last executing test programs:

5m22.797054133s ago: executing program 32 (id=620):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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")
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)

4m51.728346554s ago: executing program 33 (id=1066):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x1a06496, 0x0, 0x2, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x442, 0x80)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
fdatasync(r0)

4m9.770752258s ago: executing program 0 (id=1747):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x29, 0x3, 0x0, {0x2, 0x8, 0x0, 'hfsplus\x00'}}, 0x29)

4m9.701743841s ago: executing program 0 (id=1749):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e120, 0x3, 0xfffe}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0})

4m9.701521024s ago: executing program 0 (id=1750):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc012}, 0x24008044)

4m9.641251835s ago: executing program 0 (id=1752):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

4m9.470864958s ago: executing program 0 (id=1758):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000)

4m9.409106161s ago: executing program 0 (id=1761):
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1)

4m9.293935754s ago: executing program 34 (id=1761):
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1)

3m52.980072386s ago: executing program 5 (id=1989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}, {0x11c, 0xf, 0x9e, 0xffffffff}]})
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r6, r5, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x0)
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3a, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xa8}}, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdc, 0xd6, 0x9f, 0x20, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2e, 0x0, 0x2, 0x7e, 0x3a, 0x11, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xe}}]}}]}}]}}, 0x0)

3m49.811142446s ago: executing program 5 (id=2001):
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x9, 0x0, 0x1, 0x84a, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)

3m49.750040471s ago: executing program 5 (id=2002):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x601c2, 0xe6)
ftruncate(r3, 0x8800000)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r4, 0x4b72, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff})
sendfile(r5, r3, 0x0, 0x578410e9)

3m48.830607641s ago: executing program 5 (id=2009):
r0 = userfaultfd(0x801)
r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x252, &(0x7f0000000600)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000540)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @b})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m48.340360467s ago: executing program 5 (id=2017):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0)

3m47.911293481s ago: executing program 5 (id=2022):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

3m47.874852444s ago: executing program 35 (id=2022):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000000000000000000000000000000000250d623b48a29e330900b8c552202407804f1ba1817256caf1090b71f2928ed030f3c8194cc3cbf48e2f4c9248c4c00a32d4873da3b7d66b1ce6f72aab16c923b16c4bfdbb24fb17bd198139c21c46065c6922fd705e670d0b5d6d495a773b872e8f88"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

3m30.988895271s ago: executing program 6 (id=2283):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_mrelease(r1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r3 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0)
write(r3, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
readlinkat(r2, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4)

3m30.910510891s ago: executing program 6 (id=2284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x4c}}, 0x0)

3m30.910155898s ago: executing program 6 (id=2285):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x1})
chdir(&(0x7f0000000040)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x400, 0xffff)
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001640)={{r0}, "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"})

3m30.757578991s ago: executing program 6 (id=2287):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@grpquota}, {@bh}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x62941, 0x2, 0x10}, 0x18)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

3m30.471806405s ago: executing program 6 (id=2289):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x80000042, 0xf5, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10)

3m30.241909073s ago: executing program 6 (id=2290):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x0, @multicast2}})

3m30.224921851s ago: executing program 36 (id=2290):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x0, @multicast2}})

2m38.055745068s ago: executing program 3 (id=2947):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

2m38.055501919s ago: executing program 3 (id=2948):
prctl$PR_SVE_GET_VL(0x33, 0x105b9)

2m38.054819308s ago: executing program 3 (id=2949):
r0 = epoll_create1(0x0)
poll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x8000db3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0xa00, 0x60)
read$FUSE(r5, &(0x7f0000002ec0)={0x2020}, 0x2020)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5}, 0xe)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f00000001c0)=0xf66, 0x4)
shutdown(r4, 0x1)
recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00')
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000005c0))
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shutdown(r1, 0x0)

