last executing test programs:

2m41.586548126s ago: executing program 1 (id=700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="016400000000000000000c0000000800040000000000080005000000000700"], 0x2c}}, 0x0)

2m41.516528309s ago: executing program 1 (id=702):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0xfffc, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a0400073a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)

2m41.467840699s ago: executing program 1 (id=703):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400})
mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})

2m41.465627666s ago: executing program 1 (id=704):
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
flock(r2, 0x1)
flock(r2, 0x2)
close(0x3)

2m40.548254321s ago: executing program 1 (id=718):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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")
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m39.664808806s ago: executing program 1 (id=728):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x9a, 0x4)

2m24.673705824s ago: executing program 32 (id=728):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x9a, 0x4)

2m21.819181705s ago: executing program 3 (id=870):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x141842, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000640), 0x3, 0x42f, &(0x7f0000000200)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x81, 0x10000000000000)

2m21.632730511s ago: executing program 3 (id=891):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0)

2m19.825709854s ago: executing program 3 (id=909):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf2502000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x54014840}, 0x20000000)

2m19.614071902s ago: executing program 33 (id=909):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf2502000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x54014840}, 0x20000000)

1m41.809830212s ago: executing program 0 (id=1318):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010, 0x4, 0x410, 0x2, 0x4, 0x1})

1m41.6585676s ago: executing program 0 (id=1319):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x622f, &(0x7f00000010c0)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTd7rGd6eqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6uIuPzztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeD0iPj4Wce/+7fVm0bl99uM7f/zbb3/41Pf/+vvh6X//6Wb/jWnr3br1q3/9+c7j7y8AAACUqK7rukof80+kz/e9rjsFAMxFfv2vk7xcvXD15oL1R61Wq9WHsG6rJ7vTLiJis71N857B6XgAOGQ245Ouu0CH5F+0QUQ81XUngIVWdd0BDsS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PadJbxa0zm9fzain48O6U/K3PqwyLJ+ffG87+80z5K6x10/vMyLf/Rzq1Pxcn598fzH3N08u9NzL9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LuyLw87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrYw+WTfsutmb5pSri6bH1gcKkm2VWu+4HAAAAAAAAAAAAAJRksHMN76UqYhgRT6+u1nXd/LSN14/qSbc/7ErffyhZ13/kAQBgx8fHxu7lryKWI+JS+q6/4erqal0vr6zWq/XKUn4/O1parldan2vztFm2NNrHG+LBqG5+2XJru7ZZn5dntY//vuaxRnV/Hx2bjw4DB4CI2Hk1uucV6Yip62ei63c5HA6O/6PH8c9+dP08BQAAAA5eXdd1lb7O+0Q659/rulMAwFzk1//x8wJqtVqtVquPXt1WT3anXUTEZnub5j2D4fgB4JDZjE+67gIdkn/RBhHxfNedABZa1XUHOBD37t9er1K+Vfv1II3vnq8F2ZP/ZrW9Xd5+0nSW8WtM5vX82op+PDulP8/NqQ+LJOffG8//8k77KK130PnPy7T8m/083kF/upbz74/nP+bo5N+bmH+pcv6DR8q/L38AAAAAAFhg+d//jy/U+d/R4+7OTA87/7t2YI8KAAAAAAAAAAfr3v3b6/m+13z+/3MT1nP/59GU86/kX6Scf7r/f/fCm5fH1uu35u++/SD/f96/vf67m//4/zzdb/5LeaZKz6wqPSOq9EjVIE0fc8em2Br2R80jDatef5Cu+amH78bVuBYbcWbPur10PDxoP7unvenpcLu97u+0n9vTPthtz9uf39M+TFc61Su5/VSsx0/iWryz3d60Lc3Y/+UZ7fWM9px/3/FfpJz/oPXT5L+a2quxaePuR73/Oe7b00mP89bVz//yzMHvzkxb0d/dt7Zm/17soD/b/0+eGsXPbmxcP3Xrys2b189GmuxZei7S5DOW8x+mn5z/yy/ttOe/++3j9e5Ho0fOf1FsxWBq/i+15pv9fWXOfetCzn+UfnL+76T2ycf/Yc5/+vH/agf9AQAAAAAAAAAAAAAAgIep63r7FtG3IuJCuv+nq3szAYD5yq//dZKXz6vuP+72f9i7H131X62ec10tWH/mWn9aL1Z/1AtZ/2fB+rNwdVs92ZvtIiL+0t6mec/wi0m/DABYZJ9GxN+77gSdkX/B8vf9NdOTXXcGmKsbH3z4oyvXrm1cv9F1TwAAAAAAAACAx5XH/1xrjf98sq7rO2Pr7Rn/9e1Ye9LxPwd5ZneA0SkDVfcffZ8eZqs36vdaw42/ENPG/x7uzj1s/O/BjMcbzmgfzWhfmtG+PKN94o0eLTn/F1rjnZ+MiBNjw6+XMP7r+Jj3Jcj5v9h6Pjf5f2lsvXb+9W8Oc/69Pfmfvvn+T0/f+ODD166+f+W9jfc2fnz+7Nkz5y9cuHjx4ul3r17bOLPz3w57fLBy/nnsa9eBliXnnzOXf1ly/l9ItfzLkvP/YqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP+XUy3/suT8X021/MuS8/9KquVflpz/a6mWf1ly/qdSLf+y5PxPp3qf+a8cdL+Yj5x/PsPl+C9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvN/PdXyL0vO/6upln9Zcv4XUi3/suT8v5Zq+Zcl538x1fIvS87/66mWf1ly/t9ItfzLkvN/I9XyL0vO/5upln9Zcv7fSrX8y5Lz/3aq5V+WnP+bqZZ/WR58/78ZM2bM5Jmu/zIBAAAAAAAAAAAAAOPmcTlx1/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4tRq67vgP4mb157UBiIKROasLGMcY4m+z6El9oXUy4NtxKQij0gu1612bBN7x2CTSqHQVKJIyKKtqGh7aAUJuXCqvigVaA8oBaVaoE7QN9QVSoPERVQAGpKq0gW805//9/Z2ZnZ9be8XrmnM9HSn7ZmTNzzpz5z+x+7Xx3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEZ3vWH2U7Usy2q1WnHBxix7UX2un9iYX/LaG3t8AAAAwOr9Iv/387ekCw6t4EYN2/zTnd/+6sLCwkL2vuE/Hf3cwkK6YiLLRtdlWX5ddOUH7681bhM8kY3Xhhq+Huqy++Eu1490uX60y/VjXa5f1+X68S7XLzkBS6zPaunOtub/ubE4pdmt2Wh+3dY2t3qitm6ofu7SbbNafpuF0ePZXHYym82mm7Yvtq3l23/9rvq+3prFfQ017GtzfYX85LFj8Rhq4RxvbdrX4n1GP3p9NvHTnzx27K/PP3d7u9n1NDTdX3Gc27fUj/MT4ZLiWGvZunRO4nEONRzn5jbPyXDTcdby29X/u/U4n1/hcQ4vHuaaan3Ox7Oh/L+/k5+nkVrW5jxtDpf97O4syy4tHnbrNkv2lQ1lG5ouGVp8fsaLFVm/j/pSemk2clXr9K4VrNP6nNnavE5bXxPx+b8r3G5kmWNofJp+9PhYw/P+84VrWadR/VEv91ppXYO9fq30yxqM6+I7+YN+su0a3Boe/2Pbll+DbddOmzWYHnfDGtzSbQ0OjQ3nx5yehFp+m8U1uLNp++F8T7V8Prut8xqcOn/q7NT8xz5+79ypoydmT8ye3r1z5/TuvXv3798/dXzu5Ox08e9rPNv9b0M2lF4DW8K5i6+BV7ds27hUF744tuT991pfh+MdXocbW7bt9etwpPXB1dbmBbl0TRevjffUT/r45aFsmddY/vzsWP3rMD3uhtfhSMPrsO33lDavw5EVvA7r25zdsbKfWUYa/ml3DMt/L1jdGtzYsAZbfx5pXYO9/nmkX9bgeFgX39ux/PeCzeF4n5y82p9HhpeswfRww3tP/ZL08/74/ny0W5d31K+4aSy7MD977r5Hj54/f25nFsaaeFnDWmldrxsaHlO2ZL0OXfV6PTR355N3tLl8YzhX4/fW/zW+7HNV32bPfZ2fq/y7W/vz2XTpriyMHlvr89nuu3n9fI5l2ee/9fhD33js829Y9nzW8+Ynplb/s3jKpQ3vv6PLvP/G3P9Csb90V08Mj44Ur9/hdHZGm96Pm5+qkfy9q5bv+/mplb0fj4Z/1vr9+NYO78ebWrbt9fvxaOuDi+/HtW5/2rE6rc/neFgnJ6c7vx/Xt9m062rX5EjH9+O7w6yF8/+akBRSLmpYO8ut27SvkZHR8LhG4h6a1+nupu1HQzar7+vpXde2TrffXdzXcHp0i9ZqnU60bNvrdZr+7Gu5dVrr9qdv16b1+RwP6+LW3Z3XaX2bZ/as/r1zffzPhvfOsW5rcHR4rH7Mo2kR5u/32cL6uAbvy45lZ7KT2Ux+7Vi+nmr5vibvX9kaHAv/rPV75aYOa3B7y7a9XoPp+9hya682svTB90Dr8zke1sVT93deg/Vt3rivtz+7bg+XpG0afnZt/fO15f7M646W03S91spIOM5v7ev8Z7P1bU7uv9qc2fk83RMuuanNeWp9/S73mprJ1uY8bQrH+dz+5c9T/Xjq23zuwArX06Esyy5+5IH8z3vD36/83YXvfrXp713a/Z3OxY888OMXH//Hqzl+AAbfC8XYUHyva/ibqZX8/T8AAAAwEGLuHwozkf8BAACgNGLuj/9XeCL/AwAAQGnE3D8SZlKR/L/pjc/NvXAxS838hSBen07Dg8V2seM6Hb6eWFhUv/yBL8/+9z9cXNm+h7Is+/mDf9B2+00PxuMqTITjvPKm5suX+Oq9K9r3kUcupv029te/EO4/Pp6VLoN2FdzpLMu+fstn8v1MvP9yPp958Eg+H7r05BP1bZ4/UHwdb//sy4rt/yKUfw8dP9p0+2fDefhhmNNva38+4u2+cvk1m/e9d3F/8Xa1LTfnD/upDxT3G39PzmefKLaP53m54//Gp5/+Sn37R1/V/vgvDrU//qfD/X45zP99RbF943NQ/zre7pPh+OP+4u3u+9I32x7/lU8V2599c7HdkTDj/reHr7e++bm5xvP1aO1o0+PK3lJsF/c//d0/zq+P9xfvv/X4xw9fbjofrevjmX8r7meqZft4edxP9Pct+6/fT+P6jPt/+o+ONJ3nbvu/8tCzr6jfb+v+72nZ7uxHduT7X7y/5t/Y9Jef/Ezb/cXjOfS3Z5sez6F3h9dx2P9THwjrMVz/f1eK+2v97QpH3t38/hO3/8LGi02PJ3rrT4v9X3ndiXyuG1+/4aYXvfjmS6+sn7ss+8664v667f/EX51pOv4v3lacj3h97Oi37n85cf/nPjp5+sz8hbmZdFYfuyX/3TlvL44nHu8t4b219evDZ85/cPbcxPTEdJZNlPdX6F2zL4X542Jc6rz1wpJ30B2PhOfzjj//+oZt//rpePm/v6e4/PLbiu9brw7bfTZcvjE8f1e3/6Weuuu2/PVdeyYc4cLS3xe8Gpu3/tf+FW0YHn/rzwVxvZ99+Qfz81C/Lv++EV/Xqzz+788U9/O1cF4Xwm9m3nLb4v4at4+/G+Hyw8XrfdXnL7zNxef1b8Lz/Y4fFvcfjys+3u+Hn2O+uan5/S6uj69dHGq9//y3eFwK7yfZpeL6uFU835efv63t4cXfQ5Jduj3/+k/S/dx+VQ9zOfMfm586OXf6wqNT52fnz0/Nf+zjh0+duXD6/OH8d3ke/lC32y++P23I359mZvfuyfJ3qzPFuM5u9PGffeTYzL7pbTOzx49eOH7+kbOz504cm58/Njszv+3o8eOzH+12+7mZgzt3Hdi9b9fkibmZg/sPHNh9YHLu9Jn6YRQH1cXe6Q9Pnj53OL/J/ME9B3bef/+e6clTZ2ZmD+6bnp680O32+femyfqtf3/y3OzJo+fnTs1Ozs99fPbgzgN79+7q+tsAT509Pj8xde7C6akL87PnporHMnE+v7j+va/b7Smn+f8ofp5tVSt+EV/2rnv2pt/PWvflx5e9q2KTll8g+lz4XTT//JKz+1fydcz9o2EmFcn/AAAAUAUx94+Fmcj/AAAAUBox968LM5H/AQAAoDRi7h8PM6lI/i9d/3/TxRXtX/9f/7/xfOn/V6z//3C/9f+L9wv9/95Ybf9e/z/Q/9f/1//X/9f/pwf6rf8fc//6LKtk/gcAAIAqiLl/Q5iJ/A8AAAClEXP/TWEm8j8AAACURsz9LwozqUj+1//X/9f/1//X/2+/f/3/waT/35n+fxf6/1NZtfr/l3p5/Pr/+v8s1W/9/5j7XxxmUpH8DwAAAFUQc//NYSbyPwAAAJRGzP23hJnI/wAAAFAaMfdvDDOpSP7X/9f/1//X/9f/b79//f/BpP/fmf5/F/r/Pv9f/1//n57qt/5/zP0vCTOpSP4HAACAKoi5/6VhJvI/AAAA9J+Ra7tZzP0vCzNZkv+vcQcAAADADRdz/61ZSxG8In//r/+v/9///f916Tr9f/3/rC/7/8OZ/n//0P/vTP+/C/1//X/9f/1/eqrf+v957s/Gs5eHmVQk/wMAAEAVxNx/W5iJ/A8AAAClEXP/L4WZyP8AAABQGjH3bwozqUj+1//X/+///r/P/9f/7/f+v8//7yf6/53p/3eh/6//r/+v/09P9Vv/P+b+28NMKpL/AQAAoApi7r8jzET+BwAAgNKIuf+Xw0zkfwAAACiNmPs3h5lUJP/r//d5/z82R/X/9f/1//X/9f9XRP+/M/3/LvT/9f/1//X/6al+6//H3P+KMJOK5H8AAACogpj77wwzkf8BAACgNGLuf2WYifwPAAAApRFz/0SYSUXyv/5/n/f/ix78mM//1//X/9f/1/9fGf3/zvT/u9D/1//vSf9/4WKp+v/1Raf/zzXqt/5/zP13hZlUJP8DAABAFcTcvyXMRP4HAACA0oi5/+4wE/kfAAAASiPm/q1hJhXJ//r/A9H/z/T/9f/1//X/9f9XRv+/M/3/LvT/9f99/r/P/6en+q3/H3P/q8JMKpL/AQAAoApi7t8WZiL/AwAAQGnE3P/qMBP5HwAAAEoj5v7tYSYVyf/6//r/+v/6//r/7fev/z+Y9P870//vQv9f/1//X/+fnuq3/n/M/a8JM6lI/gcAAIAqiLl/R5iJ/A8AAAClEXP/PWEm8j8AAACURsz9k2EmFcn/+v/6//r/+v/6/+33r/8/mPT/O9P/70L/X/9f/1//n57qt/5/zP33hplUJP8DAABAFcTcf1+YifwPAAAApRFz/1SYifwPAAAApRFz/3SYSUXyv/6//r/+v/7/VfX/X7l4v/r/Bf3//qL/35n+fxf6//r/N7z/P6r/T6n0W/8/5v6dYSYVyf8AAABQBTH37wozkf8BAACgNGLu3x1mIv8DAABAacTcvyfMpCL5X/9f/1//X//f5/+337/+/2DS/++s9/3/+BD1//X/9f99/r/+P0v1W/8/5v77w0wqkv8BAACgCmLu3xtmIv8DAABAacTcvy/MRP4HAACA0oi5f3+YSUXyv/6//r/+v/6//n/7/ev/Dyb9/858/n8X+v/6//r/+v+s0sN/2PhVv/X/Y+4/EGZSkfwPAAAAVRBz/2vDTOR/AAAAKI2Y+38lzET+BwAAgNKIuf9Xw0wqkv/1/5u65/WHq/+v/6//r/+f0/8fTPr/nen/d6H/r/+v/6//T08t2/8P0Xut+/8x9x8MM6lI/gcAAIAqiLn/18JM5H8AAAAojZj7XxdmIv8DAABAacTcfyjMpCL5X//f5//r/+v/6/+33/9a9//H4v3q/6+K/n9n+v9d6P/r/+v/6//TU/32+f8x978+zKQi+R8AAACqIOb+B8JM5H8AAAAojZj73xBmIv8DAABAacTc/8Ywk4rkf/1//X/9f/1//f/2+/f5/4NJ/78z/f8u9P/1//X/9f/pqX7r/8fc/6Ywk4rkfwAAAKiCmPvfHGYi/wMAAEBpxNz/ljAT+R8AAABKI+b+t4aZVCT/6//r/+v/6//r/7ffv/7/YNL/70z/vwv9f/1//X/9f3qq3/r/Mff/ephJRfI/AAAAVEHM/Q+Gmcj/AAAAUBox978tzET+BwAAgNKIuf/tYSYVyf/6//r/+v/6//r/7fffu/7/+vzf+v9rQ/+/swHr///i5nC5/n9B/7+/j/9q+/8jLV9fl/7/D5br/y+sa729/j/XQ7/1/2Puf0eYSUXyPwAAAFRBzP3vDDOR/wEAAKA0Yu5/V5iJ/A8AAAClEXP/b4SZVCT/6//Xj2Oxvaz/X9b+/5D+v/6/z/+vCP3/zgas/+/z/1vo//f38fv8f/1/luq3/n/M/e8OM6lI/gcAAIAqiLn/oTAT+R8AAABKI+b+h8NM5H8AAAAojZj73xNmUpH8r//v8/+r0f/3+f+Z/r/+f0Xo/3em/9/Fje7/v6D/P8jHf136//+p/89g67f+f8z9j4SZVCT/AwAAQBXE3P/eMBP5HwAAAEoj5v7fDDOR/wEAAKA0Yu5/X5hJRfK//v+g9P8nBrT//7j+/3Xs/995c7Gd/r/+P4v0/zvT/+/iRvf/ff7/QB+/z//X/2epfuv/x9z//jCTlef/8RVvCQAAANwQMff/VphJRf7+HwAAAKog5v7fDjOR/wEAAKA0Yu7/nTCTiuR//f9B6f/7/P9M/9/n/7c8Hv1//f921q7/H9959P/1//X/I/1//X/9f1r1W/8/5v7fDTOpSP4HAACAKoi5/wNhJvI/AAAADIR2/092q5j7D4eZyP8AAABQGjH3HwkzqUj+1//X/9f/79P+/59t+ZfvffudR3bq/69F/3+43f71/wfTmn7+f/3F7/P/9f/1/xP9f/1//X9a9Vv/P+b+o2EmFcn/AAAAUAUx9/9emIn8DwAAAKURc/+xMBP5HwAAAEoj5v6ZMJOK5H/9f/1//f8+7f8P8Of/x/MxQP3/tvvv2/5/fNPV/2+r6N+nVXR9+//vXeyJ6/9fbf9/rO2l+v/6/4N8/Pr/+v8s1W/9/5j7Z8NMKpL/AQAAoApC7h86XszFK+R/AAAAKI2Y+0+Emcj/AAAAUBox938wzKQi+V//X/9/EPr/6zL9/0Hq/w/g5/+33X+n/n9txOf/96vUv/9Z/kLR/2/RP/3/9vT/9f8H+fj1//X/Warf+v8x98+FmVQk/wMAAEAVxNz/oTAT+R8AAABKI+b+D4eZyP8AAABQGjH3nwwzqUj+1/+/tv7/cv3qRvr/Pv+/dX3o/5en/5/dyM//1//vaLX9e/3/QP+/2v3//9H/1//X/6c3+q3/H3P/qTCTiuR/AACA/2fvPposq887jt+2B6an8MI7L7xxlZd+CSzstf0CvPDGG1e5vMAB2zgzOEdsbOMoCYFyQAEEQkgC5QBKSCiDJJRzQAkhUaOi53meTqfP7XC77zn//+ezmEc009wr1dQMv+n56kAPcvdfE7fY/wAAANCM3P2/HbfY/wAAANCM3P2/E7d0sv/1/yd5/v92paz/3/3+J9H//6L+/6DX1//r/1um/x+n/19C/+/5//p//T8rNbX+P3f/78Ytnex/AAAA6EHu/t+LW+x/AAAAaEbu/mvjFvsfAAAAmpG7//fjlk72/57+f2PRZ/+fGe8R+/9t+v/d738S/b/n/x/4+vp//X/Lzrb/v+Hpn/n0//p//X/Q/x+q/z9/0Ofr/2nR1Pr/3P1/ELd0sv8BAACgB7n7/zBusf8BAACgGbn7r4tb7H8AAABoRu7+P4pbOtn/q3v+/4Wtj8+0/y/6f/3/1gf0//p//f9sef7/uJ76/2sfvuqax+/+2XuO8vr6f/2/5//r/1mtqfX/ufv/OG7pZP8DAABAD3L3/0ncYv8DAABAM3L3/2ncYv8DAABAM3L3/1nc0sn+X13/P+vn/xf9v/5/6wP6f/2//n+29P/jeur/j/P67ff/F0b/7rr7+ZNa9/vX/+v/2W9q/X/u/j+PWzrZ/wAAANCD3P1/EbfY/wAAANCM3P3Xxy32PwAAADQjd//FuKWT/a//P/3+/yn9v/4/rv5f/6//P336/3H6/yWa7//Hrbufn/v71//r/9lvav1/7v4b4pZO9j8AAAD0IHf/X8Yt9j8AAAA0I3f/X8Ut9j8AAAA0I3f/X8ctnex//b/n/+v/9f/6/+HX1//Pk/5/nP5/Cf3/Sfv5K/T/+n/9Pzsdsf9/cuSn7ZX0/7n7/yZu6WT/AwAAQA9y9/9t3GL/AwAAQDNy9/9d3GL/AwAAQDNy9/993NLJ/tf/6//1//r/Y/f/+3/obdH/D9P/nw39/7jJ9P8b5wY/rP+fff/v+f/6f/0/u0zt+f+5+/8hbulk/wMAAEAPcvf/Y9wysv+P/Jv5AAAAwFrl7v+nuMXX/wEAAGD2sjrL3f/PcUsn+1//r//X/+v/Pf9/+PXH+v97drw//f+06P/HTab/P4D+X/8/5/ev/9f/s9/U+v/c/f8St3Sy/wEAAKAHuftvjFvsfwAAAGhG7v5/jVvsfwAAAGhG7v5/i1s62f/D/f/239f/H47+f/f71/8P//hYVf+f/0T9/2j//0ue/98n/f+4s+//z+v/d//z9f+naN3vv/H+/8Kyz9f/M2Rq/X/u/pvilk72PwAAAPQgd/+/xy32PwAAADQjd/9/xC32PwAAADQjd/9/xi2d7H/P/9f/6//n1/97/v9l63z+/+LM+/9z+v9D0v+P8/z/JfT/+n/9v+f/s1JT6/9z998ct3Sy/wEAAKAHNz+x2Nr9/7VY2P8AAAAwRzv/7MDeP1Aacvf/d9xi/wMAAEAzcvf/T9zSyf7X/+v/9f/6f/3/8OtPq//3/P/D0v+P0/8vof8/jX7+XGP9/y0Hff4U+v/r9f9MzK7+/77tj6+r/8/d/79xSyf7HwAAAHqQu///4hb7HwAAAJqRu///4xb7HwAAAJqRu/8ZcUsn+//U+/8LB7+2/l//r//X/+v/9f+rpv8fp/9fQv/v+f+e/6//Z6W2+//dPx+uq//P3f/MuKWT/Q8AAAA9yN3/rLjF/gcAAIBm5O6/JW6x/wEAAKAZufufHbd0sv89/1//r//X/+v/h19f/z9P+v9x+v8l9P/6f/2//p+V2vX8/x3W1f/n7r81bulk/wMAAEAPcvffFrfY/wAAANCM3P3PiVvsfwAAAGhG7v7nxi2d7H/9/+n2//lx/b/+f6H/1//r/89Et/3/xtCvRPsd0P8/+JsXf2X3R/T/+n/9v/5f/88KTKL/v7T9b5e5+58Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P0viFvsfwAAAGhG7v4Xxi1H3P8/vdJ3dXb0/57/r//X/+v/h19f/z9P3fb/h+T5/0vo//X/+n/9Pys1if5/x1/n7n9R3OLr/wAAANCM3P0vjlvsfwAAAGhG7v6XxC32PwAAADQjd/9L45ZO9r/+X/+v/9f/6/+HX/+4/f/mYpj+/2zo/8fp/5fQ/+v/9f/6f1Zqav1/7v7b45ZO9j8AAAD0IHf/y+IW+x8AAACakbv/5XGL/Q8AAADNyN3/irilk/2v/9f/6//1//r/4df3/P950v+P0/8vFos7Rt7AUP9/6bz+X/+v/9f/c0xT6/9z978ybulk/wMAAEAPcvffEbfY/wAAANCM3P13xi32PwAAADQjd/+r4pZO9r/+X/+v/9f/6/+HX1//P0/6/3H6/yU8/1//r//X/7NSU+v/c/ffFbd0sv8BAACgB7n7745b7H8AAABoRu7+V8ct9j8AAAA0I3f/PXFLJ/tf/6//1//r/0+l/7+o/99L/382Tq//X+j/9f/6/yX0//p//T97nVX//2T8fL+s/8/d/5q4pZP9DwAAAD3I3X9v3GL/AwAAQDNy9782brH/AQAAoBm5+18Xt3Sy//X/+v9D9v9b70j/r//fyfP/L9P/T4vn/4/T/y+h/9f/6//1/6zUWfX/B/X+e/86d//r45ZO9j8AAAD0IHf/fXGL/Q8AAADNyN1/f9xi/wMAAEAzcve/IW7pZP/r//X/u/v/xcLz//X/+v/LzqD/31zo/1dO/z9O/7+E/r/N/v8nFg31/xcO/Hz9P1M0tf4/d/8b45ZO9j8AAAD0IHf/m+IW+x8AAACakbv/zXGL/Q8AAADNyN3/lrilpf3/1MHp2/z7//N7PlH/v1gsHrlu9c//1//r//X/nv8/C/r/cfr/JfT/bfb/nv+v/2dtptb/5+5/a9zS0v4HAACAzuXuf1vcYv8DAABAM3L3vz1usf8BAACgGbn73xG3dLL/59//7/1E/f/iRM//1/9vfUD/r//X/8/WSfv7Wzfj1zT9v/5f/z/Yz28c8O89C/2//l//z4Cp9f+5+98Zt3Sy/wEAAKAHufsfiFvsfwAAAGhG7v4H4xb7HwAAAJqRu/9dcUsn+1//r//X/8+z/9/U/+v/9f+DpvL8/6uv/uWH9P/6/xb7/zH6f/2//p+9ptb/5+5/d9zSyf4HAACAHuTuf0/cYv8DAABAM3L3vzdusf8BAACgGbn73xe3dLL/9/f/VywuF6qXDfX/0ajp/3fQ/+9+//r/4R8fnv+v/9f/n76p9P+e/3+896//1//P+f0fqf//uf2fr/+nRVPr/3P3PxS3dLL/AQAAoAe5+98ft9j/AAAA0Izc/R+IW+x/AAAAaEbu/ofjlk72v+f/6//1//p//f/w6+v/50n/P07/v4T+/+T9fP6sqv+f7/P/f1L/z+pMrf/P3f/BuGVr+P38Tx3zvyYAAAAwIbn7PxS3dPL1fwAAAOhB7v4Pxy32PwAAADQjd/9H4pZO9r/+X/+v/9f/6/+HX1//P0/6/3H6/yX66f83hz647n7+pNb9/pvp/z3/nxWaWv+fu/+jcUsn+x8AAADa9sTWt7n7Pxa32P8AAADQjNz9H49b7H8AAABoRu7+R+KWTva//l//337//+v6/z2vr//X/7dM/5+/og/T/y/RT/8/aN39/Nzfv/5f/89+U+v/c/c/Grd0sv8BAACgB7n7PxG32P8AAADQjNz9n4xb7H8AAABoRu7+T8Utnex//X9f/f/Gosf+3/P/9f/6/57Mp/+/7dzQRz3/X/+v/5/v+9f/6//Zb2r9f+7+xzbOdbn/AQAAYK5+9Rd+69HDft/Htr7dXHw6brH/AQAAoBm5+z8Tt9j/AAAA0Izc/Z+NWzrZ//r/vvr/Pp//r//X/+v/ezKf/n+Y/l//r/+f7/vX/+v/2W9q/X/u/s/FLTuG3+D/QQ8AAACwPlce7bvn7v983NLJ1/8BAACgB7n7vxC37Nv/lw75p9oBAACAqcnd/8W4pZOv/+v/J97/L06p/4/vp/+/TP+v/x96ff3/POn/x52w/7+0of/X/4/Q/+v/9f/sNbX+P3f/vXctutz/AAAA0Khdv6Pwpa1vNxdfjlvsfwAAAGhG7v6vxC32PwAAADQjd/9X45ZO9r/+f+L9/7Ge/3+h/pPn/3fe/9+4Ofj6+n/9f8v0/+M8/38J/b/+X/+v/2eljtD/bw3S0+7/c/d/LW7pZP8DAABAD3L3fz1usf8BAACgGbn7vxG32P8AAADQjNz934xbOtn/+v819P83nV8sTrX/P8Tz//X/ffT/B7z+6vv/3X3r2fX/P3PVxQd+7TfuvF3/z7az7P/zx4L+X/+v/79M/6//1/+z19Se/5+7/1txSyf7HwAAAHqQu//xuMX+BwAAgGbk7v923PL0/r9/Xe8KAAAAWKXc/d+JWzr5+r/+v8Xn/8+z/8//rdfQ/1+cX/+fTfFU+v/dPP9/mP7/bHj+/zj9/xL6f/2//l//z0pNrf/P3f/duKWT/Q8AAAA9yN3/vbgl9//GkX/rHgAAAJiY3P3fj1t8/R8AAACakbv/ibilk/2v/9f/T6X/T57/v/1583n+/27H6P+vXOj/9f8rov8fp/9fQv+v/9f/6/9Zqan1/7n7fxC3dLL/AQAAoAe5+5+MW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/5f/6//1/9PoP/fov/X/6+C/n+c/n8J/b/+X/+v/2elptb/5+7/cQAAAP//Yf5tgA==")
removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'trusted.overlay.opaque\x00'})

