last executing test programs:

1m48.031629885s ago: executing program 0 (id=739):
r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/189, 0xbd}, {0x0}], 0x2, 0x6, 0x6)

1m47.958755285s ago: executing program 0 (id=740):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x2, 0xf5d, &(0x7f0000000f00)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)

1m47.850328631s ago: executing program 0 (id=741):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012)

1m46.946343855s ago: executing program 0 (id=755):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
write$ppp(r0, &(0x7f00000002c0)="37bd", 0x2)

1m46.781984815s ago: executing program 0 (id=759):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, 0x0)

1m46.621174418s ago: executing program 0 (id=765):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4004014}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20)

1m46.479800082s ago: executing program 32 (id=765):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4004014}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20)

1m16.329179946s ago: executing program 1 (id=1168):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x5b76f000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000800)="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", 0x226}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319", 0x51}], 0x3}, 0x0)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0)
close(r0)

1m15.775787879s ago: executing program 1 (id=1182):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000001d711867000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m15.701949159s ago: executing program 1 (id=1184):
r0 = userfaultfd(0x1)
r1 = epoll_create1(0x0)
epoll_pwait2(r1, &(0x7f0000000480)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa})

1m15.565229424s ago: executing program 1 (id=1189):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1m15.180021483s ago: executing program 1 (id=1195):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000680)={0x20, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m14.490092035s ago: executing program 1 (id=1207):
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

1m14.387852547s ago: executing program 33 (id=1207):
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

41.109560923s ago: executing program 2 (id=1636):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000040)=[{0x6, 0xe, 0x7f, 0x2003}]})
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
io_uring_enter(r0, 0x2003516, 0x0, 0x0, 0x0, 0x0)

40.209340052s ago: executing program 2 (id=1642):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_dev$evdev(&(0x7f0000002f80), 0x3, 0x484000)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

40.148732895s ago: executing program 2 (id=1644):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

40.049450589s ago: executing program 2 (id=1645):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

39.990965865s ago: executing program 2 (id=1646):
r0 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c)

39.67949481s ago: executing program 2 (id=1650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001"], 0x23c}}, 0x0)

39.60547626s ago: executing program 34 (id=1650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001"], 0x23c}}, 0x0)

31.400291803s ago: executing program 5 (id=1778):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

31.326896489s ago: executing program 5 (id=1779):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x4e21, @multicast2}, {0x1, @remote}, 0x2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 'vlan0\x00'})

31.326624109s ago: executing program 5 (id=1780):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x8000005, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x0)

31.258417479s ago: executing program 5 (id=1782):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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")
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2901003, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

31.228209723s ago: executing program 5 (id=1784):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb6}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

30.500528466s ago: executing program 5 (id=1793):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80)

30.382491731s ago: executing program 35 (id=1793):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80)

2.162317126s ago: executing program 6 (id=2122):
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0xe0}, 0xfffffffa}, 0x1c)

1.18974185s ago: executing program 6 (id=2135):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.138944339s ago: executing program 6 (id=2137):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@discard}, {@discard}, {}, {@errors_remount}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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")
open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70)

1.033296416s ago: executing program 6 (id=2139):
set_mempolicy(0x1, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})

939.050316ms ago: executing program 6 (id=2144):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0)

855.363845ms ago: executing program 6 (id=2145):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000a81000000ff"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="400821000000c468545f4745a0a639235d52eab5"], 0x0, 0x0})

296.776255ms ago: executing program 3 (id=2155):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)

296.351516ms ago: executing program 4 (id=2156):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

295.729621ms ago: executing program 3 (id=2157):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448dc, 0x0)

229.996985ms ago: executing program 3 (id=2158):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)

169.677077ms ago: executing program 3 (id=2159):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x681cb})

169.28289ms ago: executing program 3 (id=2160):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000300)=""/246, 0xf6, 0x0)

119.374884ms ago: executing program 4 (id=2161):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x60}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="c6", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c)

118.90154ms ago: executing program 3 (id=2162):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0), &(0x7f0000000440)={0x0, 0xfb, 0x15, 0x0, 0x2, "59cab2960c47180beb5e73fb3badc390"}, 0x15, 0x2)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000040)=0xb2b9, 0x4)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000280)=@req3={0x59, 0x249, 0x9f, 0xffffffff, 0x27, 0x8, 0x9}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0100001000130429bd7000000000000000000000000000000000000000000020010000000000000000000000000000000000004e2400000200002021000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a00000032000000e00000010000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff2000080000000000000000000200048168000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
iopl(0x9)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

60.114601ms ago: executing program 4 (id=2163):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000010003000800000001"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

59.846524ms ago: executing program 4 (id=2164):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000})
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x8)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})

358.673µs ago: executing program 4 (id=2165):
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4800)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}]}}}}}}}, 0x0)

0s ago: executing program 4 (id=2166):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
setxattr$system_posix_acl(&(0x7f00000000c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0)

kernel console output (not intermixed with test programs):