2m37.183119741s ago: executing program 3 (id=2954):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000300)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@noquota}, {@gid}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61f0, &(0x7f000001c300)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCkl7yUECrQ9wIELB5QrSuS6VUQKKAkorSLiyhcO/BEgJI4IceTEH9ADV278AURKkEA9oA4a+3mc8XTXayfxzm7m85Gcmd88M95n8t3x7npm/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VdpwfGIz0U/ohexUtVrEbGydry+zYux3RwvRMRwKaLafvuf5yJej4iPj0Xcf3BnvVp8/oD9+P6f//GHnzzzo7//aXjmv3+51X9j0nq3b//2P3+9++j7CwAAAF1UlmVZpI/5JyJikD7bAwBPv/z6XyZ5uXru6s05649arVbPf32q2F0wF/2Zg7quHO9uvYiIzfo21XsGp+MBYMFsxidtd4EWyb/TBhHxTNudAOZa0XYHOBL3H9xZL1K+Rf31YG2nPV8Lsif/zWL3/o5J02ma15jM6vm1Ff14fkJ/VmbUh3mS8+8187+y0z5K6x11/rMyKf/Rzq1PnZPz7zfzb3h68u+Nzb+rcv6DQ+Xflz8AAAAAAMyx/Pv/4y2f/116/F05kP3O/67NqA8AAAAAAAAA8KQddvy/QWP8v13G/wMAAIC5VX1Wr/zu2MNlk/4WW7X8chHxbGN9oGPSzTKrbfcDAAAAAAAAAAAAALpksHMN7+UiYhgRz66ulmVZfdU168N63O0XXdf3H7qs7R/yAACw4+NjjXv5i4jliLic/tbfcHV1tSyXV1bL1XJlKb+fHS0tlyu1z7V5Wi1bGh3gDfFgVFbfbLm2Xd20z8vT2pvfr3qsUdk/QMdmo8XAASAidl6N7k96Rfqf16vFVJbPRctvclgQ+xz/LCjHPwfR9vMUAAAAOHplWZZF+nPeJ9I5/17bnQIAZiK//jfPC6jVarVarX766rpyvLv1IiI269tU7xkMxw8AC2YzPmm7C7RI/p02iIgX2+4EMNeKtjvAkbj/4M56kfIt6q8HaXz3fC3Invw3i+3t8vbjptM0rzGZ1fNrK/rx/IT+vDCjPsyTnH+vmf+VnfZRWu/x8y/3/JqwrWuMJuVf7efxFvrTtpx/v5l/w1Ef/7OyFb2x+XdVzn9wqPz78gcAAAAAgDmWf/9/fK7O/44edXem2u/879rYLY6uLwAAAAAAAADwpNx/cGc93/eaz/9/Ycx67v98OuX8C/l3Us6/18j/q431+rX5e28/zP/fD+6s//HWvz6fpwfNfynPFOmZVaRnRJEeqRik6ePs3WdtDfuj6pGGRa8/SNf8lMN341pcj404u2fdXvr/eNh+bk971dPhdnvZ32k/v6d9sNuet7+wp32Yri4qV3L76ViPn8f1eGe7vWpbmrL/y1PayyntOf++47+Tcv6D2leV/2pqLxrTyr2Pep857uvTcY/z1rUv/ubs0e/OVFvR3923umr/Xm6hP9v/J8+M4pc3N26cvn311q0b5yJN9iw9H2nyhOX8h+lr9+f/Kzvt+ed+/Xi999Ho0PnPi60YTMz/ldp8tb+vzrhvbcj5j9JXzv+d1D7++F/k/Ccf/6+10B8AAAAAAAAAAAAAAADYT1mW27eIvhURF9P9P23dmwkAzFZ+/S+TvHxWdX/Gj6dWL3hdzFl/Zlp/Ws5Xf9TqRazryvHerBcR8bf6NtV7hl+P+2YAwDz7NCL+2XYnaI38Oyz/vb9qerLtzgAzdfODD3969fr1jRs32+4JAAAAAAAAAPCo8vifa7Xxn0+WZXm3sd6e8V/fjrXHHf9zkGd2BxidMFB1//D7tJ+t3qjfqw03/lJMGv97uDu33/jfgymPN5zSPprSvjSlfXlK+9gbPWpy/i/Vxjs/GREnGsOvd2H81+aY912Q83+59nyu8v9KY716/uXvFzn/3p78z9x6/xdnbn7w4alr7199b+O9jZ9dOHfu7IWLFy9dunTm3WvXN87u/Ntij49Wzj+Pfe060G7J+efM5d8tOf8vpVr+3ZLz/3Kq5d8tOf/8fk/+3ZLzz5995N8tOf9XUy3/bsn5fy3V8u+WnP9rqZZ/t+T8v55q+XdLzv9UquXfLTn/06mWf7fk/M+k+oD5rxx1v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/v1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4Gf2TevHUgMhPyd/A1sHBNCssmu7cQvtCkmvDa8lUAo9AXb9a7Ngt/w2iXQSDYNlEgYFVW0DRdtAaE2NxW54IJWgHKBWiFVgvaC3iAqVC6iKqCAVIlWkK3mnOd5dmZ2dmbXHq/PnPP5SPbPO3NmzpkzZ87ud9ffHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWt36+vlPN7Isa/7J/9qaZS9o/nvz1Nb8stdc6y0EAAAArtSv8r+fuyFdcHANN2pZ5p9f/t2vLS0tLWXvG/3z8c8vLaUrprJsfFOW5ddFT/3o/Y3WZYLHssnGSMvHI31WP9rn+rE+14/3uX6iz/Wb+lw/2ef6FTtghc3F92PyO9uZ/3NrsUuzG7Px/LqdXW71WGPTyEj8Xk6ukd9mafxYtpCdyOaz2bbli2Ub+fLfuLW5rrdkcV0jLeva3jxCfvbo0bgNjbCPd7ata/k+o5+8Lpv6+c8ePfq35569udvsuxva7q/Yzjt2NLfzk+GSYlsb2aa0T+J2jrRs5/Yuz8lo23Y28ts1/925nc+tcTtHlzdzQ3U+55PZSP7v7+X7aaz123ppP20Pl/3itizLLi5vducyK9aVjWRb2i4ZWX5+JosjsnkfzUPpxdnYuo7TW9dwnDbn3M7247TzNRGf/1vD7cZW2YbWp+knn5hoed5/uXQ5x2nUfNSrvVY6j8FBv1bKcgzG4+J7+YN+vOsxuDM8/kdvX/0Y7HrsdDkG0+NuOQZ39DsGRyZG821OT0Ijv83yMbirbfnRfE2NfD5ze+9jcObcyTMzix/7+N0LJ48cnz8+f2rPrl2ze/bu3b9//8yxhRPzs8Xfl7m3y29LNpJeAzvCvouvgVd1LNt6qC59aWLF+fdyX4eTPV6HWzuWHfTrcKzzwTU25gW58pguXhvvae70yUsj2Sqvsfz5ufPKX4fpcbe8DsdaXoddP6d0eR2OreF12FzmzJ1r+5plrOVPt21Y/XPBlR2DW1uOwc6vRzqPwUF/PVKWY3AyHBc/uHP1zwXbw/Y+Pr3er0dGVxyD6eGGc0/zkvT1/uT+fHQ7Lm9pXnHdRHZ+cf7sPY8cOXfu7K4sjA3xkpZjpfN43dLymLIVx+vIuo/Xgwsvf/yWLpdvDftq8u7mX5OrPlfNZe69p/dzlX92674/2y7dnYUxYBu9P7t9Nm/uz4ks+8K3P/HQNx/9wutX3Z/NvPnJmSv/Wjzl0pbz7/gq59+Y+58v1pfu6rHR8bHi9Tua9s542/m4/akay89djXzdz82s7Xw8Hv5s9Pn4xh7n420dyw76fDze+eDi+bjR77sdV6bz+ZwMx8mJ2d7n4+Yy23av95gc63k+vi3MRtj/rw5JIeWilmNnteM2rWtsbDw8rrG4hvbjdE/b8uMhmzXX9eTu8EVh2sq1Had33FYsP9pyu2ijjtOpjmUHfZym732tdpw2+n337fJ0Pp+T4bi4cU/v47S5zNP3Xvm5c3P8Z8u5c6LfMTg+OtHc5vF0EObn+2xpczwG78mOZqezE9lcfu1Efjw18nVN37e2c+VE+LPR58ptPY7BOzqWHfQxmD6PrXbsNcZWPvgB6Hw+J8Nx8cR9vY/B5jJv2DfYr13vCJekZVq+du38/tpq3/O6pWM3Xa1jZSxs57f39f7ebHOZE/vXmzN776e7wiXXddlPna/f1V5Tc9nG7KdtYTuf3b/6fmpuT3OZzx9Y4/F0MMuyCx95IP9+b/j5yoXz3/9a289duv1M58JHHvjpC4/903q2H4Dh93wxthSf61p+MrWWn/8DAAAAQyHm/pEwE/kfAAAAKiPm/vi/whP5HwAAACoj5v6xMJMq5P8/7r/Itjc8u/D8hSw185eCeH3aDQ8Wy8WO62z4eGppWfPyB74y/9//eGFtmzeSZdkvH/yjrstvezBuV2EqbOdTb2y/fIWv3b2mdR9++EJab2t//Yvh/uPjWeth0K2CO5tl2Tdu+Gy+nqn3X8rn0w8ezudDFx9/rLnMcweKj+Ptn3lJsfxfhfLvwWNH2m7/TNgPPw5z9q3d90e83VcvvXr7vvcury/errHj+vxhP/GB4n7j78n53GPF8nE/r7b93/zMk19tLv/IK7tv/4WR7tv/ZLjfr4T5Py8rlm99Dpofx9t9Kmx/XF+83T1f/lbX7X/q08XyZ95ULHc4zLj+O8LHO9/07ELr/nqkcaTtcWVvLpaL65/9/p/m18f7i/ffuf2Thy617Y/O4+PpfyvuZ6Zj+Xh5XE/0Dx3rb95P6/EZ1//knxxu28/91v/UQ8+8rHm/neu/q3W5iSzLPnJnvv7l+2v/jU1//anPdl1f3J6Df3+m7fEcfFd4HYf1P/GBcDyG6//3qeL+On+7wuF3tZ9/4vJf3Hqh7fFEb/l5sf6nXns8n5smN2+57gUvvP7iK5r7Lsu+t6m4v37rP/43p9u2/0s3FfsjXh87+p3rX01c/9mPTp86vXh+YS7t1UdvyH93ztuK7Ynbe0M4t3Z+fOj0uQ/On52anZrNsqnq/gq9y/blMH9ajIu9l15acQa98+HwfN7yl9/Ycvu/fiZe/u/vKS6/9Nbi89arwnKfC5dvDc/f+ta/0hO33pS/vhtPhy1cWvn7gq/E9p3/tX9NC4bH3/l1QTzez7z0g/l+aF6Xf96Ir+sr3P4fzhX38/WwX5fCb2becdPy+lqXj78b4dK7i9f7Fe+/cJqLz+vfhef77T8u7j9uV3y8Pwxfx3xrW/v5Lh4fX78w0nn/+W/xuBjOJ9nF4vq4VNzfl567qevmxd9Dkl28Of/4z9L93Lyuh7maxY8tzpxYOHX+kZlz84vnZhY/9vFDJ0+fP3XuUP67PA99qN/tl89PW/Lz09z83nuz/Gx1uhhX2bXe/jMPH53bN3v73PyxI+ePnXv4zPzZ40cXF4/Ozy3efuTYsfmP9rv9wtz9u3Yf2LNv9/Txhbn79x84sOfA9MKp083NKDaqj72zH54+dfZQfpPF++89sOu+++6dnT55em7+/n2zs9Pn+90+/9w03bz1H06fnT9x5NzCyfnpxYWPz9+/68Devbv7/jbAk2eOLU7NnD1/aub84vzZmeKxTJ3LL25+7ut3e6pp8T+Kr2c7NYpfxJe986696fezNn3lE6veVbFIxy8QfTb8LprvvOjM/rV8HHP/eJhJFfI/AAAAkIu5fyLMRP4HAACAyoi5f1OYifwPAAAAlRFz/2SY6b8E1CT/V67/v+3Cmtav/6//37q/9P+79P+bj7Oq/f93l63/X5wv9P8H40r79/r/gf6//r/+v/6//j8DULb+f8z9m7PMz/8BAACgomLu3xJmIv8DAABAZcTcf12YifwPAAAAlRFz/wvCTGqS//X/9f/1//X/9f+7r1//fzjp//em/9+H/v9MVq/+/8VBbv816P9vbv1A/58yKlv/P+b+F4aZ1CT/AwAAQB3E3H99mIn8DwAAAJURc/8NYSbyPwAAAFRGzP1bw0xqkv/1/6+o/586V/r/7duv/99O/z8cD/r/+v8bQP+/N/3/PvT/vf//cPX/2+j/U0Zl6//H3P+iMJOa5H8AAACog5j7XxxmIv8DAABA+Yxd3s1i7n9JmMmK/H+ZKwAAAACuuZj7b8w6iuA1+fm//r/3/9f/1/8fuv7/UvGv8vT/RzP9//LQ/+9N/78P/X/9f/1//X8Gqmz9/zz3Z5PZS8NMapL/AQAAoA5i7r8pzET+BwAAgMqIuf//hZnI/wAAAFAZMfdvCzOpSf7X/69M//8XrU+d/r/+f6/1D33/P8zy9P+9/3+Z6P/3pv/fh/6//r/+v/4/A1W2/n/M/TeHmdQk/wMAAEAdxNx/S5iJ/A8AAACVEXP//w8zkf8BAACgMmLu3x5mUpP8r/9f8v5/bI56/3/9f/3/Uvb/J/X/S0f/vzf9/z70//X/9f/1/xmosvX/Y+5/WZhJTfI/AAAA1EHM/S8PM5H/AQAAoDJi7n9FmIn8DwAAAJURc/9UmElN8v96+v+Ni/r/q7nK7/8/sYb3/2+j/6//32v9+v/e/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/lvDTGqS/wEAAKAOYu7fEWYi/wMAAEBlxNx/W5iJ/A8AAACVEXP/zjCTmuR/7/8/FP3/TP9f/1//X/9f/39t9P970//vQ/9f/1//X/+fgSpb/z/m/leGmdQk/wMAAEAdxNx/e5iJ/A8AAACVEXP/q8JM5H8AAACojJj77wgzqUn+1//X/9f/1//X/+++fv3/4aT/35v+fx/6//r/+v/6/wxU2fr/Mfe/OsykJvkfAAAA6iDm/jvDTOR/AAAAqIyY++8KM5H/AQAAoDJi7p8OM6lJ/tf/1//X/9f/1//vvn79/+Gk/9+b/n8f+v/6//r/+v8MVNn6/zH33x1mUpP8DwAAAHUQc/89YSbyPwAAAFRGzP0zYSbyPwAAAFRGzP2zYSY1yf/6//r/+v/6/+vq/79i+X71/wv6/+Wi/9+b/n8f+v/6/9e8/z+u/0+llK3/H3P/rjCTmuR/AAAAqIOY+3eHmcj/AAAAUBkx9+8JM5H/AQAAoDJi7r83zKQm+V//X/9f/1//3/v/d1+//v9w0v/vbfD9//gQN4ep/5/p/+v/e/9//X+SsvX/Y+6/L8ykJvkfAAAA6iDm/r1hJvI/AAAAVEbM/fvCTOR/AAAAqIyY+/eHmdQk/+v/6//r/+v/6/93X7/+/3DS/+/N+//3of+v/z/E/f/msaX/T9mUrf8fc/+BMJOa5H8AAACog5j7XxNmIv8DAABAZcTc/2thJvI/AAAAVEbM/b8eZlKT/K//r/+v/6//X/b+/4T+v/7/Ouj/96b/34f+v/7/EPf/vf8/ZVS2/n/M/feHmdQk/wMAAEAdxNz/G2Em8j8AAABURsz9rw0zkf8BAACgMmLuPxhmUpP8r/+/Qf3/eKH+v/6//r/3/9f/v6r0/3vT/+9D/1//X/9f/5+BKlv/P+b+14WZ1CT/AwAAQB3E3P9AmIn8DwAAAJURc//rw0zkfwAAAKiMmPvfEGZSk/yv/+/9/699/3+8bdv1/5dvp/9f0P/X/18P/f/e9P/70P/X/9f/1/9noMrW/4+5/41hJjXJ/wAAAFAHMfe/KcxE/gcAAIDKiLn/zWEm8j8AAABURsz9bwkzqUn+1//X/7/2/X/v/6//X9D/1/8fBP3/3vT/+9D/1//X/9f/Z6DK1v+Puf83w0xqkv8BAACgDmLufzDMRP4HAACAyoi5/61hJvI/AAAAVEbM/W8LM6lJ/tf/1//X/9f/1//vvn79/+Gk/9/bkPX/f3V9uFz/v6D/X+7tX2//f6zj46vS///Rav3/pU2dt9f/52ooW/8/5v63h5nUJP8DAABAHcTc/44wE/kfAAAAKiPm/neGmcj/AAAAUBkx9/9WmElN8r/+f3M7ltvL+v/6//kF+v/6//r/Q0v/v7ch6/97//8O+v/l3n7v/6//z0pl6//H3P+uMJOa5H8AAACog5j7Hwozkf8BAACgMmLuf3eYifwPAAAAlRFz/3vCTGqS//X/vf+//r/+v/5/9/Xr/w8n/f/e9P/70P/X/y9b//8/9f8ZbmXr/8fc/3CYSU3yPwAAANRBzP3vDTOR/wEAAKAyYu7/7TAT+R8AAAAqI+b+94WZ1CT/6/8PS/9/Sv9/nf3/iXCZ/r/+v/5/vej/96b/34f+v/5/2fr/3v+fIVe2/n/M/e8PM1l7/p9c85IAAADANRFz/++EmdTk5/8AAABQBzH3/26YifwPAAAAlRFz/++FmdQk/+v/D0v/3/v/Z97/X/+/4/Ho/+v/d7Nx/f945tH/1//X/4/0//X/9f/pVLb+f8z9vx9msr78v3ldSwMAAAAbKub+D4SZ1OTn/wAAADDsuv2f7E4x9x8KM5H/AQAAoDJi7j8cZlKT/K//r/+v/1/S/v9f7PiXH3z3HYd36f/r/+v/r8uGvv9/88Xv/f/1//X/E/1//X/9fzqVrf8fc/+RMJPl4Pc2b/APAAAAwy3m/j8IM6nJz/8BAACgDmLuPxpmIv8DAABAZcTcPxdmUpP8r/+v/6//X9L+/xC//3/cH8PU/5/eNET9/3jS1f/vakP7/+9d7onr/6+3/z/R9dLO/n9D/7+N/v+6t/87WZbp/+v/cw2Vrf8fc/98mElN8j8AAADUQcj9I8eKuXyF/A8AAACVEXP/8TAT+R8AAAAqI+b+D4aZ1CT/6//r/+v/6/97///u6y9t/9/7//ek/99befr/3Xn/f/3/Yd5+/X/9f1YqW/8/5v6FMJOa5H8AAACog5j7PxRmIv8DAABAZcTc/+EwE/kfAAAAKiPm/hNhJjXJ//r/+v/6//r/+v/d16//P5z0/3vT/+9D/1//X/9f/5+BKlv/P+b+k2EmNcn//B9799FkaX3dcfw2boqZYuOdF17Ye78EFmZtvwAv2HhhV7m8ANs4JwbniHMOOBsHHMDGOOGgDEpIKAtJKKEcUEZSjYqZc85Mdz/93OmZ232f+z+fz0JHamm4jWsK/GP48gcAAKCD3P13xi32PwAAAAwjd/9dcYv9DwAAAMPI3f9dcUuT/a//1/8P2/9/o/7/uM/X/+v/R6b/n6f/X0P/r//X/+v/2ail9f+5+787bmmy/wEAAKCD3P3fE7fY/wAAADCM3P13xy32PwAAAAwjd//3xi1N9v+h/n9v1bP/z4xX/z9S/+/9/2M/X/+v/x/Z2fb/977wRz79v/5f/x/0//p//T+HLa3/z93/fXFLk/0PAAAAHeTu//64xf4HAACAYeTu/4G4xf4HAACAYeTu/8G4pcn+9/6/9//1//p//f/05+v/d5P3/+d16v/vfurWO5975GsfPcnn6//1//p//T+btbT+P3f/D8UtTfY/AAAAdJC7/4fjFvsfAAAAhpG7/0fiFvsfAAAAdtD5ya/m7v/RuKXJ/tf/6//1/9H/n9P/6//1/yPQ/8/r1P9fz+fr//X/+n/9P5u1tP4/d/+PxS1N9j8AAAB0kLv/x+MW+x8AAACWa+pvxJ6Ru/+euMX+BwAAgGHk7r8QtzTZ//r/0+//v6z/343+3/v/+n/9/xD0//P0/2vo//X/+n/9Pxu1tP4/d/+9cUuT/Q8AAAAd5O7/ibjF/gcAAIBh5O7/ybjF/gcAAIBh5O7/qbilyf7X/3v/X/+v/9f/T3++/n836f/n6f/X0P/faD9/s/5f/6//52on7P+fn/nD9kb6/9z9Px23NNn/AAAA0EHu/p+JW+x/AAAAGEbu/p+NW+x/AAAAGEbu/p+LW5rsf/2//l//r/+/7v7/6E+9S/T/0/T/Z0P/P28x/f/e/uSX9f873/97/1//r//ngKW9/5+7/+fjlib7HwAAADrI3f8LccvM/j/xX8wHAAAAtip3/y/GLX79HwAAAHZeVme5+38pbmmy//X/+n/9v/7f+//Tnz/X/z961fen/18W/f+8xfT/x9D/6/93+fvX/+v/OWpp/X/u/l+OW5rsfwAAAOggd/99cYv9DwAAAMPI3f8rcYv9DwAAAMPI3f+rcUuT/T/d/1/57/X/10b/f/D71/9P//zYVP+fv0X9/2z/f7v3/3vS/8/T/6+h/9f/6/+P6//Pr/vx+n+mLK3/z93/a3FLk/0PAAAAHeTu//W4xf4HAACAYeTu/424xf4HAACAYeTu/824pcn+9/6//l//v3v9v/f/L9vm+/+rM+//9/X/10j/P0//v4b+X/+v/59//3/mnwKg/2fK0vr/3P2/Fbc02f8AAADQQe7+345b7H8AAADYDVf/vQOH/4bSkLv/d+IW+x8AAACGkbv/d+OWcfb/7Fud+n/9v/5f/6//n/78ZfX/3v+/Vvr/efr/NfT/p9HP7w/W/99/3I9fQv9/z2n3/zP0/0w50P8/duXr2+r/c/f/Xtwyzv4HAACA9nL3/37cYv8DAADAMHL3/0HcYv8DAADAMHL3/2Hc0mT/n3r/P/NPH9D/6//1//p//b/+f9P0//P0/2vo/73/7/1//T8bdaD/v8q2+v/c/X8UtzTZ/wAAANBB7v4/jlvsfwAAABhG7v774xb7HwAAAIaRu/9P4pYm+9/7//p//b/+X/8//fn6/910Q/39Tfr/ov/X/+v/9f/6fzZgaf1/7v4/jVua7H8AAADoIHf/n8Ut9j8AAAAMI3f/n8ct9j8AAAAMI3f/X8QtTfa//v90+//8uv5f/7/S/+v/9f9nou37/3tTfyY66pj+/4nvuPDNB7/SuP+/Wf+v/9f/6/85ka+e+e8W0f9fvPL/Xebu/8u4pcn+BwAAgA5y9/9V3GL/AwAAwDBy9/913GL/AwAAwDBy9z8Qt5xw/881D0um//f+v/5f/6//n/58/f9uatv/XyPv/6/h/X/9v/5f/89GLaL/v+o/5+7/m7jFr/8DAADAMHL3/23cYv8DAADAMHL3/13cYv8DAADAMHL3/33c0mT/6//1//p//b/+f/rz9f+7Sf8/T/+/xi71/w/cQP+/P/3lbffzN2rb37/+X//PUUvr/3P3Pxi3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf/2//l//r//X/09/vv5/N+n/5+n/V6vVQzPfwFT/f/GWZfb/3v9f3Pev/9f/c9TS+v/c/f8ctzTZ/wAAANBB7v6H4hb7HwAAAIaRu//huMX+BwAAgGHk7v+XuKXJ/tf/6//1/1vp/+NL+n/9v/5/0/T/8/T/a+zS+//6/8V9//p//T9HLa3/z93/r3FLk/0PAAAAHeTufyRusf8BAABgGLn7/y1usf8BAABgGLn7H41bmux//b/+X//v/X/9//Tn6/930+n1/yv9v/5f/7+G/l//r//nsKX1/7n7/z1uabL/AQAAoIPc/f8Rt9j/AAAAMIzc/f8Zt9j/AAAAMIzc/f8VtzTZ//p//b/+X/+v/5/+fP3/bvL+/zz9/xr6f/2//l//z0ZN9//3bK3/z93/33FLk/0PAAAAHeTufyxusf8BAABgGLn7/ydusf8BAABgGLn7/zduabL/9f/6/4P9/2ql/9f/6/8vO4P+/9xK/79x+v95+v819P9j9v83rQbq/88f++P1/yzR0t7/z93/f3FLk/0PAAAAHeTu//+4xf4HAACAYeTuf1HcYv8DAADAMHL3vzhuabL/9f/6f+//6//1/9Of7/3/3aT/n6f/X0P/P2b/7/1//T9bs7T+P3f/S+KWJvsfAAAAOsjd/9K4xf4HAACAYeTuf1ncYv8DAADAMHL3vzxuabL/9f/6f/2//l//P/35+v/d1Lz/P/5h8KD/X0P/r//X/+v/2ail9f+5+18RtzTZ/wAAANBB7v7H4xb7HwAAAIaRu/+JuMX+BwAAgGHk7n9l3NJk/+v/9f/6/93s/8/p//X/+v9JS+n/b7vtm570/r/+X/+v/9f/6/+7W1r/n7v/VXFLk/0PAAAAHeTuf3XcYv8DAADAMHL3vyZusf8BAABgGLn7Xxu3NNn/R/v/m1eXC9XLpvr/aNT0/1fR/x/8/vX/0z8/vP+v/9f/n76l9P9bev9/Lf3/Gvp//f9Z9f9ff/TH6/8Z0dL6/9z9T8YtTfY/AAAAdJC7/3Vxi/0PAAAAw8jd//q4xf4HAACAYeTufypuabL/vf+v/9f/6//1/9Ofr//fTfr/efr/NfT/+n/v/9/1bV+l/2dzltb/5+5/Q9zSZP8DAABAB7n73xi32P8AAAAwjNz9b4pb7H8AAAAYRu7+N8ctTfa//l//r//X/+v/pz9f/7+b9P/z9P/l8O/aZX36/3NTX9x2P3+jtv39D9P/e/+fDVpa/5+7/y1xS5P9DwAAAB3k7n9r3GL/AwAAwDBy978tbrH/AQAAYBi5+98etzTZ//p//f/4/f+36v8Pfb7+X/8/Mv1//hl9mv5/jT79/6Rt9/O7/v3r//X/HLW0/j93/9NxS5P9DwAAAB3k7n9H3GL/AwAAwDBy978zbrH/AQAAYBi5+98VtzTZ//r/Xv3/3qpj/+/9f/2//r8T/f88/f8am+//zx/67ev/T9G2v3/9v/6fo5bW/+fuf2Zvv+X+BwAAgF31Ld/wnU9f6//2mUv/em717rjl9tXFa/xlbAAAAGDhXtj9e/ur1Xsu/Se//g8AAAAjyt3/3rilyf7X//fq/3u+/6//1//r/zvR/8/T/6/h/X/9v/5f/89GLa3/z93/vrjlquG3f+LfSwAAAGBJcve/P25p8uv/AAAA0EHu/mf3V2v2v38cIAAAAOyqZy/967nVB+KWJr/+r/9feP+/OqX+P/53+v/L9P/6/6nP1//vJv3/vBvs/y/u6f/1/zP0//p//T+HLa3/z93/wbilyf4HAACAQR34Kwq5+z8Ut9j/AAAAMIzc/R+OW+x/AAAAGEbu/o/ELU32v/7/zPv/TNVP8f3/8/XvvP/fvP+/79zk5+v/9f8j0//P8/7/Gvr/Ufr/W/T/+n+WYWn9f+7+j8YtTfY/AAAAdJC7/2Nxi/0PAAAAw8jd//G4xf4HAACAYeTu/0Tc0mT/6/8X/v7/dfX/1/D+v/6/R/9/zOeP0/9/za0XHr/j2x9+UP/PFWfZ/+fPBf2//l//f9mC+n/v/+v/WYjN9//7B7540v4/d/8n45Ym+x8AAAA6yN3/XNxi/wMAAMAwcvd/Km6x/wEAAGAYufs/Hbc02f/6f/3/Uvr//L/1Fvr/C9fd/59frVZb6f+zKe7e/3v/X/9/lPf/5+n/19D/6//1//p/Nmrz/f/BL560/8/d/5m4pcn+BwAAgA5y9382bsn9v3fiv3QPAAAALEzu/s/FLX79HwAAAIaRu//zcUuT/a//1/8vpf9P3v+/8uPGev//jopTe/b/X1f/Tv9/uvT/8/T/a+j/9f/6f/0/G7W0/j93/xfilib7HwAAADrI3f983GL/AwAAwDBy938xbrH/AQAAYBi5+78UtzTZ//r/Ufv/LOL1//r/pfT/3v/3/v/Z0P/P0/+vof/X/+v/9f9s1NL6/9z9XwkAAP//6fBxbA==")
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2m36.973112869s ago: executing program 3 (id=2956):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="6a0ac4ff000000007110af0000000000950900"], &(0x7f0000000480)='GPL\x00'}, 0x94)