1m40.922834994s ago: executing program 0 (id=1322):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

1m40.583173224s ago: executing program 0 (id=1324):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

1m40.530929851s ago: executing program 0 (id=1327):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1m40.448493289s ago: executing program 0 (id=1328):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r1=>0x0})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='pim6reg\x00', 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0})
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1aa, &(0x7f0000000200)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x0, 0x118)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000731139000000000085100000020000008500000076f4ffff94000000000000c6b3009500a5050000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x713ac3, 0x0)
setns(r4, 0x80)
syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3], 0x1}, 0x58)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x8100, r1, 0x1, 0x1, 0x6, @remote}, 0x14)

1m30.611468026s ago: executing program 2 (id=1412):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x10000, 0x3, 0x0, 0xfffffffd, 0x0, 0x1, {0x3}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

1m30.523217165s ago: executing program 2 (id=1413):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000540)=ANY=[], 0x2, 0x57e, &(0x7f0000000bc0)="$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")

1m30.472247581s ago: executing program 2 (id=1414):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socketpair(0x28, 0x802, 0x0, &(0x7f0000000040))

1m30.471914349s ago: executing program 2 (id=1415):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001300010000002000ffdbdf2500000000", @ANYRES32=r0, @ANYBLOB="0208020000000000050027000000000044001a80100002800c000180080014005200000018000a80140007"], 0x6c}}, 0x0)

1m30.379541608s ago: executing program 2 (id=1416):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0)

1m30.267252299s ago: executing program 2 (id=1417):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2})
fcntl$setsig(r3, 0xa, 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
splice(r4, 0x0, r6, 0x0, 0x25a5, 0xa)

1m25.461775422s ago: executing program 34 (id=1328):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r1=>0x0})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='pim6reg\x00', 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0})
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1aa, &(0x7f0000000200)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x0, 0x118)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000731139000000000085100000020000008500000076f4ffff94000000000000c6b3009500a5050000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x713ac3, 0x0)
setns(r4, 0x80)
syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3], 0x1}, 0x58)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x8100, r1, 0x1, 0x1, 0x6, @remote}, 0x14)

1m16.309036809s ago: executing program 5 (id=1483):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008040)
io_uring_setup(0x4bc4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0x40000002, 0xd)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000000)=[{r2, 0x181}, {0xffffffffffffffff, 0x4302}], 0x2, 0x0, 0x0, 0x0)
close(r1)

1m15.099233526s ago: executing program 5 (id=1485):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x44)
syz_emit_ethernet(0x66, &(0x7f0000000380)={@empty, @empty, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x0, 0x4}, 0x1, {0x5009}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x4, 0x10, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x6}}}}}}, 0x0)

1m15.020349778s ago: executing program 35 (id=1417):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2})
fcntl$setsig(r3, 0xa, 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
splice(r4, 0x0, r6, 0x0, 0x25a5, 0xa)