t multicast query interval above maximum, setting to 8640000 (86400000ms)
[  128.787655][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  128.960889][   T24] usb 4-1: Using ep0 maxpacket: 16
[  128.969401][   T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  128.971999][   T24] usb 4-1: config 0 has no interface number 0
[  128.982681][   T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  128.985716][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.996814][   T24] usb 4-1: Product: syz
[  128.998395][   T24] usb 4-1: Manufacturer: syz
[  129.000042][   T24] usb 4-1: SerialNumber: syz
[  129.004306][   T24] usb 4-1: config 0 descriptor??
[  129.008872][   T24] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  129.158754][ T8026] loop2: detected capacity change from 0 to 32768
[  129.170906][ T8026] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.186038][ T8026] XFS (loop2): Ending clean mount
[  129.199000][ T8026] XFS (loop2): Quotacheck needed: Please wait.
[  129.234465][ T8026] XFS (loop2): Quotacheck: Done.
[  129.291263][ T5842] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.744369][ T5233] Bluetooth: hci0: command tx timeout
[  129.915618][   T24] gspca_spca1528: reg_w err -71
[  129.938352][   T24] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  129.942957][   T24] usb 4-1: USB disconnect, device number 2
[  129.959489][ T8045] netlink: 'syz.1.854': attribute type 4 has an invalid length.
[  130.083504][ T8049] loop1: detected capacity change from 0 to 8192
[  130.087025][ T8049] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  130.091123][ T8049] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  130.093985][ T8049] ntfs3(loop1): Failed to load $LogFile (-22).
[  130.181506][ T8051] loop1: detected capacity change from 0 to 8192
[  130.204853][ T8051] FAT-fs (loop1): error, clusters badly computed (2 != 1)
[  130.207653][ T8051] FAT-fs (loop1): Filesystem has been set read-only
[  130.393066][ T8061] No source specified
[  130.522996][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'.
[  131.213569][   T33] audit: type=1326 audit(1757359463.551:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.230722][   T33] audit: type=1326 audit(1757359463.551:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.240428][   T33] audit: type=1326 audit(1757359463.551:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.249759][ T8106] misc userio: Invalid payload size
[  131.256207][   T33] audit: type=1326 audit(1757359463.551:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.265098][   T33] audit: type=1326 audit(1757359463.551:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.285142][   T33] audit: type=1326 audit(1757359463.551:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.294117][   T33] audit: type=1326 audit(1757359463.551:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.310891][   T33] audit: type=1326 audit(1757359463.551:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.318219][   T33] audit: type=1326 audit(1757359463.551:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.325228][   T33] audit: type=1326 audit(1757359463.551:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x50000
[  131.365356][ T8109] loop3: detected capacity change from 0 to 2048
[  131.407977][ T8109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.461642][ T7807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.579482][ T8128] ubi31: attaching mtd0
[  131.582239][ T8128] ubi31 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72)
[  131.777507][ T5233] Bluetooth: hci0: command tx timeout
[  131.887403][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  132.049429][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.055502][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.059583][ T5888] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  132.065362][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.072850][ T5888] usb 4-1: config 0 descriptor??
[  132.486954][ T5888] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  132.492145][ T5888] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  132.499161][ T5888] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0008/input/input10
[  132.519766][ T5888] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  132.534615][ T8141] loop2: detected capacity change from 0 to 1764
[  132.547133][ T8141] ISOFS: Unable to identify CD-ROM format.
[  132.700003][ T5749] usb 4-1: USB disconnect, device number 3
[  132.754223][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.452244][ T8169] loop1: detected capacity change from 0 to 32768
[  133.455024][ T8169] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  133.555303][ T8173] loop3: detected capacity change from 0 to 164
[  133.640433][ T5910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.668304][ T8174] loop1: detected capacity change from 0 to 4096
[  133.672809][ T8174] ntfs3: Unknown parameter ''
[  133.865433][ T5233] Bluetooth: hci0: command tx timeout
[  133.915811][ T5910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.523796][ T5910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.812753][ T5910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.073934][ T8194] loop2: detected capacity change from 0 to 512
[  135.079197][ T5910] bridge_slave_1: left allmulticast mode
[  135.079410][ T8194] EXT4-fs: Ignoring removed nobh option
[  135.081870][ T5910] bridge_slave_1: left promiscuous mode
[  135.089859][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.090062][ T8194] EXT4-fs (loop2): Test dummy encryption mode enabled
[  135.106984][ T5910] bridge_slave_0: left allmulticast mode
[  135.109883][ T5910] bridge_slave_0: left promiscuous mode
[  135.110308][ T8194] EXT4-fs error (device loop2): __ext4_iget:5464: inode #11: block 1: comm syz.2.920: invalid block
[  135.112105][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.116885][ T8194] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.920: couldn't read orphan inode 11 (err -117)
[  135.126403][ T8194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.226355][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.454664][ T8200] loop2: detected capacity change from 0 to 512
[  135.471113][ T8200] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  135.476436][ T8200] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  135.527558][ T8200] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  135.540590][ T8200] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  135.544035][ T8200] System zones: 0-2, 18-18, 34-35
[  135.554514][ T8200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.632790][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.676115][ T8206] loop1: detected capacity change from 0 to 1764
[  135.705517][ T8206] iso9660: Corrupted directory entry in block 2 of inode 1920
[  135.845128][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'.
[  136.152682][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.176012][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.182531][ T5910] bond0 (unregistering): Released all slaves
[  136.201672][ T8217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.238440][ T8217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.281448][ T8223] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  136.295121][ T8223] batman_adv: batadv0: Adding interface: gretap1
[  136.299176][ T8223] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.312049][ T8223] batman_adv: batadv0: Interface activated: gretap1
[  136.315482][ T5910] tipc: Left network mode
[  136.689325][ T5910] hsr_slave_0: left promiscuous mode
[  136.692076][ T5910] hsr_slave_1: left promiscuous mode
[  136.694580][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.699676][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.713339][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.716541][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.728598][ T5910] batman_adv: batadv0: Interface deactivated: ipvlan2
[  136.731546][ T5910] batman_adv: batadv0: Removing interface: ipvlan2
[  136.768707][ T5910] veth1_macvtap: left promiscuous mode
[  136.771497][ T5910] veth0_macvtap: left promiscuous mode
[  136.773964][ T5910] veth1_vlan: left promiscuous mode
[  136.776478][ T5910] veth0_vlan: left promiscuous mode
[  136.783930][ T8229] loop1: detected capacity change from 0 to 32768
[  136.788341][ T8229] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.933 (8229)
[  136.799927][ T8229] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.804463][ T8229] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  136.860086][ T8229] BTRFS info (device loop1): enabling ssd optimizations
[  136.863224][ T8229] BTRFS info (device loop1): enabling free space tree
[  136.998546][ T5749] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  137.003743][ T5848] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.150376][ T5749] usb 3-1: Using ep0 maxpacket: 8
[  137.154266][ T5749] usb 3-1: config 0 has an invalid interface number: 122 but max is 0
[  137.168436][ T5749] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.173098][ T5749] usb 3-1: config 0 has no interface number 0
[  137.175669][ T5749] usb 3-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  137.199997][ T5749] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  137.204058][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.211170][ T5749] usb 3-1: Product: syz
[  137.213035][ T5749] usb 3-1: Manufacturer: syz
[  137.214926][ T5749] usb 3-1: SerialNumber: syz
[  137.220154][ T5749] usb 3-1: config 0 descriptor??
[  137.340352][ T8263] comedi comedi0: rti802: I/O port conflict (0xfffffffffffffbff,4)
[  137.443330][ T5749] usb 3-1: NFC: intf ffff888035737000 id ffffffff8ed58940
[  137.450061][ T5749] usb 3-1: USB disconnect, device number 8
[  137.496371][ T5910] team0 (unregistering): Port device team_slave_1 removed
[  137.502859][ T8269] loop3: detected capacity change from 0 to 4096
[  137.509909][ T8269] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  137.530896][ T5910] team0 (unregistering): Port device team_slave_0 removed
[  138.233688][ T5910] IPVS: stop unused estimator thread 0...
[  138.513552][ T8271] syz.3.946 (8271): drop_caches: 2
[  138.749285][ T8306] loop2: detected capacity change from 0 to 128
[  138.753890][ T8306] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  138.765879][ T8306] hpfs: filesystem error: improperly stopped
[  138.768889][ T8306] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  138.772127][ T8306] hpfs: You really don't want any checks? You are crazy...
[  138.785372][ T8306] hpfs: hpfs_map_sector(): read error
[  138.793495][ T8306] hpfs: code page support is disabled
[  138.797170][ T8306] hpfs: hpfs_map_sector(): read error
[  138.801702][ T8306] hpfs: hpfs_map_sector(): read error
[  138.803941][ T8306] hpfs: filesystem error: unable to find root dir
[  138.877690][ T8313] loop2: detected capacity change from 0 to 512
[  138.881914][ T8313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  138.902998][ T8313] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  138.906892][ T8313] System zones: 0-2, 18-18, 34-34
[  138.917606][ T8313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.922992][ T8313] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.072331][ T8313] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  139.080324][ T8313] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 3 with max blocks 16 with error 28
[  139.085458][ T8313] EXT4-fs (loop2): This should not happen!! Data will be lost
[  139.085458][ T8313] 
[  139.089460][ T8313] EXT4-fs (loop2): Total free blocks count 0
[  139.092119][ T8313] EXT4-fs (loop2): Free/Dirty block details
[  139.096093][ T8313] EXT4-fs (loop2): free_blocks=39626
[  139.101255][ T8313] EXT4-fs (loop2): dirty_blocks=16
[  139.103503][ T8313] EXT4-fs (loop2): Block reservation details
[  139.106270][ T8313] EXT4-fs (loop2): i_reserved_data_blocks=16
[  139.535764][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.788810][ T8333] loop2: detected capacity change from 0 to 47
[  139.806043][ T8333] syz.2.969: attempt to access beyond end of device
[  139.806043][ T8333] loop2: rw=1, sector=48, nr_sectors = 2 limit=47
[  139.811519][ T8333] Buffer I/O error on dev loop2, logical block 24, lost async page write
[  139.815129][ T8333] syz.2.969: attempt to access beyond end of device
[  139.815129][ T8333] loop2: rw=1, sector=50, nr_sectors = 2 limit=47
[  139.821645][ T8333] Buffer I/O error on dev loop2, logical block 25, lost async page write
[  139.933917][   T33] kauditd_printk_skb: 63 callbacks suppressed
[  139.934006][   T33] audit: type=1326 audit(1757359472.271:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.3.973" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd536d8ebe9 code=0x0
[  140.205521][ T8344] loop3: detected capacity change from 0 to 32768
[  140.216737][ T8344] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 76: suballoc slot 3
[  140.223886][ T8344] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  140.228165][ T8344] OCFS2: Returning error to the calling process.
[  140.230848][ T8344] (syz.3.974,8344,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  140.234397][ T8344] (syz.3.974,8344,0):_ocfs2_get_system_file_inode:141 ERROR: status = -5
[  140.238474][ T8344] (syz.3.974,8344,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=11, slot=0
[  140.242825][ T8344] (syz.3.974,8344,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  140.246541][ T8344] (syz.3.974,8344,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  140.252726][ T8344] (syz.3.974,8344,0):ocfs2_fill_super:1177 ERROR: status = -22
[  140.715259][ T8367] batman_adv: batadv0: Adding interface: dummy0
[  140.727198][ T8367] batman_adv: batadv0: Interface activated: dummy0
[  140.759521][ T8367] batadv0: mtu less than device minimum
[  140.763384][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.769210][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.774718][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.780185][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.785672][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.791445][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.796979][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.802829][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.805896][ T8375] netlink: 'syz.3.987': attribute type 10 has an invalid length.
[  140.808454][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  140.858364][ T8375] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  140.866051][ T8375] netlink: 'syz.3.987': attribute type 10 has an invalid length.
[  141.072862][ T5233] Bluetooth: hci1: ACL packet too small
[  141.736186][ T8394] bridge2: entered promiscuous mode
[  141.913505][ T8396] netlink: 100 bytes leftover after parsing attributes in process `syz.1.997'.
[  142.456665][ T8408] loop2: detected capacity change from 0 to 1024
[  142.456875][ T8409] evm: overlay not supported
[  142.582771][   T26] hfsplus: b-tree write err: -5, ino 4
[  143.380082][ T8433] loop3: detected capacity change from 0 to 512
[  143.391680][ T8433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  143.416649][ T8433] EXT4-fs (loop3): 1 truncate cleaned up
[  143.420933][ T8433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.474922][ T7807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.787670][ T8455] 9pnet_fd: p9_fd_create_unix (8455): problem connecting socket: ./file0: -5
[  144.995601][ T5233] Bluetooth: hci0: unexpected cc 0x0809 length: 31 > 4
[  145.097253][ T8508] loop2: detected capacity change from 0 to 1024
[  145.125037][ T8508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.186687][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.310710][ T8529] netlink: 'syz.3.1053': attribute type 11 has an invalid length.
[  145.339029][ T8531] loop1: detected capacity change from 0 to 128
[  145.350676][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'.
[  145.363010][ T8531] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  145.372358][ T8531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.592118][ T8548] netlink: 'syz.3.1058': attribute type 1 has an invalid length.
[  145.595682][ T8548] netlink: 'syz.3.1058': attribute type 2 has an invalid length.
[  145.892210][   T33] audit: type=1326 audit(1757359478.231:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.1.1067" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x0
[  145.939777][ T8561] loop2: detected capacity change from 0 to 2048
[  145.952464][ T8561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.555280][ T8566] loop3: detected capacity change from 0 to 40427
[  146.561545][ T8566] F2FS-fs (loop3): build fault injection rate: 14
[  146.564462][ T8566] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  146.569339][ T8566] F2FS-fs (loop3): invalid crc value
[  146.573243][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  146.585070][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  146.635574][ T8566] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  146.639636][ T8566] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  146.645819][ T8566] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  146.690410][ T8566] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  146.698107][ T8566] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  146.703266][ T8566] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  146.720684][ T8566] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  146.782682][ T7807] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  146.789507][ T7807] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  146.814700][    C1] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  146.819396][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  146.819415][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.819422][    C1] Call Trace:
[  146.819427][    C1]  <TASK>
[  146.819433][    C1]  dump_stack_lvl+0x189/0x250
[  146.819456][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.819470][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  146.819489][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.819506][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.819523][    C1]  ? f2fs_hw_is_readonly+0x39b/0x470
[  146.819542][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  146.819560][    C1]  f2fs_write_end_io+0x886/0xb60
[  146.819588][    C1]  blk_update_request+0x57e/0xe60
[  146.819612][    C1]  blk_mq_end_request+0x3e/0x70
[  146.819626][    C1]  blk_flush_complete_seq+0x678/0xcc0
[  146.819647][    C1]  flush_end_io+0xbaf/0xe60
[  146.819668][    C1]  __blk_mq_end_request+0x46a/0x630
[  146.819684][    C1]  blk_done_softirq+0x10a/0x160
[  146.819698][    C1]  handle_softirqs+0x286/0x870
[  146.819719][    C1]  ? run_ksoftirqd+0x9b/0x100
[  146.819733][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  146.819752][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.819771][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.819786][    C1]  run_ksoftirqd+0x9b/0x100
[  146.819797][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  146.819813][    C1]  smpboot_thread_fn+0x542/0xa60
[  146.819858][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.819880][    C1]  kthread+0x711/0x8a0
[  146.819896][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  146.819918][    C1]  ? __pfx_kthread+0x10/0x10
[  146.819931][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.819947][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.819962][    C1]  ? __pfx_kthread+0x10/0x10
[  146.819973][    C1]  ret_from_fork+0x47f/0x820
[  146.819992][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  146.820013][    C1]  ? __switch_to_asm+0x39/0x70
[  146.820027][    C1]  ? __switch_to_asm+0x33/0x70
[  146.820041][    C1]  ? __pfx_kthread+0x10/0x10
[  146.820054][    C1]  ret_from_fork_asm+0x1a/0x30
[  146.820080][    C1]  </TASK>
[  146.820085][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  146.931895][ T7807] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint
[  147.045001][ T8578] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  147.293636][ T8591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1071'.