2m36.780950897s ago: executing program 3 (id=2959):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_adj\x00')
read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2108)

2m36.694196849s ago: executing program 37 (id=2959):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_adj\x00')
read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2108)

2m31.181130729s ago: executing program 8 (id=3049):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0000002000010029bd7000fddbdf2502800006040000040c000000080001"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

2m31.110252807s ago: executing program 8 (id=3050):
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @multicast2, {[@rr={0x7, 0x23, 0x37, [@local, @local, @rand_addr=0x64010100, @remote, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @cipso={0x86, 0xe, 0x2, [{0x1, 0x8, "103817099281"}]}, @timestamp_addr={0x44, 0xc, 0xd5, 0x1, 0x6, [{@multicast2, 0xfffffffd}]}]}}}}}}}, 0x0)

2m31.110078829s ago: executing program 8 (id=3051):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006)

2m30.981893573s ago: executing program 8 (id=3052):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000300)='./file2\x00', 0x0)

2m30.901635283s ago: executing program 8 (id=3053):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000240), &(0x7f0000000300)=0x80)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
clock_nanosleep(0xfffff000, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0)
io_setup(0x7, &(0x7f0000000280))
openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x1fd, 0x0)
io_submit(0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0)

2m30.16171606s ago: executing program 8 (id=3057):
r0 = epoll_create1(0x80000)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1000000c})

2m30.102036499s ago: executing program 38 (id=3057):
r0 = epoll_create1(0x80000)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1000000c})

2m8.540772345s ago: executing program 9 (id=3323):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x40000)
bind$tipc(r1, 0x0, 0x0)

2m8.4107934s ago: executing program 9 (id=3324):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}}}}}}, 0x0)

2m8.4105022s ago: executing program 9 (id=3325):
socket$can_raw(0x1d, 0x3, 0x1)
close(0x3)

2m8.36004946s ago: executing program 9 (id=3326):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

2m8.359857073s ago: executing program 9 (id=3327):
mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000180)={0x10001e, 0x100074, 0x40000}, 0x20)

2m8.131190964s ago: executing program 9 (id=3328):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000bc0)=""/235, 0xeb}, {&(0x7f0000000a40)=""/185, 0xb9}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000e40)=""/202, 0xca}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000880)=""/172, 0xac}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f0000000140)=""/127, 0x7f}], 0x9, 0x0, 0xd56445279b59b3be}, 0x0)

2m8.059483606s ago: executing program 39 (id=3328):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000bc0)=""/235, 0xeb}, {&(0x7f0000000a40)=""/185, 0xb9}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000e40)=""/202, 0xca}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000880)=""/172, 0xac}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f0000000140)=""/127, 0x7f}], 0x9, 0x0, 0xd56445279b59b3be}, 0x0)

1m46.671463156s ago: executing program 4 (id=3626):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000041000701000000000700000003"], 0x64}}, 0x4010)

1m45.760304457s ago: executing program 4 (id=3630):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080)

1m45.760069631s ago: executing program 4 (id=3631):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84)

1m44.860832432s ago: executing program 4 (id=3642):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@nomblk_io_submit}, {@auto_da_alloc}, {@minixdf}]}, 0xfe, 0x572, &(0x7f0000000240)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m44.743988283s ago: executing program 4 (id=3644):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000006dc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}], 0x1, 0x44810)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1m44.268296483s ago: executing program 4 (id=3647):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r4}, &(0x7f0000000300), &(0x7f00000002c0)=r6}, 0x20)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1m44.096672665s ago: executing program 40 (id=3647):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r4}, &(0x7f0000000300), &(0x7f00000002c0)=r6}, 0x20)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

4.076136893s ago: executing program 7 (id=5295):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e20, 0x40080000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r2}}}], 0x28}, 0x4)

3.838513846s ago: executing program 7 (id=5298):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.628489162s ago: executing program 1 (id=5340):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f00000009c0)={[{@barrier}, {@force}, {@umask={'umask', 0x3d, 0x99}}, {@uid}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@uid}, {@umask={'umask', 0x3d, 0x200}}]}, 0xb, 0x6c4, &(0x7f00000002c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.56443544s ago: executing program 1 (id=5341):
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10)

1.477580139s ago: executing program 1 (id=5342):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00', 0x20)

1.477423577s ago: executing program 1 (id=5343):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x6159, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x4000}, {0x8, 0x0, 0x10, 0x100000400000000}, {}, 0x0, 0x3506, 0xa, 0x0, 0xfe, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd320-generic\x00'}, 0x0, 0x60}}]}, 0x184}}, 0x0)

1.477241742s ago: executing program 1 (id=5344):
r0 = syz_io_uring_setup(0x26fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x34b}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

1.476876439s ago: executing program 1 (id=5345):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000), 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

523.746398ms ago: executing program 2 (id=5359):
r0 = io_uring_setup(0x4e95, &(0x7f0000000000)={0x0, 0xd7e2, 0x100, 0x2, 0xc5})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x6, 0xffffffffffffffff, 0xa, {0x4, 0x5}, 0x9}, 0x1)

523.54322ms ago: executing program 7 (id=5360):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)

523.294261ms ago: executing program 2 (id=5361):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de05", 0x12}, {&(0x7f0000000540)="37a8a6c41ef711513a5554633f6ecf2512425af281e45325101699c31d746d9751dcb943b8375ff6", 0x28}], 0x3)

522.953654ms ago: executing program 7 (id=5362):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0xfffffffffffffef6, 0x739, &(0x7f0000000100)="330e30", 0x0, 0x1, 0x503, 0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x23)

447.365378ms ago: executing program 2 (id=5363):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
setpriority(0x0, 0x1, 0xa7a8)

446.941118ms ago: executing program 2 (id=5364):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, "b9"}], 0x18}, 0xfc00)

446.63172ms ago: executing program 7 (id=5365):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3c, 0x9, 0x70bd26, 0x0, {0x2}, [@typed={0x4, 0x200}]}, 0x18}}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

443.970173ms ago: executing program 2 (id=5366):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xfef85154c7902b6e)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timerfd_create(0x8, 0x80000)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000000c0)="f16a1bd26759bbca23b7d526cfd3e3fa52deadccb5ce", 0x16, 0xfffffffffffffffc)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

177.947021ms ago: executing program 7 (id=5367):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000001000)="$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")
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
sigaltstack(&(0x7f0000000080)={&(0x7f0000002200)=""/4104, 0x1, 0x1008}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

0s ago: executing program 2 (id=5368):
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
r0 = syz_io_uring_setup(0x1d53, &(0x7f0000000200)={0x0, 0x86f1, 0x10100, 0x0, 0x195}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

kernel console output (not intermixed with test programs):