1m15.017163236s ago: executing program 5 (id=1487):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7)

1m14.579599947s ago: executing program 5 (id=1488):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3810082, &(0x7f0000001880)={[{@noadinicb}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x400}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid_forget}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@longad}]}, 0xfd, 0xc32, &(0x7f0000001a40)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]})

1m14.438862255s ago: executing program 5 (id=1489):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000580)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '@\x1d$.%{'}, {0x20, '&'}], 0xa, "0000783348b29e910024000029f50a899336010000000000000000ebf7fade3d580388d290d96721ec137228b60a0fd94415ad24ed37066498a2e1fed31075654e1b44ce9354e57979626903f434b5d6957398b43841d87d000e28863c05541ca0c925aa7abb20db364524f96af9fabc4777fc7aeb7cf194e16c05317ff4d8c1549b7682"}, 0xa3)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})

1m14.114780961s ago: executing program 5 (id=1492):
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x2, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x11, "55ee6cdb9faaded81939c30c35ab7f"}]}}}}}}}}, 0x0)

1m13.636864722s ago: executing program 36 (id=1492):
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x2, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x11, "55ee6cdb9faaded81939c30c35ab7f"}]}}}}}}}}, 0x0)

1m1.388550605s ago: executing program 6 (id=1590):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x2904c, 0x3ffffffffffffab, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0x3}, {0xffffffff, 0x8, 0xffffffdffffffffd, 0x0, 0xffffffffffffffff}]})

1m1.289274573s ago: executing program 6 (id=1591):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x23}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0)

1m1.180431579s ago: executing program 6 (id=1592):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x70}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x40})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0)

1m1.106430728s ago: executing program 6 (id=1593):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)

1m1.05931662s ago: executing program 6 (id=1595):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10)

1m0.966378599s ago: executing program 6 (id=1597):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

45.637590662s ago: executing program 37 (id=1597):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

29.747343056s ago: executing program 8 (id=1856):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600f20005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804)

29.746724767s ago: executing program 8 (id=1858):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r2})
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0)

29.278499879s ago: executing program 8 (id=1859):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="611578000000000061133c0000000000bfa000000000000007000000ee0000052d03010000000000250500000000000069163e0000000000bf07200000000000350507000fff0720670500003f000000140300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190de000000003cc3aa39642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a01000000a1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6e15e1417058ba11671295d20ba906d4331ce87573d2472371ac6369744a569da6c90f0e8ecba9ee68be2691922073d177bdffd5f1aa96173286f7d66f6c3e6b5eff01ed91681bbddcc66544b42a3d68c129798f2ae62b0fc690c9df12ef0dee69bdbe446322a18155e6662c13708d73aa49f1d8fd2cf86754065bfed808d0c76caaca1e0fc8a6baf185b58a1541911688f4a055bc49ed73c5bfb556c7c7bb62a8594e0aef56a374f4bf910a60d9cd751c3a14f94a3be70dbc9211d754ca9023e1efeef81c775664c3f348d000000000000000000000076d4b94b8d33469cdf2aba94c6e871fcd122f18409ee01620e45ab01c4af441373c1e6234b631ea4bb41e344"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

29.278040163s ago: executing program 8 (id=1860):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='tr5ft'], 0x0, 0x0)

29.148754512s ago: executing program 8 (id=1861):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1)
io_setup(0x80000000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000)

28.887791342s ago: executing program 8 (id=1863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d010140000102030109027800030100000009040000000103"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

28.652365438s ago: executing program 38 (id=1863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d010140000102030109027800030100000009040000000103"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

10.757227485s ago: executing program 9 (id=2005):
pipe2(&(0x7f0000000200)={<r0=>0x0, 0x0}, 0x80080)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x0, 0x0, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x3516, 0x300, 0x0, 0x0, 0x0)

9.765209577s ago: executing program 9 (id=2015):
personality(0x400000)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000)

9.586697604s ago: executing program 9 (id=2017):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
read$snapshot(r1, 0x0, 0xffffffbf)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x3ffffffffffffffc, 0xffffffffffffffff, 0x100, 0x0, 0x10, 0xfffc}, &(0x7f0000000580)={0x10, 0x0, 0x7, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3}, 0x0, 0x0, 0x0)

9.455655036s ago: executing program 9 (id=2018):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

9.287124137s ago: executing program 9 (id=2019):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x6, 0x7fffffff}]})
exit(0x0)

8.359370025s ago: executing program 9 (id=2034):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x337d, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df, 0x4})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sync()
open_tree(0xffffffffffffff9c, 0x0, 0xc0800)
mbind(&(0x7f0000000000/0x1000)=nil, 0xffffffffffffe000, 0x0, &(0x7f0000000000), 0x1b2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
sync()
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r0, &(0x7f0000000840)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})

1.605231421s ago: executing program 4 (id=2077):
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00"/59], 0xb8}}, 0x0)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x22, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet(0x2, 0x1, 0x100)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7820fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

1.196435672s ago: executing program 7 (id=2079):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010000, &(0x7f0000000e40)=ANY=[@ANYBLOB='nobarrier,decompose,nls=cp936,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c626172726965722c756d61736b3d30303030303030303030303030303030303030343030342c0000a7b04339467661b236f69117d062071c62ba59c021917032b4bc3681eac13867d5802a6898aef3"], 0x0, 0x6e6, &(0x7f00000017c0)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.&-]:'], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

869.273687ms ago: executing program 7 (id=2080):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, r3, 0x1, 0x70bd23, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x8000}, 0x0)

566.231038ms ago: executing program 7 (id=2081):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7}]}, 0x14}], 0x1}, 0x0)

368.90967ms ago: executing program 7 (id=2082):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002e0000006600000000000000160000000000000095000000000000004954053038dbdcbdd1a795fc1d5544513cc0537c565387ae9c4aae89a8dd3ee2a640661086ff844e59f1f6bec894f26b45da5a0bf77c16609a5dbab72807f15c"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e}, 0x36)

362.284697ms ago: executing program 4 (id=2083):
prlimit64(0x0, 0x7, &(0x7f0000000240)={0x4, 0x248}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

283.978042ms ago: executing program 7 (id=2084):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file1\x00', 0x185242, 0x4)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
truncate(&(0x7f0000000000)='./file1\x00', 0x2ba4)

283.629697ms ago: executing program 4 (id=2085):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r2, 0x0, 0x400000000000000, 0x2)

135.050866ms ago: executing program 4 (id=2086):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)

74.317117ms ago: executing program 7 (id=2087):
socketpair(0x1e, 0x1, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000ab"], 0x0}, 0x0)

73.883245ms ago: executing program 4 (id=2088):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, 0x4e23, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f00000015c0)="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", 0x19f}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000880)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f0800000014e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818a17b4ace348ba3a9e496f461dd82c728ef31dbae6661542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb98838cc0884b5d379", 0xf2}, {&(0x7f0000000340)="c83c", 0x2}], 0x5}, 0x20000090)

0s ago: executing program 4 (id=2089):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b})

kernel console output (not intermixed with test programs):