[  147.327719][ T8591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1071'.
[  147.359282][    T9] libceph: connect (1)[c::]:6789 error -101
[  147.364023][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  147.372264][    T9] libceph: connect (1)[c::]:6789 error -101
[  147.375736][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  147.506939][   T33] audit: type=1326 audit(1757359479.841:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.1.1083" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c5c18ebe9 code=0x0
[  147.561112][ T8597] ceph: No mds server is up or the cluster is laggy
[  148.068430][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  148.115424][ T8613] loop2: detected capacity change from 0 to 32768
[  148.119573][ T8613] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  148.119573][ T8613] clean (size 2912):
[  148.119573][ T8613] flags:          0
[  148.119573][ T8613] journal_seq:    8
[  148.119573][ T8613] prio_ptrs: 
[  148.119573][ T8613] usage: type=key_version v=0
[  148.119573][ T8613] usage: type=reserved v=0
[  148.119573][ T8613] usage: type=reserved v=0
[  148.119573][ T8613] usage: type=reserved v=0
[  148.119573][ T8613] usage: type=reserved v=0
[  148.119573][ T8613] data_usage: btree: 1/1 [0]=2816
[  148.119573][ T8613] data_usage: journal: 1/1 [0]=0
[  148.119573][ T8613] data_usage: user: 1/1 [0]=32
[  148.119573][ T8613] dev_usage: dev=0  
[  148.119573][ T8613]   free: buckets=83 sectors=0 fragmented=0
[  148.119573][ T8613]   sb: buckets=25 sectors=6152 fragmented=248
[  148.119573][ T8613]   journal: buckets=8 sectors=2048 fragmented=0
[  148.119573][ T8613]   btree: buckets=11 sectors=2816 fragmented=0
[  148.119573][ T8613]   user: buckets=1 sectors=32 fragmented=224
[  148.119573][ T8613]   cached: buckets=0 sectors=0 fragmented=0
[  148.119573][ T8613]   parity: buckets=0 sectors=0 fragmented=0
[  148.119573][ T8613]   stripe: buckets=0 sectors=0 fragmented=0
[  148.119573][ T8613]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  148.119573][ T8613]   need_discard: buckets=0 sectors=0 fragmented=0
[  148.119573][ T8613] clock: read=0
[  148.119573][ T8613] clock: write=1288
[  148.119573][ T8613] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  148.119667][ T8613] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  148.258461][   T24] usb 2-1: Using ep0 maxpacket: 16
[  148.263770][   T24] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  148.264119][ T8615] usb usb1: usbfs: process 8615 (syz.2.1090) did not claim interface 0 before use
[  148.271462][   T24] usb 2-1: config 1 has no interface number 0
[  148.271508][   T24] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  148.271523][   T24] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  148.271537][   T24] usb 2-1: config 1 interface 105 has no altsetting 0
[  148.281626][   T24] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  148.292860][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.296400][   T24] usb 2-1: Product: syz
[  148.299787][   T24] usb 2-1: Manufacturer: syz
[  148.302063][   T24] usb 2-1: SerialNumber: syz
[  148.311132][ T8609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  148.314619][ T8609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  148.353745][ T8621] sctp: [Deprecated]: syz.3.1092 (pid 8621) Use of int in max_burst socket option.
[  148.353745][ T8621] Use struct sctp_assoc_value instead
[  148.402514][ T8623] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  148.410956][   T33] audit: type=1326 audit(1757359480.751:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.3.1094" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd536d8ebe9 code=0x0
[  148.530045][   T24] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71
[  148.545418][   T24] usb 2-1: USB disconnect, device number 11
[  148.665714][ T8640] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  148.732389][ T8645] netlink: 848 bytes leftover after parsing attributes in process `syz.2.1103'.
[  149.105547][ T8656] sctp: [Deprecated]: syz.1.1108 (pid 8656) Use of int in maxseg socket option.
[  149.105547][ T8656] Use struct sctp_assoc_value instead
[  149.151414][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'.
[  149.310261][ T8666] tmpfs: Bad value for 'nr_inodes'
[  149.400648][ T8670] vxcan1 speed is unknown, defaulting to 1000
[  149.571325][ T8672] loop3: detected capacity change from 0 to 32768
[  149.579253][ T8672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1116 (8672)
[  149.587455][ T8672] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.591612][ T8672] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  149.736752][ T8672] BTRFS info (device loop3): enabling ssd optimizations
[  149.740054][ T8672] BTRFS info (device loop3): enabling free space tree
[  149.851932][ T5910] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  149.858567][ T7807] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.171713][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'.
[  150.631595][ T8719] loop2: detected capacity change from 0 to 128
[  150.641174][ T8719] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  150.650829][ T8719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.810612][ T8714] loop1: detected capacity change from 0 to 16384
[  151.110924][ T8714] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,prjquota,degraded=yes,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none
[  151.112592][ T8714]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  151.133449][ T8714] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  151.149569][ T8714] bcachefs (loop1): recovering from clean shutdown, journal seq 18
[  151.154358][ T8714] bcachefs (loop1): dropping and reconstructing all alloc info
[  151.294430][ T8736] loop2: detected capacity change from 0 to 40427
[  151.295548][ T8714] bcachefs (loop1): accounting_read... done
[  151.305411][ T8714] bcachefs (loop1): alloc_read... done
[  151.312198][ T8736] F2FS-fs (loop2): invalid crc value
[  151.314333][ T8714] bcachefs (loop1): snapshots_read... done
[  151.318638][ T8714] bcachefs (loop1): reading quotas
[  151.332255][ T8714] bcachefs (loop1): quotas done
[  151.343791][ T8714] bcachefs (loop1): done starting filesystem
[  151.497175][ T8736] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  151.507067][ T5848] bcachefs (loop1): shutting down
[  151.511216][ T8736] F2FS-fs (loop2): Start checkpoint disabled!
[  151.547906][ T8736] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  151.555424][ T8736] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  151.573021][ T5848] bcachefs (loop1): shutdown complete
[  151.695368][ T8736] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  151.750604][   T26] kworker/u9:0: attempt to access beyond end of device
[  151.750604][   T26] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  151.757658][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  151.757674][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.757680][   T26] Workqueue: writeback wb_workfn (flush-7:2)
[  151.757717][   T26] Call Trace:
[  151.757722][   T26]  <TASK>
[  151.757727][   T26]  dump_stack_lvl+0x189/0x250
[  151.757741][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.757778][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  151.757790][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  151.757801][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  151.757815][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  151.757828][   T26]  f2fs_write_end_io+0x886/0xb60
[  151.757846][   T26]  __submit_merged_bio+0x27a/0x6a0
[  151.757858][   T26]  __submit_merged_write_cond+0x255/0x530
[  151.757871][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  151.757894][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  151.757934][   T26]  ? f2fs_write_meta_pages+0x357/0x450
[  151.757948][   T26]  ? __lock_acquire+0xab9/0xd20
[  151.757960][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  151.757971][   T26]  do_writepages+0x32e/0x550
[  151.757983][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  151.757994][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  151.758006][   T26]  __writeback_single_inode+0x145/0xff0
[  151.758015][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  151.758025][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  151.758044][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  151.758068][   T26]  ? rcu_is_watching+0x15/0xb0
[  151.758089][   T26]  wb_writeback+0x43b/0xaf0
[  151.758101][   T26]  ? queue_io+0x341/0x590
[  151.758110][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  151.758122][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.758133][   T26]  wb_workfn+0x409/0xef0
[  151.758150][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  151.758163][   T26]  ? __lock_acquire+0xab9/0xd20
[  151.758177][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  151.758190][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.758199][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  151.758209][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  151.758220][   T26]  process_scheduled_works+0xae1/0x17b0
[  151.758241][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  151.758259][   T26]  worker_thread+0x8a0/0xda0
[  151.758280][   T26]  kthread+0x711/0x8a0
[  151.758290][   T26]  ? __pfx_worker_thread+0x10/0x10
[  151.758300][   T26]  ? __pfx_kthread+0x10/0x10
[  151.758308][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.758318][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.758328][   T26]  ? __pfx_kthread+0x10/0x10
[  151.758336][   T26]  ret_from_fork+0x47f/0x820
[  151.758348][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  151.758362][   T26]  ? __switch_to_asm+0x39/0x70
[  151.758371][   T26]  ? __switch_to_asm+0x33/0x70
[  151.758379][   T26]  ? __pfx_kthread+0x10/0x10
[  151.758388][   T26]  ret_from_fork_asm+0x1a/0x30
[  151.758404][   T26]  </TASK>
[  151.758479][   T26] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  151.876513][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  151.876535][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.876544][   T26] Workqueue: writeback wb_workfn (flush-7:2)
[  151.876570][   T26] Call Trace:
[  151.876576][   T26]  <TASK>
[  151.876583][   T26]  dump_stack_lvl+0x189/0x250
[  151.876603][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.876618][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  151.876635][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  151.876654][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  151.876680][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  151.876702][   T26]  f2fs_write_end_io+0x886/0xb60
[  151.876732][   T26]  __submit_merged_bio+0x27a/0x6a0
[  151.876783][   T26]  __submit_merged_write_cond+0x255/0x530
[  151.876805][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  151.876856][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  151.876936][   T26]  ? f2fs_write_meta_pages+0x357/0x450
[  151.876961][   T26]  ? __lock_acquire+0xab9/0xd20
[  151.876981][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  151.876999][   T26]  do_writepages+0x32e/0x550
[  151.877020][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  151.877037][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  151.877058][   T26]  __writeback_single_inode+0x145/0xff0
[  151.877073][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  151.877090][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  151.877128][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  151.877179][   T26]  ? rcu_is_watching+0x15/0xb0
[  151.877204][   T26]  wb_writeback+0x43b/0xaf0
[  151.877226][   T26]  ? queue_io+0x341/0x590
[  151.877244][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  151.877265][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.877307][   T26]  wb_workfn+0x409/0xef0
[  151.877341][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  151.877363][   T26]  ? __lock_acquire+0xab9/0xd20
[  151.877389][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  151.877412][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.877426][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  151.877442][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  151.877461][   T26]  process_scheduled_works+0xae1/0x17b0
[  151.877503][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  151.877536][   T26]  worker_thread+0x8a0/0xda0
[  151.877573][   T26]  kthread+0x711/0x8a0
[  151.877591][   T26]  ? __pfx_worker_thread+0x10/0x10
[  151.877608][   T26]  ? __pfx_kthread+0x10/0x10
[  151.877621][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.877635][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.877651][   T26]  ? __pfx_kthread+0x10/0x10
[  151.877664][   T26]  ret_from_fork+0x47f/0x820
[  151.877683][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  151.877706][   T26]  ? __switch_to_asm+0x39/0x70
[  151.877720][   T26]  ? __switch_to_asm+0x33/0x70
[  151.877732][   T26]  ? __pfx_kthread+0x10/0x10
[  151.877771][   T26]  ret_from_fork_asm+0x1a/0x30
[  151.877800][   T26]  </TASK>
[  151.987788][   T26] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  152.239404][ T8741] Bluetooth: MGMT ver 1.23
[  152.449078][ T8749] loop2: detected capacity change from 0 to 512
[  152.454366][ T8749] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent
[  152.598391][ T8758] loop2: detected capacity change from 0 to 64
[  152.608200][ T8758] syz.2.1144: attempt to access beyond end of device
[  152.608200][ T8758] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  152.613390][ T8758] Buffer I/O error on dev loop2, logical block 134217734, async page read
[  152.644053][ T8758] Trying to free block not in datazone
[  153.228339][ T8746] delete_channel: no stack
[  153.286015][ T8761] loop1: detected capacity change from 0 to 512
[  153.295925][ T8761] EXT4-fs: Ignoring removed mblk_io_submit option
[  153.302564][ T8761] EXT4-fs: inline encryption not supported
[  153.316937][ T8761] EXT4-fs: Ignoring removed mblk_io_submit option
[  153.322266][ T8761] EXT4-fs (loop1): Test dummy encryption mode enabled
[  153.336180][ T8761] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  153.375624][ T8761] EXT4-fs (loop1): 1 truncate cleaned up
[  153.405449][ T8761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.536392][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.692409][ T8787] netlink: 'syz.3.1155': attribute type 3 has an invalid length.
[  154.695741][ T8787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1155'.
[  156.069519][ T5233] Bluetooth: hci1: hcon ffff8881076f8000 sent 1 < count 32780
[  156.072027][ T8848] Bluetooth: hci0: unsupported parameter 32780
[  156.075843][ T8848] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  156.522305][ T8860] loop1: detected capacity change from 0 to 40427
[  156.530233][ T8860] F2FS-fs (loop1): invalid crc value
[  156.584868][ T8860] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  156.589443][ T8860] F2FS-fs (loop1): Start checkpoint disabled!
[  156.593865][ T8860] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  156.602843][ T8860] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  156.660370][ T5848] syz-executor: attempt to access beyond end of device
[  156.660370][ T5848] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  156.667102][ T5848] syz-executor: attempt to access beyond end of device
[  156.667102][ T5848] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  156.855115][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'.
[  156.914407][ T8893] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1205'.
[  156.989700][   T53] kworker/u9:2: attempt to access beyond end of device
[  156.989700][   T53] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  156.996888][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  156.996909][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.996918][   T53] Workqueue: writeback wb_workfn (flush-7:1)
[  156.996948][   T53] Call Trace:
[  156.996954][   T53]  <TASK>
[  156.996962][   T53]  dump_stack_lvl+0x189/0x250
[  156.996983][   T53]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.996999][   T53]  ? __pfx_queue_work_on+0x10/0x10
[  156.997045][   T53]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  156.997064][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  156.997089][   T53]  f2fs_handle_critical_error+0x37c/0x540
[  156.997112][   T53]  f2fs_write_end_io+0x886/0xb60
[  156.997145][   T53]  __submit_merged_bio+0x27a/0x6a0
[  156.997166][   T53]  __submit_merged_write_cond+0x255/0x530
[  156.997188][   T53]  f2fs_write_data_pages+0x261d/0x3000
[  156.997231][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  156.997262][   T53]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  156.997326][   T53]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  156.997356][   T53]  ? trace_f2fs_writepages+0x7f/0x200
[  156.997371][   T53]  ? f2fs_write_node_pages+0x478/0x6e0
[  156.997391][   T53]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  156.997417][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  156.997434][   T53]  do_writepages+0x32e/0x550
[  156.997454][   T53]  ? reacquire_held_locks+0x127/0x1d0
[  156.997473][   T53]  ? writeback_sb_inodes+0x384/0x1010
[  156.997495][   T53]  __writeback_single_inode+0x145/0xff0
[  156.997508][   T53]  ? do_raw_spin_unlock+0x4d/0x240
[  156.997525][   T53]  writeback_sb_inodes+0x6c7/0x1010
[  156.997563][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  156.997613][   T53]  ? rcu_is_watching+0x15/0xb0
[  156.997638][   T53]  wb_writeback+0x43b/0xaf0
[  156.997660][   T53]  ? queue_io+0x341/0x590
[  156.997705][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  156.997725][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  156.997746][   T53]  wb_workfn+0x409/0xef0
[  156.997775][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  156.997799][   T53]  ? __lock_acquire+0xab9/0xd20
[  156.997824][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  156.997846][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  156.997862][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  156.997878][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  156.997895][   T53]  process_scheduled_works+0xae1/0x17b0
[  156.997937][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  156.997972][   T53]  worker_thread+0x8a0/0xda0
[  156.998012][   T53]  kthread+0x711/0x8a0
[  156.998030][   T53]  ? __pfx_worker_thread+0x10/0x10
[  156.998052][   T53]  ? __pfx_kthread+0x10/0x10
[  156.998068][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  156.998081][   T53]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.998098][   T53]  ? __pfx_kthread+0x10/0x10
[  156.998112][   T53]  ret_from_fork+0x47f/0x820
[  156.998133][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  156.998158][   T53]  ? __switch_to_asm+0x39/0x70
[  156.998173][   T53]  ? __switch_to_asm+0x33/0x70
[  156.998187][   T53]  ? __pfx_kthread+0x10/0x10
[  156.998202][   T53]  ret_from_fork_asm+0x1a/0x30
[  156.998234][   T53]  </TASK>
[  157.132967][   T53] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  157.133747][   T36] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0
[  157.186193][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.274567][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.353849][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.410840][   T12] tipc: Resetting bearer <eth:netdevsim0>
[  157.432419][   T12] tipc: Disabling bearer <eth:netdevsim0>
[  157.436318][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.578839][   T12] bridge_slave_1: left allmulticast mode
[  157.581228][   T12] bridge_slave_1: left promiscuous mode
[  157.583751][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.594882][   T12] bridge_slave_0: left allmulticast mode
[  157.597180][   T12] bridge_slave_0: left promiscuous mode