nge from 0 to 4096
[  309.008516][T16019] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  309.017901][T16021] bridge0: entered promiscuous mode
[  309.019809][T16021] macvlan2: entered promiscuous mode
[  309.041180][T16023] loop2: detected capacity change from 0 to 256
[  309.051473][T16023] FAT-fs (loop2): Directory bread(block 64) failed
[  309.053592][T16023] FAT-fs (loop2): Directory bread(block 65) failed
[  309.056064][T16023] FAT-fs (loop2): Directory bread(block 66) failed
[  309.064661][T16023] FAT-fs (loop2): Directory bread(block 67) failed
[  309.067746][T16023] FAT-fs (loop2): Directory bread(block 68) failed
[  309.070490][T16023] FAT-fs (loop2): Directory bread(block 69) failed
[  309.073355][T16023] FAT-fs (loop2): Directory bread(block 70) failed
[  309.080386][T16023] FAT-fs (loop2): Directory bread(block 71) failed
[  309.083177][T16023] FAT-fs (loop2): Directory bread(block 72) failed
[  309.085938][T16023] FAT-fs (loop2): Directory bread(block 73) failed
[  309.179067][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'.
[  309.325026][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  309.351072][T16038] loop2: detected capacity change from 0 to 32768
[  309.358263][T16038] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  309.378290][T16038] XFS (loop2): Ending clean mount
[  309.402155][T14949] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  309.487428][   T24] usb 2-1: Using ep0 maxpacket: 16
[  309.498760][   T24] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52
[  309.501937][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.505165][   T24] usb 2-1: Product: syz
[  309.507952][   T24] usb 2-1: Manufacturer: syz
[  309.509907][   T24] usb 2-1: SerialNumber: syz
[  309.513001][   T24] usb 2-1: config 0 descriptor??
[  309.548973][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3710'.
[  309.719139][    T9] usb 2-1: USB disconnect, device number 11
[  309.865836][T16057] loop2: detected capacity change from 0 to 32768
[  309.964890][T16065] loop7: detected capacity change from 0 to 32768
[  310.071500][T16067] loop2: detected capacity change from 0 to 32768
[  310.076495][T16067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3717 (16067)
[  310.083495][T16067] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  310.089240][T16067] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  310.121037][T16067] BTRFS info (device loop2): enabling ssd optimizations
[  310.123760][T16067] BTRFS info (device loop2): enabling free space tree
[  310.143847][T14949] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  310.240856][T16095] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3723'.
[  310.244193][T16095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3723'.
[  310.248091][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'.
[  310.310214][T16100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.423346][T16105] loop1: detected capacity change from 0 to 2048
[  310.429292][T16105] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  310.452415][T16106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  310.483883][T16105] NILFS (loop1): error -2 truncating bmap (ino=16)
[  310.517433][   T54] Bluetooth: hci2: command tx timeout
[  310.838918][T16119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.473943][T16133] loop1: detected capacity change from 0 to 4096
[  311.580429][T16131] loop7: detected capacity change from 0 to 32768
[  311.584373][T16131] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3739 (16131)
[  311.590898][T16131] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  311.595002][T16131] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  311.663821][T16154] loop2: detected capacity change from 0 to 256
[  311.754373][T16131] BTRFS info (device loop7): turning off barriers
[  311.757998][T16131] BTRFS info (device loop7): enabling free space tree
[  311.802125][T12157] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  312.493919][T16180] loop7: detected capacity change from 0 to 512
[  312.498031][T16180] EXT4-fs (loop7): Invalid log cluster size: 956301314
[  312.572029][T16182] loop1: detected capacity change from 0 to 1024
[  312.591438][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3755'.
[  312.597666][   T54] Bluetooth: hci2: command tx timeout
[  312.780158][T16187] loop7: detected capacity change from 0 to 4096
[  312.830803][T16187] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  312.882317][T12157] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  313.196522][T16194] loop1: detected capacity change from 0 to 2048
[  313.214421][T16194] hpfs: filesystem error: improperly stopped; already mounted read-only
[  313.218239][T16194] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  313.504034][T16206] loop2: detected capacity change from 0 to 1024
[  313.524766][T16206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.545579][T16206] EXT4-fs (loop2): shut down requested (0)
[  313.578025][T14949] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.711407][T16217] loop7: detected capacity change from 0 to 32768
[  313.782755][T16217] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  313.782776][T16217]   allowing incompatible features above 0.0: (unknown version)
[  313.782785][T16217]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  313.801478][T16217] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  313.805505][T16217] bcachefs (loop7): initializing new filesystem
[  313.813210][T16217] bcachefs (loop7): going read-write
[  313.822920][T16217] bcachefs (loop7): marking superblocks
[  313.829332][T16217] bcachefs (loop7): initializing freespace
[  313.833498][T16217] bcachefs (loop7): done initializing freespace
[  313.837466][T16217] bcachefs (loop7): reading snapshots table
[  313.840112][T16217] bcachefs (loop7): reading snapshots done
[  313.849674][T16217] bcachefs (loop7): done starting filesystem
[  314.009969][T16242] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3776'.
[  314.208552][T16254] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  314.311222][T16261] loop2: detected capacity change from 0 to 2048
[  314.351184][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'.
[  314.355734][T16265] netlink: 'syz.1.3787': attribute type 21 has an invalid length.
[  314.393997][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3789'.
[  314.469290][T16275] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  314.508668][T12157] bcachefs (loop7): shutting down
[  314.512127][T12157] bcachefs (loop7): going read-only
[  314.514380][T12157] bcachefs (loop7): finished waiting for writes to stop
[  314.520174][T12157] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  314.530641][T12157] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  314.534857][T12157] bcachefs (loop7): clean shutdown complete, journal seq 4
[  314.538431][T12157] bcachefs (loop7): marking filesystem clean
[  314.549152][T12157] bcachefs (loop7): shutdown complete
[  314.677196][   T54] Bluetooth: hci2: command tx timeout
[  315.305317][T16282] loop1: detected capacity change from 0 to 512
[  315.309736][T16282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  315.319847][T16282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.324163][T16282] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.396376][T16293] lo speed is unknown, defaulting to 1000
[  315.668169][   T24] delete_channel: no stack
[  315.690429][T16313] loop7: detected capacity change from 0 to 256
[  315.694712][T16313] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  315.754233][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3808'.
[  315.795762][T16322] loop7: detected capacity change from 0 to 128
[  315.803415][   T33] audit: type=1800 audit(2000000188.800:259): pid=16322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3810" name="file1" dev="loop7" ino=1048684 res=0 errno=0
[  316.089319][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.121757][T16330] cifs: Bad value for 'port'
[  316.225731][T16338] loop7: detected capacity change from 0 to 4096
[  316.229671][T16338] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  316.527479][ T5996] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  316.726800][ T5996] usb 8-1: Using ep0 maxpacket: 16
[  316.730989][ T5996] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  316.735529][ T5996] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  316.743306][ T5996] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  316.747324][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.750772][ T5996] usb 8-1: Product: syz
[  316.753231][ T5996] usb 8-1: Manufacturer: syz
[  316.755197][ T5996] usb 8-1: SerialNumber: syz
[  316.928632][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.975152][ T5996] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  316.981036][ T5996] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  316.992300][ T5996] usb 8-1: USB disconnect, device number 19
[  317.035987][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3826'.
[  317.040389][T16359] netlink: 'syz.1.3826': attribute type 7 has an invalid length.
[  317.106647][T16365] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3829'.
[  318.023098][T16400] loop1: detected capacity change from 0 to 128
[  318.025951][T16400] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  318.032123][T16400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  318.322340][T16419] overlayfs: failed to clone upperpath
[  318.812152][T16425] netlink: 'syz.1.3849': attribute type 5 has an invalid length.
[  319.050678][T16437] fuse: Bad value for 'fd'
[  319.108663][ T5996] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  319.260305][ T5996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.264314][ T5996] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  319.268850][ T5996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.272345][ T5996] usb 2-1: config 0 descriptor??
[  319.373231][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'.
[  319.376999][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'.
[  319.696086][ T5996] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor
[  319.701585][ T5996] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0017/input/input20
[  319.765656][ T5996] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  319.774124][T16477] nbd: must specify a size in bytes for the device
[  319.810555][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3875'.
[  320.230275][T16519] loop7: detected capacity change from 0 to 32768
[  320.233853][T16519] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3894 (16519)
[  320.245282][T16519] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  320.250584][   T24] usb 2-1: USB disconnect, device number 12
[  320.254132][T16519] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  320.299416][T16519] BTRFS info (device loop7): enabling ssd optimizations
[  320.302233][T16519] BTRFS info (device loop7): enabling free space tree
[  320.329938][T12157] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  320.424868][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3898'.
[  320.455295][T16546] kernel read not supported for file /eth0 (pid: 16546 comm: syz.7.3900)
[  320.459566][   T33] audit: type=1800 audit(2000000193.460:260): pid=16546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3900" name="eth0" dev="mqueue" ino=45010 res=0 errno=0
[  320.633990][T16558] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  320.639614][T16558] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  320.644602][T16558] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  320.732432][T16563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  320.735548][T16563] batadv_slave_0: entered promiscuous mode
[  320.738451][T16563] batadv_slave_0: entered allmulticast mode
[  320.775005][T16565] loop7: detected capacity change from 0 to 512
[  320.779683][T16565] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  320.781532][T16567] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3910'.
[  320.784705][T16565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  320.788465][T16567] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3910'.
[  320.792105][T16565] System zones: 1-12
[  320.796822][T16565] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.3909: corrupted in-inode xattr: e_value size too large
[  320.806677][T16565] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3909: couldn't read orphan inode 15 (err -117)
[  320.812315][T16565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.842735][T12157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.898105][T16572] tipc: Started in network mode
[  320.900535][T16572] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  320.904615][T16572] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  320.908902][T16572] tipc: Enabled bearer <udp:syz2>, priority 10
[  321.073238][T16578] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3915'.
[  322.038604][ T5996] tipc: Node number set to 1
[  322.348568][T16618] XFS (nullb0): Invalid superblock magic number
[  322.358062][T16619] pim6reg: entered allmulticast mode
[  322.466356][T16634] netlink: 'syz.2.3937': attribute type 12 has an invalid length.
[  322.469727][T16634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3937'.
[  322.581431][T16642] loop1: detected capacity change from 0 to 2048
[  322.607724][T16642]  loop1: p1 p2 p3 < > p4 < p5 p6 >
[  322.609970][T16642] loop1: partition table partially beyond EOD, truncated
[  322.612473][T16642] loop1: p1 start 458755 is beyond EOD, truncated
[  322.614823][T16642] loop1: p2 start 16908804 is beyond EOD, truncated
[  322.617471][T16642] loop1: p3 start 4284289 is beyond EOD, truncated
[  322.620331][T16642] loop1: p5 start 458755 is beyond EOD, truncated
[  322.622662][T16642] loop1: p6 start 16908804 is beyond EOD, truncated
[  322.817200][   T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  322.937153][ T5996] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  322.977688][   T24] usb 8-1: Using ep0 maxpacket: 16
[  322.983095][   T24] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  322.986906][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.990389][   T24] usb 8-1: Product: syz
[  322.992287][   T24] usb 8-1: Manufacturer: syz
[  322.994330][   T24] usb 8-1: SerialNumber: syz
[  322.999113][   T24] usb 8-1: config 0 descriptor??
[  323.003186][   T24] visor 8-1:0.0: Sony Clie 3.5 converter detected
[  323.087138][ T5996] usb 2-1: Using ep0 maxpacket: 16
[  323.090931][ T5996] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  323.094471][ T5996] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  323.098429][ T5996] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  323.101880][ T5996] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  323.105327][ T5996] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  323.109906][ T5996] usb 2-1: config 0 has no interface number 0
[  323.112546][ T5996] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  323.117001][ T5996] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  323.121411][ T5996] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  323.125536][ T5996] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  323.131438][ T5996] usb 2-1: config 0 interface 125 has no altsetting 0
[  323.134515][ T5996] usb 2-1: config 0 interface 125 has no altsetting 2
[  323.139603][ T5996] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  323.143277][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.146623][ T5996] usb 2-1: Product: syz
[  323.148587][ T5996] usb 2-1: Manufacturer: syz
[  323.150595][ T5996] usb 2-1: SerialNumber: syz
[  323.153677][ T5996] usb 2-1: config 0 descriptor??
[  323.157845][ T5996] usb 2-1: selecting invalid altsetting 2
[  323.205604][   T24] usb 8-1: clie_3_5_startup: get config number failed: -32
[  323.209398][   T24] visor 8-1:0.0: probe with driver visor failed with error -32
[  323.925728][T16657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3947'.
[  324.000900][   T33] audit: type=1326 audit(2000000197.000:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16662 comm="syz.2.3949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  324.009404][   T33] audit: type=1326 audit(2000000197.000:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16662 comm="syz.2.3949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  324.018644][   T33] audit: type=1326 audit(2000000197.010:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16662 comm="syz.2.3949" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  324.029513][   T33] audit: type=1326 audit(2000000197.010:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16662 comm="syz.2.3949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  324.040618][   T33] audit: type=1326 audit(2000000197.010:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16662 comm="syz.2.3949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  324.049412][   T33] audit: type=1326 audit(2000000197.010:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16662 comm="syz.2.3949" exe="/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  324.074368][   T33] audit: type=1326 audit(2000000197.070:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16662 comm="syz.2.3949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  324.084935][   T33] audit: type=1326 audit(2000000197.070:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16662 comm="syz.2.3949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  324.165919][   T24] usb 2-1: USB disconnect, device number 13
[  324.758097][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3961'.
[  324.986270][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3969'.
[  325.153589][T16711] loop1: detected capacity change from 0 to 32768
[  325.157823][T16711] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3971 (16711)
[  325.165071][T16711] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  325.169112][T16711] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  325.198450][T16711] BTRFS info (device loop1): enabling ssd optimizations
[  325.200743][T16711] BTRFS info (device loop1): enabling free space tree
[  325.203463][T16711] BTRFS info (device loop1): use zstd compression, level 3
[  325.209540][   T33] audit: type=1800 audit(2000000198.210:269): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3971" name="file1" dev="loop1" ino=260 res=0 errno=0
[  325.233406][T15813] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  325.440065][T16754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.453355][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'.
[  325.527247][   T24] usb 8-1: USB disconnect, device number 20
[  325.559770][T16768] netlink: 'syz.7.3991': attribute type 2 has an invalid length.
[  325.565172][T16768] netlink: 'syz.7.3991': attribute type 1 has an invalid length.
[  325.571410][T16768] netlink: 'syz.7.3991': attribute type 1 has an invalid length.
[  325.628638][T16780] bad cache= option: no%e
[  325.628638][T16780] 
[  325.631218][T16780] CIFS: VFS: bad cache= option: no%e
[  326.017202][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4004'.
[  326.067165][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  326.107797][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'.
[  326.122393][T16807] 8021q: adding VLAN 0 to HW filter on device bond1
[  326.227623][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.232807][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.236650][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  326.241126][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.245595][    T9] usb 2-1: config 0 descriptor??
[  326.647146][ T5963] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  326.651598][    T9] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor
[  326.655913][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0018/input/input21
[  326.720198][    T9] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  326.797197][ T5963] usb 8-1: Using ep0 maxpacket: 32
[  326.801600][ T5963] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[  326.805189][ T5963] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  326.808806][ T5963] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.812837][ T5963] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[  326.816496][ T5963] usb 8-1: config 1 has no interface number 0
[  326.819723][ T5963] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  326.823552][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.830400][ T5963] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[  326.853843][   T24] usb 2-1: USB disconnect, device number 14
[  326.993343][T16854] overlayfs: failed to clone upperpath
[  327.076485][ T5963] snd_usb_pod 8-1:1.1: endpoint not available, using fallback values
[  327.080094][ T5963] snd_usb_pod 8-1:1.1: invalid control EP
[  327.082448][ T5963] snd_usb_pod 8-1:1.1: cannot start listening: -22
[  327.085203][ T5963] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[  327.088407][ T5963] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -22
[  327.344521][ T5963] usb 8-1: USB disconnect, device number 21
[  327.837360][ T5996] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  327.988154][ T5996] usb 2-1: not running at top speed; connect to a high speed hub
[  327.997481][ T5996] usb 2-1: config 10 has an invalid interface number: 102 but max is 0
[  328.007109][ T5996] usb 2-1: config 10 has no interface number 0
[  328.009934][ T5996] usb 2-1: config 10 interface 102 has no altsetting 0
[  328.019146][ T5996] usb 2-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=c1.e2
[  328.023030][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.036751][ T5996] usb 2-1: Product: syz
[  328.038773][ T5996] usb 2-1: Manufacturer: syz
[  328.040730][ T5996] usb 2-1: SerialNumber: syz
[  328.070240][T16877] loop7: detected capacity change from 0 to 32768
