820136][T18486] CPU: 1 UID: 0 PID: 18486 Comm: syz.9.4844 Not tainted syzkaller #0 PREEMPT(full) 
[  480.820149][T18486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.820155][T18486] Call Trace:
[  480.820163][T18486]  <TASK>
[  480.820168][T18486]  dump_stack_lvl+0x189/0x250
[  480.820181][T18486]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.820191][T18486]  ? __pfx__printk+0x10/0x10
[  480.820201][T18486]  ? stack_trace_save+0x9c/0xe0
[  480.820214][T18486]  print_circular_bug+0x2ee/0x310
[  480.820226][T18486]  check_noncircular+0x134/0x160
[  480.820257][T18486]  validate_chain+0xb9b/0x2140
[  480.820267][T18486]  ? __pfx___mutex_trylock_common+0x10/0x10
[  480.820276][T18486]  ? rcu_is_watching+0x15/0xb0
[  480.820285][T18486]  __lock_acquire+0xab9/0xd20
[  480.820295][T18486]  ? ocfs2_init_acl+0x2f9/0x720
[  480.820303][T18486]  lock_acquire+0x120/0x360
[  480.820312][T18486]  ? ocfs2_init_acl+0x2f9/0x720
[  480.820320][T18486]  ? jbd2_write_access_granted+0x69/0x310
[  480.820333][T18486]  down_read+0x46/0x2e0
[  480.820341][T18486]  ? ocfs2_init_acl+0x2f9/0x720
[  480.820349][T18486]  ocfs2_init_acl+0x2f9/0x720
[  480.820359][T18486]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  480.820366][T18486]  ? dquot_alloc_inode+0x216/0xa50
[  480.820374][T18486]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  480.820383][T18486]  ? ocfs2_block_signals+0x94/0xe0
[  480.820393][T18486]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  480.820404][T18486]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  480.820414][T18486]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  480.820422][T18486]  ocfs2_mknod+0x1321/0x2050
[  480.820433][T18486]  ? __pfx_ocfs2_mknod+0x10/0x10
[  480.820441][T18486]  ? do_raw_spin_unlock+0x4d/0x240
[  480.820451][T18486]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  480.820461][T18486]  ? __lock_acquire+0xab9/0xd20
[  480.820474][T18486]  ? __lock_acquire+0xab9/0xd20
[  480.820484][T18486]  ? do_raw_spin_lock+0x121/0x290
[  480.820493][T18486]  ? do_raw_spin_unlock+0x4d/0x240
[  480.820501][T18486]  ? put_pid+0xe9/0x130
[  480.820509][T18486]  ocfs2_mkdir+0x191/0x440
[  480.820516][T18486]  ? __pfx_from_kgid+0x10/0x10
[  480.820525][T18486]  ? apparmor_path_mkdir+0x1a7/0x220
[  480.820534][T18486]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  480.820540][T18486]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  480.820548][T18486]  ? inode_permission+0x149/0x470
[  480.820553][T18486]  ? __pfx_ocfs2_permission+0x10/0x10
[  480.820563][T18486]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  480.820571][T18486]  vfs_mkdir+0x306/0x510
[  480.820580][T18486]  do_mkdirat+0x247/0x590
[  480.820588][T18486]  ? __pfx_do_mkdirat+0x10/0x10
[  480.820597][T18486]  ? getname_flags+0x1e5/0x540
[  480.820603][T18486]  __x64_sys_mkdirat+0x87/0xa0
[  480.820611][T18486]  do_syscall_64+0xfa/0x3b0
[  480.820618][T18486]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.820627][T18486]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.820634][T18486]  ? exc_page_fault+0x9f/0xf0
[  480.820643][T18486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.820650][T18486] RIP: 0033:0x7fef2ff8d457
[  480.820659][T18486] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.820666][T18486] RSP: 002b:00007fef30e2ee68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  480.820674][T18486] RAX: ffffffffffffffda RBX: 00007fef30e2eef0 RCX: 00007fef2ff8d457
[  480.820679][T18486] RDX: 00000000000001ff RSI: 0000200000002200 RDI: 00000000ffffff9c
[  480.820684][T18486] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000
[  480.820688][T18486] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000002200
[  480.820693][T18486] R13: 00007fef30e2eeb0 R14: 0000000000000000 R15: 0000200000002100
[  480.820700][T18486]  </TASK>
[  480.983272][T15519] ocfs2: Unmounting device (7,9) on (node local)
[  484.137402][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!

VM DIAGNOSIS:
17:27:48  Registers:
info registers vcpu 0

CPU#0
RAX=66dda5c146f5b800 RBX=ffffffff819683c8 RCX=66dda5c146f5b800 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683c8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555556299808 CR3=0000000106bd4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd714412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000045ad RDI=00000000000045ae RBP=00000000000003f8 RSP=ffffc90006a56d10
R8 =ffff88801ef50237 R9 =1ffff11003dea046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8e2 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fef30e2f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2f33a5 CR3=00000001289a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fef30012e53
XMM06=0000000000000000 00007fef30012e4d XMM07=0000000000000000 00007fef30012e61
XMM08=0000000000000000 00007fef30012ee7 XMM09=0000000000000000 00007fef30012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