 186.829285][ T9512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.829297][ T9512] RSP: 002b:00007fe314240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  186.829313][ T9512] RAX: ffffffffffffffda RBX: 00007fe3135b5fa0 RCX: 00007fe31338e929
[  186.829323][ T9512] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  186.829331][ T9512] RBP: 00007fe313410b39 R08: 0000000000000004 R09: 0000000000000000
[  186.829341][ T9512] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  186.829351][ T9512] R13: 0000000000000000 R14: 00007fe3135b5fa0 R15: 00007ffceba48268
[  186.829371][ T9512]  </TASK>
[  186.829400][ T9512] Mem-Info:
[  186.935065][ T9512] active_anon:7517 inactive_anon:0 isolated_anon:0
[  186.935065][ T9512]  active_file:12864 inactive_file:38526 isolated_file:0
[  186.935065][ T9512]  unevictable:1768 dirty:376 writeback:0
[  186.935065][ T9512]  slab_reclaimable:10046 slab_unreclaimable:59327
[  186.935065][ T9512]  mapped:25193 shmem:2612 pagetables:1218
[  186.935065][ T9512]  sec_pagetables:0 bounce:0
[  186.935065][ T9512]  kernel_misc_reclaimable:0
[  186.935065][ T9512]  free:257979 free_pcp:21256 free_cma:0
[  186.949265][ T9512] Node 0 active_anon:17600kB inactive_anon:0kB active_file:50304kB inactive_file:10624kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:61096kB dirty:1432kB writeback:0kB shmem:5404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8800kB pagetables:2732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  186.959214][ T9512] Node 1 active_anon:12468kB inactive_anon:0kB active_file:1152kB inactive_file:143480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39676kB dirty:72kB writeback:0kB shmem:5044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6460kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  186.975289][ T9512] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  186.992519][ T9512] lowmem_reserve[]: 0 812 812 812 812
[  186.994821][ T9512] Node 0 DMA32 free:265392kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17736kB inactive_anon:0kB active_file:50304kB inactive_file:10624kB unevictable:3536kB writepending:1432kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:43772kB local_pcp:27128kB free_cma:0kB
[  187.007849][ T9512] lowmem_reserve[]: 0 0 0 0 0
[  187.009829][ T9512] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  187.022175][ T9512] lowmem_reserve[]: 0 0 854 854 854
[  187.024427][ T9512] Node 1 Normal free:292068kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12468kB inactive_anon:0kB active_file:1152kB inactive_file:143480kB unevictable:3536kB writepending:72kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41500kB local_pcp:20540kB free_cma:0kB
[  187.037780][ T9512] lowmem_reserve[]: 0 0 0 0 0
[  187.039807][ T9512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  187.045014][ T9512] Node 0 DMA32: 438*4kB (UME) 569*8kB (UME) 523*16kB (UME) 244*32kB (ME) 271*64kB (M) 50*128kB (UME) 72*256kB (UME) 28*512kB (UM) 22*1024kB (UME) 6*2048kB (UME) 37*4096kB (UM) = 265360kB
[  187.052857][ T9512] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  187.060048][ T9512] Node 1 Normal: 1159*4kB (UME) 904*8kB (UME) 691*16kB (UME) 173*32kB (UME) 122*64kB (UE) 41*128kB (UE) 34*256kB (UM) 20*512kB (UME) 14*1024kB (UME) 16*2048kB (UME) 45*4096kB (UM) = 291884kB
[  187.068111][ T9512] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  187.071836][ T9512] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB
[  187.075460][ T9512] 53992 total pagecache pages
[  187.078038][ T9512] 4 pages in swap cache
[  187.079800][ T9512] Free swap  = 124972kB
[  187.081875][ T9512] Total swap = 124996kB
[  187.083615][ T9512] 786301 pages RAM
[  187.085720][ T9512] 0 pages HighMem/MovableOnly
[  187.088055][ T9512] 241085 pages reserved
[  187.097742][ T9512] 0 pages cma reserved
[  189.181272][ T9557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.477116][ T5863] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  189.638904][ T5863] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a
[  189.642310][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.646891][ T5863] usb 5-1: config 0 descriptor??
[  189.656224][ T5863] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7
[  189.856914][ T5265] bcm5974 5-1:0.0: could not read from device
[  189.868375][ T5265] bcm5974 5-1:0.0: could not read from device
[  189.869784][ T5863] usb 5-1: USB disconnect, device number 10
[  189.895765][ T7578] udevd[7578]: Error opening device "/dev/input/event3": No such file or directory
[  189.905567][ T7578] udevd[7578]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.910176][ T7578] udevd[7578]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.913240][ T7578] udevd[7578]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.916169][ T7578] udevd[7578]: Unable to EVIOCGABS device "/dev/input/event3"
[  190.421569][ T9566] warning: `syz.4.1407' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  190.738011][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  190.916849][    T9] usb 5-1: Using ep0 maxpacket: 16
[  190.920827][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.925067][    T9] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  190.928843][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.936991][    T9] usb 5-1: config 0 descriptor??
[  191.112301][ T9582] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  191.382865][    T9] cherry 0003:046A:0023.0005: item fetching failed at offset 2/69
[  191.386617][    T9] cherry 0003:046A:0023.0005: probe with driver cherry failed with error -22
[  191.628183][   T24] usb 5-1: USB disconnect, device number 11
[  192.599956][ T9599] loop4: detected capacity change from 0 to 40427
[  192.622263][ T9599] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  192.625348][ T9599] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  192.673128][ T9599] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  192.675386][ T9599] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  193.141736][ T9613] befs: Bad value for 'gid'
[  193.143276][ T9613] befs: Bad value for 'gid'
[  193.312698][ T9617] loop4: detected capacity change from 0 to 32768
[  193.321718][ T9617] (syz.4.1428,9617,0):ocfs2_clear_journal_error:1147 ERROR: File system error 1280 recorded in journal 0.
[  193.326040][ T9617] (syz.4.1428,9617,0):ocfs2_clear_journal_error:1149 ERROR: File system on device loop4 needs checking.
[  193.331369][ T9617] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  193.362649][ T8256] ocfs2: Unmounting device (7,4) on (node local)
[  193.706961][    T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  193.858975][    T9] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  193.861561][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.865065][    T9] usb 5-1: config 0 has no interface number 0
[  193.867229][    T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  193.870875][    T9] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.875416][    T9] usb 5-1: config 0 interface 52 has no altsetting 0
[  193.879273][    T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  193.882288][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  193.884775][    T9] usb 5-1: SerialNumber: syz
[  193.888455][    T9] usb 5-1: config 0 descriptor??
[  193.902668][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.905252][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.305275][    T9] usb 5-1: USB disconnect, device number 12
[  195.097230][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  195.259769][    T9] usb 5-1: Using ep0 maxpacket: 8
[  195.264118][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  195.268961][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  195.273763][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  195.278284][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  195.288523][    T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  195.292220][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.295579][    T9] usb 5-1: Product: syz
[  195.297980][    T9] usb 5-1: Manufacturer: syz
[  195.299895][    T9] usb 5-1: SerialNumber: syz
[  195.304114][    T9] usb 5-1: config 0 descriptor??
[  195.322087][    T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  195.513700][    T9] imon:send_packet: packet tx failed (-71)
[  195.526980][    T9] imon 5-1:0.0: panel buttons/knobs setup failed
[  195.576943][    T9] rc_core: IR keymap rc-imon-pad not found
[  195.578865][    T9] Registered IR keymap rc-empty
[  195.580573][    T9] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  195.583841][    T9] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  195.590411][    T9] imon:send_packet: packet tx failed (-71)
[  195.607055][    T9] imon 5-1:0.0: remote input dev register failed
[  195.609837][    T9] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[  195.638010][    T9] imon 5-1:0.0: unable to initialize intf0, err 0
[  195.640493][    T9] imon:imon_probe: failed to initialize context!
[  195.642894][    T9] imon 5-1:0.0: unable to register, err -19
[  195.649220][    T9] usb 5-1: USB disconnect, device number 13
[  196.340273][ T9638] loop4: detected capacity change from 0 to 128
[  196.340896][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  196.343774][ T9638] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  196.348305][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.350317][ T9638] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  196.354936][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  196.358835][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.362029][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.427694][ T9637] wg0 speed is unknown, defaulting to 1000
[  196.445035][ T9640] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400)
[  196.467129][ T9640] FAT-fs (loop4): Filesystem has been set read-only
[  197.084841][ T9637] chnl_net:caif_netlink_parms(): no params data found
[  197.355539][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.358793][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.361258][ T9637] bridge_slave_0: entered allmulticast mode
[  197.369374][ T9637] bridge_slave_0: entered promiscuous mode
[  197.381638][ T9637] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.384631][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.389680][ T9637] bridge_slave_1: entered allmulticast mode
[  197.402124][ T9637] bridge_slave_1: entered promiscuous mode
[  197.495896][ T9637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.518311][ T9637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.559774][ T9637] team0: Port device team_slave_0 added
[  197.566022][ T9637] team0: Port device team_slave_1 added
[  197.605360][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.608364][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.619423][ T9637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.624595][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.627173][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.640340][ T9637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.687307][ T9637] hsr_slave_0: entered promiscuous mode
[  197.690143][ T9637] hsr_slave_1: entered promiscuous mode
[  197.692940][ T9637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.696191][ T9637] Cannot create hsr debugfs directory
[  197.719073][ T9648] loop4: detected capacity change from 0 to 32768
[  197.736192][ T9648] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  197.744323][ T9648] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  197.756506][ T9648] XFS (loop4): Ending clean mount
[  197.764662][ T9648] XFS (loop4): Quotacheck needed: Please wait.
[  197.797710][ T9648] XFS (loop4): Quotacheck: Done.
[  197.843355][ T8256] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  198.048751][ T9637] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  198.053977][ T9637] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  198.060359][ T9637] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  198.066484][ T9637] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  198.142201][ T9637] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.158065][ T9637] 8021q: adding VLAN 0 to HW filter on device team0
[  198.164582][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.167070][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.178219][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.180521][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.309724][ T9637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.398586][   T60] block nbd0: Possible stuck request ffff8880204e0000: control (read@0,1024B). Runtime 90 seconds
[  198.402588][   T60] block nbd0: Possible stuck request ffff8880204e0200: control (read@1024,1024B). Runtime 90 seconds
[  198.405807][   T60] block nbd0: Possible stuck request ffff8880204e0400: control (read@2048,1024B). Runtime 90 seconds
[  198.459250][ T5837] Bluetooth: hci4: command tx timeout
[  198.481497][ T9670] loop4: detected capacity change from 0 to 32768
[  198.499641][ T9637] veth0_vlan: entered promiscuous mode
[  198.522749][ T9637] veth1_vlan: entered promiscuous mode
[  198.551470][ T9637] veth0_macvtap: entered promiscuous mode
[  198.558607][ T9637] veth1_macvtap: entered promiscuous mode
[  198.577747][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.593763][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.605509][ T9637] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.605876][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid device 255,noinodes_use_key_cache,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  198.609938][ T9637] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.622608][ T9670]   allowing incompatible features above 0.0: (unknown version)
[  198.624985][ T9670]   features: lz4
[  198.626408][ T9670]   with devices loop4
[  198.627684][ T9637] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.631606][ T9637] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.636630][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  198.641174][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  198.650864][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  198.658187][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  198.709690][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  198.717283][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  198.730640][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.730935][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  198.733524][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.745512][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  198.769401][ T6904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.772163][ T6904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.775205][ T9670] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  198.861918][ T8256] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  198.868389][ T8256] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  198.870860][ T8256] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  198.883270][ T8256] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 4
[  198.914862][ T8256] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 4
[  198.924404][ T8256] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 5
[  198.930229][ T8256] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  199.130167][ T8256] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  200.384851][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'.
[  200.537224][ T5837] Bluetooth: hci4: command tx timeout
[  201.151030][ T9710] loop5: detected capacity change from 0 to 8
[  201.198106][ T9710] SQUASHFS error: zstd decompression error: 10
[  201.201725][ T9710] SQUASHFS error: zstd decompression failed, data probably corrupt
[  201.205269][ T9710] SQUASHFS error: Failed to read block 0x62b: -5
[  201.208114][ T9710] SQUASHFS error: Unable to read metadata cache entry [629]
[  201.211244][ T9710] SQUASHFS error: Unable to read directory block [629:ff26]
[  201.552300][ T9716] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  201.552300][ T9716] The task syz.4.1449 (9716) triggered the difference, watch for misbehavior.
[  201.983725][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1453'.
[  202.277155][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  202.459238][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.462457][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  202.465328][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.489868][    T9] usb 6-1: config 0 descriptor??
[  202.624338][ T5837] Bluetooth: hci4: command tx timeout
[  202.655816][ T9740] netlink: 'syz.4.1460': attribute type 21 has an invalid length.
[  202.662372][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'.
[  202.963415][ T9746] loop4: detected capacity change from 0 to 32768
[  202.969787][ T9746] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1463 (9746)
[  202.979887][ T9746] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  202.983454][ T9746] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  203.072154][ T6909] BTRFS warning (device loop4): checksum verify failed on logical 5267456 mirror 1 wanted 0xb8512a1d2916df35de1eb979e5409d57680a9623aa14e80f6c4e3536403d44d6 found 0x6fc812b96c4b111b3c2dea23d215f88791d82c68a8d551c19a2c275913556555 level 0
[  203.081459][ T9746] BTRFS warning (device loop4): failed to read fs tree: -5
[  203.119440][   T24] usb 6-1: USB disconnect, device number 2
[  203.158583][ T9746] BTRFS error (device loop4): open_ctree failed: -5
[  203.668708][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  203.820529][   T24] usb 5-1: Using ep0 maxpacket: 32
[  203.828814][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  203.834675][   T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  203.843818][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.848206][   T24] usb 5-1: Product: syz
[  203.849829][   T24] usb 5-1: Manufacturer: syz
[  203.851628][   T24] usb 5-1: SerialNumber: syz
[  203.868088][   T24] usb 5-1: config 0 descriptor??
[  203.876593][   T24] gs_usb 5-1:0.0: Required endpoints not found
[  204.083409][ T5863] usb 5-1: USB disconnect, device number 14
[  204.696906][ T5837] Bluetooth: hci4: command tx timeout
[  204.824958][ T9792] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8)
[  205.071310][ T9800] sctp: [Deprecated]: syz.5.1481 (pid 9800) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.071310][ T9800] Use struct sctp_sack_info instead
[  205.215133][ T9794] loop4: detected capacity change from 0 to 40427
[  205.218950][ T9794] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  205.221925][ T9794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  205.228148][ T9794] F2FS-fs (loop4): invalid crc_offset: 33558524
[  205.511060][ T9794] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  205.513773][ T9794] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  206.453114][ T9815] syz_tun: entered promiscuous mode
[  206.455479][ T9815] batadv_slave_0: entered promiscuous mode
[  206.461164][ T9815] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  206.464700][ T9815] Cannot create hsr debugfs directory
[  206.469359][ T9815] hsr1: entered allmulticast mode
[  206.471781][ T9815] syz_tun: entered allmulticast mode
[  206.473885][ T9815] batadv_slave_0: entered allmulticast mode
[  206.969905][ T9822] loop5: detected capacity change from 0 to 2048
[  206.982678][ T9822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.010653][ T9822] overlayfs: upper fs needs to support d_type.
[  207.019833][ T9822] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  207.025930][ T9822] overlayfs: failed to set xattr on upper
[  207.033562][ T9822] overlayfs: ...falling back to redirect_dir=nofollow.
[  207.036605][ T9822] overlayfs: ...falling back to index=off.
[  207.074426][ T9637] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  207.078963][ T9637] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  207.095320][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  207.109461][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  207.116612][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.124846][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.130072][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  207.194721][ T9637] syz_tun (unregistering): left promiscuous mode
[  207.230566][ T9823] wg0 speed is unknown, defaulting to 1000
[  207.452433][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.623805][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.935897][ T9823] chnl_net:caif_netlink_parms(): no params data found
[  207.998557][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.077049][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.110874][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  208.118782][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  208.123411][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  208.131247][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  208.134608][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  208.179969][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.184287][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.191977][ T9823] bridge_slave_0: entered allmulticast mode
[  208.198174][ T9823] bridge_slave_0: entered promiscuous mode
[  208.203064][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.205964][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.211716][ T9823] bridge_slave_1: entered allmulticast mode
[  208.217147][ T9823] bridge_slave_1: entered promiscuous mode
[  208.380500][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.390409][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.424160][ T9838] wg0 speed is unknown, defaulting to 1000
[  208.522082][ T9823] team0: Port device team_slave_0 added
[  208.539757][   T13] bridge_slave_1: left allmulticast mode
[  208.542304][   T13] bridge_slave_1: left promiscuous mode
[  208.544620][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.577078][   T13] bridge_slave_0: left allmulticast mode
[  208.579053][   T13] bridge_slave_0: left promiscuous mode
[  208.581290][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.659933][ T9848] xt_hashlimit: max too large, truncated to 1048576
[  209.009589][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.014331][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.020450][   T13] bond0 (unregistering): Released all slaves
[  209.038500][ T9823] team0: Port device team_slave_1 added
[  209.191198][   T54] Bluetooth: hci5: command tx timeout
[  209.197429][   T24] IPVS: starting estimator thread 0...
[  209.218480][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.220638][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.237711][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.245322][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.252109][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.268512][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.297113][ T9855] IPVS: using max 46 ests per chain, 110400 per kthread
[  209.394869][ T9823] hsr_slave_0: entered promiscuous mode
[  209.402303][ T9823] hsr_slave_1: entered promiscuous mode
[  209.405198][ T9823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.414122][ T9823] Cannot create hsr debugfs directory
[  209.469148][   T13] batadv_slave_0: left promiscuous mode
[  209.484085][   T13] hsr_slave_0: left promiscuous mode
[  209.492775][   T13] hsr_slave_1: left promiscuous mode
[  209.495452][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.500156][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.503809][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.506643][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.531924][   T13] veth1_macvtap: left promiscuous mode
[  209.534108][   T13] veth0_macvtap: left promiscuous mode
[  209.536369][   T13] veth1_vlan: left promiscuous mode