[  328.075385][T16877] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  328.085177][T16877] XFS (loop7): Ending clean mount
[  328.088384][T16877] XFS (loop7): Quotacheck needed: Please wait.
[  328.092735][T16877] XFS (loop7): Quotacheck: Done.
[  328.106015][   T33] audit: type=1800 audit(2000000201.100:270): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4041" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  328.250915][ T5996] dvb-usb: found a 'TeVii S421 PCI' in warm state.
[  328.253735][ T5996] dw2102: su3000_power_ctrl: 1, initialized 0
[  328.256437][ T5996] dvb-usb: bulk message failed: -22 (2/0)
[  328.261183][ T5996] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  328.266673][ T5996] dvb-usb: TeVii S421 PCI error while loading driver (-19)
[  328.271229][ T5996] usb 2-1: USB disconnect, device number 15
[  328.394838][T12157] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  328.666552][T16913] loop7: detected capacity change from 0 to 64
[  328.674144][T16913] syz.7.4054: attempt to access beyond end of device
[  328.674144][T16913] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64
[  328.684103][T16913] Buffer I/O error on dev loop7, logical block 512, async page read
[  328.688044][T16913] syz.7.4054: attempt to access beyond end of device
[  328.688044][T16913] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64
[  328.693648][T16913] Buffer I/O error on dev loop7, logical block 56576, async page read
[  328.737219][T16917] loop7: detected capacity change from 0 to 8
[  329.340579][T16941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4067'.
[  329.465951][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4070'.
[  329.469821][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4070'.
[  329.779520][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4075'.
[  329.874534][T16966] loop7: detected capacity change from 0 to 8192
[  329.879423][T16966] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  330.537798][T17010] lo speed is unknown, defaulting to 1000
[  330.567437][T13951] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  330.738696][T13951] usb 2-1: config 0 has an invalid interface number: 30 but max is 0
[  330.741921][T13951] usb 2-1: config 0 has no interface number 0
[  330.745034][T13951] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2
[  330.766360][T13951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.771738][T13951] usb 2-1: config 0 descriptor??
[  330.779130][T13951] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state.
[  330.782030][T13951] usb 2-1: setting power ON
[  330.783946][T13951] dvb-usb: bulk message failed: -22 (2/0)
[  330.857902][T17034] loop7: detected capacity change from 0 to 16
[  330.860517][T17034] erofs (device loop7): mounted with root inode @ nid 36.
[  330.869080][T17034] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36
[  330.872733][T17034] erofs (device loop7): read error -117 @ 43 of nid 36
[  330.927873][T13951] dvb-usb: bulk message failed: -22 (1/0)
[  331.047812][T13951] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  331.058242][T13951] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19)
[  331.061243][T13951] dvb_usb_cxusb 2-1:0.30: probe with driver dvb_usb_cxusb failed with error -22
[  331.073513][T13951] usb 2-1: USB disconnect, device number 16
[  331.158613][T17056] loop7: detected capacity change from 0 to 32768
[  331.164664][T17056] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.182295][T17056] XFS (loop7): Ending clean mount
[  331.185592][T17056] XFS (loop7): Quotacheck needed: Please wait.
[  331.192431][T17056] XFS (loop7): Quotacheck: Done.
[  331.248071][   T33] audit: type=1800 audit(2000000204.220:271): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4120" name="file1" dev="loop7" ino=9286 res=0 errno=0
[  331.317411][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  331.320270][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  331.322553][   T54] Bluetooth: hci1: hardware error 0x00
[  331.334939][T12157] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.405543][T17074] loop7: detected capacity change from 0 to 16
[  331.410681][T17074] erofs (device loop7): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  331.414817][T17074] erofs (device loop7): mounted with root inode @ nid 36.
[  331.535020][T17079] syz.1.4126: attempt to access beyond end of device
[  331.535020][T17079] loop1: rw=0, sector=64, nr_sectors = 1 limit=0
[  331.540864][T17079] syz.1.4126: attempt to access beyond end of device
[  331.540864][T17079] loop1: rw=0, sector=256, nr_sectors = 1 limit=0
[  331.546455][T17079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  331.550597][T17079] syz.1.4126: attempt to access beyond end of device
[  331.550597][T17079] loop1: rw=0, sector=512, nr_sectors = 1 limit=0
[  331.555311][T17079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  331.561771][T17079] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  331.564745][T17079] UDF-fs: Scanning with blocksize 512 failed
[  331.570396][T17079] syz.1.4126: attempt to access beyond end of device
[  331.570396][T17079] loop1: rw=0, sector=64, nr_sectors = 2 limit=0
[  331.576594][T17079] syz.1.4126: attempt to access beyond end of device
[  331.576594][T17079] loop1: rw=0, sector=512, nr_sectors = 2 limit=0
[  331.582527][T17079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  331.587460][T17079] syz.1.4126: attempt to access beyond end of device
[  331.587460][T17079] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0
[  331.593167][T17079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  331.597331][T17079] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  331.600690][T17079] UDF-fs: Scanning with blocksize 1024 failed
[  331.604834][T17079] syz.1.4126: attempt to access beyond end of device
[  331.604834][T17079] loop1: rw=0, sector=64, nr_sectors = 4 limit=0
[  331.614311][T17080] syz.7.4124: attempt to access beyond end of device
[  331.614311][T17080] loop7: rw=0, sector=1152, nr_sectors = 257 limit=16
[  331.620510][T17080] erofs (device loop7): read error -5 @ 0 of nid 36
[  331.636727][T17079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  331.647682][T17079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  331.652113][T17079] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  331.655866][T17079] UDF-fs: Scanning with blocksize 2048 failed
[  331.661231][T17079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  331.666132][T17079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  331.673399][T17079] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  331.679033][T17079] UDF-fs: Scanning with blocksize 4096 failed
[  331.681951][T17079] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  331.711489][T17082] loop1: detected capacity change from 0 to 64
[  331.714846][T17082] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  331.718018][T17082] BFS-fs: bfs_iget(): Bad inode number loop1:00000002
[  331.814332][T17087] loop1: detected capacity change from 0 to 64
[  331.817891][T17087] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  332.003188][T17093] erspan1: entered promiscuous mode
[  332.005054][T17093] erspan1: entered allmulticast mode
[  332.098724][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  332.255439][    T9] usb 2-1: Using ep0 maxpacket: 8
[  332.295002][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.300021][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  332.304436][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.311243][    T9] usb 2-1: config 0 descriptor??
[  332.318478][    T9] iowarrior 2-1:0.0: no interrupt-in endpoint found
[  332.532922][ T5963] usb 2-1: USB disconnect, device number 17
[  333.215798][T17126] IPv6: addrconf: prefix option has invalid lifetime
[  333.311926][T17128] tmpfs: Group quota inode hardlimit too large.
[  333.397220][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  333.458419][    T9] IPVS: starting estimator thread 0...
[  333.557368][T17138] IPVS: using max 75 ests per chain, 180000 per kthread
[  333.857377][ T5996] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  334.007145][ T5996] usb 8-1: Using ep0 maxpacket: 16
[  334.010917][ T5996] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.015123][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  334.019433][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  334.022649][ T5996] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  334.025825][ T5996] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  334.032860][ T5996] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  334.036081][ T5996] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  334.039066][ T5996] usb 8-1: Manufacturer: syz
[  334.041632][ T5996] usb 8-1: config 0 descriptor??
[  334.327191][ T5996] rc_core: IR keymap rc-hauppauge not found
[  334.331298][ T5996] Registered IR keymap rc-empty
[  334.335742][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.358847][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.377955][ T5996] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  334.388934][ T5996] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input22
[  334.399556][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.418123][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.437525][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.457308][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.478216][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.497326][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.517432][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.538329][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.557370][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.578033][ T5996] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  334.598151][ T5996] mceusb 8-1:0.0: Registered  with mce emulator interface version 1
[  334.601292][ T5996] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  334.667263][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  334.693849][ T5996] usb 8-1: USB disconnect, device number 22
[  334.817278][    T9] usb 2-1: Using ep0 maxpacket: 32
[  334.821387][    T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  334.824306][    T9] usb 2-1: config 0 has no interface number 0
[  334.826330][    T9] usb 2-1: config 0 interface 184 has no altsetting 0
[  334.830706][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  334.833867][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.836688][    T9] usb 2-1: Product: syz
[  334.838919][    T9] usb 2-1: Manufacturer: syz
[  334.840632][    T9] usb 2-1: SerialNumber: syz
[  334.843131][    T9] usb 2-1: config 0 descriptor??
[  334.846590][    T9] smsc75xx v1.0.0
[  334.848331][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  334.852458][    T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[  335.051768][   T24] usb 2-1: USB disconnect, device number 18
[  335.606612][T17186] netlink: 'syz.1.4174': attribute type 41 has an invalid length.
[  335.917700][T13951] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  336.068797][T13951] usb 2-1: config 127 has an invalid interface number: 32 but max is 0
[  336.072164][T13951] usb 2-1: config 127 has no interface number 0
[  336.074717][T13951] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06
[  336.079588][T13951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.086234][T13951] ums-freecom 2-1:127.32: USB Mass Storage device detected
[  336.295173][   T24] usb 2-1: USB disconnect, device number 19
[  336.735265][T17221] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  336.986242][T17229] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  337.416702][T17257] loop1: detected capacity change from 0 to 32768
[  337.422406][T17257] find_entry called with index = 0
[  337.424779][T17257] read_mapping_page failed!
[  337.426467][T17257] ERROR: (device loop1): txCommit: 
[  337.426467][T17257] 
[  337.434807][T17261] netlink: 'syz.7.4206': attribute type 9 has an invalid length.
[  337.604580][   T33] audit: type=1326 audit(2000000210.600:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4632f8ebe9 code=0x7ffc0000
[  337.624634][   T33] audit: type=1326 audit(2000000210.600:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4632f8d550 code=0x7ffc0000
[  337.645903][   T33] audit: type=1326 audit(2000000210.600:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4632f8d550 code=0x7ffc0000
[  337.662220][T17287] loop7: detected capacity change from 0 to 512
[  337.662240][   T33] audit: type=1326 audit(2000000210.600:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4632f8ebe9 code=0x7ffc0000
[  337.673867][T17291] loop1: detected capacity change from 0 to 512
[  337.675305][   T33] audit: type=1326 audit(2000000210.600:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4632f8ebe9 code=0x7ffc0000
[  337.677728][T17287] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.4219: casefold flag without casefold feature
[  337.686189][   T33] audit: type=1326 audit(2000000210.600:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f4632f8ebe9 code=0x7ffc0000
[  337.692504][T17287] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4219: couldn't read orphan inode 15 (err -117)
[  337.701090][   T33] audit: type=1326 audit(2000000210.600:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4632f8ebe9 code=0x7ffc0000
[  337.715919][   T33] audit: type=1326 audit(2000000210.600:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4632f8ebe9 code=0x7ffc0000
[  337.725606][   T33] audit: type=1326 audit(2000000210.600:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4632f8ebe9 code=0x7ffc0000
[  337.726125][T17287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.735163][   T33] audit: type=1326 audit(2000000210.600:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.7.4215" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4632f8ebe9 code=0x7ffc0000
[  337.750020][T17291] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.4220: Parent and EA inode have the same ino 15
[  337.755294][T17291] EXT4-fs (loop1): Remounting filesystem read-only
[  337.783826][T12157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.792820][T17291] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  337.796885][T17291] EXT4-fs (loop1): 1 orphan inode deleted
[  337.800919][T17291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.809219][T17294] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609)
[  337.813378][T17294] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  337.829354][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.848559][T17297] loop1: detected capacity change from 0 to 256
[  337.876364][T17298] loop7: detected capacity change from 0 to 8192
[  337.950144][T17298]  loop7: p1 p2 p3 p4[EZD]
[  337.952650][T17298] loop7: p1 start 171116544 is beyond EOD, truncated
[  337.957380][T17298] loop7: p3 start 360447 is beyond EOD, truncated
[  337.965691][T17298] loop7: p4 size 262912 extends beyond EOD, truncated
[  338.071837][T17314] loop7: detected capacity change from 0 to 128
[  338.103411][T17316] loop7: detected capacity change from 0 to 1024
[  338.119853][ T4378] hfsplus: b-tree write err: -5, ino 4
[  338.158013][T13951] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  338.309650][T13951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  338.314297][T13951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.318844][T13951] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  338.322592][T13951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.327653][T13951] usb 2-1: config 0 descriptor??
[  338.367297][    T9] usb 8-1: new full-speed USB device number 23 using dummy_hcd
[  338.539712][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  338.542859][    T9] usb 8-1: not running at top speed; connect to a high speed hub
[  338.546441][    T9] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  338.550299][    T9] usb 8-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  338.556873][    T9] usb 8-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  338.560151][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.563024][    T9] usb 8-1: Product: syz
[  338.564464][    T9] usb 8-1: Manufacturer: syz
[  338.566008][    T9] usb 8-1: SerialNumber: syz
[  338.738149][T13951] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  338.884295][    T9] usb 8-1: USB disconnect, device number 23
[  339.038138][   T24] usb 2-1: USB disconnect, device number 20
[  339.794336][T17346] loop7: detected capacity change from 0 to 32768
[  339.798009][T17346] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4246 (17346)
[  339.804827][T17346] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  339.809105][T17346] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  339.892454][T17346] BTRFS info (device loop7): enabling ssd optimizations
[  339.895386][T17346] BTRFS info (device loop7): enabling free space tree
[  339.913997][T17352] loop1: detected capacity change from 0 to 32768
[  339.929395][T12157] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  339.930530][T17352] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4249 (17352)
[  339.945104][T17352] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  339.957181][T17352] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  339.966905][ T1095] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0
[  339.987573][T17352] BTRFS error (device loop1): failed to load root extent
[  339.990778][ T1095] BTRFS warning (device loop1 state C): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0
[  340.007665][T17352] BTRFS error (device loop1 state C): failed to load root free space
[  340.012218][ T1095] BTRFS warning (device loop1 state C): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0
[  340.026705][ T1153] BTRFS warning (device loop1 state C): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0
[  340.057515][T17352] BTRFS info (device loop1 state C): enabling ssd optimizations
[  340.060918][T17352] BTRFS info (device loop1 state C): using spread ssd allocation scheme
[  340.064063][T17352] BTRFS info (device loop1 state C): turning on async discard
[  340.066568][T17352] BTRFS info (device loop1 state C): enabling free space tree
[  340.073010][T17352] BTRFS info (device loop1 state C): enabling auto defrag
[  340.075620][T17352] BTRFS info (device loop1 state C): ignoring bad roots
[  340.087571][T17352] BTRFS info (device loop1 state C): ignoring data csums
[  340.090076][T17352] BTRFS info (device loop1 state C): force zlib compression, level 3
[  340.092972][T17407] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.4259'.
[  340.096735][T17408] netlink: 45 bytes leftover after parsing attributes in process `syz.7.4260'.
[  340.131266][T15813] BTRFS info (device loop1 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  340.261055][T17427] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4268'.
[  340.404563][T17440] loop1: detected capacity change from 0 to 32768
[  340.411272][T17440] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  341.021001][T15813] ocfs2: Unmounting device (7,1) on (node local)
[  341.152086][T17451] mkiss: ax0: crc mode is auto.
[  341.367650][T17470] loop7: detected capacity change from 0 to 8
[  341.434328][T17467] loop1: detected capacity change from 0 to 32768
[  341.463840][T17467] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  341.463863][T17467]   allowing incompatible features above 0.0: (unknown version)
[  341.463871][T17467]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  341.484789][T17467] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  341.488916][T17467] bcachefs (loop1): initializing new filesystem
[  341.496423][T17467] bcachefs (loop1): going read-write
[  341.500386][T17467] bcachefs (loop1): marking superblocks
[  341.507830][T17467] bcachefs (loop1): initializing freespace
[  341.512428][T17467] bcachefs (loop1): done initializing freespace
[  341.518215][T17467] bcachefs (loop1): reading snapshots table
[  341.520803][T17467] bcachefs (loop1): reading snapshots done
[  341.529816][T17467] bcachefs (loop1): done starting filesystem
[  341.540118][T17482] loop7: detected capacity change from 0 to 8
[  341.576742][T15813] bcachefs (loop1): shutting down
[  341.587202][T15813] bcachefs (loop1): going read-only
[  341.589398][T15813] bcachefs (loop1): finished waiting for writes to stop
[  341.592698][T15813] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  341.605271][T15813] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  341.611277][T15813] bcachefs (loop1): clean shutdown complete, journal seq 4
[  341.614640][T15813] bcachefs (loop1): marking filesystem clean
[  341.625385][T15813] bcachefs (loop1): shutdown complete
[  341.642975][T17492] netlink: 'syz.7.4294': attribute type 2 has an invalid length.
[  341.649623][T17492] : entered promiscuous mode
[  341.800207][T17496] loop7: detected capacity change from 0 to 32768
[  341.847483][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4297'.
[  341.895782][T17503] overlayfs: failed to clone upperpath
[  342.137197][ T5963] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  342.299150][ T5963] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  342.302595][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.306058][ T5963] usb 8-1: config 0 descriptor??
[  342.705021][T17535] loop1: detected capacity change from 0 to 32768
[  342.709281][T17535] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 1 out of order with next entry (56 > 0)
[  342.709281][T17535] journal_seq_blacklist (size 640):
[  342.709281][T17535] 0-56 0-0 0-34 0-0 0-0 45-0 45-26 6-11 0-0 0-11 33-11 5-0 0-0 0-4 4-8 0-0 0-0 0-0 0-0 0-0 0-2 0-0 0-0 0-0 0-0 0-0 0-0 1-12 0-2 0-0 0-0 0-0 0-0 0-1 0-0 2-17 182-41 0-0 0-0
[  342.709281][T17535] 
[  342.725570][T17535] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[  342.819170][T17539] loop1: detected capacity change from 0 to 256
[  342.821685][T17539] vfat: Bad value for 'time_offset'