[  157.601130][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.677574][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  157.698443][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  157.703587][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.707204][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.712060][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.216280][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.223075][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.229528][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  158.235761][   T12] net_ratelimit: 10 callbacks suppressed
[  158.235779][   T12] batman_adv: batadv0: Local translation table size (112) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  158.244858][   T12] batman_adv: batadv0: Local translation table size (112) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  158.250838][   T12] batman_adv: batadv0: Local translation table size (112) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  158.258981][   T12] bond0 (unregistering): Released all slaves
[  158.291361][ T8902] vxcan1 speed is unknown, defaulting to 1000
[  158.310419][ T8912] loop3: detected capacity change from 0 to 164
[  158.343049][   T12] tipc: Left network mode
[  158.554046][ T8902] chnl_net:caif_netlink_parms(): no params data found
[  158.607559][    T9] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  158.692158][   T12] hsr_slave_0: left promiscuous mode
[  158.698534][   T12] hsr_slave_1: left promiscuous mode
[  158.701437][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.704155][   T12] batadv0: mtu less than device minimum
[  158.706993][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  158.711697][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  158.716299][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  158.720909][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  158.725014][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  158.728870][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  158.742188][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.745045][   T12] batman_adv: batadv0: Interface deactivated: dummy0
[  158.747231][   T12] batman_adv: batadv0: Removing interface: dummy0
[  158.754292][   T12] veth1_macvtap: left promiscuous mode
[  158.756257][   T12] veth0_macvtap: left promiscuous mode
[  158.758201][   T12] veth1_vlan: left promiscuous mode
[  158.762282][   T12] veth0_vlan: left promiscuous mode
[  158.769858][    T9] usb 4-1: config 0 has an invalid interface number: 198 but max is 0
[  158.773294][    T9] usb 4-1: config 0 has no interface number 0
[  158.776006][    T9] usb 4-1: config 0 interface 198 altsetting 8 endpoint 0x4 has invalid maxpacket 64, setting to 8
[  158.782081][    T9] usb 4-1: config 0 interface 198 altsetting 8 endpoint 0x86 is Bulk; changing to Interrupt
[  158.786387][    T9] usb 4-1: config 0 interface 198 has no altsetting 0
[  158.789240][    T9] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6
[  158.793326][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.801328][    T9] usb 4-1: config 0 descriptor??
[  158.804681][ T8912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  158.808181][ T8912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  159.012940][    T9] usb 4-1: string descriptor 0 read error: -71
[  159.016741][    T9] ftdi_sio 4-1:0.198: FTDI USB Serial Device converter detected
[  159.020957][    T9] ftdi_sio ttyUSB0: unknown device type: 0x74e6
[  159.026593][    T9] usb 4-1: USB disconnect, device number 4
[  159.039287][    T9] ftdi_sio 4-1:0.198: device disconnected
[  159.060509][ T5233] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  159.062346][ T5847] Bluetooth: hci2: command 0x1003 tx timeout
[  159.204615][   T12] team0 (unregistering): Port device team_slave_1 removed
[  159.237745][   T12] team0 (unregistering): Port device team_slave_0 removed
[  159.456763][   T36] smc: removing ib device syz2
[  159.786743][ T5233] Bluetooth: hci3: command tx timeout
[  159.889719][ T5909] vxcan1 speed is unknown, defaulting to 1000
[  159.891799][ T5909] syz2: Port: 1 Link DOWN
[  160.001252][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.003836][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.006500][ T8902] bridge_slave_0: entered allmulticast mode
[  160.017004][ T8902] bridge_slave_0: entered promiscuous mode
[  160.040766][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.069726][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.072776][ T8902] bridge_slave_1: entered allmulticast mode
[  160.114750][ T8902] bridge_slave_1: entered promiscuous mode
[  160.299859][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.306963][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.338513][ T8902] team0: Port device team_slave_0 added
[  160.343341][ T8902] team0: Port device team_slave_1 added
[  160.382535][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.385634][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.398755][ T8902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.406444][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.409761][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.422834][ T8902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.467919][ T8902] hsr_slave_0: entered promiscuous mode
[  160.471040][ T8902] hsr_slave_1: entered promiscuous mode
[  160.474036][ T8902] debugfs: 'hsr0' already exists in 'hsr'
[  160.476573][ T8902] Cannot create hsr debugfs directory
[  160.497533][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  160.647559][    T9] usb 3-1: Using ep0 maxpacket: 8
[  160.665027][    T9] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  160.674107][    T9] usb 3-1: config 0 has no interface number 0
[  160.676817][    T9] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=16.17
[  160.681043][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.681078][ T8902] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  160.686680][    T9] usb 3-1: config 0 descriptor??
[  160.694147][    T9] gspca_main: sunplus-2.14.0 probing 052b:1803
[  160.694159][ T8902] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  160.704001][ T8902] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  160.710774][ T8902] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  160.747105][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.750550][ T8902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.756002][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.759205][ T8902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.839435][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.852544][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.857029][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.873450][ T8902] 8021q: adding VLAN 0 to HW filter on device team0
[  160.885726][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.889328][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.898836][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.900689][    T9] gspca_sunplus: reg_r err -71
[  160.901635][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.903579][    T9] sunplus 3-1:0.50: probe with driver sunplus failed with error -71
[  160.912889][    T9] usb 3-1: USB disconnect, device number 9
[  161.036951][ T8902] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.189117][ T8902] veth0_vlan: entered promiscuous mode
[  161.198374][ T8902] veth1_vlan: entered promiscuous mode
[  161.226317][ T8902] veth0_macvtap: entered promiscuous mode
[  161.232857][ T8902] veth1_macvtap: entered promiscuous mode
[  161.246319][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.262087][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.272771][ T5910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.276156][ T5910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.284541][ T5910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.289646][ T5910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.367465][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.370787][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.394960][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.398541][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.453514][ T8966] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.457961][ T8966] team0: Port device bond1 added
[  161.735717][ T8971] loop4: detected capacity change from 0 to 32768
[  161.744735][ T8971] XFS (loop4): sunit and swidth must be specified together
[  161.958773][ T5233] Bluetooth: hci3: command tx timeout
[  162.293868][ T8997] netlink: 'syz.2.1238': attribute type 11 has an invalid length.
[  163.010509][   T24] libceph: connect (1)[c::]:6789 error -101
[  163.013209][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  163.019342][   T24] libceph: connect (1)[c::]:6789 error -101
[  163.024134][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  163.040793][   T24] libceph: connect (1)[c::]:6789 error -101
[  163.043605][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  163.092889][   T24] libceph: connect (1)[c::]:6789 error -101
[  163.094958][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  163.134763][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'.
[  163.280210][   T24] libceph: connect (1)[c::]:6789 error -101
[  163.282957][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  163.300353][  T794] libceph: connect (1)[c::]:6789 error -101
[  163.303074][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  163.357943][  T794] libceph: connect (1)[c::]:6789 error -101
[  163.360559][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  163.787881][   T24] libceph: connect (1)[c::]:6789 error -101
[  163.793009][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  163.808126][   T24] libceph: connect (1)[c::]:6789 error -101
[  163.810688][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  163.813078][  T794] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  163.816262][ T9004] ceph: No mds server is up or the cluster is laggy
[  163.816354][ T9007] ceph: No mds server is up or the cluster is laggy
[  163.820689][ T9010] ceph: No mds server is up or the cluster is laggy
[  163.913998][ T9043] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  163.980606][  T794] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  163.984072][  T794] usb 5-1: config 0 has no interface number 0
[  163.988931][  T794] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  163.992709][  T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.996016][  T794] usb 5-1: Product: syz
[  163.999445][  T794] usb 5-1: Manufacturer: syz
[  164.001390][  T794] usb 5-1: SerialNumber: syz
[  164.005528][  T794] usb 5-1: config 0 descriptor??
[  164.028729][ T5233] Bluetooth: hci3: command tx timeout
[  164.620155][  T794] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  164.627586][  T794] asix 5-1:0.239: probe with driver asix failed with error -71
[  164.638598][  T794] usb 5-1: USB disconnect, device number 2
[  164.645381][ T9072] IPv6: Can't replace route, no match found
[  164.652508][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  164.656288][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1269'.
[  164.780112][ T9082] loop2: detected capacity change from 0 to 256
[  165.453661][ T9102] loop4: detected capacity change from 0 to 1024
[  165.518850][ T5007] hfsplus: b-tree write err: -5, ino 4
[  165.636449][ T9116] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[  165.640996][ T9116] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  165.701038][ T9123] orangefs_devreq_open: device cannot be opened in blocking mode
[  165.736887][ T9125] loop4: detected capacity change from 0 to 16
[  165.741855][ T9125] erofs (device loop4): mounted with root inode @ nid 36.
[  166.074552][   T33] audit: type=1800 audit(1757359498.371:118): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1292" name="file1" dev="loop4" ino=86 res=0 errno=0
[  166.097597][ T5233] Bluetooth: hci3: command tx timeout
[  166.362839][ T9133] loop2: detected capacity change from 0 to 1024
[  166.380945][ T9133] hfsplus: request for non-existent node 3 in B*Tree
[  166.384140][ T9133] hfsplus: request for non-existent node 3 in B*Tree
[  166.403329][ T9133] hfsplus: xattr searching failed
[  166.415182][ T9133] hfsplus: request for non-existent node 4 in B*Tree
[  166.419210][ T9133] hfsplus: request for non-existent node 4 in B*Tree
[  166.441762][ T1090] hfsplus: b-tree write err: -5, ino 3
[  166.891506][ T9155] loop4: detected capacity change from 0 to 512
[  166.904337][ T9155] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  166.925058][ T9155] EXT4-fs (loop4): orphan cleanup on readonly fs
[  166.940793][ T9155] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.1303: Block bitmap for bg 0 marked uninitialized
[  166.961175][ T9155] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  166.978171][ T9155] EXT4-fs (loop4): 1 orphan inode deleted
[  166.985302][ T9155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  167.131417][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'.
[  167.692372][   T33] audit: type=1326 audit(1757359500.011:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.1307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  167.717438][   T33] audit: type=1326 audit(1757359500.011:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.1307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  167.736361][   T33] audit: type=1326 audit(1757359500.011:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.1307" exe="/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  167.760449][   T33] audit: type=1326 audit(1757359500.011:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.1307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  167.770358][   T33] audit: type=1326 audit(1757359500.011:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.1307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  167.831676][ T9171] loop2: detected capacity change from 0 to 1024
[  167.920519][ T8902] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.969910][   T63] hfsplus: b-tree write err: -5, ino 4
[  168.021262][ T9180] overlayfs: empty lowerdir
[  168.095976][ T9183] loop4: detected capacity change from 0 to 1024
[  168.106899][ T9183] EXT4-fs: Mount option(s) incompatible with ext3
[  169.262642][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'.
[  169.267684][ T9199] vlan2: left promiscuous mode
[  169.272438][ T9199] bridge0: port 3(vlan2) entered disabled state
[  169.282332][ T9199] bridge_slave_1: left allmulticast mode
[  169.284371][ T9199] bridge_slave_1: left promiscuous mode
[  169.286740][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.294055][ T9199] bridge_slave_0: left promiscuous mode
[  169.296228][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.745744][ T9201] loop4: detected capacity change from 0 to 32768
[  169.763121][ T9201] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  169.802492][ T9201] XFS (loop4): Ending clean mount
[  169.823963][ T9201] XFS (loop4): Quotacheck needed: Please wait.
[  169.877070][ T9201] XFS (loop4): Quotacheck: Done.
[  170.132675][ T8902] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  170.390680][ T9224] loop2: detected capacity change from 0 to 32768
[  170.459553][ T9224] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  170.459574][ T9224]   allowing incompatible features above 0.0: (unknown version)
[  170.459579][ T9224]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  170.475648][ T9224] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  170.486728][ T9224] bcachefs (loop2): initializing new filesystem
[  170.494350][ T9224] bcachefs (loop2): going read-write
[  170.505710][ T9224] bcachefs (loop2): marking superblocks
[  170.520044][ T9224] bcachefs (loop2): initializing freespace
[  170.523924][ T9224] bcachefs (loop2): done initializing freespace
[  170.530525][ T9224] bcachefs (loop2): reading snapshots table
[  170.532767][ T9224] bcachefs (loop2): reading snapshots done
[  170.547055][ T9224] bcachefs (loop2): done starting filesystem
[  170.596220][ T9224] syz.2.1329 (9224) used greatest stack depth: 15992 bytes left
[  170.631506][ T5842] bcachefs (loop2): shutting down
[  170.633681][ T5842] bcachefs (loop2): going read-only
[  170.635913][ T5842] bcachefs (loop2): finished waiting for writes to stop
[  170.648663][ T5842] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  170.689309][ T5842] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  170.694113][ T5842] bcachefs (loop2): clean shutdown complete, journal seq 5
[  170.697920][ T5842] bcachefs (loop2): marking filesystem clean
[  170.734148][ T5842] bcachefs (loop2): shutdown complete
[  170.911221][ T9241] loop4: detected capacity change from 0 to 32768
[  170.918498][ T9241] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1334 (9241)
[  170.927587][ T9241] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  170.931867][ T9241] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  170.935673][ T9241] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  170.965111][ T9241] BTRFS info (device loop4): rebuilding free space tree
[  170.991905][ T9241] BTRFS info (device loop4): disabling free space tree
[  170.994862][ T9241] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  171.002068][ T9241] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  171.028895][ T9241] BTRFS info (device loop4): enabling ssd optimizations
[  171.031442][ T9241] BTRFS info (device loop4): enabling disk space caching
[  171.033800][ T9241] BTRFS info (device loop4): force clearing of disk cache
[  171.036541][ T9241] BTRFS info (device loop4): use zstd compression, level 3
[  171.102570][ T9272] can: request_module (can-proto-0) failed.
[  171.150113][ T8902] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  172.384242][ T9308] loop4: detected capacity change from 0 to 4096
[  172.425574][ T9308] ntfs3(loop4): ino=5, "/" indx_read
[  172.431336][ T9308] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  172.452130][ T9308] ntfs3(loop4): ino=5, "/" ntfs_readdir
[  172.976844][ T9316] loop4: detected capacity change from 0 to 32768
[  172.988515][ T9316] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  173.022395][ T8902] ocfs2: Unmounting device (7,4) on (node local)
[  173.120859][ T9323] loop4: detected capacity change from 0 to 4096
[  173.494798][ T9345] netlink: 'syz.4.1368': attribute type 1 has an invalid length.
[  173.498821][ T9345] netlink: 'syz.4.1368': attribute type 2 has an invalid length.
[  173.600819][ T9347] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1369'.
[  173.605056][ T9347] net_ratelimit: 14 callbacks suppressed
[  173.605132][ T9347] openvswitch: netlink: Message has 512 unknown bytes.
[  173.890849][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  174.038868][   T10] usb 3-1: Using ep0 maxpacket: 32
[  174.043904][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  174.048089][   T10] usb 3-1: config 12 has an invalid interface number: 184 but max is 0
[  174.051492][   T10] usb 3-1: config 12 has no interface number 0
[  174.054297][   T10] usb 3-1: config 12 interface 184 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[  174.061186][   T10] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2
[  174.065045][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.068594][   T10] usb 3-1: Product: syz
[  174.070534][   T10] usb 3-1: Manufacturer: syz
[  174.073797][   T10] usb 3-1: SerialNumber: syz
[  174.080547][ T9336] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  174.294539][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  174.326131][   T10] usb 3-1: USB disconnect, device number 10
[  174.384122][ T9368] fuse: Bad value for 'fd'
[  174.388745][   T62] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  174.537620][   T62] usb 5-1: Using ep0 maxpacket: 8
[  174.546767][   T62] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  174.552455][   T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.555939][   T62] usb 5-1: Product: syz
[  174.557956][   T62] usb 5-1: Manufacturer: syz
[  174.560276][   T62] usb 5-1: SerialNumber: syz
[  174.564326][   T62] usb 5-1: config 0 descriptor??
[  174.779865][   T62] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71
[  174.787567][   T62] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  174.793554][   T62] usb 5-1: USB disconnect, device number 3