[  209.542336][   T13] veth0_vlan: left promiscuous mode
[  210.069429][   T13] team0 (unregistering): Port device team_slave_1 removed
[  210.118170][   T13] team0 (unregistering): Port device team_slave_0 removed
[  210.217109][   T54] Bluetooth: hci4: command tx timeout
[  210.232841][ T9869] loop4: detected capacity change from 0 to 128
[  210.253383][ T9869] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  210.259196][ T9869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.659301][ T5870] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  210.840889][ T5870] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  210.844460][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.859412][ T5870] usb 5-1: config 0 descriptor??
[  210.983040][ T9838] chnl_net:caif_netlink_parms(): no params data found
[  211.233211][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.235537][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.239260][ T9838] bridge_slave_0: entered allmulticast mode
[  211.242590][ T9838] bridge_slave_0: entered promiscuous mode
[  211.246630][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.252122][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.257594][ T9838] bridge_slave_1: entered allmulticast mode
[  211.261382][ T9838] bridge_slave_1: entered promiscuous mode
[  211.269785][   T54] Bluetooth: hci5: command tx timeout
[  211.309846][ T9823] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  211.325268][ T9838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.330651][ T9838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.334092][ T9823] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  211.337184][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  211.366587][ T9823] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  211.389171][ T9823] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  211.402023][ T9838] team0: Port device team_slave_0 added
[  211.423795][ T9838] team0: Port device team_slave_1 added
[  211.506704][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.511565][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.526544][ T9838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.575471][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.592768][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.602729][ T9838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.652831][ T9838] hsr_slave_0: entered promiscuous mode
[  211.657573][ T9838] hsr_slave_1: entered promiscuous mode
[  211.661143][ T9838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.663653][ T9838] Cannot create hsr debugfs directory
[  211.690413][ T5870] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[  211.700403][ T5870] usb 5-1: USB disconnect, device number 15
[  211.772235][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.828554][ T9823] 8021q: adding VLAN 0 to HW filter on device team0
[  211.848901][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.851304][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.854915][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.857272][ T6909] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.963115][ T9823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.008697][ T9838] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  212.013598][ T9838] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  212.034789][ T9838] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  212.044188][ T9838] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  212.192103][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.198697][ T9838] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.214420][ T9838] 8021q: adding VLAN 0 to HW filter on device team0
[  212.220743][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.222958][ T6893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.278522][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.281079][ T6893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.308130][ T5837] Bluetooth: hci4: command tx timeout
[  212.388866][ T9838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.684791][ T9823] veth0_vlan: entered promiscuous mode
[  212.701898][ T9838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.726878][ T9823] veth1_vlan: entered promiscuous mode
[  212.794302][ T9823] veth0_macvtap: entered promiscuous mode
[  212.817835][ T9823] veth1_macvtap: entered promiscuous mode
[  212.866591][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.891651][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.912126][ T9823] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.915540][ T9823] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.930825][ T9823] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.934136][ T9823] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.212161][ T6904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.217271][ T6904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.278791][ T6904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.278843][ T9838] veth0_vlan: entered promiscuous mode
[  213.284333][ T6904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.295474][ T9838] veth1_vlan: entered promiscuous mode
[  213.338375][ T5837] Bluetooth: hci5: command tx timeout
[  213.347061][  T790] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  213.375101][ T9838] veth0_macvtap: entered promiscuous mode
[  213.386497][ T9838] veth1_macvtap: entered promiscuous mode
[  213.403534][ T9838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.420103][ T9838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.434438][ T9838] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.441276][ T9838] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.444004][ T9838] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.450682][ T9838] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.514058][  T790] usb 5-1: Using ep0 maxpacket: 16
[  213.545645][  T790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.559829][  T790] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  213.565963][  T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.572917][  T790] usb 5-1: Product: syz
[  213.574346][  T790] usb 5-1: Manufacturer: syz
[  213.575776][  T790] usb 5-1: SerialNumber: syz
[  213.593447][  T790] usb 5-1: config 0 descriptor??
[  213.597989][ T6909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.600939][ T6909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.601793][  T790] hub 5-1:0.0: bad descriptor, ignoring hub
[  213.627661][  T790] hub 5-1:0.0: probe with driver hub failed with error -5
[  213.635194][  T790] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  213.643475][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.646001][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.696188][  T790] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2
[  213.762388][ T7578] udevd[7578]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  213.978218][  T790] usb 5-1: USB disconnect, device number 16
[  214.379433][ T5837] Bluetooth: hci4: command tx timeout
[  214.447250][ T5895] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  214.609058][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  214.613172][ T5895] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  214.619036][ T5895] usb 8-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00
[  214.622564][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.631498][ T5895] usb 8-1: config 0 descriptor??
[  214.639529][ T9987] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  214.960296][T10016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.082130][ T5895] apple 0003:05AC:0264.0007: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.7-1/input0
[  215.110725][T10023] loop6: detected capacity change from 0 to 2048
[  215.164129][ T6545] Alternate GPT is invalid, using primary GPT.
[  215.167403][ T6545]  loop6: p1 p2 p3
[  215.199544][T10023] Alternate GPT is invalid, using primary GPT.
[  215.202020][T10023]  loop6: p1 p2 p3
[  215.284060][ T5895] usb 8-1: USB disconnect, device number 2
[  215.398482][ T8866] udevd[8866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  215.402217][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  215.404499][ T7578] udevd[7578]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  215.418921][ T5837] Bluetooth: hci5: command tx timeout
[  215.511530][T10031] erofs: Unexpected value for 'acl'
[  215.885331][T10043] netlink: 'syz.4.1536': attribute type 29 has an invalid length.
[  215.975482][T10045] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode
[  216.416300][T10071] loop7: detected capacity change from 0 to 1024
[  216.457112][ T5837] Bluetooth: hci4: command tx timeout
[  216.609661][T10079] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for 
[  216.622717][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  216.777244][ T5897] usb 7-1: Using ep0 maxpacket: 16
[  216.789223][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.799397][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.805482][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  216.813875][ T5897] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  216.821331][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.828048][ T5897] usb 7-1: config 0 descriptor??
[  217.204999][T10103] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1559'.
[  217.209794][T10103] netlink: zone id is out of range
[  217.211396][T10103] netlink: zone id is out of range
[  217.213071][T10103] netlink: zone id is out of range
[  217.214693][T10103] netlink: zone id is out of range
[  217.216211][T10103] netlink: zone id is out of range
[  217.219267][T10103] netlink: zone id is out of range
[  217.220936][T10103] netlink: zone id is out of range
[  217.222751][T10103] netlink: zone id is out of range
[  217.224716][T10103] netlink: zone id is out of range
[  217.247305][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.250279][ T5897] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  217.277554][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.280678][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.283597][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.286415][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.291864][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.294737][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.299156][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.302225][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.305151][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.311086][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.314099][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.317538][ T5897] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  217.320343][ T5897] microsoft 0003:045E:07DA.0008: unsupported Resolution Multiplier 0
[  217.440641][ T5897] microsoft 0003:045E:07DA.0008: unsupported Resolution Multiplier 0
[  217.445597][ T5897] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  217.453532][ T5897] microsoft 0003:045E:07DA.0008: no inputs found
[  217.455967][ T5897] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  217.472650][ T5897] usb 7-1: USB disconnect, device number 2
[  217.489119][T10097] loop7: detected capacity change from 0 to 40427
[  217.500454][T10097] F2FS-fs (loop7): build fault injection rate: 771
[  217.516451][T10097] F2FS-fs (loop7): invalid crc value
[  217.583529][T10097] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  217.639868][ T9838] syz-executor: attempt to access beyond end of device
[  217.639868][ T9838] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  217.645466][ T9838] CPU: 1 UID: 0 PID: 9838 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  217.645486][ T9838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.645495][ T9838] Call Trace:
[  217.645501][ T9838]  <TASK>
[  217.645508][ T9838]  dump_stack_lvl+0x189/0x250
[  217.645533][ T9838]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.645549][ T9838]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  217.645571][ T9838]  ? __pfx_queue_work_on+0x10/0x10
[  217.645590][ T9838]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  217.645609][ T9838]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  217.645631][ T9838]  ? f2fs_hw_is_readonly+0x39b/0x470
[  217.645655][ T9838]  f2fs_handle_critical_error+0x37c/0x540
[  217.645681][ T9838]  f2fs_write_end_io+0x495/0x810
[  217.645694][ T9838]  ? blkg_put+0x22/0x240
[  217.645722][ T9838]  __submit_merged_bio+0x27a/0x6a0
[  217.645747][ T9838]  __submit_merged_write_cond+0x255/0x530
[  217.645772][ T9838]  f2fs_write_data_pages+0x261d/0x3000
[  217.645819][ T9838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.645881][ T9838]  ? folios_put_refs+0x559/0x640
[  217.645910][ T9838]  ? __pfx_folios_put_refs+0x10/0x10
[  217.645929][ T9838]  ? rcu_is_watching+0x15/0xb0
[  217.645952][ T9838]  ? __lock_acquire+0xab9/0xd20
[  217.645981][ T9838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.646030][ T9838]  do_writepages+0x32e/0x550
[  217.646054][ T9838]  ? do_raw_spin_unlock+0x4d/0x240
[  217.646077][ T9838]  filemap_fdatawrite+0x191/0x230
[  217.646095][ T9838]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  217.646146][ T9838]  ? do_raw_spin_unlock+0x4d/0x240
[  217.646169][ T9838]  f2fs_sync_dirty_inodes+0x31f/0x830
[  217.646196][ T9838]  f2fs_write_checkpoint+0x94a/0x1de0
[  217.646234][ T9838]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  217.646280][ T9838]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  217.646294][ T9838]  ? kfree+0x18e/0x440
[  217.646312][ T9838]  ? kill_f2fs_super+0x298/0x6c0
[  217.646331][ T9838]  kill_f2fs_super+0x2c3/0x6c0
[  217.646349][ T9838]  ? __pfx_kill_f2fs_super+0x10/0x10
[  217.646363][ T9838]  ? radix_tree_delete_item+0x2b6/0x400
[  217.646390][ T9838]  ? shrinker_free+0x2ce/0x3e0
[  217.646412][ T9838]  deactivate_locked_super+0xbc/0x130
[  217.646429][ T9838]  cleanup_mnt+0x425/0x4c0
[  217.646443][ T9838]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.646467][ T9838]  task_work_run+0x1d4/0x260
[  217.646490][ T9838]  ? __pfx_task_work_run+0x10/0x10
[  217.646508][ T9838]  ? __x64_sys_umount+0x122/0x160
[  217.646529][ T9838]  ? exit_to_user_mode_loop+0x40/0x110
[  217.646548][ T9838]  exit_to_user_mode_loop+0xec/0x110
[  217.646563][ T9838]  do_syscall_64+0x2bd/0x3b0
[  217.646576][ T9838]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.646595][ T9838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.646609][ T9838]  ? exc_page_fault+0x9f/0xf0
[  217.646631][ T9838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.646644][ T9838] RIP: 0033:0x7f1488d8fc57
[  217.646659][ T9838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  217.646672][ T9838] RSP: 002b:00007fffb11aa598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  217.646687][ T9838] RAX: 0000000000000000 RBX: 00007f1488e10925 RCX: 00007f1488d8fc57
[  217.646697][ T9838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb11aa650
[  217.646706][ T9838] RBP: 00007fffb11aa650 R08: 0000000000000000 R09: 0000000000000000
[  217.646714][ T9838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb11ab6e0
[  217.646724][ T9838] R13: 00007f1488e10925 R14: 00000000000351b8 R15: 00007fffb11ab720
[  217.646765][ T9838]  </TASK>
[  217.849893][ T9838] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  218.182518][T10126] loop4: detected capacity change from 0 to 512
[  218.182570][T10125] loop7: detected capacity change from 0 to 2048
[  218.189014][T10126] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  218.194256][T10126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  218.203027][T10125] EXT4-fs: inline encryption not supported
[  218.208060][T10126] EXT4-fs (loop4): orphan cleanup on readonly fs
[  218.210545][T10126] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1567: bad orphan inode 267
[  218.235447][T10126] EXT4-fs (loop4): Remounting filesystem read-only
[  218.235550][T10125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.241538][T10126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  218.289786][T10126] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1567: dx entry: limit 0 != root limit 125
[  218.317008][T10126] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1567: Corrupt directory, running e2fsck is recommended
[  218.365026][ T9838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.366635][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1572'.
[  218.411218][ T8256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  218.801359][T10148] loop7: detected capacity change from 0 to 512
[  218.839149][ T5837] Bluetooth: hci5: Malformed Event: 0x2f
[  218.950535][T10148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.967120][T10148] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  219.017998][T10148] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #2: block 3: comm syz.7.1577: lblock 8 mapped to illegal pblock 3 (length 26)
[  219.056321][T10148] EXT4-fs (loop7): Remounting filesystem read-only
[  219.103439][ T9838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.825969][T10164] loop6: detected capacity change from 0 to 4096
[  220.143749][T10181] loop6: detected capacity change from 0 to 1024
[  220.160057][T10181] EXT4-fs: Ignoring removed nobh option
[  220.164974][T10181] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  220.181845][T10181] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.1590: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  220.193078][T10181] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1590: couldn't read orphan inode 11 (err -117)
[  220.198676][T10181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.207285][T10181] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1590: bg 0: block 10: padding at end of block bitmap is not set
[  220.231327][   T33] audit: type=1800 audit(1752295384.325:178): pid=10169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1585" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  220.231828][ T9823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.832054][T10209] sd 0:0:0:0: PR command failed: 1026
[  220.833880][T10209] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  220.836059][T10209] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  221.396906][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  221.546935][   T24] usb 5-1: Using ep0 maxpacket: 16
[  221.551095][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.554560][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  221.560845][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  221.564199][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.566983][   T24] usb 5-1: Product: syz
[  221.568503][   T24] usb 5-1: Manufacturer: syz
[  221.570237][   T24] usb 5-1: SerialNumber: syz
[  221.778136][   T24] usb 5-1: cannot find UAC_HEADER
[  221.797001][   T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  221.803899][   T24] usb 5-1: USB disconnect, device number 17
[  221.823215][ T7578] udevd[7578]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  222.329352][T10228] loop4: detected capacity change from 0 to 256
[  222.336007][T10228] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  222.343970][T10228] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  222.507018][ T5895] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  222.564310][T10233] loop4: detected capacity change from 0 to 256
[  222.569696][T10233] exfat: Deprecated parameter 'utf8'
[  222.592144][T10233] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  222.673235][ T5895] usb 8-1: config 0 has an invalid interface number: 93 but max is 0
[  222.676550][ T5895] usb 8-1: config 0 has no interface number 0
[  222.691587][T10237] loop4: detected capacity change from 0 to 256
[  222.695302][ T5895] usb 8-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  222.704449][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.710014][ T5895] usb 8-1: Product: syz
[  222.715449][ T5895] usb 8-1: Manufacturer: syz
[  222.720032][T10237] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  222.724895][ T5895] usb 8-1: SerialNumber: syz
[  222.733835][ T5895] usb 8-1: config 0 descriptor??
[  222.768178][ T6830] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  222.854240][T10239] loop4: detected capacity change from 0 to 4096
[  222.860312][T10239] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  222.872216][T10239] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  222.954469][ T5895] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware
[  222.984546][ T5895] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  222.988478][ T5895] dib0700: firmware download failed at 7 with -22
[  222.992289][ T5895] usb 8-1: USB disconnect, device number 3
[  223.364828][T10247] loop4: detected capacity change from 0 to 128
[  223.404449][   T33] audit: type=1800 audit(1752295387.495:179): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1618" name="file1" dev="loop4" ino=1048632 res=0 errno=0
[  224.554415][T10271] loop7: detected capacity change from 0 to 4096
[  224.568905][T10271] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  224.576909][T10277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.579828][T10277] IPv6: NLM_F_CREATE should be set when creating new route
[  224.594531][T10271] ntfs3(loop7): $Secure::$SDH is corrupted.
[  224.599362][T10271] ntfs3(loop7): Failed to initialize $Secure (-22).
[  224.781580][T10283] loop4: detected capacity change from 0 to 1024
[  224.864822][ T6873] hfsplus: b-tree write err: -5, ino 4
[  225.486572][T10313] input: syz0 as /devices/virtual/input/input10
[  226.647057][ T5895] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  226.797809][ T5895] usb 5-1: Using ep0 maxpacket: 16
[  226.803019][ T5895] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  226.806478][ T5895] usb 5-1: config 0 has no interface number 0
[  226.813372][ T5895] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  226.823318][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.826558][ T5895] usb 5-1: Product: syz
[  226.829848][ T5895] usb 5-1: Manufacturer: syz
[  226.831757][ T5895] usb 5-1: SerialNumber: syz
[  226.850487][ T5895] usb 5-1: config 0 descriptor??
[  227.065900][ T5895] usb 5-1: USB disconnect, device number 18
[  227.629934][T10349] loop7: detected capacity change from 0 to 8
[  227.719129][   T33] audit: type=1800 audit(1752295391.805:180): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1644" name="file1" dev="loop7" ino=5 res=0 errno=0
[  227.985327][T10364] loop7: detected capacity change from 0 to 128
[  228.053878][T10364] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.074688][T10358] loop4: detected capacity change from 0 to 40427
[  228.075196][T10364] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  228.089092][T10358] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  228.092201][T10358] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  228.099404][T10358] F2FS-fs (loop4): invalid crc value
[  228.148931][ T9838] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.170316][T10358] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  228.173155][T10358] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  228.264773][T10374] input: syz0 as /devices/virtual/input/input11
[  228.455388][T10378] 9pnet: Found fid 0 not clunked
[  228.709213][   T33] audit: type=1804 audit(1752295392.645:181): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1647" name="/newroot/249/bus/file0" dev="loop4" ino=11 res=1 errno=0
[  228.741897][   T60] block nbd0: Possible stuck request ffff8880204e0000: control (read@0,1024B). Runtime 120 seconds
[  228.746458][   T60] block nbd0: Possible stuck request ffff8880204e0200: control (read@1024,1024B). Runtime 120 seconds
[  228.750921][   T60] block nbd0: Possible stuck request ffff8880204e0400: control (read@2048,1024B). Runtime 120 seconds