[  343.083477][T17547] loop1: detected capacity change from 0 to 164
[  343.380821][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  343.380832][   T33] audit: type=1326 audit(2000000216.380:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.4325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  343.398343][   T33] audit: type=1326 audit(2000000216.380:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.4325" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  343.408029][   T33] audit: type=1326 audit(2000000216.380:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.4325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  343.418807][   T33] audit: type=1326 audit(2000000216.380:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.4325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  343.426571][   T33] audit: type=1326 audit(2000000216.380:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.4325" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  343.435064][   T33] audit: type=1326 audit(2000000216.380:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.4325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  343.447010][   T33] audit: type=1326 audit(2000000216.380:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17560 comm="syz.2.4325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  343.760368][ T5963] usb 8-1: Cannot set autoneg
[  343.762093][ T5963] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  343.778059][ T5963] usb 8-1: USB disconnect, device number 24
[  343.785004][T17581] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4335'.
[  343.791324][T17581] netlink: 'syz.1.4335': attribute type 1 has an invalid length.
[  343.794651][T17581] netlink: 'syz.1.4335': attribute type 2 has an invalid length.
[  343.798090][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'.
[  343.874675][T17589] netlink: 'syz.1.4339': attribute type 1 has an invalid length.
[  343.878970][T17589] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.4339'.
[  344.018977][T17598] ip6tnl1: entered promiscuous mode
[  344.146434][T17612] loop1: detected capacity change from 0 to 256
[  344.343183][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4356'.
[  344.346391][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4356'.
[  344.355034][T17624] netlink: 'syz.2.4356': attribute type 5 has an invalid length.
[  344.365330][T17626] loop7: detected capacity change from 0 to 2048
[  344.368908][T17626] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  344.378015][T17629] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  344.417788][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  344.460051][T17633] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.4360'.
[  344.463852][T17633] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  344.467642][T17633] openvswitch: netlink: Duplicate key (type 0).
[  344.567807][    T9] usb 2-1: Using ep0 maxpacket: 32
[  344.571212][    T9] usb 2-1: config 0 has an invalid interface number: 145 but max is 0
[  344.574452][    T9] usb 2-1: config 0 has no interface number 0
[  344.578872][    T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7820, bcdDevice=20.16
[  344.582057][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.585460][    T9] usb 2-1: Product: syz
[  344.587598][    T9] usb 2-1: Manufacturer: syz
[  344.589488][    T9] usb 2-1: SerialNumber: syz
[  344.593221][    T9] usb 2-1: config 0 descriptor??
[  344.596450][    T9] mos7840 2-1:0.145: required endpoints missing
[  344.778340][T17653] loop7: detected capacity change from 0 to 8
[  344.784639][T17653] SQUASHFS error: lzo decompression failed, data probably corrupt
[  344.790300][T17653] SQUASHFS error: Failed to read block 0x91: -5
[  344.792811][T17653] SQUASHFS error: Unable to read metadata cache entry [8f]
[  344.802320][    T9] usb 2-1: USB disconnect, device number 21
[  344.803768][T17653] SQUASHFS error: Unable to read inode 0x11f
[  344.870355][   T33] audit: type=1326 audit(2000000217.870:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.7.4369" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4632f8ebe9 code=0x0
[  345.409688][T17664] dlm: non-version read from control device 0
[  346.118697][T17699] loop1: detected capacity change from 0 to 256
[  346.130807][T17699] FAT-fs (loop1): Directory bread(block 64) failed
[  346.134084][T17699] FAT-fs (loop1): Directory bread(block 65) failed
[  346.136995][T17699] FAT-fs (loop1): Directory bread(block 66) failed
[  346.140073][T17699] FAT-fs (loop1): Directory bread(block 67) failed
[  346.142955][T17699] FAT-fs (loop1): Directory bread(block 68) failed
[  346.145745][T17699] FAT-fs (loop1): Directory bread(block 69) failed
[  346.159055][T17699] FAT-fs (loop1): Directory bread(block 70) failed
[  346.167136][T17699] FAT-fs (loop1): Directory bread(block 71) failed
[  346.170270][T17699] FAT-fs (loop1): Directory bread(block 72) failed
[  346.176468][T17699] FAT-fs (loop1): Directory bread(block 73) failed
[  346.592343][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4388'.
[  346.596534][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4388'.
[  348.997305][T14194] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  349.178372][T14194] usb 2-1: Using ep0 maxpacket: 16
[  349.182157][T14194] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.186138][T14194] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.189967][T14194] usb 2-1: config 0 interface 0 has no altsetting 0
[  349.192316][T14194] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  349.195738][T14194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.203388][T14194] usb 2-1: config 0 descriptor??
[  349.409828][T17809] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4435'.
[  349.610929][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.613127][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.619959][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.622410][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.624739][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.637567][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.639918][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.642188][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.644485][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.646933][T14194] kye 0003:0458:0138.001A: unknown main item tag 0x0
[  349.660248][T14194] kye 0003:0458:0138.001A: collection stack underflow
[  349.662820][T14194] kye 0003:0458:0138.001A: item 0 0 0 12 parsing failed
[  349.665655][T14194] kye 0003:0458:0138.001A: parse failed
[  349.677146][T14194] kye 0003:0458:0138.001A: probe with driver kye failed with error -22
[  349.811451][T14194] usb 2-1: USB disconnect, device number 22
[  350.472325][T17839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.483141][T17839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.690081][T17867] loop1: detected capacity change from 0 to 1024
[  350.698524][T17867] EXT4-fs: Ignoring removed nomblk_io_submit option
[  350.701023][T17867] EXT4-fs: Ignoring removed nomblk_io_submit option
[  350.703674][T17867] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  350.710401][T17867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.731041][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.017186][T13951] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  351.179142][T13951] usb 2-1: not running at top speed; connect to a high speed hub
[  351.184546][T13951] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  351.189641][T13951] usb 2-1: config 1 has no interface number 1
[  351.192834][T13951] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  351.203152][T13951] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  351.207458][T13951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.211581][T13951] usb 2-1: Product: syz
[  351.214033][T13951] usb 2-1: Manufacturer: syz
[  351.216207][T13951] usb 2-1: SerialNumber: syz
[  351.527184][T17878] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  351.542703][T13951] usb 2-1: failed to enable PITCH for EP 0x82
[  351.554942][T13951] usb 2-1: USB disconnect, device number 23
[  352.093129][T17907] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4481'.
[  353.222757][T17932] loop1: detected capacity change from 0 to 1024
[  353.385736][T17939] loop7: detected capacity change from 0 to 32768
[  353.400731][   T33] audit: type=1800 audit(2000000226.400:292): pid=17939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4494" name="file1" dev="loop7" ino=4 res=0 errno=0
[  353.926218][T17939] ERROR: (device loop7): dbAdjCtl: the maximum free buddy is not the old root
[  353.926218][T17939] 
[  353.932301][T17939] ERROR: (device loop7): remounting filesystem as read-only
[  354.452433][ T1153] hfsplus: b-tree write err: -5, ino 4
[  354.693023][T17987] loop1: detected capacity change from 0 to 40427
[  354.703430][T17987] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  354.706473][T17987] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  354.711311][T17987] F2FS-fs (loop1): build fault injection rate: 17008
[  354.714186][T17987] F2FS-fs (loop1): build fault injection type: 0x1f8
[  354.719763][T17987] F2FS-fs (loop1): invalid crc value
[  354.756346][T17987] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  354.761845][T17987] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  354.764850][T17987] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  354.782357][T17987] bio_check_eod: 5 callbacks suppressed
[  354.782368][T17987] syz.1.4518: attempt to access beyond end of device
[  354.782368][T17987] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  354.789755][T17987] CPU: 0 UID: 0 PID: 17987 Comm: syz.1.4518 Not tainted syzkaller #0 PREEMPT(full) 
[  354.789767][T17987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  354.789772][T17987] Call Trace:
[  354.789776][T17987]  <TASK>
[  354.789780][T17987]  dump_stack_lvl+0x189/0x250
[  354.789794][T17987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.789804][T17987]  ? __pfx_queue_work_on+0x10/0x10
[  354.789813][T17987]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  354.789824][T17987]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.789836][T17987]  f2fs_handle_critical_error+0x37c/0x540
[  354.789848][T17987]  f2fs_write_end_io+0x886/0xb60
[  354.789857][T17987]  __submit_merged_bio+0x27a/0x6a0
[  354.789897][T17987]  __submit_merged_write_cond+0x255/0x530
[  354.789908][T17987]  f2fs_write_data_pages+0x261d/0x3000
[  354.789924][T17987]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  354.789943][T17987]  ? __pfx_release_pages+0x10/0x10
[  354.789953][T17987]  ? blk_mq_flush_plug_list+0x41f/0x550
[  354.789966][T17987]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  354.789978][T17987]  ? __blk_flush_plug+0x3fc/0x4b0
[  354.789991][T17987]  ? filemap_get_folios_tag+0xed/0x630
[  354.789998][T17987]  ? rcu_is_watching+0x15/0xb0
[  354.790007][T17987]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  354.790018][T17987]  do_writepages+0x32e/0x550
[  354.790027][T17987]  ? rcu_is_watching+0x15/0xb0
[  354.790035][T17987]  ? do_raw_spin_unlock+0x4d/0x240
[  354.790045][T17987]  filemap_fdatawrite+0x199/0x240
[  354.790054][T17987]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  354.790070][T17987]  ? rcu_is_watching+0x15/0xb0
[  354.790077][T17987]  ? do_raw_spin_unlock+0x4d/0x240
[  354.790086][T17987]  f2fs_sync_dirty_inodes+0x31f/0x830
[  354.790095][T17987]  f2fs_write_checkpoint+0x95a/0x1df0
[  354.790106][T17987]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  354.790113][T17987]  ? f2fs_inode_chksum_verify+0x18c/0x780
[  354.790129][T17987]  ? down_write+0x162/0x1f0
[  354.790135][T17987]  ? __pfx_down_write+0x10/0x10
[  354.790143][T17987]  f2fs_issue_checkpoint+0x3ac/0x570
[  354.790151][T17987]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  354.790159][T17987]  ? do_raw_spin_lock+0x121/0x290
[  354.790169][T17987]  ? __up_read+0x280/0x680
[  354.790178][T17987]  ? f2fs_sync_fs+0x200/0x3d0
[  354.790187][T17987]  f2fs_do_sync_file+0x869/0x1860
[  354.790195][T17987]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  354.790208][T17987]  ? __pfx_generic_perform_write+0x10/0x10
[  354.790226][T17987]  ? vfs_fsync_range+0x12c/0x1c0
[  354.790233][T17987]  ? f2fs_sync_file+0xe9/0x160
[  354.790241][T17987]  f2fs_file_write_iter+0x753/0x2410
[  354.790253][T17987]  ? vfs_write+0x211/0xb30
[  354.790262][T17987]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  354.790272][T17987]  ? security_file_permission+0x75/0x290
[  354.790284][T17987]  vfs_write+0x5c9/0xb30
[  354.790294][T17987]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  354.790302][T17987]  ? __pfx_vfs_write+0x10/0x10
[  354.790313][T17987]  ? __fget_files+0x2a/0x420
[  354.790326][T17987]  ksys_write+0x145/0x250
[  354.790335][T17987]  ? __pfx_ksys_write+0x10/0x10
[  354.790343][T17987]  ? rcu_is_watching+0x15/0xb0
[  354.790351][T17987]  ? rcu_is_watching+0x15/0xb0
[  354.790358][T17987]  do_syscall_64+0xfa/0x3b0
[  354.790369][T17987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.790376][T17987]  ? exc_page_fault+0x9f/0xf0
[  354.790386][T17987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.790393][T17987] RIP: 0033:0x7f404df8ebe9
[  354.790400][T17987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.790407][T17987] RSP: 002b:00007f404ed64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  354.790417][T17987] RAX: ffffffffffffffda RBX: 00007f404e1b5fa0 RCX: 00007f404df8ebe9
[  354.790423][T17987] RDX: 000000000000002c RSI: 0000200000000200 RDI: 0000000000000004
[  354.790428][T17987] RBP: 00007f404e011e19 R08: 0000000000000000 R09: 0000000000000000
[  354.790452][T17987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.790457][T17987] R13: 00007f404e1b6038 R14: 00007f404e1b5fa0 R15: 00007ffd8d988ce8
[  354.790465][T17987]  </TASK>
[  354.790819][T17987] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  354.884977][T17998] loop7: detected capacity change from 0 to 32768
[  354.982450][T17998] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  354.982473][T17998]   allowing incompatible features above 0.0: (unknown version)
[  354.982481][T17998]   features: 
[  354.995335][T17998] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  355.000072][T17998] bcachefs (loop7): initializing new filesystem
[  355.011243][T17998] bcachefs (loop7): going read-write
[  355.018305][T17998] bcachefs (loop7): marking superblocks
[  355.038637][T17998] bcachefs (loop7): initializing freespace
[  355.047721][T17998] bcachefs (loop7): done initializing freespace
[  355.056889][T17998] bcachefs (loop7): reading snapshots table
[  355.060508][T17998] bcachefs (loop7): reading snapshots done
[  355.070408][T17998] bcachefs (loop7): done starting filesystem
[  355.083490][T14194] bcachefs (loop7): going read-only
[  355.086075][T14194] bcachefs (loop7): finished waiting for writes to stop
[  355.089752][T17998] bcachefs (loop7): shutdown by ioctl type 2emergency read only at seq 1
[  355.090106][T14194] bcachefs (loop7): flushing journal and stopping allocators, journal seq 1
[  355.090132][T14194] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 1
[  355.090292][T14194] bcachefs (loop7): unclean shutdown complete, journal seq 1
[  355.090858][T14194] bcachefs (loop7): done going read-only, filesystem not clean
[  355.108345][T17998] syz.7.4523 (17998) used greatest stack depth: 16648 bytes left
[  355.120754][T12157] bcachefs (loop7): shutting down
[  355.130251][T12157] bcachefs (loop7): shutdown complete
[  356.008545][T18025] netlink: 'syz.7.4528': attribute type 11 has an invalid length.
[  356.075112][T18029] netlink: 'syz.7.4531': attribute type 10 has an invalid length.
[  356.092703][T18029] team0: Device veth1_macvtap failed to register rx_handler
[  356.182064][T18039] loop7: detected capacity change from 0 to 2048
[  356.185177][T18039] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  356.192889][T18024] loop1: detected capacity change from 0 to 40427
[  356.193411][T18042] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  356.196987][T18024] F2FS-fs (loop1): invalid crc value
[  356.239854][T18024] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  356.250145][T18024] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  356.297230][T18051] loop7: detected capacity change from 0 to 128
[  356.300514][T18051] affs: Unknown parameter 'smackfsroot'
[  356.832451][T18061] loop1: detected capacity change from 0 to 2048
[  356.840603][T18062] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  357.039375][T18069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4546'.
[  357.043142][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'.
[  357.048771][T18069] bridge_slave_0: left promiscuous mode
[  357.051391][T18069] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.055842][T18069] bridge_slave_1: left promiscuous mode
[  357.058675][T18069] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.063656][T18069] bond0: (slave bond_slave_0): Releasing backup interface
[  357.069042][T18069] bond0: (slave bond_slave_1): Releasing backup interface
[  357.073533][T18069] team0: Port device team_slave_0 removed
[  357.079807][T18069] team0: Port device team_slave_1 removed
[  357.081980][T18069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  357.085815][T18069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  357.294513][T18095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4558'.
[  357.401624][   T33] audit: type=1326 audit(2000000230.400:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.2.4561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  357.421744][   T33] audit: type=1326 audit(2000000230.400:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.2.4561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  357.478719][   T33] audit: type=1326 audit(2000000230.420:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.2.4561" exe="/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  357.497273][   T33] audit: type=1326 audit(2000000230.420:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.2.4561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  357.506074][   T33] audit: type=1326 audit(2000000230.420:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz.2.4561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x7ffc0000
[  358.994578][T18138] tmpfs: Group quota block hardlimit too large.
[  359.197300][T18144] overlayfs: failed to clone lowerpath
[  359.233026][T18129] loop1: detected capacity change from 0 to 32768
[  359.444342][T18160] loop7: detected capacity change from 0 to 512
[  359.448367][T18160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  359.461322][T18160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.466824][T18160] ext4 filesystem being mounted at /752/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  359.483149][T12157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.525723][T18172] loop1: detected capacity change from 0 to 1024
[  359.538290][T18172] EXT4-fs: Ignoring removed orlov option
[  359.550393][T18172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.572491][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.674150][T18194] loop7: detected capacity change from 0 to 256
[  359.681999][T18194] FAT-fs (loop7): Directory bread(block 64) failed
[  359.684233][T18194] FAT-fs (loop7): Directory bread(block 65) failed
[  359.686388][T18194] FAT-fs (loop7): Directory bread(block 66) failed
[  359.689656][T18194] FAT-fs (loop7): Directory bread(block 67) failed
[  359.692037][T18194] FAT-fs (loop7): Directory bread(block 68) failed
[  359.694208][T18194] FAT-fs (loop7): Directory bread(block 69) failed
[  359.696413][T18194] FAT-fs (loop7): Directory bread(block 70) failed
[  359.698902][T18194] FAT-fs (loop7): Directory bread(block 71) failed
[  359.701230][T18194] FAT-fs (loop7): Directory bread(block 72) failed
[  359.703444][T18194] FAT-fs (loop7): Directory bread(block 73) failed
[  359.711365][T18194] syz.7.4600: attempt to access beyond end of device
[  359.711365][T18194] loop7: rw=0, sector=1160, nr_sectors = 4 limit=256
[  360.042599][   T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  360.197186][   T24] usb 2-1: Using ep0 maxpacket: 8
[  360.201335][   T24] usb 2-1: config 11 has an invalid interface number: 95 but max is 0
[  360.205000][   T24] usb 2-1: config 11 has no interface number 0
[  360.208046][   T24] usb 2-1: config 11 interface 95 has no altsetting 0
[  360.213771][   T24] usb 2-1: language id specifier not provided by device, defaulting to English
[  360.222003][   T24] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  360.225776][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.229391][   T24] usb 2-1: Product: syz
[  360.231378][   T24] usb 2-1: SerialNumber: syz
[  360.441604][   T24] usb 2-1: USB disconnect, device number 24
[  361.273733][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4613'.
[  361.279143][T18235] netlink: 'syz.7.4613': attribute type 15 has an invalid length.
[  361.283057][T18235] netlink: 'syz.7.4613': attribute type 18 has an invalid length.
[  361.283745][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4616'.
[  361.403505][T18246] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  361.420020][T18246] vlan2: entered promiscuous mode
[  361.421654][T18246] bond0: entered promiscuous mode
[  361.427789][T18246] bond_slave_0: entered promiscuous mode
[  361.430279][T18246] bond_slave_1: entered promiscuous mode
[  362.063936][T18289] lo speed is unknown, defaulting to 1000
[  362.192619][T18304] loop1: detected capacity change from 0 to 256
[  362.203702][T18304] FAT-fs (loop1): Directory bread(block 64) failed
[  362.206275][T18304] FAT-fs (loop1): Directory bread(block 65) failed
[  362.209588][T18304] FAT-fs (loop1): Directory bread(block 66) failed
[  362.211935][T18304] FAT-fs (loop1): Directory bread(block 67) failed
[  362.214411][T18304] FAT-fs (loop1): Directory bread(block 68) failed