[  175.013715][ T9406] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1396'.
[  175.049556][ T9408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1397'.
[  175.209506][ T9410] loop2: detected capacity change from 0 to 32768
[  175.221324][ T9410] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  175.228824][ T9410] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  175.245016][ T9410] (syz.2.1398,9410,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=281474976710721, rec_len=32768, name_len=1
[  175.284102][ T5842] ocfs2: Unmounting device (7,2) on (node local)
[  175.464826][ T9431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1408'.
[  175.477032][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1408'.
[  175.930812][ T9455] loop2: detected capacity change from 0 to 512
[  175.935401][ T9455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  175.965263][ T9455] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1419: couldn't read orphan inode 26 (err -116)
[  175.970840][ T9455] EXT4-fs (loop2): Remounting filesystem read-only
[  175.974877][ T9455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.981078][ T9455] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.029674][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.041504][ T9447] loop4: detected capacity change from 0 to 32768
[  176.095212][ T9447] read_mapping_page failed!
[  176.101551][ T9447] ERROR: (device loop4): txCommit: 
[  176.101551][ T9447] 
[  176.620910][ T9484] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  176.623318][ T9484] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  176.636239][ T9484] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  176.648546][ T9484] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  176.955485][ T9507] netlink: 'syz.2.1443': attribute type 1 has an invalid length.
[  177.108704][ T9514] batadv_slave_0: entered promiscuous mode
[  177.112196][ T9514] hsr1: entered allmulticast mode
[  177.113906][ T9514] syz_tun: entered allmulticast mode
[  177.115672][ T9514] batadv_slave_0: entered allmulticast mode
[  177.170710][   T33] audit: type=1326 audit(1757359765.515:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.4.1449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3894b8ebe9 code=0x7ffc0000
[  177.203171][   T33] audit: type=1326 audit(1757359765.515:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.4.1449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3894b8ebe9 code=0x7ffc0000
[  177.214296][   T33] audit: type=1326 audit(1757359765.515:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.4.1449" exe="/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f3894b8ebe9 code=0x7ffc0000
[  177.224978][   T33] audit: type=1326 audit(1757359765.515:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.4.1449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3894b8ebe9 code=0x7ffc0000
[  177.234145][   T33] audit: type=1326 audit(1757359765.515:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.4.1449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3894b8ebe9 code=0x7ffc0000
[  177.335122][ T9542] netlink: 'syz.3.1461': attribute type 1 has an invalid length.
[  177.359534][ T9542] 8021q: adding VLAN 0 to HW filter on device bond2
[  177.382541][ T9542] bond2: (slave ip6gretap1): making interface the new active one
[  177.386857][ T9542] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  178.058154][   T62] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  178.212149][   T62] usb 3-1: unable to get BOS descriptor or descriptor too short
[  178.219695][   T62] usb 3-1: not running at top speed; connect to a high speed hub
[  178.225228][   T62] usb 3-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config
[  178.231488][   T62] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  178.235608][   T62] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  178.252054][   T62] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  178.252888][ T9564] loop4: detected capacity change from 0 to 4096
[  178.256495][   T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.263292][   T62] usb 3-1: SerialNumber: syz
[  178.414999][ T9568] fuse: Unknown parameter ''
[  178.608986][   T62] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[  178.612688][   T62] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  178.615719][   T62] cdc_ncm 3-1:1.0: bind() failure
[  178.621943][   T62] usb 3-1: USB disconnect, device number 11
[  178.747779][ T9572] netlink: 'syz.4.1472': attribute type 1 has an invalid length.
[  179.822079][ T9587] loop4: detected capacity change from 0 to 8
[  180.760493][ T9603] loop2: detected capacity change from 0 to 40427
[  180.764704][ T9603] F2FS-fs (loop2): Invalid log sectors per block(24) log sectorsize(9)
[  180.769550][ T9603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  180.773858][ T9603] F2FS-fs (loop2): build fault injection rate: 14
[  180.775851][ T9620] loop4: detected capacity change from 0 to 4096
[  180.776731][ T9603] F2FS-fs (loop2): build fault injection type: 0xb23a
[  180.780589][ T9620] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  180.787007][ T9603] F2FS-fs (loop2): invalid crc value
[  180.793765][ T9603] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x324a/0x4a10
[  180.798975][ T9603] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  180.799110][ T9620] ntfs3(loop4): ino=19, mi_enum_attr
[  180.804548][ T9620] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  180.883959][ T9624] loop4: detected capacity change from 0 to 2048
[  180.888938][ T9624] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  180.903410][ T9625] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.908360][ T9624] syz.4.1494: attempt to access beyond end of device
[  180.908360][ T9624] loop4: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  181.010176][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  182.523343][ T9677] loop2: detected capacity change from 0 to 512
[  182.558645][ T9677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.564547][ T9677] ext4 filesystem being mounted at /526/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  182.623178][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.940560][   T62] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  183.100658][   T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  183.105387][   T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64
[  183.110117][   T62] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[  183.113998][   T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.120002][   T62] usb 3-1: config 0 descriptor??
[  183.122959][ T9688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  183.540741][   T62] lenovo 0003:17EF:60FE.0009: unknown main item tag 0x0
[  183.546330][   T62] lenovo 0003:17EF:60FE.0009: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0
[  183.743972][   T24] usb 3-1: USB disconnect, device number 12
[  184.657425][ T5847] Bluetooth: hci3: command tx timeout
[  184.977840][ T5847] Bluetooth: hci2: command 0x1003 tx timeout
[  184.978147][ T5233] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  185.116547][ T9745] 8021q: VLANs not supported on gre0
[  186.717480][   T62] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  186.747278][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'.
[  186.754242][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1558'.
[  186.873270][   T62] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  186.876475][   T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.879925][   T62] usb 3-1: Product: syz
[  186.881495][   T62] usb 3-1: Manufacturer: syz
[  186.883433][   T62] usb 3-1: SerialNumber: syz
[  186.889000][   T62] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  186.920308][   T62] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  187.035812][ T9797] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  187.089353][ T9799] loop4: detected capacity change from 0 to 2048
[  187.095584][ T9799] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  187.100167][ T9799] NILFS (loop4): mounting unchecked fs
[  187.109296][ T9799] NILFS (loop4): recovery complete
[  187.112249][ T9801] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.129495][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'.
[  187.141692][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'.
[  187.179660][ T9804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.182849][ T9804] IPv6: NLM_F_CREATE should be set when creating new route
[  187.346917][ T5881] usb 3-1: USB disconnect, device number 13
[  187.508570][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  187.528777][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1575'.
[  187.659566][   T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  187.664108][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.668787][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1628, setting to 1024
[  187.673355][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253
[  187.679080][   T24] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  187.682970][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.688538][   T24] usb 5-1: config 0 descriptor??
[  187.694048][ T9812] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  187.939035][   T62] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  187.942218][   T62] ath9k_htc: Failed to initialize the device
[  187.948388][ T5881] usb 3-1: ath9k_htc: USB layer deinitialized
[  187.953792][ T9830] loop2: detected capacity change from 0 to 2048
[  188.036068][   T33] audit: type=1326 audit(1757359776.375:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.058135][   T33] audit: type=1326 audit(1757359776.375:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.081159][   T33] audit: type=1326 audit(1757359776.395:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.089919][   T33] audit: type=1326 audit(1757359776.395:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.101635][   T33] audit: type=1326 audit(1757359776.395:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.113291][   T33] audit: type=1326 audit(1757359776.405:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.120347][   T24] waterforce 0003:1044:7A4D.000A: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.4-1/input0
[  188.123134][   T33] audit: type=1326 audit(1757359776.405:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.142120][   T33] audit: type=1326 audit(1757359776.405:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.151508][   T33] audit: type=1326 audit(1757359776.415:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.161962][   T33] audit: type=1326 audit(1757359776.415:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.2.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddff8ebe9 code=0x7ffc0000
[  188.183901][   T24] waterforce 0003:1044:7A4D.000A: fw version request failed with -71
[  188.315707][ T5881] usb 5-1: USB disconnect, device number 4
[  189.053695][ T9873] loop2: detected capacity change from 0 to 1024
[  189.687084][ T9914] loop4: detected capacity change from 0 to 4096
[  189.693196][ T9914] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  189.843522][ T9914] ntfs3(loop4): ino=1a, mi_enum_attr
[  189.845933][ T9914] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  189.917087][ T9916] loop4: detected capacity change from 0 to 16
[  189.924101][ T9916] erofs (device loop4): mounted with root inode @ nid 36.
[  189.940337][ T6791] erofs (device loop4): failed to decompress -26 in[46, 0] out[9000]
[  189.952258][ T9916] erofs (device loop4): failed to decompress -26 in[46, 4050] out[8192]
[  189.967726][ T9916] erofs (device loop4): read error -117 @ 1 of nid 89
[  190.113575][ T9920] loop4: detected capacity change from 0 to 4096
[  190.129299][ T9920] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  190.139768][ T9920] ntfs3(loop4): Failed to load $Extend (-22).
[  190.143075][ T9920] ntfs3(loop4): Failed to initialize $Extend.
[  190.350581][ T9937] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1627'.
[  190.434333][ T9943] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1630'.
[  191.106928][ T9968] loop4: detected capacity change from 0 to 16
[  191.116426][ T9968] erofs (device loop4): too large lz4 pclusterblks 16832
[  191.162323][ T9970] capability: warning: `syz.4.1640' uses 32-bit capabilities (legacy support in use)
[  191.437429][ T5908] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  191.588342][ T5908] usb 5-1: Using ep0 maxpacket: 8
[  191.608983][ T5908] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  191.613156][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0
[  191.637526][ T5908] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  191.641336][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.644625][ T5908] usb 5-1: Product: syz
[  191.646446][ T5908] usb 5-1: Manufacturer: syz
[  191.657878][ T5908] usb 5-1: SerialNumber: syz
[  191.662628][ T5908] usb 5-1: config 0 descriptor??
[  191.672756][ T5908] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[  191.770211][ T9981] loop2: detected capacity change from 0 to 16
[  191.775343][ T9981] erofs (device loop2): mounted with root inode @ nid 36.
[  191.899060][ T5908] snd_usb_toneport 5-1:0.0: cannot get proper max packet size
[  191.902518][ T5908] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[  191.907018][ T5908] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  192.075515][   T24] usb 5-1: USB disconnect, device number 5
[  192.388179][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  192.394905][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  192.399098][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  192.405384][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  192.412708][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  192.556516][ T9999] chnl_net:caif_netlink_parms(): no params data found
[  192.684797][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.688245][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.691402][ T9999] bridge_slave_0: entered allmulticast mode
[  192.695353][ T9999] bridge_slave_0: entered promiscuous mode
[  192.703980][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.708440][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.711877][ T9999] bridge_slave_1: entered allmulticast mode
[  192.716176][ T9999] bridge_slave_1: entered promiscuous mode
[  192.760052][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.779484][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.819066][ T9999] team0: Port device team_slave_0 added
[  192.824897][ T9999] team0: Port device team_slave_1 added
[  192.871071][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.874275][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.885363][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.892226][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.895257][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.915885][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.970499][ T9999] hsr_slave_0: entered promiscuous mode
[  192.973890][ T9999] hsr_slave_1: entered promiscuous mode
[  192.976982][ T9999] debugfs: 'hsr0' already exists in 'hsr'
[  192.983585][ T9999] Cannot create hsr debugfs directory
[  193.096282][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  193.096301][   T33] audit: type=1326 audit(1757359781.435:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.3.1670" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd536d85ba7 code=0x0
[  193.241370][ T9999] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  193.248395][ T9999] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  193.255076][ T9999] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  193.261161][ T9999] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  193.352045][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.366875][ T9999] 8021q: adding VLAN 0 to HW filter on device team0
[  193.374368][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.376951][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.389942][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.392812][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.550351][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.735329][ T9999] veth0_vlan: entered promiscuous mode
[  193.748355][ T9999] veth1_vlan: entered promiscuous mode
[  193.785052][ T9999] veth0_macvtap: entered promiscuous mode
[  193.801524][ T9999] veth1_macvtap: entered promiscuous mode
[  193.851871][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.864218][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.881608][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.889789][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.898223][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.907915][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.991871][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.994968][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.017062][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.022794][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.077238][T10072] geneve2: entered promiscuous mode
[  194.194048][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.366991][T10088] loop5: detected capacity change from 0 to 4096
[  194.408245][T10088] ntfs3(loop5): ino=5, "/" indx_read
[  194.410577][T10088] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  194.416303][T10088] ntfs3(loop5): ino=5, "/" ntfs_readdir
[  194.497824][ T5847] Bluetooth: hci1: command tx timeout
[  194.671393][T10119] loop4: detected capacity change from 0 to 4096
[  194.675529][T10119] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  194.718839][T10119] ntfs3(loop4): ino=5, "/" indx_read
[  194.721238][T10119] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  194.732771][T10123] loop5: detected capacity change from 0 to 512
[  194.766004][   T33] audit: type=1800 audit(1757359783.105:145): pid=10123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1699" name="bus" dev="loop5" ino=1048644 res=0 errno=0
[  194.955422][ T9999] FAT-fs (loop5): error, invalid access to FAT (entry 0x8e210000)
[  194.959875][ T9999] FAT-fs (loop5): Filesystem has been set read-only
[  195.090129][T10137] loop5: detected capacity change from 0 to 2048
[  195.273451][T10137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.402943][T10145] loop4: detected capacity change from 0 to 64
[  195.440250][T10145] syz.4.1707: attempt to access beyond end of device
[  195.440250][T10145] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64
[  195.451876][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.455972][T10145] Buffer I/O error on dev loop4, logical block 512, async page read
[  195.472282][T10145] syz.4.1707: attempt to access beyond end of device
[  195.472282][T10145] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64
[  195.482454][T10145] Buffer I/O error on dev loop4, logical block 56576, async page read
[  196.282725][T10173] hfs: can't find a HFS filesystem on dev nullb0
[  196.332823][T10176] loop5: detected capacity change from 0 to 764
[  196.609590][ T5847] Bluetooth: hci1: command tx timeout
[  197.163159][   T33] audit: type=1326 audit(1757359785.505:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.5.1739" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4678ebe9 code=0x7ffc0000
[  197.189982][   T33] audit: type=1326 audit(1757359785.505:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.5.1739" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4678ebe9 code=0x7ffc0000
[  197.199816][   T33] audit: type=1326 audit(1757359785.535:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.5.1739" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3c4678ebe9 code=0x7ffc0000
[  197.215682][   T33] audit: type=1326 audit(1757359785.535:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.5.1739" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4678ebe9 code=0x7ffc0000
[  197.227165][   T33] audit: type=1326 audit(1757359785.535:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.5.1739" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4678ebe9 code=0x7ffc0000