[  229.076897][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  229.228484][   T10] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  229.231349][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.237582][   T10] usb 8-1: config 0 descriptor??
[  229.241253][   T10] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  229.245193][   T10] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  229.451788][   T24] usb 8-1: USB disconnect, device number 4
[  229.456212][   T24] ftdi_sio 8-1:0.0: device disconnected
[  230.071691][T10392] loop7: detected capacity change from 0 to 4096
[  230.081406][T10392] NILFS (loop7): invalid segment: Checksum error in segment payload
[  230.084632][T10392] NILFS (loop7): trying rollback from an earlier position
[  230.100949][T10392] NILFS (loop7): recovery complete
[  230.108769][T10393] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  230.388476][T10400] loop7: detected capacity change from 0 to 4096
[  230.439207][T10400] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  230.460863][T10400] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  230.490754][ T9838] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  230.676519][T10408] net_ratelimit: 77 callbacks suppressed
[  230.676550][T10408] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  231.214444][T10420] ALSA: seq fatal error: cannot create timer (-22)
[  231.287120][ T5895] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  231.323487][T10424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.436910][ T5895] usb 8-1: Using ep0 maxpacket: 8
[  231.440809][ T5895] usb 8-1: config 150 has an invalid interface number: 204 but max is 0
[  231.444173][ T5895] usb 8-1: config 150 has no interface number 0
[  231.446558][ T5895] usb 8-1: config 150 interface 204 has no altsetting 0
[  231.462212][ T5895] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  231.466202][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.470012][ T5895] usb 8-1: Product: syz
[  231.471790][T10430] macvlan0: entered allmulticast mode
[  231.473946][T10430] veth1_vlan: entered allmulticast mode
[  231.476321][ T5895] usb 8-1: Manufacturer: syz
[  231.478899][ T5895] usb 8-1: SerialNumber: syz
[  231.481970][T10430] veth1_vlan: left allmulticast mode
[  231.512780][T10430] macvlan0 (unregistering): left allmulticast mode
[  231.910656][ T5895] usb 8-1: USB disconnect, device number 5
[  231.950239][T10442] netlink: 'syz.4.1677': attribute type 4 has an invalid length.
[  231.953236][T10442] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1677'.
[  232.275985][T10446] loop4: detected capacity change from 0 to 32768
[  232.289465][T10446] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  232.394536][ T8256] ocfs2: Unmounting device (7,4) on (node local)
[  232.985993][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  233.481971][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a
[  233.487769][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.491136][   T24] usb 5-1: Product: syz
[  233.493027][   T24] usb 5-1: Manufacturer: syz
[  233.495008][   T24] usb 5-1: SerialNumber: syz
[  233.503518][   T24] usb 5-1: config 0 descriptor??
[  233.730311][   T24] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  233.733228][   T24] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  233.742925][   T24] usb 5-1: USB disconnect, device number 19
[  234.216977][   T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  234.289836][T10478] loop4: detected capacity change from 0 to 256
[  234.369342][   T24] usb 8-1: config 0 has an invalid interface number: 47 but max is 0
[  234.372600][   T24] usb 8-1: config 0 has no interface number 0
[  234.385340][   T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c
[  234.389133][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.394992][   T24] usb 8-1: config 0 descriptor??
[  234.417534][   T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e
[  234.874809][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.878722][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.884577][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.888590][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.117088][   T24] gspca_sn9c20x: Write register 1001 failed -110
[  235.119616][   T24] gspca_sn9c20x: Device initialization failed
[  235.122084][   T24] gspca_sn9c20x 8-1:0.47: probe with driver gspca_sn9c20x failed with error -110
[  235.156626][   T24] usb 8-1: USB disconnect, device number 6
[  236.179784][ T5897] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  236.184433][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.189329][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.193691][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.203479][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.208102][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  236.267684][T10495] wg0 speed is unknown, defaulting to 1000
[  236.484217][ T5897] usb 8-1: config 0 has an invalid interface number: 139 but max is 0
[  236.487765][ T5897] usb 8-1: config 0 has no interface number 0
[  236.489454][T10495] chnl_net:caif_netlink_parms(): no params data found
[  236.490139][ T5897] usb 8-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  236.496499][ T5897] usb 8-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  236.503607][ T5897] usb 8-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[  236.507238][ T5897] usb 8-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  236.526161][ T5897] usb 8-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  236.530262][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.533437][ T5897] usb 8-1: Product: syz
[  236.535077][ T5897] usb 8-1: Manufacturer: syz
[  236.538234][ T5897] usb 8-1: SerialNumber: syz
[  236.735332][ T5897] usb 8-1: config 0 descriptor??
[  236.775439][T10494] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  236.787166][T10494] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  236.828533][T10495] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.830975][T10495] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.833890][T10495] bridge_slave_0: entered allmulticast mode
[  236.838187][T10495] bridge_slave_0: entered promiscuous mode
[  236.841874][T10495] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.844103][T10495] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.846482][T10495] bridge_slave_1: entered allmulticast mode
[  236.850056][T10495] bridge_slave_1: entered promiscuous mode
[  236.886084][T10495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.891631][T10495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.920297][T10495] team0: Port device team_slave_0 added
[  236.924009][T10495] team0: Port device team_slave_1 added
[  236.945713][T10495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.948104][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.961350][T10495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.966020][T10495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.968649][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.979187][T10495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.000939][ T5897] mct_u232 8-1:0.139: MCT U232 converter detected
[  237.005989][ T5897] usb 8-1: MCT U232 converter now attached to ttyUSB0
[  237.020619][ T5897] usb 8-1: USB disconnect, device number 7
[  237.033902][ T5897] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0
[  237.041666][T10495] hsr_slave_0: entered promiscuous mode
[  237.042430][ T5897] mct_u232 8-1:0.139: device disconnected
[  237.044642][T10495] hsr_slave_1: entered promiscuous mode
[  237.053913][T10495] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.063129][T10495] Cannot create hsr debugfs directory
[  237.272904][T10510] loop4: detected capacity change from 0 to 16
[  237.297202][T10510] erofs (device loop4): mounted with root inode @ nid 36.
[  237.333193][T10495] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  237.345268][T10495] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  237.353519][T10495] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  237.365871][T10495] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  237.432704][T10495] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.435805][T10495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.439087][T10495] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.442049][T10495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.498662][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.502984][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.531922][T10495] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.579267][T10495] 8021q: adding VLAN 0 to HW filter on device team0
[  237.591412][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.594485][ T6893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.621265][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.624083][ T6893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.652006][ T5897] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  237.808933][ T5897] usb 5-1: config 0 has an invalid interface number: 47 but max is 0
[  237.812195][ T5897] usb 5-1: config 0 has no interface number 0
[  237.853563][ T5897] usb 5-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  237.860507][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.863697][ T5897] usb 5-1: Product: syz
[  237.865367][ T5897] usb 5-1: Manufacturer: syz
[  237.892781][ T5897] usb 5-1: SerialNumber: syz
[  237.904094][ T5897] usb 5-1: config 0 descriptor??
[  237.960011][T10495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.118676][ T5897] go7007 5-1:0.47: probe with driver go7007 failed with error -12
[  238.144688][ T5897] usb 5-1: USB disconnect, device number 20
[  238.233372][   T54] Bluetooth: hci6: command tx timeout
[  238.280534][T10495] veth0_vlan: entered promiscuous mode
[  238.293377][T10495] veth1_vlan: entered promiscuous mode
[  238.316649][T10495] veth0_macvtap: entered promiscuous mode
[  238.321760][T10495] veth1_macvtap: entered promiscuous mode
[  238.336256][T10495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.344912][T10495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.352295][T10495] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.355176][T10495] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.360605][T10495] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.363376][T10495] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.465040][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.471283][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.498113][ T6830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.501620][ T6830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.606977][ T5895] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  238.759899][ T5895] usb 8-1: Using ep0 maxpacket: 32
[  238.765378][ T5895] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  238.783063][ T5895] usb 8-1: config 0 has no interface number 0
[  238.784974][ T5895] usb 8-1: config 0 interface 184 has no altsetting 0
[  238.806929][ T5895] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  238.809993][ T5895] usb 8-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3
[  238.812414][ T5895] usb 8-1: Product: syz
[  238.813756][ T5895] usb 8-1: Manufacturer: syz
[  238.815199][ T5895] usb 8-1: SerialNumber: syz
[  238.821699][ T5895] usb 8-1: config 0 descriptor??
[  238.831401][ T5895] smsc75xx v1.0.0
[  239.196673][T10567] loop4: detected capacity change from 0 to 32768
[  239.235134][T10567] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  239.257246][ T5897] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  239.289643][T10567] XFS (loop4): Ending clean mount
[  239.359222][ T8256] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  239.428604][ T5897] usb 9-1: Using ep0 maxpacket: 32
[  239.443223][ T5895] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  239.443343][ T5897] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  239.459896][ T5895] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  239.474098][ T5897] usb 9-1: config 0 has no interface number 0
[  239.492059][ T5897] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  239.498592][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.509469][ T5897] usb 9-1: Product: syz
[  239.511123][ T5897] usb 9-1: Manufacturer: syz
[  239.526008][ T5897] usb 9-1: SerialNumber: syz
[  239.535861][ T5897] usb 9-1: config 0 descriptor??
[  239.544337][ T5897] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  239.770002][ T5897] usb 9-1: qt2_setup_urbs - submit read urb failed -8
[  239.772355][ T5897] quatech2 9-1:0.51: probe with driver quatech2 failed with error -8
[  239.883462][ T5895] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  239.888046][ T5895] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  239.891770][ T5895] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  239.894773][ T5895] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[  239.903734][ T5895] usb 8-1: USB disconnect, device number 8
[  239.999125][   T47] usb 9-1: USB disconnect, device number 2
[  240.297246][   T54] Bluetooth: hci6: command tx timeout
[  240.476102][T10592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1728'.
[  240.741824][T10607] loop7: detected capacity change from 0 to 1024
[  240.746926][ T5897] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  240.772909][T10607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.853192][T10607] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.1735: Abort forced by user
[  240.868935][T10607] EXT4-fs (loop7): Remounting filesystem read-only
[  240.871010][T10607] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  240.889109][T10612] loop8: detected capacity change from 0 to 4096
[  240.942210][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short
[  240.960734][ T5897] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 16, setting to 0
[  240.970093][ T5897] usb 5-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0
[  240.975216][ T5897] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 16, setting to 8
[  240.977561][ T9838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.006476][ T5897] usb 5-1: string descriptor 0 read error: -22
[  241.009205][ T5897] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  241.012997][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.529626][ T5870] usb 5-1: USB disconnect, device number 21
[  242.124173][T10637] 9pnet: p9_errstr2errno: server reported unknown error @cF	S+
[  242.359034][T10635] loop8: detected capacity change from 0 to 32768
[  242.378327][   T54] Bluetooth: hci6: command tx timeout
[  242.394272][T10635] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  242.465392][T10635] XFS (loop8): Ending clean mount
[  242.481231][   T33] audit: type=1800 audit(1752295406.575:182): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1745" name="file2" dev="loop8" ino=9287 res=0 errno=0
[  242.581056][T10663] Bluetooth: MGMT ver 1.23
[  242.595370][T10495] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  242.793014][T10669] veth0: entered promiscuous mode
[  242.805876][T10667] veth0: left promiscuous mode
[  242.903844][T10676] netlink: 1276 bytes leftover after parsing attributes in process `syz.8.1759'.
[  242.904541][T10675] evm: overlay not supported
[  242.931876][T10675] overlayfs: failed to verify origin (294/file1, ino=1554, err=-116)
[  242.935229][T10675] overlayfs: failed to look up (file1) for ino (-116)
[  242.991723][T10678] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  243.143283][T10684] program syz.7.1765 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  243.236256][T10688] loop7: detected capacity change from 0 to 256
[  243.347417][   T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  243.507935][   T24] usb 5-1: Using ep0 maxpacket: 16
[  243.517317][   T24] usb 5-1: config 0 has an invalid interface number: 191 but max is 0
[  243.519783][   T24] usb 5-1: config 0 has no interface number 0
[  243.526135][   T24] usb 5-1: config 0 interface 191 has no altsetting 0
[  243.532650][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=c2.08
[  243.536022][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.540403][   T24] usb 5-1: Product: syz
[  243.542241][   T24] usb 5-1: Manufacturer: syz
[  243.543971][   T24] usb 5-1: SerialNumber: syz
[  243.552532][   T24] usb 5-1: config 0 descriptor??
[  243.659993][T10690] loop7: detected capacity change from 0 to 32768
[  243.676448][T10690] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  243.691290][T10690] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  243.754720][T10690] (syz.7.1768,10690,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  243.782436][ T5863] usb 5-1: USB disconnect, device number 22
[  243.795998][ T9838] ocfs2: Unmounting device (7,7) on (node local)
[  243.912781][T10696] 9p: Unknown Cache mode or invalid value f
[  244.468273][   T54] Bluetooth: hci6: command tx timeout
[  245.582155][T10741] can0: slcan on ttyS3.
[  245.582692][ T6904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.599183][ T6904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.619069][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  245.622238][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u11:3 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  245.622251][ T5837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.622258][ T5837] Workqueue: hci4 hci_rx_work
[  245.622271][ T5837] Call Trace:
[  245.622276][ T5837]  <TASK>
[  245.622280][ T5837]  dump_stack_lvl+0x189/0x250
[  245.622294][ T5837]  ? kernfs_path_from_node+0x2c/0x260
[  245.622309][ T5837]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.622319][ T5837]  ? __pfx__printk+0x10/0x10
[  245.622331][ T5837]  ? kernfs_path_from_node+0x2c/0x260
[  245.622342][ T5837]  ? kernfs_path_from_node+0x2c/0x260
[  245.622354][ T5837]  ? kernfs_path_from_node+0x22c/0x260
[  245.622365][ T5837]  ? kernfs_path_from_node+0x2c/0x260
[  245.622377][ T5837]  sysfs_create_dir_ns+0x259/0x280
[  245.622390][ T5837]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  245.622401][ T5837]  ? do_raw_spin_unlock+0x4d/0x240
[  245.622414][ T5837]  kobject_add_internal+0x59f/0xb40
[  245.622428][ T5837]  kobject_add+0x155/0x220
[  245.622439][ T5837]  ? __pfx_kobject_add+0x10/0x10
[  245.622448][ T5837]  ? _raw_spin_unlock+0x28/0x50
[  245.622461][ T5837]  ? get_device_parent+0x366/0x3a0
[  245.622475][ T5837]  device_add+0x408/0xb50
[  245.622487][ T5837]  hci_conn_add_sysfs+0xd5/0x1e0
[  245.622501][ T5837]  le_conn_complete_evt+0xc3a/0x1220
[  245.622519][ T5837]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  245.622529][ T5837]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  245.622537][ T5837]  ? __asan_memcpy+0x40/0x70
[  245.622546][ T5837]  ? __pfx___mutex_lock+0x10/0x10
[  245.622554][ T5837]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  245.622561][ T5837]  ? skb_pull_data+0xfb/0x200
[  245.622576][ T5837]  hci_le_conn_complete_evt+0x187/0x450
[  245.622589][ T5837]  hci_event_packet+0x78f/0x1200
[  245.622603][ T5837]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  245.622614][ T5837]  ? __pfx_hci_event_packet+0x10/0x10
[  245.622627][ T5837]  ? kcov_remote_start+0x4d3/0x7f0
[  245.622639][ T5837]  ? __pfx_warn_bogus_irq_restore+0x10/0x10
[  245.622653][ T5837]  ? hci_send_to_monitor+0xe2/0x570
[  245.622665][ T5837]  hci_rx_work+0x46a/0xe80
[  245.622677][ T5837]  ? process_scheduled_works+0x9ef/0x17b0
[  245.622687][ T5837]  process_scheduled_works+0xae1/0x17b0
[  245.622710][ T5837]  ? __pfx_process_scheduled_works+0x10/0x10
[  245.622727][ T5837]  worker_thread+0x8a0/0xda0
[  245.622749][ T5837]  kthread+0x711/0x8a0
[  245.622761][ T5837]  ? __pfx_worker_thread+0x10/0x10
[  245.622770][ T5837]  ? __pfx_kthread+0x10/0x10
[  245.622782][ T5837]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.622792][ T5837]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.622803][ T5837]  ? __pfx_kthread+0x10/0x10
[  245.622814][ T5837]  ret_from_fork+0x3fc/0x770
[  245.622825][ T5837]  ? __pfx_ret_from_fork+0x10/0x10
[  245.622836][ T5837]  ? __switch_to_asm+0x39/0x70
[  245.622845][ T5837]  ? __switch_to_asm+0x33/0x70
[  245.622854][ T5837]  ? __pfx_kthread+0x10/0x10
[  245.622865][ T5837]  ret_from_fork_asm+0x1a/0x30
[  245.622883][ T5837]  </TASK>
[  245.622899][ T5837] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  245.722796][ T5837] Bluetooth: hci4: failed to register connection device
[  245.741025][T10741] can0 (unregistered): slcan off ttyS3.
[  245.744176][T10741] Falling back ldisc for ttyS3.
[  246.157902][ T5298] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  246.178640][T10762] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1799'.
[  246.309946][ T5298] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.313649][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  246.327770][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  246.336624][ T5298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  246.351467][ T5298] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  246.357357][ T5863] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  246.365299][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.395629][ T5298] usb 5-1: config 0 descriptor??
[  246.512208][ T5863] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.516190][ T5863] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  246.521250][ T5863] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  246.526400][ T5863] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00
[  246.530158][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.542144][ T5863] usb 9-1: config 0 descriptor??
[  246.831006][ T5298] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  246.966992][ T5863] corsair-psu 0003:1B1C:1C0C.000A: unknown main item tag 0x4
[  246.969322][ T5863] corsair-psu 0003:1B1C:1C0C.000A: item fetching failed at offset 1/3
[  246.972205][ T5863] corsair-psu 0003:1B1C:1C0C.000A: probe with driver corsair-psu failed with error -22
[  247.171007][   T24] usb 9-1: USB disconnect, device number 3
[  247.345522][T10781] netlink: 'syz.7.1807': attribute type 1 has an invalid length.
[  247.473283][T10786] tmpfs: Group quota inode hardlimit too large.
[  247.713894][ T5863] usb 5-1: USB disconnect, device number 23
[  247.906970][   T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  248.057183][   T24] usb 8-1: Using ep0 maxpacket: 32
[  248.075727][   T24] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  248.096480][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.104110][   T24] usb 8-1: Product: syz
[  248.105894][   T24] usb 8-1: Manufacturer: syz
[  248.115231][   T24] usb 8-1: SerialNumber: syz
[  248.123743][   T24] usb 8-1: config 0 descriptor??
[  248.143886][   T24] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  248.437231][ T5863] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  248.587026][ T5863] usb 9-1: Using ep0 maxpacket: 8
[  248.597371][ T5863] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  248.614092][ T5863] usb 9-1: config 179 has no interface number 0
[  248.616195][ T5863] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  248.622905][ T5863] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  248.626487][ T5863] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  248.639503][ T5863] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  248.644282][ T5863] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  248.660815][ T5863] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  248.664473][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.680392][T10808] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  249.034353][T10823] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1826'.
[  249.122347][ T5870] usb 9-1: USB disconnect, device number 4