[  362.217865][T18304] FAT-fs (loop1): Directory bread(block 69) failed
[  362.220611][T18304] FAT-fs (loop1): Directory bread(block 70) failed
[  362.223430][T18304] FAT-fs (loop1): Directory bread(block 71) failed
[  362.226081][T18304] FAT-fs (loop1): Directory bread(block 72) failed
[  362.232164][T18304] FAT-fs (loop1): Directory bread(block 73) failed
[  362.453907][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'.
[  364.815121][T18357] QAT: failed to copy from user cfg_data.
[  364.848870][T18361] loop1: detected capacity change from 0 to 64
[  364.924258][T18369] netlink: 'syz.1.4669': attribute type 1 has an invalid length.
[  364.928556][T18369] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4669'.
[  365.247382][T14194] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  365.375962][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4675'.
[  365.411596][T14194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.543298][T18393] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  365.631493][T18398] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4681'.
[  366.317253][T14194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.325114][T14194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  366.330571][T14194] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  366.335177][T14194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.339695][T14194] usb 2-1: config 0 descriptor??
[  366.751232][T14194] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xd
[  366.761438][T14194] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  367.011886][T18375] loop1: detected capacity change from 0 to 1024
[  367.089602][    T9] usb 2-1: USB disconnect, device number 25
[  367.626729][T14194] Process accounting resumed
[  368.857834][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4709'.
[  368.908044][T18467] loop7: detected capacity change from 0 to 4096
[  368.912784][T18467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.921971][T18467] Quota error (device loop7): do_check_range: Getting block 327682 out of range 1-5
[  368.925098][T18467] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  368.928637][T18467] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4711: Failed to acquire dquot type 1
[  368.933970][T18467] Quota error (device loop7): do_check_range: Getting block 327682 out of range 1-5
[  368.937314][T18467] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  368.941074][T18467] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4711: Failed to acquire dquot type 1
[  368.954067][T12157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.081141][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  369.228040][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4715'.
[  369.254244][T14194] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  369.257026][    T9] usb 2-1: Using ep0 maxpacket: 32
[  369.260833][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  369.263505][    T9] usb 2-1: config 0 has no interface number 0
[  369.266349][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.270297][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.273845][    T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  369.278515][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.285212][    T9] usb 2-1: config 0 descriptor??
[  369.416461][T14194] usb 8-1: Using ep0 maxpacket: 16
[  369.420031][T14194] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.423864][T14194] usb 8-1: config 0 interface 0 has no altsetting 0
[  369.428397][T14194] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  369.431703][T14194] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.434426][T14194] usb 8-1: Product: syz
[  369.435862][T14194] usb 8-1: Manufacturer: syz
[  369.437662][T14194] usb 8-1: SerialNumber: syz
[  369.440542][T14194] usb 8-1: config 0 descriptor??
[  369.663538][T14194] usb 8-1: Can not set alternate setting to 1, error: -71
[  369.666255][T14194] synaptics_usb 8-1:0.0: probe with driver synaptics_usb failed with error -71
[  369.670140][T14194] usb 8-1: USB disconnect, device number 25
[  369.946622][    T9] uclogic 0003:28BD:0094.001C: pen parameters not found
[  369.949568][    T9] uclogic 0003:28BD:0094.001C: interface is invalid, ignoring
[  370.167169][    T9] usb 2-1: USB disconnect, device number 26
[  370.333276][T18486] dvmrp8: entered allmulticast mode
[  370.339297][T18486] dvmrp8: left allmulticast mode
[  370.459234][T18494] loop7: detected capacity change from 0 to 164
[  370.463360][T18494] isofs_fill_super: get root inode failed
[  370.479100][T18494] loop7: detected capacity change from 0 to 2048
[  370.482074][T18494] EXT4-fs: inline encryption not supported
[  370.484564][T18494] EXT4-fs: Ignoring removed oldalloc option
[  370.487156][T18494] ext4: Unknown parameter 'appraise_type'
[  370.622256][T18494] loop7: detected capacity change from 0 to 32768
[  370.629155][T18494] jfs_strtoUCS: char2uni returned -22.
[  370.631599][T18494] charset = cp869, char = 0x81
[  371.139476][T18499] loop1: detected capacity change from 0 to 32768
[  371.144931][T18499] JBD2: Ignoring recovery information on journal
[  371.156702][T18499] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  371.169612][T18499] (syz.1.4724,18499,0):ocfs2_get_suballoc_slot_bit:2819 ERROR: invalid inode 8192 requested
[  371.173268][T18499] (syz.1.4724,18499,0):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -22
[  371.176458][T18499] (syz.1.4724,18499,0):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -22
[  371.180458][T18499] (syz.1.4724,18499,0):ocfs2_test_inode_bit:2967 ERROR: status = -22
[  371.194961][T15813] ocfs2: Unmounting device (7,1) on (node local)
[  371.302391][T18508] loop1: detected capacity change from 0 to 4096
[  371.729693][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4736'.
[  372.415840][T18552] 9pnet_fd: Insufficient options for proto=fd
[  372.491121][T18561] tmpfs: Unknown parameter 'obj_user'
[  372.904065][T18565] loop7: detected capacity change from 0 to 8
[  373.071297][T18575] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4757'.
[  373.079483][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4759'.
[  373.363257][T18599] loop7: detected capacity change from 0 to 2048
[  373.367474][T18599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.399419][T18625] overlayfs: failed to clone upperpath
[  374.495504][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4783'.
[  375.365431][   T33] audit: type=1326 audit(2000000247.750:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18654 comm="syz.7.4793" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4632f8ebe9 code=0x0
[  375.485852][T18672] loop7: detected capacity change from 0 to 2048
[  375.490715][T18672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.644717][T18684] netlink: 'syz.2.4805': attribute type 39 has an invalid length.
[  375.819894][ T5996] usb 8-1: new full-speed USB device number 26 using dummy_hcd
[  375.982367][  T794] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  375.987032][ T5996] usb 8-1: unable to get BOS descriptor set
[  375.990127][ T5996] usb 8-1: not running at top speed; connect to a high speed hub
[  375.994073][ T5996] usb 8-1: config 1 interface 0 has no altsetting 0
[  375.998540][ T5996] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  376.002229][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.005526][ T5996] usb 8-1: Product: syz
[  376.007269][ T5996] usb 8-1: Manufacturer: syz
[  376.009053][ T5996] usb 8-1: SerialNumber: syz
[  376.155364][  T794] usb 2-1: Using ep0 maxpacket: 16
[  376.162676][  T794] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  376.166793][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.169817][  T794] usb 2-1: Product: syz
[  376.171560][  T794] usb 2-1: Manufacturer: syz
[  376.173535][  T794] usb 2-1: SerialNumber: syz
[  376.177231][  T794] usb 2-1: config 0 descriptor??
[  376.181415][  T794] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  376.236630][ T5996] usb 8-1: USB disconnect, device number 26
[  376.731342][T18695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4810'.
[  376.734980][T18695] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  376.835548][  T794] gp8psk: usb out operation failed.
[  376.841339][  T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  376.845626][  T794] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  376.852281][  T794] usb 2-1: media controller created
[  376.866300][  T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  376.873300][  T794] gp8psk_fe: Frontend revision 1 attached
[  376.875682][  T794] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  376.878790][T18709] overlayfs: failed to clone upperpath
[  376.882875][  T794] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  376.899138][T18708] loop7: detected capacity change from 0 to 1024
[  376.902231][  T794] gp8psk: usb in 138 operation failed.
[  376.905258][  T794] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  376.910230][  T794] gp8psk: found Genpix USB device pID = 201 (hex)
[  376.915578][  T794] usb 2-1: USB disconnect, device number 27
[  376.925321][T18708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.930079][T18708] ext4 filesystem being mounted at /837/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.953025][  T794] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  376.964550][T18708] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 1: comm syz.7.4816: lblock 1 mapped to illegal pblock 1 (length 3)
[  376.973914][T18708] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117
[  376.979315][T18708] EXT4-fs (loop7): This should not happen!! Data will be lost
[  376.979315][T18708] 
[  376.986464][T18708] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.4816: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  376.994101][T18708] EXT4-fs error (device loop7) in ext4_setattr:6071: Corrupt filesystem
[  377.015785][T12157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.066799][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4818'.
[  377.242815][T18723] loop7: detected capacity change from 0 to 32768
[  377.262223][T18723] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  377.297957][T12157] ocfs2: Unmounting device (7,7) on (node local)
[  377.510444][T18733] loop7: detected capacity change from 0 to 32768
[  377.514154][T18733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4824 (18733)
[  377.522935][T18733] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  377.527110][T18733] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  377.530721][T18733] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  377.548479][T18733] BTRFS info (device loop7): rebuilding free space tree
[  377.554211][T18733] BTRFS info (device loop7): disabling free space tree
[  377.557114][T18733] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  377.561108][T18733] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  377.567620][T18733] BTRFS info (device loop7): setting nodatasum
[  377.570237][T18733] BTRFS info (device loop7): setting nodatacow
[  377.572835][T18733] BTRFS info (device loop7): enabling ssd optimizations
[  377.575902][T18733] BTRFS info (device loop7): turning off barriers
[  377.578523][T18733] BTRFS info (device loop7): turning on flush-on-commit
[  377.581384][T18733] BTRFS info (device loop7): enabling disk space caching
[  377.584227][T18733] BTRFS info (device loop7): force clearing of disk cache
[  377.587280][T18733] BTRFS info (device loop7): doing ref verification
[  377.589970][T18733] BTRFS info (device loop7): max_inline set to 4096
[  377.621329][T12157] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  377.715665][T14194] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  377.890810][T14194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.895429][T14194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.899495][T14194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  377.905716][T14194] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  377.910411][T14194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.917517][T14194] usb 2-1: config 0 descriptor??
[  378.026078][T18757] sit2: entered promiscuous mode
[  378.028301][T18757] sit2: entered allmulticast mode
[  378.048905][T18759] loop7: detected capacity change from 0 to 512
[  378.052840][T18759] EXT4-fs: Ignoring removed nomblk_io_submit option
[  378.067160][T18759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.072158][T18727] orangefs_mount: mount request failed with -4
[  378.077016][T18759] ext4 filesystem being mounted at /846/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  378.096360][T18759] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.4829: corrupted inode contents
[  378.101732][T18759] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.4829: mark_inode_dirty error
[  378.107497][T18759] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.4829: corrupted inode contents
[  378.113037][T18759] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.4829: mark_inode_dirty error
[  378.136488][T12157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.365107][T14194] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  378.464785][T18784] loop7: detected capacity change from 0 to 32768
[  378.467606][T18784] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4840 (18784)
[  378.473573][T18784] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  378.477979][T18784] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  378.480726][T18784] BTRFS error (device loop7): nologreplay must be used with ro mount option
[  378.483549][T18784] BTRFS error (device loop7): open_ctree failed: -22
[  378.562865][T18790] loop7: detected capacity change from 0 to 512
[  378.565640][T18790] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  378.570849][T18790] EXT4-fs (loop7): 1 truncate cleaned up
[  378.575429][T18790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.588847][T12157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.649106][T14194] usb 2-1: USB disconnect, device number 28
[  378.691149][T18795] netlink: set zone limit has 4 unknown bytes
[  378.695223][T18795] netlink: del zone limit has 4 unknown bytes
[  379.192943][T18820] loop7: detected capacity change from 0 to 32768
[  379.197881][T18822] sctp: [Deprecated]: syz.2.4857 (pid 18822) Use of int in max_burst socket option.
[  379.197881][T18822] Use struct sctp_assoc_value instead
[  379.266683][T18820] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  379.266697][T18820]   allowing incompatible features above 0.0: (unknown version)
[  379.266701][T18820]   features: 
[  379.274537][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  379.276659][T18820] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  379.284277][T18820] bcachefs (loop7): initializing new filesystem
[  379.293365][T18820] bcachefs (loop7): going read-write
[  379.297854][T18820] bcachefs (loop7): marking superblocks
[  379.304080][T18820] bcachefs (loop7): initializing freespace
[  379.308620][T18820] bcachefs (loop7): done initializing freespace
[  379.312538][T18820] bcachefs (loop7): reading snapshots table
[  379.315077][T18820] bcachefs (loop7): reading snapshots done
[  379.326841][T18820] bcachefs (loop7): done starting filesystem
[  379.536294][T14194] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  379.554548][T18854] netlink: 'syz.2.4868': attribute type 4 has an invalid length.
[  379.559575][T18854] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4868'.
[  379.713347][T14194] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  379.718722][T14194] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  379.722481][T14194] usb 2-1: Product: syz
[  379.724644][T14194] usb 2-1: Manufacturer: syz
[  379.726783][T14194] usb 2-1: SerialNumber: syz
[  379.730004][T14194] usb 2-1: config 0 descriptor??
[  379.734617][T14194] ch341 2-1:0.0: ch341-uart converter detected
[  379.824192][T12157] bcachefs (loop7): shutting down
[  379.826326][T12157] bcachefs (loop7): going read-only
[  379.832478][T12157] bcachefs (loop7): finished waiting for writes to stop
[  379.835643][T12157] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  379.852233][T12157] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  379.856992][T12157] bcachefs (loop7): clean shutdown complete, journal seq 4
[  379.860366][T12157] bcachefs (loop7): marking filesystem clean
[  379.869439][T12157] bcachefs (loop7): shutdown complete
[  379.891315][   T33] audit: type=1326 audit(2000000251.932:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18879 comm="syz.2.4882" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1478ebe9 code=0x0
[  380.171346][T14194] usb 2-1: failed to send control message: -71
[  380.173560][T14194] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  380.178113][T14194] usb 2-1: USB disconnect, device number 29
[  380.180953][T14194] ch341 2-1:0.0: device disconnected
[  380.864490][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4888'.
[  380.950180][T18903] netlink: 'syz.2.4892': attribute type 10 has an invalid length.
[  380.952979][T18903] team0: left allmulticast mode
[  380.959768][T18903] 8021q: adding VLAN 0 to HW filter on device team0
[  380.964813][T18903] team0: entered allmulticast mode
[  380.973081][T18903] bond0: (slave team0): Enslaving as an active interface with an up link
[  381.113969][T18911] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  381.117177][T18911] overlayfs: failed to set xattr on upper
[  381.120783][T18911] overlayfs: ...falling back to redirect_dir=nofollow.
[  381.123924][T18911] overlayfs: ...falling back to index=off.
[  381.126605][T18911] overlayfs: ...falling back to uuid=null.
[  381.129613][T18911] overlayfs: failed to clone lowerpath
[  382.567529][T18944] binder: 18943:18944 ioctl c0046209 200000000000000 returned -22
[  382.836576][T18954] loop7: detected capacity change from 0 to 128
[  382.995798][T18971] vxcan1: entered allmulticast mode
[  383.058455][T18977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4922'.
[  383.227110][T18982] loop1: detected capacity change from 0 to 32768
[  383.230818][T18982] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4924 (18982)
[  383.236617][T18982] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  383.240425][T18982] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  383.255212][T18982] BTRFS info (device loop1): rebuilding free space tree
[  383.259426][T18982] BTRFS info (device loop1): allowing degraded mounts
[  383.262309][T18982] BTRFS info (device loop1): enabling ssd optimizations
[  383.265488][T18982] BTRFS info (device loop1): enabling free space tree
[  383.268019][T18982] BTRFS info (device loop1): force clearing of disk cache
[  383.270572][T18982] BTRFS info (device loop1): use zstd compression, level 3
[  383.273002][T18982] BTRFS info (device loop1): max_inline set to 0
[  383.288590][T15813] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  383.521885][T19013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.818968][T19043] netlink: 648 bytes leftover after parsing attributes in process `syz.1.4945'.
[  385.441267][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4970'.
[  385.689500][ T5963] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  385.852437][ T5963] usb 2-1: Using ep0 maxpacket: 8
[  385.856570][ T5963] usb 2-1: config 127 has an invalid interface number: 171 but max is 1
[  385.860203][ T5963] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  385.865039][ T5963] usb 2-1: config 127 has no interface number 1
[  385.867891][ T5963] usb 2-1: config 127 interface 171 has no altsetting 0
[  385.872799][ T5963] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  385.877067][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.880569][ T5963] usb 2-1: Product: syz
[  385.882352][ T5963] usb 2-1: Manufacturer: syz
[  385.884389][ T5963] usb 2-1: SerialNumber: syz
[  386.109848][ T5963] xr_serial 2-1:127.171: xr_serial converter detected
[  386.113335][ T5963] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  386.115579][ T5963] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  386.119147][ T5963] usb 2-1: USB disconnect, device number 30
[  386.121653][ T5963] xr_serial 2-1:127.171: device disconnected
[  386.321866][T19106] loop7: detected capacity change from 0 to 512
[  386.324929][T19106] EXT4-fs: Ignoring removed nobh option
[  386.327623][T19106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  386.334056][T19106] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.4971: iget: bad i_size value: 38620345925642
[  386.339709][T19106] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4971: couldn't read orphan inode 15 (err -117)
[  386.345130][T19106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.390450][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4977'.
[  386.407556][T19116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.467525][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4982'.
[  386.616502][ T4378] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u9:4: bg 0: block 5: invalid block bitmap
[  386.622194][ T4378] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  386.627154][ T4378] EXT4-fs (loop7): This should not happen!! Data will be lost
[  386.627154][ T4378] 
[  386.630833][ T4378] EXT4-fs (loop7): Total free blocks count 0
[  386.633619][ T4378] EXT4-fs (loop7): Free/Dirty block details
[  386.636138][ T4378] EXT4-fs (loop7): free_blocks=0
[  386.638195][ T4378] EXT4-fs (loop7): dirty_blocks=16020
[  386.640315][ T4378] EXT4-fs (loop7): Block reservation details
[  386.642413][ T4378] EXT4-fs (loop7): i_reserved_data_blocks=16020
[  386.653028][ T4378] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  386.825229][T19134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4986'.
[  386.829526][T19134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4986'.
[  387.089422][T19136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4987'.