[  197.259370][   T33] audit: type=1326 audit(1757359785.545:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.5.1739" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c4678ebe9 code=0x7ffc0000
[  197.279514][   T33] audit: type=1326 audit(1757359785.545:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.5.1739" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4678ebe9 code=0x7ffc0000
[  197.308543][   T33] audit: type=1326 audit(1757359785.545:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.5.1739" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4678ebe9 code=0x7ffc0000
[  197.482465][T10227] loop5: detected capacity change from 0 to 32768
[  197.550401][T10227] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names
[  197.550420][T10227]   allowing incompatible features above 0.0: (unknown version)
[  197.550427][T10227]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  197.564025][T10227] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  197.567161][T10227] bcachefs (loop5): recovering from clean shutdown, journal seq 14
[  197.570375][T10227] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  197.570375][T10227]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  197.594414][T10227] bcachefs (loop5): accounting_read... done
[  197.599197][T10227] bcachefs (loop5): alloc_read... done
[  197.601718][T10227] bcachefs (loop5): snapshots_read... done
[  197.604380][T10227] bcachefs (loop5): check_allocations...
[  197.606610][T10227] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  197.606654][T10227]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  197.622850][T10227] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  197.622861][T10227]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  197.633558][T10227] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  197.633568][T10227]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  197.644408][T10227] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  197.644419][T10227]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  197.654165][T10227] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  197.654176][T10227]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  197.665732][T10227] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap
[  197.665747][T10227]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  197.680415][T10227]  done
[  197.684953][T10227] bcachefs (loop5): going read-write
[  197.696326][T10227] bcachefs (loop5): journal_replay... done
[  197.786662][T10227] bcachefs (loop5): check_extents_to_backpointers...
[  197.788080][T10227] bcachefs (loop5): scanning for missing backpointers in 6/128 buckets
[  197.796238][T10227]  done
[  197.801235][T10227] bcachefs (loop5): check_inodes... done
[  197.804912][T10227] bcachefs (loop5): resume_logged_ops... done
[  197.808490][T10227] bcachefs (loop5): delete_dead_inodes... done
[  197.814782][T10227] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  197.818838][T10227] bcachefs (loop5): check_extents_to_backpointers... done
[  197.825115][T10227] bcachefs (loop5): check_inodes... done
[  197.828815][T10227] bcachefs (loop5): resume_logged_ops... done
[  197.832253][T10227] bcachefs (loop5): delete_dead_inodes... done
[  197.840772][T10227] bcachefs (loop5): done starting filesystem
[  197.931574][T10227] syz.5.1742 (10227) used greatest stack depth: 14280 bytes left
[  197.935576][ T9999] bcachefs (loop5): shutting down
[  197.941288][ T9999] bcachefs (loop5): going read-only
[  197.946064][ T9999] bcachefs (loop5): finished waiting for writes to stop
[  197.954718][ T9999] bcachefs (loop5): flushing journal and stopping allocators, journal seq 23
[  197.973468][ T9999] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 24
[  197.979649][ T9999] bcachefs (loop5): clean shutdown complete, journal seq 25
[  197.983552][ T9999] bcachefs (loop5): marking filesystem clean
[  198.008163][ T9999] bcachefs (loop5): shutdown complete
[  198.659415][ T5847] Bluetooth: hci1: command tx timeout
[  198.677526][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  198.837701][   T10] usb 5-1: Using ep0 maxpacket: 16
[  198.843883][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.848451][   T10] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  198.852644][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  198.856956][   T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  198.863464][   T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  198.869003][   T10] usb 5-1: config 1 interface 1 has no altsetting 0
[  198.874467][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  198.878525][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.881752][   T10] usb 5-1: Product: syz
[  198.883734][   T10] usb 5-1: Manufacturer: syz
[  198.885683][   T10] usb 5-1: SerialNumber: syz
[  199.118545][   T10] usb 5-1: USB disconnect, device number 6
[  199.351317][   T10] IPVS: starting estimator thread 0...
[  199.417172][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'.
[  199.458271][T10280] IPVS: using max 78 ests per chain, 187200 per kthread
[  200.071132][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'.
[  200.519740][T10322] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  200.519740][T10322]    program syz.4.1781 not setting count and/or reply_len properly
[  200.539492][T10324] loop5: detected capacity change from 0 to 1024
[  200.555321][T10324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.616045][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.622671][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.626932][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.633054][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.638046][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.658161][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.664799][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.679837][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.685462][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.702856][ T9999] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #11: comm syz-executor: directory missing '..'
[  200.746787][ T5847] Bluetooth: hci1: command tx timeout
[  201.262158][T10117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.340628][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.450272][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.546568][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.766790][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.819168][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  201.825940][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  201.839635][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  201.846458][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  201.853193][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  201.932085][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'.
[  202.022378][T10358] chnl_net:caif_netlink_parms(): no params data found
[  202.080837][T10358] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.083811][T10358] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.086924][T10358] bridge_slave_0: entered allmulticast mode
[  202.092960][T10358] bridge_slave_0: entered promiscuous mode
[  202.096849][T10358] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.100311][T10358] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.103134][T10358] bridge_slave_1: entered allmulticast mode
[  202.110621][T10358] bridge_slave_1: entered promiscuous mode
[  202.153172][T10358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.159926][T10370] proc: Bad value for 'gid'
[  202.161537][T10358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.196634][T10358] team0: Port device team_slave_0 added
[  202.202114][T10358] team0: Port device team_slave_1 added
[  202.224688][T10358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.227107][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.236733][T10358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.243150][T10358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.246579][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.257696][T10358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.326955][T10358] hsr_slave_0: entered promiscuous mode
[  202.333033][T10358] hsr_slave_1: entered promiscuous mode
[  202.336502][T10358] debugfs: 'hsr0' already exists in 'hsr'
[  202.340214][T10358] Cannot create hsr debugfs directory
[  202.530817][T10358] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  202.538427][T10358] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  202.549578][T10358] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  202.556833][T10358] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  202.649681][T10358] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.670781][T10358] 8021q: adding VLAN 0 to HW filter on device team0
[  202.680205][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.683360][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.695271][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.698411][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.873313][   T12] bridge_slave_1: left allmulticast mode
[  202.875887][   T12] bridge_slave_1: left promiscuous mode
[  202.888693][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.913838][   T12] bridge_slave_0: left allmulticast mode
[  202.940201][   T12] bridge_slave_0: left promiscuous mode
[  202.942807][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.713782][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.718879][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.723042][   T12] bond0 (unregistering): Released all slaves
[  203.956629][T10358] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.958682][ T5847] Bluetooth: hci1: command tx timeout
[  203.993976][T10440] loop4: detected capacity change from 0 to 4096
[  203.998203][T10440] ntfs3(loop4): Primary boot: invalid index size -57.
[  204.010428][T10440] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[  204.066076][T10446] netlink: 'syz.4.1828': attribute type 10 has an invalid length.
[  204.081408][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1828'.
[  204.113490][   T12] hsr_slave_0: left promiscuous mode
[  204.116678][   T12] hsr_slave_1: left promiscuous mode
[  204.123479][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.131704][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.139582][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.146277][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.181709][   T12] veth1_macvtap: left promiscuous mode
[  204.184329][   T12] veth0_macvtap: left promiscuous mode
[  204.186836][   T12] veth1_vlan: left promiscuous mode
[  204.189661][   T12] veth0_vlan: left promiscuous mode
[  204.858274][   T12] team0 (unregistering): Port device team_slave_1 removed
[  204.905128][   T12] team0 (unregistering): Port device team_slave_0 removed
[  205.051501][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1836'.
[  205.083841][T10466] netlink: 'syz.3.1837': attribute type 2 has an invalid length.
[  205.086867][T10466] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.1837'.
[  205.667690][T10472] loop4: detected capacity change from 0 to 16
[  205.671943][T10472] erofs (device loop4): mounted with root inode @ nid 36.
[  205.681721][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  205.681739][   T33] audit: type=1800 audit(1757359794.025:160): pid=10472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1839" name="file1" dev="loop4" ino=86 res=0 errno=0
[  205.730009][T10358] veth0_vlan: entered promiscuous mode
[  205.750213][T10358] veth1_vlan: entered promiscuous mode
[  205.803871][T10358] veth0_macvtap: entered promiscuous mode
[  205.812482][T10358] veth1_macvtap: entered promiscuous mode
[  205.845136][T10358] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.875596][T10358] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.900088][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.911610][T10474] loop4: detected capacity change from 0 to 8192
[  205.916204][T10474] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  205.917594][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.947275][ T5910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.951669][ T5910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.979567][T10474] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  205.998796][T10474] ntfs3(loop4): ino=5, mi_enum_attr
[  206.016353][   T12] IPVS: stop unused estimator thread 0...
[  206.030260][ T5847] Bluetooth: hci1: command tx timeout
[  206.050430][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.053864][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.109046][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.113605][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.263347][T10509] netlink: 'syz.4.1853': attribute type 5 has an invalid length.
[  208.097804][ T5847] Bluetooth: hci1: command tx timeout
[  210.187564][ T5847] Bluetooth: hci1: command tx timeout
[  210.949890][T10584] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1885'.
[  211.156254][T10588] netlink: 'syz.3.1886': attribute type 1 has an invalid length.
[  211.923418][T10622] loop4: detected capacity change from 0 to 1024
[  211.951951][T10622] EXT4-fs: Ignoring removed bh option
[  211.962491][T10622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.313944][ T8902] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.464317][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'.
[  212.469456][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'.
[  212.472567][T10639] netlink: 'syz.3.1909': attribute type 7 has an invalid length.
[  212.638223][ T5749] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  212.797566][ T5749] usb 5-1: Using ep0 maxpacket: 16
[  212.801409][ T5749] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  212.805497][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.815857][ T5749] usb 5-1: config 0 descriptor??
[  212.821366][ T5749] gspca_main: sonixj-2.14.0 probing 0471:0327
[  212.909331][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'.
[  213.315646][T10665] netlink: 'syz.6.1920': attribute type 2 has an invalid length.
[  213.319292][T10665] netlink: 'syz.6.1920': attribute type 2 has an invalid length.
[  213.935668][T10687] loop6: detected capacity change from 0 to 256
[  213.939341][T10687] exfat: Deprecated parameter 'namecase'
[  213.941824][T10687] exfat: Deprecated parameter 'namecase'
[  213.965169][T10687] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  214.019307][T10689] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1931'.
[  214.994695][ T5749] gspca_sonixj: reg_r err -71
[  214.998339][ T5749] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  215.008669][ T5749] usb 5-1: USB disconnect, device number 7
[  215.162640][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1937'.
[  215.295722][T10709] loop6: detected capacity change from 0 to 1024
[  215.411651][   T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.414563][T10708] hfsplus: invalid extended attribute record
[  215.476793][   T26] hfsplus: b-tree write err: -5, ino 4
[  215.705162][T10726] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.708349][T10726] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.777959][T10731] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  216.091112][T10735] netlink: 'syz.3.1949': attribute type 4 has an invalid length.
[  216.204185][T10726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.222449][T10726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.492267][ T5910] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.497968][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.507491][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.510614][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.712844][T10741] loop6: detected capacity change from 0 to 32768
[  216.732439][T10741] JBD2: Ignoring recovery information on journal
[  216.735251][T10741] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75
[  216.738373][T10741] JBD2: bad block at offset 32
[  216.748083][T10741] (syz.6.1951,10741,1):ocfs2_load_local_alloc:312 ERROR: Invalid local alloc inode, 75
[  216.751342][T10741] (syz.6.1951,10741,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  216.753983][T10741] (syz.6.1951,10741,1):ocfs2_check_volume:2402 ERROR: status = -22
[  216.756479][T10741] (syz.6.1951,10741,1):ocfs2_check_volume:2430 ERROR: status = -22
[  216.759579][T10741] (syz.6.1951,10741,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  216.766834][T10741] (syz.6.1951,10741,1):ocfs2_fill_super:1177 ERROR: status = -22
[  216.857041][T10749] loop4: detected capacity change from 0 to 4096
[  216.868676][T10749] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  216.895015][T10749] ntfs3(loop4): Failed to initialize $Secure::$SII (-22).
[  216.899322][T10749] ntfs3(loop4): Failed to initialize $Secure (-22).
[  217.032666][T10759] macvlan2: entered promiscuous mode
[  217.034434][T10759] macvlan2: entered allmulticast mode
[  217.126650][T10770] loop6: detected capacity change from 0 to 2048
[  217.133368][T10770] NILFS (loop6): invalid segment: Inconsistency found
[  217.136336][T10770] NILFS (loop6): trying rollback from an earlier position
[  217.152010][T10770] NILFS (loop6): recovery complete
[  217.159720][T10775] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.180996][T10773] loop4: detected capacity change from 0 to 8192
[  217.218987][T10773]  loop4: p1 p2 p4 < >
[  217.220710][T10773] loop4: partition table partially beyond EOD, truncated
[  217.223140][T10773] loop4: p1 start 16777216 is beyond EOD, truncated
[  217.225375][T10773] loop4: p2 size 515840 extends beyond EOD, truncated
[  218.359539][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1986'.
[  219.333034][ T5749] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  219.487470][ T5749] usb 5-1: Using ep0 maxpacket: 16
[  219.491480][ T5749] usb 5-1: config 0 has an invalid interface number: 157 but max is 0
[  219.495009][ T5749] usb 5-1: config 0 has no interface number 0
[  219.497468][ T5749] usb 5-1: config 0 interface 157 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  219.501245][ T5749] usb 5-1: config 0 interface 157 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  219.508382][ T5749] usb 5-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=fb.74
[  219.514025][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.517416][ T5749] usb 5-1: Product: syz
[  219.519223][ T5749] usb 5-1: Manufacturer: syz
[  219.521223][ T5749] usb 5-1: SerialNumber: syz
[  219.525735][ T5749] usb 5-1: config 0 descriptor??
[  219.531050][T10843] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  219.534191][T10843] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  219.539218][ T5749] pl2303 5-1:0.157: required interrupt-in endpoint missing
[  219.743282][  T794] usb 5-1: USB disconnect, device number 8
[  221.259172][T10871] netlink: 'syz.3.2007': attribute type 210 has an invalid length.
[  221.701931][T10888] loop6: detected capacity change from 0 to 512
[  221.706165][T10888] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  221.724409][T10888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  221.728143][T10888] System zones: 1-12
[  221.730716][T10888] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.2015: corrupted in-inode xattr: e_value size too large
[  221.740205][T10888] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2015: couldn't read orphan inode 15 (err -117)
[  221.746795][T10888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.770684][T10888] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.2015: Unrecognised inode hash code 4
[  221.776235][T10888] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2015: Corrupt directory, running e2fsck is recommended
[  221.782127][T10888] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.2015: Unrecognised inode hash code 4
[  221.786851][T10888] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2015: Corrupt directory, running e2fsck is recommended