[  249.122400][    C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  249.128232][    C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  249.419164][   T24] gspca_stk1135: reg_w 0xd err -71
[  249.424325][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  249.435764][   T24] gspca_stk1135: Sensor write failed
[  249.441208][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  249.443754][   T24] gspca_stk1135: Sensor write failed
[  249.445984][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  249.452914][   T24] gspca_stk1135: Sensor read failed
[  249.454930][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  249.459279][   T24] gspca_stk1135: Sensor read failed
[  249.461507][   T24] gspca_stk1135: Detected sensor type unknown (0x0)
[  249.464109][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  249.466599][   T24] gspca_stk1135: Sensor read failed
[  249.469853][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  249.472521][   T24] gspca_stk1135: Sensor read failed
[  249.474713][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  249.482762][   T24] gspca_stk1135: Sensor write failed
[  249.487336][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  249.489863][   T24] gspca_stk1135: Sensor write failed
[  249.492021][   T24] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71
[  249.506404][   T24] usb 8-1: USB disconnect, device number 9
[  249.834851][T10846] loop8: detected capacity change from 0 to 1024
[  249.874340][T10846] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.896057][T10846] EXT4-fs (loop8): shut down requested (1)
[  249.925831][T10495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.964379][T10853] xt_connbytes: Forcing CT accounting to be enabled
[  250.030813][T10853] loop4: detected capacity change from 0 to 1024
[  250.044988][T10853] EXT4-fs: Ignoring removed nomblk_io_submit option
[  250.058764][T10853] EXT4-fs: Ignoring removed bh option
[  250.099916][T10853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.188771][T10853] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  250.200032][T10853] EXT4-fs (loop4): Remounting filesystem read-only
[  250.237924][ T8256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.434992][T10879] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1844'.
[  251.881795][T10903] loop4: detected capacity change from 0 to 16
[  251.891108][T10903] erofs (device loop4): mounted with root inode @ nid 36.
[  252.295566][T10909] loop8: detected capacity change from 0 to 8
[  252.371194][T10495] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  252.374693][T10495] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  252.771212][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.893017][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.011056][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.108829][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.191647][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.203868][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.218019][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.224677][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.228756][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.302435][T10919] wg0 speed is unknown, defaulting to 1000
[  253.465254][   T12] bridge_slave_1: left allmulticast mode
[  253.470535][   T12] bridge_slave_1: left promiscuous mode
[  253.472510][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.479310][   T12] bridge_slave_0: left allmulticast mode
[  253.481163][   T12] bridge_slave_0: left promiscuous mode
[  253.482987][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.567115][ T5870] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  253.730872][ T5870] usb 5-1: Using ep0 maxpacket: 16
[  253.735558][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short
[  253.741034][ T5870] usb 5-1: config 1 has an invalid interface number: 206 but max is 0
[  253.744256][ T5870] usb 5-1: config 1 has no interface number 0
[  253.751898][ T5870] usb 5-1: string descriptor 0 read error: -22
[  253.754108][ T5870] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a
[  253.757100][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.889788][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.894261][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.899567][   T12] bond0 (unregistering): Released all slaves
[  253.971493][T10551] usb 5-1: USB disconnect, device number 24
[  254.100458][T10919] chnl_net:caif_netlink_parms(): no params data found
[  254.256441][T10919] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.268546][T10919] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.271619][T10919] bridge_slave_0: entered allmulticast mode
[  254.275664][T10919] bridge_slave_0: entered promiscuous mode
[  254.286987][T10919] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.289501][T10919] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.292025][T10919] bridge_slave_1: entered allmulticast mode
[  254.295980][T10919] bridge_slave_1: entered promiscuous mode
[  254.315698][   T12] hsr_slave_0: left promiscuous mode
[  254.322216][   T12] hsr_slave_1: left promiscuous mode
[  254.325017][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.330908][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.338520][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.341536][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.371021][   T12] veth1_macvtap: left promiscuous mode
[  254.373426][   T12] veth0_macvtap: left promiscuous mode
[  254.375748][   T12] veth1_vlan: left promiscuous mode
[  254.378543][   T12] veth0_vlan: left promiscuous mode
[  255.097697][T10951] loop4: detected capacity change from 0 to 512
[  255.100638][T10951] EXT4-fs: Ignoring removed nobh option
[  255.179896][T10951] EXT4-fs (loop4): Test dummy encryption mode enabled
[  255.199680][T10951] EXT4-fs error (device loop4): __ext4_iget:5379: inode #11: block 1: comm syz.4.1875: invalid block
[  255.211123][T10951] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1875: couldn't read orphan inode 11 (err -117)
[  255.215879][T10951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.291062][ T8256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.351375][   T54] Bluetooth: hci6: command tx timeout
[  255.362109][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.364682][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  255.464564][   T12] team0 (unregistering): Port device team_slave_1 removed
[  255.470344][T10962] loop4: detected capacity change from 0 to 1764
[  255.540122][   T12] team0 (unregistering): Port device team_slave_0 removed
[  256.099969][   T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  256.257059][   T24] usb 5-1: Using ep0 maxpacket: 8
[  256.261294][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.283330][   T24] usb 5-1: config 150 has an invalid interface number: 204 but max is 1
[  256.286418][   T24] usb 5-1: config 150 has no interface number 0
[  256.288990][   T24] usb 5-1: config 150 interface 204 has no altsetting 0
[  256.291437][   T24] usb 5-1: config 150 interface 1 has no altsetting 0
[  256.295304][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.307059][   T24] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  256.307218][T10973] loop7: detected capacity change from 0 to 256
[  256.310094][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.310109][   T24] usb 5-1: Product: syz
[  256.310116][   T24] usb 5-1: Manufacturer: syz
[  256.310123][   T24] usb 5-1: SerialNumber: syz
[  256.337924][T10973] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  256.342958][T10973] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  256.362341][T10973] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  256.455068][T10919] team0: Port device team_slave_0 added
[  256.468587][T10919] team0: Port device team_slave_1 added
[  256.534345][   T24] xr_serial 5-1:150.204: xr_serial converter detected
[  256.551039][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.553651][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.587022][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.602596][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.614545][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.643741][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.762550][T10919] hsr_slave_0: entered promiscuous mode
[  256.765038][T10919] hsr_slave_1: entered promiscuous mode
[  256.770235][T10919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.772562][T10919] Cannot create hsr debugfs directory
[  256.965053][T10994] /dev/loop0: Can't open blockdev
[  256.972392][T10919] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  256.989696][T10919] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  256.999286][T10919] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  257.016559][T10919] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  257.223105][T10919] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.277465][T10919] 8021q: adding VLAN 0 to HW filter on device team0
[  257.299899][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.302220][ T6893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.339769][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.342141][ T6893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.348273][   T24] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  257.351792][   T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  257.361311][   T24] usb 5-1: USB disconnect, device number 25
[  257.427384][   T54] Bluetooth: hci6: command tx timeout
[  257.482630][   T24] xr_serial 5-1:150.204: device disconnected
[  258.108968][T10919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.128601][T11033] loop4: detected capacity change from 0 to 2048
[  258.159494][T11033]  loop4: p1 < > p3
[  258.168816][T11033] loop4: p3 size 134217728 extends beyond EOD, truncated
[  258.528878][T10919] veth0_vlan: entered promiscuous mode
[  258.541460][T10919] veth1_vlan: entered promiscuous mode
[  258.595904][T10919] veth0_macvtap: entered promiscuous mode
[  258.623211][T10919] veth1_macvtap: entered promiscuous mode
[  258.652187][T10919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.676590][T10919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.694190][T10919] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.705759][T10919] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.710863][T10919] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.715050][T10919] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.824260][   T24] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  259.194840][   T60] block nbd0: Possible stuck request ffff8880204e0000: control (read@0,1024B). Runtime 150 seconds
[  259.199194][   T60] block nbd0: Possible stuck request ffff8880204e0200: control (read@1024,1024B). Runtime 150 seconds
[  259.203553][   T60] block nbd0: Possible stuck request ffff8880204e0400: control (read@2048,1024B). Runtime 150 seconds
[  259.224559][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.237416][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.273279][ T6840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.280040][ T6840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.360491][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  259.364279][   T24] usb 5-1: not running at top speed; connect to a high speed hub
[  259.378912][   T24] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  259.382332][   T24] usb 5-1: config 0 has no interface number 0
[  259.386226][   T24] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  259.403503][   T24] usb 5-1: config 0 interface 88 has no altsetting 0
[  259.415433][   T24] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  259.423945][   T24] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  259.434191][   T24] usb 5-1: Product: syz
[  259.437830][   T24] usb 5-1: Manufacturer: syz
[  259.439739][   T24] usb 5-1: SerialNumber: syz
[  259.444654][   T24] usb 5-1: config 0 descriptor??
[  259.497347][   T54] Bluetooth: hci6: command tx timeout
[  259.701102][   T24] usb 5-1: USB disconnect, device number 26
[  259.715599][T11076] syz.9.1905(11076): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  259.760753][T11073] loop7: detected capacity change from 0 to 4096
[  259.834556][T11073] ntfs3(loop7): ino=21, "bus" direct i/o + compressed not supported
[  260.341869][T11097] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1909'.
[  260.599116][T11109] dlm: Unknown command passed to DLM device : 11
[  260.599116][T11109] 
[  260.726549][T11107] loop7: detected capacity change from 0 to 1024
[  260.800490][   T33] audit: type=1800 audit(1752295424.885:183): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1914" name="file1" dev="loop7" ino=20 res=0 errno=0
[  260.879341][T11107] veth3: entered promiscuous mode
[  261.216450][T11117] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  261.452266][T11125] loop7: detected capacity change from 0 to 256
[  261.454716][T11099] loop4: detected capacity change from 0 to 32768
[  261.463179][T11125] exFAT-fs (loop7): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  261.493171][T11099] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.597694][   T54] Bluetooth: hci6: command tx timeout
[  261.685859][T11099] XFS (loop4): Ending clean mount
[  261.704676][T11099] XFS (loop4): Quotacheck needed: Please wait.
[  261.782998][T11099] XFS (loop4): Quotacheck: Done.
[  261.879631][ T8256] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.897170][T11143] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[  262.219937][ T2304] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  262.617387][ T2304] usb 8-1: Using ep0 maxpacket: 8
[  262.622599][ T2304] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  262.625401][ T2304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.630032][ T2304] usb 8-1: Product: syz
[  262.631371][ T2304] usb 8-1: Manufacturer: syz
[  262.632813][ T2304] usb 8-1: SerialNumber: syz
[  262.636564][ T2304] usb 8-1: config 0 descriptor??
[  262.644633][ T2304] gspca_main: sq930x-2.14.0 probing 2770:930c
[  262.810673][T11172] xt_recent: hitcount (33554432) is larger than allowed maximum (65535)
[  263.138376][ T2304] gspca_sq930x: ucbus_write failed -71
[  263.140550][ T2304] sq930x 8-1:0.0: probe with driver sq930x failed with error -71
[  263.148137][ T2304] usb 8-1: USB disconnect, device number 10
[  264.086273][T11174] loop4: detected capacity change from 0 to 32768
[  264.138682][T11174] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  264.246652][ T8256] (syz-executor,8256,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72
[  264.265307][ T8256] ocfs2: Unmounting device (7,4) on (node local)
[  264.319262][T11191] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1941'.
[  264.322780][T11191] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1941'.
[  264.402898][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1944'.
[  264.406522][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1944'.
[  264.433021][T11195] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(14)
[  264.433747][T11193] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.435702][T11195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  264.439521][T11193] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.445717][T11193] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.450005][T11193] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  264.458224][T11195] vhci_hcd vhci_hcd.0: Device attached
[  264.473939][T11199] netlink: 'syz.4.1942': attribute type 2 has an invalid length.
[  264.483225][T11195] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(16)
[  264.485998][T11195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  264.490438][T11195] vhci_hcd vhci_hcd.0: Device attached
[  264.500104][T11199] : entered promiscuous mode
[  264.508094][T11195] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(18)
[  264.510758][T11195] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  264.513871][T11195] vhci_hcd vhci_hcd.0: Device attached
[  264.530513][T11195] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(20)
[  264.532831][T11195] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  264.554187][T11195] vhci_hcd vhci_hcd.0: Device attached
[  264.569688][T11195] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(22)
[  264.572536][T11195] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  264.597562][T11195] vhci_hcd vhci_hcd.0: Device attached
[  264.609037][T11195] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  264.637544][T11195] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(26)
[  264.640254][T11195] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  264.644978][T11211] loop4: detected capacity change from 0 to 8
[  264.658387][T11195] vhci_hcd vhci_hcd.0: Device attached
[  264.665304][T11195] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  264.684808][T11211] SQUASHFS error: xz decompression failed, data probably corrupt
[  264.690841][T11195] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(32)
[  264.693446][T11195] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  264.696558][T11211] SQUASHFS error: Failed to read block 0xa8: -5
[  264.699729][ T2304] usb 51-1: new low-speed USB device number 2 using vhci_hcd
[  264.720787][T11195] vhci_hcd vhci_hcd.0: Device attached
[  264.730680][T11211] SQUASHFS error: xz decompression failed, data probably corrupt
[  264.740032][T11211] SQUASHFS error: Failed to read block 0xa8: -5
[  264.745659][T11204] vhci_hcd: connection closed
[  264.746403][   T12] vhci_hcd: stop threads
[  264.748862][T11200] vhci_hcd: connection closed
[  264.750260][T11196] vhci_hcd: connection reset by peer
[  264.752254][T11206] vhci_hcd: connection closed
[  264.755757][T11202] vhci_hcd: connection closed
[  264.759529][   T12] vhci_hcd: release socket
[  264.765173][   T33] audit: type=1800 audit(1752295428.855:184): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1947" name="file0" dev="loop4" ino=3 res=0 errno=0
[  264.786909][   T12] vhci_hcd: disconnect device
[  264.801831][T11210] vhci_hcd: connection closed
[  264.804798][   T12] vhci_hcd: stop threads
[  264.818489][   T12] vhci_hcd: release socket
[  264.820780][   T12] vhci_hcd: disconnect device
[  264.823101][   T12] vhci_hcd: stop threads
[  264.824867][   T12] vhci_hcd: release socket
[  264.846167][   T12] vhci_hcd: disconnect device
[  264.867739][   T12] vhci_hcd: stop threads
[  264.869464][   T12] vhci_hcd: release socket
[  264.888776][   T12] vhci_hcd: disconnect device
[  264.893957][   T12] vhci_hcd: stop threads
[  264.895770][   T12] vhci_hcd: release socket
[  264.914098][   T12] vhci_hcd: disconnect device
[  264.920609][   T12] vhci_hcd: stop threads
[  264.922335][   T12] vhci_hcd: release socket
[  264.927750][   T12] vhci_hcd: disconnect device
[  264.932747][T11219] syz.7.1948: attempt to access beyond end of device
[  264.932747][T11219] nbd7: rw=0, sector=6, nr_sectors = 2 limit=0
[  264.948630][T11219] ADFS-fs (nbd7): error: unable to read block 3, try 0
[  265.282687][T11214] vhci_hcd: connection closed
[  265.289221][   T12] vhci_hcd: stop threads
[  265.314390][   T12] vhci_hcd: release socket
[  265.327403][   T12] vhci_hcd: disconnect device
[  265.362713][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1961'.
[  265.397042][T10551] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  265.872516][T10551] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  265.886868][T10551] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  265.891268][T10551] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  265.908630][T10551] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  265.916975][T10551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.920194][T10551] usb 5-1: Product: syz
[  265.921933][T10551] usb 5-1: Manufacturer: syz
[  265.923864][T10551] usb 5-1: SerialNumber: syz
[  265.956527][T10551] usb 5-1: config 0 descriptor??
[  265.962447][T11237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  265.965836][T11237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  265.983018][T10551] usb 5-1: ucan: probing device on interface #0
[  266.429823][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1964'.
[  266.659999][T10551] ucan 5-1:0.0 can0: registered device
[  266.815118][T10551] ucan 5-1:0.0 can0: firmware string: w
[  267.015649][   T47] usb 5-1: USB disconnect, device number 27
[  267.316886][   T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  267.478768][   T24] usb 8-1: Using ep0 maxpacket: 32
[  267.487663][   T24] usb 8-1: config 0 has an invalid interface number: 161 but max is 0
[  267.490821][   T24] usb 8-1: config 0 has no interface number 0
[  267.540654][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1969'.
[  267.543048][   T24] usb 8-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=44.e9
[  267.550136][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.554833][   T24] usb 8-1: Product: syz
[  267.563134][   T24] usb 8-1: Manufacturer: syz
[  267.565019][   T24] usb 8-1: SerialNumber: syz
[  267.593428][   T24] usb 8-1: config 0 descriptor??
[  267.802471][   T24] usb 8-1: USB disconnect, device number 11
[  267.819785][T11285] loop4: detected capacity change from 0 to 8192
[  267.819823][T11293] affs: No valid root block on device nbd9
[  267.867540][ T7578]  loop4: p1 p2 p3
[  267.891949][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1975'.
[  267.895127][T11296] geneve1: entered promiscuous mode
[  267.899113][T11285]  loop4: p1 p2 p3
[  267.904099][T11296] geneve1: entered allmulticast mode
[  267.976023][ T7578] udevd[7578]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  267.978969][ T6545] udevd[6545]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  268.011400][T10588] udevd[10588]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  268.053896][ T6545] udevd[6545]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  268.064974][ T7578] udevd[7578]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  268.067620][T10588] udevd[10588]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  268.284907][T11307] loop4: detected capacity change from 0 to 32768
[  268.293516][T11307] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  268.293516][T11307] members_v2 (size 152):
[  268.293516][T11307] Device:                        0
[  268.293516][T11307]   Label:                       (none)
[  268.293516][T11307]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  268.293516][T11307]   Size:                        0
[  268.293516][T11307]   read errors:                 0
[  268.293516][T11307]   write errors:                0
[  268.293516][T11307]   checksum errors:             0
[  268.293516][T11307]   seqread iops:                0
[  268.293516][T11307]   seqwrite iops:               1048320
[  268.293516][T11307]   randread iops:               0
[  268.293516][T11307]   randwrite iops:              0
[  268.293516][T11307]   Bucket size:                 0
[  268.293516][T11307]   First bucket:                0
[  268.293516][T11307]   Buckets:                     128
[  268.293516][T11307]   Last mount:                  9223372038569457075
[  268.293516][T11307]   Last superblock write:       42
[  268.293516][T11307]   State:                       unknown
[  268.293516][T11307]   Data allowed:                (none)
[  268.293516][T11307]   Has data:                    (none)
[  268.293516][T11307]   Btree allocated bitmap blocksize:256
[  268.293516][T11307]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  268.293516][T11307]   Durability
[  268.293614][T11307] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  268.420949][T11314] sctp: [Deprecated]: syz.7.1981 (pid 11314) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.420949][T11314] Use struct sctp_sack_info instead
[  268.433991][T11316] loop4: detected capacity change from 0 to 128