[  221.829690][T10358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.060309][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2020'.
[  222.089405][T10900] team1: entered promiscuous mode
[  222.091695][T10900] team1: entered allmulticast mode
[  222.473582][T10926] C: renamed from team_slave_0
[  222.479291][T10926] netlink: 'syz.4.2030': attribute type 2 has an invalid length.
[  222.482830][T10926] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2030'.
[  222.486547][T10926] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  223.821980][T10951] IPVS: Error connecting to the multicast addr
[  223.907975][T10958] loop6: detected capacity change from 0 to 256
[  224.115206][T10977] netlink: 'syz.3.2052': attribute type 1 has an invalid length.
[  224.349158][T10987] ptrace attach of "/syz-executor exec"[10988] was attempted by "/syz-executor exec"[10987]
[  225.305695][T11009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2066'.
[  225.312039][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2066'.
[  225.395399][T11015] netlink: 'syz.6.2069': attribute type 12 has an invalid length.
[  225.473202][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2069'.
[  225.506046][   T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.507665][T11015] netlink: 'syz.6.2069': attribute type 12 has an invalid length.
[  225.511100][   T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.514785][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2069'.
[  225.520133][   T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.111079][T11073] overlayfs: failed to clone upperpath
[  228.479528][T11112] gtp0: entered promiscuous mode
[  228.523613][T11114] loop4: detected capacity change from 0 to 8
[  229.104179][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2113'.
[  229.513384][T11126] loop6: detected capacity change from 0 to 40427
[  229.529472][T11126] F2FS-fs (loop6): invalid crc value
[  229.572117][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'.
[  229.589715][T11126] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  229.598793][T11126] F2FS-fs (loop6): Start checkpoint disabled!
[  229.604851][T11126] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  229.609412][T11126] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  229.675630][   T27] kworker/u10:0: attempt to access beyond end of device
[  229.675630][   T27] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  229.684141][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[  229.684164][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.684175][   T27] Workqueue: writeback wb_workfn (flush-7:6)
[  229.684207][   T27] Call Trace:
[  229.684215][   T27]  <TASK>
[  229.684221][   T27]  dump_stack_lvl+0x189/0x250
[  229.684244][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.684259][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  229.684280][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  229.684299][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  229.684325][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  229.684352][   T27]  f2fs_write_end_io+0x886/0xb60
[  229.684387][   T27]  __submit_merged_bio+0x27a/0x6a0
[  229.684409][   T27]  __submit_merged_write_cond+0x255/0x530
[  229.684431][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  229.684477][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.684507][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  229.684584][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  229.684602][   T27]  ? __pfx_hlock_conflict+0x10/0x10
[  229.684621][   T27]  ? __bfs+0x154/0x2a0
[  229.684645][   T27]  ? __pfx_usage_match+0x10/0x10
[  229.684661][   T27]  ? __pfx_usage_match+0x10/0x10
[  229.684680][   T27]  ? lockdep_unlock+0x89/0x120
[  229.684694][   T27]  ? validate_chain+0x897/0x2140
[  229.684728][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.684747][   T27]  do_writepages+0x32e/0x550
[  229.684776][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  229.684794][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  229.684818][   T27]  __writeback_single_inode+0x145/0xff0
[  229.684833][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  229.684851][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  229.684872][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  229.684903][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  229.684953][   T27]  ? rcu_is_watching+0x15/0xb0
[  229.684982][   T27]  wb_writeback+0x43b/0xaf0
[  229.685003][   T27]  ? queue_io+0x341/0x590
[  229.685021][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  229.685043][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  229.685065][   T27]  wb_workfn+0x409/0xef0
[  229.685097][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  229.685120][   T27]  ? __lock_acquire+0xab9/0xd20
[  229.685146][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  229.685170][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  229.685185][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  229.685200][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  229.685219][   T27]  process_scheduled_works+0xae1/0x17b0
[  229.685255][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  229.685274][   T27]  worker_thread+0x8a0/0xda0
[  229.685297][   T27]  kthread+0x711/0x8a0
[  229.685309][   T27]  ? __pfx_worker_thread+0x10/0x10
[  229.685320][   T27]  ? __pfx_kthread+0x10/0x10
[  229.685329][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  229.685339][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.685350][   T27]  ? __pfx_kthread+0x10/0x10
[  229.685358][   T27]  ret_from_fork+0x47f/0x820
[  229.685374][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  229.685388][   T27]  ? __switch_to_asm+0x39/0x70
[  229.685398][   T27]  ? __switch_to_asm+0x33/0x70
[  229.685407][   T27]  ? __pfx_kthread+0x10/0x10
[  229.685415][   T27]  ret_from_fork_asm+0x1a/0x30
[  229.685433][   T27]  </TASK>
[  229.685437][   T27] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  230.048029][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2130'.
[  230.573847][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'.
[  230.575755][T11168] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma?
[  230.687167][T11176] loop6: detected capacity change from 0 to 256
[  230.690802][T11176] exfat: Deprecated parameter 'utf8'
[  230.702702][T11176] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  231.206958][T11200] loop4: detected capacity change from 0 to 1024
[  231.224546][T11200] EXT4-fs: Ignoring removed bh option
[  231.230228][T11200] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  231.246660][T11200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.264998][   T33] audit: type=1800 audit(1757359819.605:161): pid=11200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2149" name="file1" dev="loop4" ino=15 res=0 errno=0
[  231.326878][T11200] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.2149: path /295/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  231.344847][T11200] EXT4-fs (loop4): Remounting filesystem read-only
[  231.369113][ T8902] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.421449][T11207] overlayfs: failed to clone upperpath
[  231.427243][T11207] overlayfs: failed to clone upperpath
[  232.323958][T11239] loop4: detected capacity change from 0 to 32768
[  232.335913][T11239] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  232.346738][T11239] 
[  232.347777][T11239] ======================================================
[  232.350451][T11239] WARNING: possible circular locking dependency detected
[  232.353253][T11239] syzkaller #0 Not tainted
[  232.355372][T11239] ------------------------------------------------------
[  232.359322][T11239] syz.4.2166/11239 is trying to acquire lock:
[  232.361785][T11239] ffff888033c589c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.367068][T11239] 
[  232.367068][T11239] but task is already holding lock:
[  232.370014][T11239] ffff888033c5ec78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  232.373759][T11239] 
[  232.373759][T11239] which lock already depends on the new lock.
[  232.373759][T11239] 
[  232.377718][T11239] 
[  232.377718][T11239] the existing dependency chain (in reverse order) is:
[  232.381248][T11239] 
[  232.381248][T11239] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  232.384405][T11239]        lock_acquire+0x120/0x360
[  232.386459][T11239]        down_read+0x46/0x2e0
[  232.388295][T11239]        ocfs2_init_acl+0x2f9/0x720
[  232.390336][T11239]        ocfs2_mknod+0x1321/0x2050
[  232.392359][T11239]        ocfs2_mkdir+0x191/0x440
[  232.394279][T11239]        vfs_mkdir+0x306/0x510
[  232.396225][T11239]        do_mkdirat+0x247/0x590
[  232.398214][T11239]        __x64_sys_mkdirat+0x87/0xa0
[  232.400354][T11239]        do_syscall_64+0xfa/0xfa0
[  232.402244][T11239]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.404713][T11239] 
[  232.404713][T11239] -> #4 (jbd2_handle){++++}-{0:0}:
[  232.407543][T11239]        lock_acquire+0x120/0x360
[  232.409544][T11239]        start_this_handle+0x1fa7/0x21c0
[  232.411627][T11239]        jbd2__journal_start+0x2c1/0x5b0
[  232.413745][T11239]        jbd2_journal_start+0x2a/0x40
[  232.415848][T11239]        ocfs2_start_trans+0x376/0x6d0
[  232.417864][T11239]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  232.420239][T11239]        ocfs2_dismount_volume+0x201/0x8d0
[  232.422450][T11239]        generic_shutdown_super+0x135/0x2c0
[  232.424789][T11239]        kill_block_super+0x44/0x90
[  232.426908][T11239]        deactivate_locked_super+0xbc/0x130
[  232.429291][T11239]        cleanup_mnt+0x425/0x4c0
[  232.431286][T11239]        task_work_run+0x1d4/0x260
[  232.433210][T11239]        exit_to_user_mode_loop+0xec/0x130
[  232.435380][T11239]        do_syscall_64+0x2bd/0xfa0
[  232.437285][T11239]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.439710][T11239] 
[  232.439710][T11239] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  232.442976][T11239]        lock_acquire+0x120/0x360
[  232.444973][T11239]        down_read+0x46/0x2e0
[  232.446905][T11239]        ocfs2_start_trans+0x36a/0x6d0
[  232.449106][T11239]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  232.451630][T11239]        ocfs2_dismount_volume+0x201/0x8d0
[  232.453990][T11239]        generic_shutdown_super+0x135/0x2c0
[  232.456334][T11239]        kill_block_super+0x44/0x90
[  232.458464][T11239]        deactivate_locked_super+0xbc/0x130
[  232.460804][T11239]        cleanup_mnt+0x425/0x4c0
[  232.462744][T11239]        task_work_run+0x1d4/0x260
[  232.464791][T11239]        exit_to_user_mode_loop+0xec/0x130
[  232.467290][T11239]        do_syscall_64+0x2bd/0xfa0
[  232.469281][T11239]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.471843][T11239] 
[  232.471843][T11239] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  232.474825][T11239]        lock_acquire+0x120/0x360
[  232.476845][T11239]        ocfs2_start_trans+0x26b/0x6d0
[  232.479000][T11239]        ocfs2_extend_dir+0xf71/0x4870
[  232.481177][T11239]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  232.483822][T11239]        ocfs2_mknod+0x819/0x2050
[  232.485826][T11239]        ocfs2_mkdir+0x191/0x440
[  232.487806][T11239]        vfs_mkdir+0x306/0x510
[  232.489730][T11239]        do_mkdirat+0x247/0x590
[  232.491627][T11239]        __x64_sys_mkdirat+0x87/0xa0
[  232.493610][T11239]        do_syscall_64+0xfa/0xfa0
[  232.495625][T11239]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.498182][T11239] 
[  232.498182][T11239] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  232.502369][T11239]        lock_acquire+0x120/0x360
[  232.504380][T11239]        down_write+0x96/0x1f0
[  232.506314][T11239]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  232.508934][T11239]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  232.511656][T11239]        ocfs2_mknod+0xe32/0x2050
[  232.513742][T11239]        ocfs2_mkdir+0x191/0x440
[  232.515741][T11239]        vfs_mkdir+0x306/0x510
[  232.517687][T11239]        do_mkdirat+0x247/0x590
[  232.519649][T11239]        __x64_sys_mkdirat+0x87/0xa0
[  232.521815][T11239]        do_syscall_64+0xfa/0xfa0
[  232.523873][T11239]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.526458][T11239] 
[  232.526458][T11239] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  232.530715][T11239]        validate_chain+0xb9b/0x2140
[  232.532845][T11239]        __lock_acquire+0xab9/0xd20
[  232.534805][T11239]        lock_acquire+0x120/0x360
[  232.536769][T11239]        down_write+0x96/0x1f0
[  232.538724][T11239]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.541168][T11239]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  232.543830][T11239]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  232.546212][T11239]        ocfs2_xattr_set+0xb70/0x11f0
[  232.548289][T11239]        ocfs2_set_acl+0x701/0x7b0
[  232.550356][T11239]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  232.552443][T11239]        vfs_set_acl+0x887/0xb00
[  232.554340][T11239]        do_set_acl+0xf6/0x190
[  232.556248][T11239]        filename_setxattr+0x2e0/0x600
[  232.558369][T11239]        path_setxattrat+0x364/0x3a0
[  232.560442][T11239]        __x64_sys_setxattr+0xbc/0xe0
[  232.562527][T11239]        do_syscall_64+0xfa/0xfa0
[  232.564445][T11239]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.566924][T11239] 
[  232.566924][T11239] other info that might help us debug this:
[  232.566924][T11239] 
[  232.570833][T11239] Chain exists of:
[  232.570833][T11239]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  232.570833][T11239] 
[  232.577061][T11239]  Possible unsafe locking scenario:
[  232.577061][T11239] 
[  232.579988][T11239]        CPU0                    CPU1
[  232.582134][T11239]        ----                    ----
[  232.584278][T11239]   lock(&oi->ip_xattr_sem);
[  232.586136][T11239]                                lock(jbd2_handle);
[  232.588751][T11239]                                lock(&oi->ip_xattr_sem);
[  232.591540][T11239]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  232.594512][T11239] 
[  232.594512][T11239]  *** DEADLOCK ***
[  232.594512][T11239] 
[  232.597603][T11239] 3 locks held by syz.4.2166/11239:
[  232.599688][T11239]  #0: ffff888012560420 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  232.603154][T11239]  #1: ffff888033c5ef40 (&type->i_mutex_dir_key#23){++++}-{4:4}, at: vfs_set_acl+0x3cd/0xb00
[  232.607051][T11239]  #2: ffff888033c5ec78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  232.610672][T11239] 
[  232.610672][T11239] stack backtrace:
[  232.613032][T11239] CPU: 0 UID: 0 PID: 11239 Comm: syz.4.2166 Not tainted syzkaller #0 PREEMPT(full) 
[  232.613047][T11239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.613055][T11239] Call Trace:
[  232.613064][T11239]  <TASK>
[  232.613072][T11239]  dump_stack_lvl+0x189/0x250
[  232.613091][T11239]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.613105][T11239]  ? __pfx__printk+0x10/0x10
[  232.613123][T11239]  ? print_lock_name+0xde/0x100
[  232.613139][T11239]  print_circular_bug+0x2ee/0x310
[  232.613154][T11239]  check_noncircular+0x134/0x160
[  232.613176][T11239]  validate_chain+0xb9b/0x2140
[  232.613196][T11239]  ? look_up_lock_class+0x74/0x170
[  232.613214][T11239]  ? register_lock_class+0x51/0x320
[  232.613228][T11239]  __lock_acquire+0xab9/0xd20
[  232.613244][T11239]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.613255][T11239]  lock_acquire+0x120/0x360
[  232.613268][T11239]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.613281][T11239]  down_write+0x96/0x1f0
[  232.613293][T11239]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.613303][T11239]  ? __pfx_down_write+0x10/0x10
[  232.613315][T11239]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.613328][T11239]  ? do_raw_spin_lock+0x121/0x290
[  232.613341][T11239]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  232.613354][T11239]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.613369][T11239]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.613384][T11239]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  232.613396][T11239]  ? stack_depot_save_flags+0x41b/0x860
[  232.613413][T11239]  ? kasan_save_track+0x4f/0x80
[  232.613426][T11239]  ? kasan_save_track+0x3e/0x80
[  232.613438][T11239]  ? __kasan_kmalloc+0x93/0xb0
[  232.613450][T11239]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  232.613464][T11239]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  232.613475][T11239]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  232.613514][T11239]  ? ocfs2_xattr_set+0xb70/0x11f0
[  232.613529][T11239]  ? ocfs2_set_acl+0x701/0x7b0
[  232.613541][T11239]  ? ocfs2_iop_set_acl+0x1aa/0x2a0
[  232.613552][T11239]  ? vfs_set_acl+0x887/0xb00
[  232.613565][T11239]  ? do_set_acl+0xf6/0x190
[  232.613577][T11239]  ? filename_setxattr+0x2e0/0x600
[  232.613595][T11239]  ? path_setxattrat+0x364/0x3a0
[  232.613605][T11239]  ? __x64_sys_setxattr+0xbc/0xe0
[  232.613620][T11239]  ? do_syscall_64+0xfa/0xfa0
[  232.613637][T11239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.613658][T11239]  ? __kasan_kmalloc+0x93/0xb0
[  232.613673][T11239]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  232.613688][T11239]  ? do_raw_spin_unlock+0x4d/0x240
[  232.613706][T11239]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  232.613719][T11239]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  232.613730][T11239]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  232.613745][T11239]  ? __lock_acquire+0xab9/0xd20
[  232.613760][T11239]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  232.613774][T11239]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  232.613787][T11239]  ? ocfs2_xattr_set+0xb36/0x11f0
[  232.613800][T11239]  ? up_write+0x1c4/0x420
[  232.613810][T11239]  ocfs2_xattr_set+0xb70/0x11f0
[  232.613827][T11239]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  232.613839][T11239]  ? filename_setxattr+0x2e0/0x600
[  232.613853][T11239]  ? __x64_sys_setxattr+0xbc/0xe0
[  232.613867][T11239]  ? do_syscall_64+0xfa/0xfa0
[  232.613881][T11239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.613902][T11239]  ? rcu_is_watching+0x15/0xb0
[  232.613921][T11239]  ? trace_kmalloc+0x1f/0xd0
[  232.613933][T11239]  ? ocfs2_set_acl+0x11c/0x7b0
[  232.613944][T11239]  ocfs2_set_acl+0x701/0x7b0
[  232.613957][T11239]  ocfs2_iop_set_acl+0x1aa/0x2a0
[  232.613969][T11239]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  232.613979][T11239]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  232.613992][T11239]  ? __pfx_down_write+0x10/0x10
[  232.614003][T11239]  ? evm_revalidate_status+0x4f/0xb0
[  232.614014][T11239]  ? posix_acl_valid+0x352/0x3e0
[  232.614026][T11239]  vfs_set_acl+0x887/0xb00
[  232.614040][T11239]  do_set_acl+0xf6/0x190
[  232.614052][T11239]  filename_setxattr+0x2e0/0x600
[  232.614068][T11239]  ? __pfx_filename_setxattr+0x10/0x10
[  232.614084][T11239]  ? getname_flags+0x1e5/0x540
[  232.614099][T11239]  path_setxattrat+0x364/0x3a0
[  232.614111][T11239]  ? __pfx_path_setxattrat+0x10/0x10
[  232.614121][T11239]  ? do_futex+0x333/0x420
[  232.614140][T11239]  __x64_sys_setxattr+0xbc/0xe0
[  232.614155][T11239]  do_syscall_64+0xfa/0xfa0
[  232.614170][T11239]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.614184][T11239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.614194][T11239]  ? exc_page_fault+0xab/0x100
[  232.614209][T11239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.614219][T11239] RIP: 0033:0x7f3894b8ebe9
[  232.614232][T11239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.614242][T11239] RSP: 002b:00007f3895a0a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  232.614254][T11239] RAX: ffffffffffffffda RBX: 00007f3894dc5fa0 RCX: 00007f3894b8ebe9
[  232.614262][T11239] RDX: 0000200000000700 RSI: 0000200000002a40 RDI: 00002000000000c0
[  232.614269][T11239] RBP: 00007f3894c11e19 R08: 0000000000000000 R09: 0000000000000000
[  232.614276][T11239] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[  232.614282][T11239] R13: 00007f3894dc6038 R14: 00007f3894dc5fa0 R15: 00007ffd45319908
[  232.614294][T11239]  </TASK>
[  232.851350][ T8902] ocfs2: Unmounting device (7,4) on (node local)

VM DIAGNOSIS:
19:26:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013fd RDI=00000000000013fe RBP=00000000000003f8 RSP=ffffc9000331e3d0
R8 =ffff888106f20237 R9 =1ffff11020de4046 R10=dffffc0000000000 R11=ffffffff85528930
R12=dffffc0000000000 R13=ffffffff99d248f6 R14=ffffffff9a037040 R15=0000000000000000
RIP=ffffffff855289ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3895a0a6c0 ffffffff 00c00000
GS =0000 ffff8880b83f1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002a40 CR3=0000000030b30000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd536f97498 00007fd536f97470 XMM03=00007fd536f974a8 00007fd536f974a0
XMM04=00007fd537afd100 00007fd536f97460 XMM05=00007fd536f97478 00007fd536f974c0
XMM06=00007fd536f974b8 00007fd536f974b0 XMM07=00007fd536f974a8 00007fd536f974a0
XMM08=0000000000000029 29736561286d6367 XMM09=0000000000000000 00007fd536e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=4d3359ff2a3b9300 RBX=ffffffff819672f8 RCX=4d3359ff2a3b9300 RDX=0000000000000001
RSI=ffffffff8c035be0 RDI=ffffffff819672f8 RBP=ffffc90000177f10 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fc3c630 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b818dd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39f1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f456b305440 CR3=0000000031c34000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0050612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