[  268.453566][T11316] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  268.464421][T11316] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.580790][ T8256] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  268.713640][T11326] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1984'.
[  268.801255][T11330] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  268.920770][ T5895] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  269.187296][ T5895] usb 8-1: Using ep0 maxpacket: 32
[  269.191466][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10
[  269.195812][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024
[  269.200461][ T5895] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  269.203994][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.219082][ T5895] usb 8-1: config 0 descriptor??
[  269.222736][T11321] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  269.227895][ T5895] hub 8-1:0.0: USB hub found
[  269.442378][ T5895] hub 8-1:0.0: 1 port detected
[  269.533413][T11349] loop4: detected capacity change from 0 to 2048
[  269.560061][T11349] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.768936][T11355] netlink: 'syz.4.1995': attribute type 12 has an invalid length.
[  269.807013][ T2304] vhci_hcd: vhci_device speed not set
[  270.305827][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1997'.
[  270.315533][T11363] openvswitch: netlink: nsh attr 0 has unexpected len 2044 expected 0
[  270.323491][T11363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.338601][T10551] usb 8-1: reset high-speed USB device number 12 using dummy_hcd
[  271.006488][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.009792][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.012771][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.015581][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.018848][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.022026][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.024920][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.027945][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.031021][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.033989][T11389] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  271.103951][T11393] binder: 11392:11393 ioctl c0306201 200000000080 returned -14
[  271.157321][   T10] usb 8-1: USB disconnect, device number 12
[  271.215249][T11397] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  271.219765][ T5298] usb usb52-port1: attempt power cycle
[  271.556991][   T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  271.706998][   T10] usb 8-1: Using ep0 maxpacket: 8
[  271.711836][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  271.724152][   T10] usb 8-1: config 7 has an invalid interface number: 142 but max is 0
[  271.732497][   T10] usb 8-1: config 7 has no interface number 0
[  271.739701][   T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  271.755716][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.765902][   T10] usb 8-1: Product: syz
[  271.782125][ T5298] usb usb52-port1: unable to enumerate USB device
[  271.786390][   T10] usb 8-1: Manufacturer: syz
[  271.800102][   T10] usb 8-1: SerialNumber: syz
[  272.025224][   T10] usb 8-1: USB disconnect, device number 13
[  272.139499][T11417] loop9: detected capacity change from 0 to 2048
[  272.194590][T11417] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.226110][T10919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.529956][T11433] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  273.274339][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  273.432453][   T10] usb 5-1: Using ep0 maxpacket: 16
[  273.446984][   T10] usb 5-1: config 0 has an invalid interface number: 203 but max is 0
[  273.458879][   T10] usb 5-1: config 0 has no interface number 0
[  273.463223][   T10] usb 5-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  273.474001][   T10] usb 5-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af
[  273.481041][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.485680][   T10] usb 5-1: Product: syz
[  273.496374][   T10] usb 5-1: Manufacturer: syz
[  273.505254][   T10] usb 5-1: SerialNumber: syz
[  273.528053][   T10] usb 5-1: config 0 descriptor??
[  273.532446][T11463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  273.556834][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  273.755629][    T9] usb 5-1: USB disconnect, device number 28
[  274.468459][T11491] loop4: detected capacity change from 0 to 256
[  274.510402][T11491] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  274.760659][T11504] loop4: detected capacity change from 0 to 2048
[  274.771930][T11504] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  274.781677][T11506] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.785201][T11504] syz.4.2039: attempt to access beyond end of device
[  274.785201][T11504] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  274.810550][T11504] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 16777227
[  274.813503][T11504] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16)
[  274.829911][T11504] Remounting filesystem read-only
[  274.831566][T11504] NILFS (loop4): error -5 truncating bmap (ino=16)
[  274.848763][ T8256] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  275.118882][T11523] netlink: 'syz.4.2046': attribute type 10 has an invalid length.
[  275.122579][T11523] syz_tun: entered promiscuous mode
[  275.139959][T11523] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  275.186326][T11525] capability: warning: `syz.4.2047' uses 32-bit capabilities (legacy support in use)
[  275.327594][ T5870] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  275.492293][ T5870] usb 8-1: Using ep0 maxpacket: 32
[  275.514660][ T5870] usb 8-1: config 0 has an invalid interface number: 126 but max is 0
[  275.521457][   T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  275.526957][   T54] Bluetooth: hci3: Injecting HCI hardware error event
[  275.532976][ T5837] Bluetooth: hci3: hardware error 0x00
[  275.564642][ T5870] usb 8-1: config 0 has no interface number 0
[  275.586252][ T5870] usb 8-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  275.621749][ T5870] usb 8-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  275.684422][ T5870] usb 8-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[  275.706064][ T5870] usb 8-1: config 0 interface 126 has no altsetting 0
[  275.712601][ T5870] usb 8-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  275.716251][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.721702][ T5870] usb 8-1: Product: syz
[  275.723450][ T5870] usb 8-1: Manufacturer: syz
[  275.725307][ T5870] usb 8-1: SerialNumber: syz
[  275.738739][ T5870] usb 8-1: config 0 descriptor??
[  275.742990][T11521] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  276.156106][ T5870] ir_usb 8-1:0.126: IR Dongle converter detected
[  276.359008][ T5870] usb 8-1: IR Dongle converter now attached to ttyUSB0
[  276.559393][ T5870] usb 8-1: USB disconnect, device number 14
[  276.570195][ T5870] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  276.574013][ T5870] ir_usb 8-1:0.126: device disconnected
[  276.630156][T11535] loop4: detected capacity change from 0 to 32768
[  276.978094][   T47] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  277.152169][   T47] usb 5-1: unable to get BOS descriptor or descriptor too short
[  277.160314][   T47] usb 5-1: unable to read config index 0 descriptor/start: -71
[  277.162773][   T47] usb 5-1: can't read configurations, error -71
[  277.172390][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2053'.
[  277.175371][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2053'.
[  277.183976][T11541] netlink: 'syz.7.2053': attribute type 19 has an invalid length.
[  277.362925][T11543] loop7: detected capacity change from 0 to 32768
[  277.440564][T11543] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  277.440578][T11543]   allowing incompatible features above 0.0: (unknown version)
[  277.440583][T11543]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  277.452817][T11543] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  277.455230][T11543] bcachefs (loop7): initializing new filesystem
[  277.464366][T11543] bcachefs (loop7): going read-write
[  277.470292][T11543] bcachefs (loop7): marking superblocks
[  277.493583][T11543] bcachefs (loop7): initializing freespace
[  277.498113][T11543] bcachefs (loop7): done initializing freespace
[  277.502616][T11543] bcachefs (loop7): reading snapshots table
[  277.504857][T11543] bcachefs (loop7): reading snapshots done
[  277.524510][T11543] bcachefs (loop7):  loop7: Superblock write was silently dropped! (seq 0 expected 42)
[  277.530230][T11543] bcachefs (loop7): done starting filesystem
[  277.630819][ T9838] bcachefs (loop7): shutting down
[  277.632402][ T9838] bcachefs (loop7): going read-only
[  277.634010][ T9838] bcachefs (loop7): finished waiting for writes to stop
[  277.639133][ T9838] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  277.662374][ T9838] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  277.666263][ T9838] bcachefs (loop7): clean shutdown complete, journal seq 4
[  277.670673][ T9838] bcachefs (loop7): marking filesystem clean
[  277.716982][ T9838] bcachefs (loop7): shutdown complete
[  277.742923][ T5837] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  278.865101][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'.
[  278.882087][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'.
[  279.376666][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'.
[  279.382963][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'.
[  279.474916][T11583] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2067'.
[  279.479791][T11583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  280.152813][T11606] loop7: detected capacity change from 0 to 1024
[  280.464875][T11610] loop7: detected capacity change from 0 to 1024
[  280.633474][ T1089] hfsplus: b-tree write err: -5, ino 4
[  281.249779][T11624] loop7: detected capacity change from 0 to 128
[  281.252463][T11624] EXT4-fs: Ignoring removed nobh option
[  281.284433][   T33] audit: type=1326 audit(1752295445.375:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab78e929 code=0x7ffc0000
[  281.301661][T11624] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  281.309068][T11624] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  281.312737][   T33] audit: type=1326 audit(1752295445.395:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f26ab78e929 code=0x7ffc0000
[  281.324845][   T33] audit: type=1326 audit(1752295445.395:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab78e929 code=0x7ffc0000
[  281.335599][   T33] audit: type=1326 audit(1752295445.405:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab78e929 code=0x7ffc0000
[  281.356421][   T33] audit: type=1326 audit(1752295445.405:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f26ab78e929 code=0x7ffc0000
[  281.365584][   T33] audit: type=1326 audit(1752295445.405:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab78e929 code=0x7ffc0000
[  281.399655][   T33] audit: type=1326 audit(1752295445.405:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab78e929 code=0x7ffc0000
[  281.406299][   T33] audit: type=1800 audit(1752295445.415:192): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2084" name="file1" dev="loop7" ino=13 res=0 errno=0
[  281.432234][   T33] audit: type=1326 audit(1752295445.425:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f26ab78e929 code=0x7ffc0000
[  281.448691][ T9838] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  281.463453][   T33] audit: type=1326 audit(1752295445.425:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.4.2085" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  281.581657][   T34] INFO: task syz-executor:5831 blocked for more than 143 seconds.
[  281.584906][   T34]       Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0
[  281.599438][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  281.609666][   T34] task:syz-executor    state:D stack:21960 pid:5831  tgid:5831  ppid:1      task_flags:0x400140 flags:0x00004004
[  281.638897][   T34] Call Trace:
[  281.640674][   T34]  <TASK>
[  281.641861][   T34]  __schedule+0x16f5/0x4d00
[  281.643666][   T34]  ? schedule+0x165/0x360
[  281.645388][   T34]  ? __pfx___schedule+0x10/0x10
[  281.648164][   T34]  ? schedule+0x91/0x360
[  281.649882][   T34]  schedule+0x165/0x360
[  281.652109][   T34]  io_schedule+0x80/0xd0
[  281.653829][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  281.655841][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  281.659825][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  281.662267][   T34]  ? folios_put_refs+0x559/0x640
[  281.664241][   T34]  ? __pfx_find_lock_entries+0x10/0x10
[  281.666430][   T34]  __filemap_get_folio+0x139/0xaf0
[  281.669420][   T34]  ? mlock_drain_local+0x28e/0x490
[  281.671388][   T34]  truncate_inode_pages_range+0x3ed/0xda0
[  281.673696][   T34]  ? kasan_save_stack+0x4d/0x60
[  281.675563][   T34]  ? kasan_save_stack+0x3e/0x60
[  281.678532][   T34]  ? deactivate_locked_super+0xbc/0x130
[  281.680747][   T34]  ? cleanup_mnt+0x425/0x4c0
[  281.682560][   T34]  ? task_work_run+0x1d4/0x260
[  281.684632][   T34]  ? exit_to_user_mode_loop+0xec/0x110
[  281.687585][   T34]  ? do_syscall_64+0x2bd/0x3b0
[  281.689454][   T34]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[  281.691849][   T34]  ? __lock_acquire+0xab9/0xd20
[  281.693704][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.695879][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.699707][   T34]  evict+0x517/0x9c0
[  281.701247][   T34]  ? __pfx_evict+0x10/0x10
[  281.703028][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  281.705089][   T34]  evict_inodes+0x636/0x6c0
[  281.712219][   T34]  ? __pfx_evict_inodes+0x10/0x10
[  281.714168][   T34]  generic_shutdown_super+0x9a/0x2c0
[  281.716174][   T34]  kill_block_super+0x44/0x90
[  281.718593][   T34]  deactivate_locked_super+0xbc/0x130
[  281.720660][   T34]  cleanup_mnt+0x425/0x4c0
[  281.722607][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.724708][   T34]  task_work_run+0x1d4/0x260
[  281.726571][   T34]  ? __pfx_task_work_run+0x10/0x10
[  281.730271][   T34]  ? __x64_sys_umount+0x122/0x160
[  281.732311][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  281.734702][   T34]  exit_to_user_mode_loop+0xec/0x110
[  281.739138][   T34]  do_syscall_64+0x2bd/0x3b0
[  281.741017][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.743055][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.745665][   T34]  ? exc_page_fault+0x9f/0xf0
[  281.750596][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.752935][   T34] RIP: 0033:0x7fd19a58fc57
[  281.754750][   T34] RSP: 002b:00007ffe5d7024d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  281.758269][    T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  281.766647][   T34] RAX: 0000000000000000 RBX: 00007fd19a610925 RCX: 00007fd19a58fc57
[  281.770635][   T34] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5d702590
[  281.773552][   T34] RBP: 00007ffe5d702590 R08: 0000000000000000 R09: 0000000000000000
[  281.776023][   T34] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe5d703620
[  281.779631][   T34] R13: 00007fd19a610925 R14: 000000000001db95 R15: 00007ffe5d703660
[  281.782620][   T34]  </TASK>
[  281.784033][   T34] 
[  281.784033][   T34] Showing all locks held in the system:
[  281.788584][   T34] 6 locks held by kworker/0:0/9:
[  281.790174][   T34]  #0: ffff888104ab3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  281.794698][   T34]  #1: ffffc900000c7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  281.800216][   T34]  #2: ffff888021ac3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  281.803750][   T34]  #3: ffff888021ac6510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00
[  281.814074][   T34]  #4: ffff8880219e3768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00
[  281.819149][   T34]  #5: ffffffff8eddbfd0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750
[  281.823048][   T34] 1 lock held by khungtaskd/34:
[  281.824604][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  281.828820][   T34] 3 locks held by kworker/1:1/47:
[  281.830456][   T34] 1 lock held by udevd/5280:
[  281.831920][   T34] 2 locks held by getty/5658:
[  281.833520][   T34]  #0: ffff88810ab990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  281.836544][   T34]  #1: ffffc900029132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  281.841432][   T34] 1 lock held by syz-executor/5831:
[  281.843123][   T34]  #0: ffff888028cee0e0 (&type->s_umount_key#79){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[  281.847891][   T34] 1 lock held by udevd/5842:
[  281.849659][   T34]  #0: ffff888020420358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  281.852969][   T34] 2 locks held by kworker/u10:46/6893:
[  281.854563][   T34]  #0: ffff888136639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  281.861166][   T34]  #1: ffff888136623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x314/0x6d0
[  281.865055][   T34] 2 locks held by syz.0.1328/9380:
[  281.866692][   T34]  #0: ffff8881088780e0 (&type->s_umount_key#113/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970
[  281.870434][   T34]  #1: ffff888020420358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  281.873857][   T34] 1 lock held by syz.2.1417/9588:
[  281.875666][   T34]  #0: ffff888028cee0e0 (&type->s_umount_key#79){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  281.879604][   T34] 1 lock held by syz.6.1597/10199:
[  281.881641][   T34]  #0: ffff888028cee0e0 (&type->s_umount_key#79){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  281.885653][   T34] 1 lock held by syz.9.2034/11470:
[  281.889264][   T34]  #0: ffff888028cee0e0 (&type->s_umount_key#79){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  281.892805][   T34] 1 lock held by syz.9.2034/11475:
[  281.894773][   T34]  #0: ffff888028cee0e0 (&type->s_umount_key#79){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  281.899472][   T34] 
[  281.900444][   T34] =============================================
[  281.900444][   T34] 
[  281.903659][   T34] NMI backtrace for cpu 0
[  281.903670][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  281.903685][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.903694][   T34] Call Trace:
[  281.903701][   T34]  <TASK>
[  281.903707][   T34]  dump_stack_lvl+0x189/0x250
[  281.903729][   T34]  ? __wake_up_klogd+0xd9/0x110
[  281.903748][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.903762][   T34]  ? __pfx__printk+0x10/0x10
[  281.903790][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  281.903811][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  281.903827][   T34]  ? _printk+0xcf/0x120
[  281.903847][   T34]  ? __pfx__printk+0x10/0x10
[  281.903866][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  281.903881][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  281.903902][   T34]  watchdog+0xfee/0x1030
[  281.903917][   T34]  ? watchdog+0x1de/0x1030
[  281.903936][   T34]  kthread+0x711/0x8a0
[  281.903959][   T34]  ? __pfx_watchdog+0x10/0x10
[  281.903971][   T34]  ? __pfx_kthread+0x10/0x10
[  281.903990][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.904010][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.904029][   T34]  ? __pfx_kthread+0x10/0x10
[  281.904049][   T34]  ret_from_fork+0x3fc/0x770
[  281.904066][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  281.904112][   T34]  ? __switch_to_asm+0x39/0x70
[  281.904128][   T34]  ? __switch_to_asm+0x33/0x70
[  281.904145][   T34]  ? __pfx_kthread+0x10/0x10
[  281.904164][   T34]  ret_from_fork_asm+0x1a/0x30
[  281.904194][   T34]  </TASK>
[  281.904200][   T34] Sending NMI from CPU 0 to CPUs 1:
[  281.963026][    C1] NMI backtrace for cpu 1
[  281.963041][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  281.963067][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.963073][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  281.963093][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 fd 18 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  281.963100][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  281.963107][    C1] RAX: 461c176d20513800 RBX: ffffffff81976c78 RCX: 461c176d20513800
[  281.963113][    C1] RDX: 0000000000000001 RSI: ffffffff8d998aa4 RDI: ffffffff8be29dc0
[  281.963118][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  281.963124][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1f3f0
[  281.963129][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001d000
[  281.963134][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  281.963140][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.963145][    C1] CR2: 0000001b2f41bff8 CR3: 000000010e5e6000 CR4: 00000000000006f0
[  281.963168][    C1] Call Trace:
[  281.963174][    C1]  <TASK>
[  281.963178][    C1]  default_idle+0x13/0x20
[  281.963187][    C1]  default_idle_call+0x74/0xb0
[  281.963197][    C1]  do_idle+0x1e8/0x510
[  281.963208][    C1]  ? __pfx_do_idle+0x10/0x10
[  281.963221][    C1]  cpu_startup_entry+0x44/0x60
[  281.963229][    C1]  start_secondary+0x101/0x110
[  281.963238][    C1]  common_startup_64+0x13e/0x147
[  281.963254][    C1]  </TASK>
[  281.965995][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  282.028208][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  282.032165][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.035873][   T34] Call Trace:
[  282.036938][   T34]  <TASK>
[  282.037877][   T34]  dump_stack_lvl+0x99/0x250
[  282.039347][   T34]  ? __asan_memcpy+0x40/0x70
[  282.040847][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.042511][   T34]  ? __pfx__printk+0x10/0x10
[  282.043967][   T34]  panic+0x2db/0x790
[  282.045243][   T34]  ? __pfx_panic+0x10/0x10
[  282.046930][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  282.049172][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  282.051261][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  282.053687][   T34]  watchdog+0x102d/0x1030
[  282.055134][   T34]  ? watchdog+0x1de/0x1030
[  282.056726][   T34]  kthread+0x711/0x8a0
[  282.058235][   T34]  ? __pfx_watchdog+0x10/0x10
[  282.059855][   T34]  ? __pfx_kthread+0x10/0x10
[  282.061469][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  282.063023][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.064625][   T34]  ? __pfx_kthread+0x10/0x10
[  282.066229][   T34]  ret_from_fork+0x3fc/0x770
[  282.068075][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  282.069832][   T34]  ? __switch_to_asm+0x39/0x70
[  282.071790][   T34]  ? __switch_to_asm+0x33/0x70
[  282.073721][   T34]  ? __pfx_kthread+0x10/0x10
[  282.075562][   T34]  ret_from_fork_asm+0x1a/0x30
[  282.077494][   T34]  </TASK>
[  282.079428][   T34] Kernel Offset: disabled
[  282.080771][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:44:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888108690237 R9 =1ffff110210d2046 R10=dffffc0000000000 R11=ffffffff85478e30
R12=dffffc0000000000 R13=ffffffff99af98da R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478eac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f41eff8 CR3=0000000040198000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f1488e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000080000000 RDX=0000000000000001
RSI=ffffffff8db86617 RDI=ffffffff8be29dc0 RBP=ffffffff8172aae5 RSP=ffffc9000260f260
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc9000260f458 R11=ffffffff81ad03a0
R12=0000000000000002 R13=ffffffff8e13f160 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8b6f525c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb380725380 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6254cc10fb CR3=00000000290a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