[  388.384964][T19170] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5003'.
[  388.390470][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5004'.
[  388.527264][T19184] loop7: detected capacity change from 0 to 512
[  388.530462][T19184] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  388.534780][T19184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  388.538110][T19184] EXT4-fs (loop7): orphan cleanup on readonly fs
[  388.542167][T19184] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5010: bg 0: block 361: padding at end of block bitmap is not set
[  388.549096][T19184] EXT4-fs (loop7): Remounting filesystem read-only
[  388.552931][T19184] EXT4-fs (loop7): 1 truncate cleaned up
[  388.556859][T19184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  388.753028][T19194] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5010: dx entry: limit 0 != root limit 125
[  388.757489][T19194] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5010: Corrupt directory, running e2fsck is recommended
[  388.762983][T19194] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5010: dx entry: limit 0 != root limit 125
[  388.768407][T19194] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5010: Corrupt directory, running e2fsck is recommended
[  388.774530][T19194] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5010: dx entry: limit 0 != root limit 125
[  388.779751][T19194] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5010: Corrupt directory, running e2fsck is recommended
[  388.975802][T12157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  389.004985][ T5963] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  389.050847][T19200] loop7: detected capacity change from 0 to 4096
[  389.055088][T19200] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  389.071749][T19200] ntfs3(loop7): ino=19, mi_enum_attr
[  389.074035][T19200] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  389.088121][T19200] ntfs3(loop7): failed to convert "c46c" to koi8-u
[  389.091189][T19200] ntfs3(loop7): ino=20, mi_enum_attr
[  389.200574][ T5963] usb 2-1: Using ep0 maxpacket: 8
[  389.204753][ T5963] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  389.208117][ T5963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  389.213873][ T5963] usb 2-1: config 0 has no interface number 0
[  389.216551][ T5963] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  389.223649][ T5963] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  389.228327][ T5963] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  389.233180][ T5963] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  389.238480][ T5963] usb 2-1: config 0 interface 52 has no altsetting 0
[  389.241606][ T5963] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  389.246014][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.250169][ T5963] usb 2-1: config 0 descriptor??
[  389.472899][ T5963] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input27
[  389.539093][T19231] ip6gre2: entered allmulticast mode
[  389.618290][T19237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.693338][  T794] usb 2-1: USB disconnect, device number 31
[  390.369880][T13951] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  390.535495][T13951] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  390.538912][T13951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.541924][T13951] usb 8-1: Product: syz
[  390.543241][ T5963] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  390.544005][T13951] usb 8-1: Manufacturer: syz
[  390.548752][T13951] usb 8-1: SerialNumber: syz
[  390.551756][T13951] usb 8-1: config 0 descriptor??
[  390.707312][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.711288][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.714767][ T5963] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  390.718246][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.722281][ T5963] usb 2-1: config 0 descriptor??
[  390.774824][T13951] usb 8-1: f81604_read: reg: 105 failed: -EPROTO
[  390.777669][T13951] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  390.781008][T13951] f81604 8-1:0.0: probe with driver f81604 failed with error -71
[  390.786869][T13951] usb 8-1: USB disconnect, device number 27
[  391.163211][ T5963] hid_parser_main: 643 callbacks suppressed
[  391.163228][ T5963] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0
[  391.168922][ T5963] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0
[  391.173119][ T5963] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.001E/input/input28
[  391.179564][ T5963] cm6533_jd 0003:0D8C:0022.001E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  391.383617][   T24] usb 2-1: USB disconnect, device number 32
[  391.638606][ T5963] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  391.810870][ T5963] usb 8-1: Using ep0 maxpacket: 16
[  391.813058][ T5963] usb 8-1: too many configurations: 123, using maximum allowed: 8
[  391.816741][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.821010][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.825782][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.830333][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.836158][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.841202][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.846485][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.851171][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.856337][ T5963] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  391.860291][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  391.863775][ T5963] usb 8-1: SerialNumber: syz
[  391.866874][ T5963] usb 8-1: config 0 descriptor??
[  391.870593][ T5963] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input29
[  392.043296][T19297] loop1: detected capacity change from 0 to 2048
[  392.048340][T19297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  392.090552][ T5280] bcm5974 8-1:0.0: could not read from device
[  392.097470][ T5280] bcm5974 8-1:0.0: could not read from device
[  392.101139][ T5963] usb 8-1: USB disconnect, device number 28
[  392.137970][T19305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.140592][T19305] syzkaller0: entered promiscuous mode
[  392.142442][T19305] syzkaller0: entered allmulticast mode
[  392.153403][T19305] tipc: Resetting bearer <eth:syzkaller0>
[  392.158165][T19304] tipc: Resetting bearer <eth:syzkaller0>
[  392.161909][T19304] tipc: Disabling bearer <eth:syzkaller0>
[  392.311438][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5069'.
[  392.390845][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5072'.
[  392.422119][T19328] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  392.712504][T19336] netlink: 'syz.7.5076': attribute type 1 has an invalid length.
[  392.716609][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5076'.
[  394.647389][T19399] sctp: [Deprecated]: syz.1.5104 (pid 19399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  394.647389][T19399] Use struct sctp_sack_info instead
[  394.674936][T19401] loop1: detected capacity change from 0 to 16
[  394.678176][T19401] erofs (device loop1): mounted with root inode @ nid 36.
[  394.895000][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5114'.
[  394.900132][T19421] tipc: Started in network mode
[  394.902538][T19421] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711
[  394.906313][T19421] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  394.944203][T19427] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5118'.
[  395.180936][T14194] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  395.355469][T14194] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.364826][T14194] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.372279][T14194] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  395.378152][T14194] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  395.382023][T14194] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.392188][T14194] usb 8-1: config 0 descriptor??
[  395.832385][T14194] hid-udraw 0003:20D6:CB17.001F: unknown main item tag 0x0
[  395.839023][T14194] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.001F/input/input30
[  395.847490][T19462] overlayfs: failed to clone upperpath
[  395.919085][T14194] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.001F/input/input31
[  395.926765][T14194] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.001F/input/input32
[  395.935215][T14194] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.001F/input/input33
[  395.983609][T14194] hid-udraw 0003:20D6:CB17.001F: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.7-1/input0
[  396.106695][T13951] usb 8-1: USB disconnect, device number 29
[  396.676741][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5138'.
[  396.910084][T19492] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5145'.
[  396.914050][T19492] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  396.954357][   T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  396.964782][   T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  396.975859][T19496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.998022][T14194] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  397.103277][T19516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5157'.
[  397.108068][T19516] sock: sock_set_timeout: `syz.1.5157' (pid 19516) tries to set negative timeout
[  397.189268][T19527] loop1: detected capacity change from 0 to 1024
[  397.198419][T19527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.209701][T19527] EXT4-fs error (device loop1): __ext4_remount:6740: comm syz.1.5162: Abort forced by user
[  397.214060][T19527] EXT4-fs (loop1): Remounting filesystem read-only
[  397.216829][T19527] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  397.246408][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.352464][T19532] loop7: detected capacity change from 0 to 32768
[  397.366916][T19532] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5163 (19532)
[  397.378779][T19532] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  397.389305][T19532] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  397.454937][T19532] BTRFS info (device loop7): enabling ssd optimizations
[  397.458333][T19532] BTRFS info (device loop7): enabling free space tree
[  397.466481][T14194] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  397.476457][T12157] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  397.781063][T14194] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  398.082261][T19560] loop1: detected capacity change from 0 to 32768
[  398.109230][T19560] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  398.109251][T19560]   allowing incompatible features above 0.0: (unknown version)
[  398.109258][T19560]   features: 
[  398.123336][T19560] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  398.126787][T19560] bcachefs (loop1): initializing new filesystem
[  398.136201][T19560] bcachefs (loop1): going read-write
[  398.140303][T19560] bcachefs (loop1): marking superblocks
[  398.147224][T19560] bcachefs (loop1): initializing freespace
[  398.152439][T19560] bcachefs (loop1): done initializing freespace
[  398.157850][T19560] bcachefs (loop1): reading snapshots table
[  398.162755][T19560] bcachefs (loop1): reading snapshots done
[  398.173320][T19560] bcachefs (loop1): done starting filesystem
[  398.196371][T15813] bcachefs (loop1): shutting down
[  398.198584][T15813] bcachefs (loop1): going read-only
[  398.200883][T15813] bcachefs (loop1): finished waiting for writes to stop
[  398.204785][T15813] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  398.215526][T15813] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  398.219882][T15813] bcachefs (loop1): clean shutdown complete, journal seq 4
[  398.223245][T15813] bcachefs (loop1): marking filesystem clean
[  398.233434][T15813] bcachefs (loop1): shutdown complete
[  399.842769][T19692] input: syz1 as /devices/virtual/input/input34
[  399.950124][T19702] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5196'.
[  400.297760][T19721] block device autoloading is deprecated and will be removed.
[  401.366831][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  402.936022][T19787] loop1: detected capacity change from 0 to 16
[  402.990009][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5232'.
[  402.995099][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5232'.
[  403.042788][T19805] loop1: detected capacity change from 0 to 512
[  403.045560][T19805] EXT4-fs: Ignoring removed oldalloc option
[  403.048715][T19805] EXT4-fs: inline encryption not supported
[  403.051134][T19805] EXT4-fs: Ignoring removed mblk_io_submit option
[  403.054212][T19805] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  403.082472][T19805] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5237: bg 0: block 64: padding at end of block bitmap is not set
[  403.088592][T19805] Quota error (device loop1): write_blk: dquota write failed
[  403.091610][T19805] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  403.094933][T19805] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.5237: Failed to acquire dquot type 0
[  403.099266][T19805] EXT4-fs (loop1): 1 truncate cleaned up
[  403.103094][T19805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.140532][T19807] loop7: detected capacity change from 0 to 32768
[  403.146749][T19807] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  403.155506][T19807] XFS (loop7): Ending clean mount
[  403.155683][T15813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.174418][T12157] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  403.503339][T19853] loop7: detected capacity change from 0 to 4096
[  403.587686][T19859] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  403.727930][T19873] loop7: detected capacity change from 0 to 64
[  403.732003][T19873] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  404.335283][  T794] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  404.509053][  T794] usb 8-1: Using ep0 maxpacket: 16
[  404.514305][  T794] usb 8-1: config 0 has an invalid interface number: 147 but max is 0
[  404.517937][  T794] usb 8-1: config 0 has no interface number 0
[  404.520778][  T794] usb 8-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32
[  404.528685][  T794] usb 8-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  404.876166][  T794] usb 8-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  404.881736][  T794] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44
[  404.885617][  T794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.889060][  T794] usb 8-1: Product: syz
[  404.890901][  T794] usb 8-1: Manufacturer: syz
[  404.892948][  T794] usb 8-1: SerialNumber: syz
[  404.896521][  T794] usb 8-1: config 0 descriptor??
[  404.899814][T19891] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  404.903077][T19891] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  405.365052][  T794] net1080 8-1:0.147: probe with driver net1080 failed with error -71
[  405.371203][  T794] usb 8-1: USB disconnect, device number 30
[  405.470019][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5276'.
[  405.477447][T19909] bond0: invalid ARP target 0.0.0.0 specified for addition
[  405.480731][T19909] bond0: option arp_ip_target: invalid value (0)
[  405.511383][T19911] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5277'.
[  405.515234][T19911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5277'.
[  405.519510][T19911] netlink: 31 bytes leftover after parsing attributes in process `syz.1.5277'.
[  405.523358][T19911] netlink: 'syz.1.5277': attribute type 3 has an invalid length.
[  405.526615][T19911] netlink: 'syz.1.5277': attribute type 2 has an invalid length.
[  405.531083][T19911] netlink: 31 bytes leftover after parsing attributes in process `syz.1.5277'.
[  405.791413][T19935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5289'.
[  405.795341][T19935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5289'.
[  406.953749][T19976] tunl0: entered promiscuous mode
[  406.955782][T19976] tunl0: left allmulticast mode
[  406.958389][T19976] netlink: 'syz.2.5308': attribute type 4 has an invalid length.
[  406.961577][T19976] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5308'.
[  406.975881][T19980] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5309'.
[  407.007052][T19986] lo speed is unknown, defaulting to 1000
[  407.500545][T20028] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  407.511700][T20028] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  407.545787][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5332'.
[  408.321207][T20046] loop1: detected capacity change from 0 to 32768
[  408.329406][T20046] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  408.329406][T20046] 
[  408.333499][T20046] read_mapping_page failed!
[  408.335202][T20046] ERROR: (device loop1): txCommit: 
[  408.335202][T20046] 
[  408.396537][T20050] loop1: detected capacity change from 0 to 1024
[  408.406262][T20050] hfsplus: walked past end of dir
[  408.820858][T13951] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  408.983074][T13951] usb 2-1: Using ep0 maxpacket: 32
[  408.988488][T13951] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  408.992219][T13951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.996022][T13951] usb 2-1: Product: syz
[  408.997825][T13951] usb 2-1: Manufacturer: syz
[  408.999784][T13951] usb 2-1: SerialNumber: syz
[  409.002808][T13951] usb 2-1: config 0 descriptor??
[  409.444092][T13951] airspy 2-1:0.0: Board ID: 00
[  409.445814][T13951] airspy 2-1:0.0: Firmware version: 
[  409.740946][T20109] loop7: detected capacity change from 0 to 128
[  409.747495][T20109] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  409.778706][T20109] ext4 filesystem being mounted at /961/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  409.963989][T13951] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e
[  409.967520][T13951] airspy 2-1:0.0: Registered as swradio24
[  409.972003][T13951] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  409.977234][T13951] usb 2-1: USB disconnect, device number 33
[  410.016150][T20109] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.7.5367: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
Connection to localhost closed by remote host.
[  410.091853][T15420] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  410.429338][T12169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.467477][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  410.479712][T12169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.537349][T12169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.589488][T12169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.665065][T12169] bridge_slave_1: left allmulticast mode
[  410.667031][T12169] bridge_slave_1: left promiscuous mode
[  410.668950][T12169] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.672110][T12169] bridge_slave_0: left allmulticast mode
[  410.675012][T12169] bridge_slave_0: left promiscuous mode
[  410.677275][T12169] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.773534][T12169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.776539][T12169] bond_slave_0: left promiscuous mode
[  410.779398][T12169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.783222][T12169] bond_slave_1: left promiscuous mode
[  410.785384][T12169] bond0 (unregistering): Released all slaves
[  410.841675][T12169] tipc: Disabling bearer <udp:syz2>
[  410.843936][T12169] tipc: Left network mode
[  411.013761][T12169] hsr_slave_0: left promiscuous mode
[  411.015843][T12169] hsr_slave_1: left promiscuous mode
[  411.018216][T12169] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.021257][T12169] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.025170][T12169] veth1_macvtap: left promiscuous mode
[  411.027104][T12169] veth0_macvtap: left promiscuous mode
[  411.029503][T12169] veth1_vlan: left promiscuous mode
[  411.033653][T12169] veth0_vlan: left promiscuous mode
[  411.060596][T12169] pim6reg (unregistering): left allmulticast mode
[  411.096510][T12169] team0 (unregistering): Port device team_slave_1 removed
[  411.101894][T12169] team0 (unregistering): Port device team_slave_0 removed
[  411.418638][T12169] ------------[ cut here ]------------
[  411.421177][T12169] WARNING: CPU: 1 PID: 12169 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  411.425311][T12169] Modules linked in:
[  411.427037][T12169] CPU: 1 UID: 0 PID: 12169 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  411.432171][T12169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  411.436485][T12169] Workqueue: netns cleanup_net
[  411.438624][T12169] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  411.440999][T12169] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 c0 e1 f7 e8 f4 95 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e6 95 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  411.449501][T12169] RSP: 0018:ffffc9000641f898 EFLAGS: 00010293
[  411.452180][T12169] RAX: ffffffff8a22153c RBX: ffff88804024a440 RCX: ffff888128abd640
[  411.455701][T12169] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff888128abd640
[  411.459115][T12169] RBP: ffffc9000641f9b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  411.462510][T12169] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[  411.466121][T12169] R13: 1ffff92000c83f40 R14: ffff88804024b8c0 R15: dffffc0000000000
[  411.469514][T12169] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  411.473339][T12169] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  411.476329][T12169] CR2: 0000558355e81e78 CR3: 0000000110966000 CR4: 00000000000006f0
[  411.479802][T12169] Call Trace:
[  411.481271][T12169]  <TASK>
[  411.482535][T12169]  xfrm_net_exit+0x2d/0x70
[  411.484522][T12169]  ops_undo_list+0x49a/0x990
[  411.486687][T12169]  ? __pfx_ops_undo_list+0x10/0x10
[  411.488915][T12169]  ? do_raw_spin_unlock+0x4d/0x240
[  411.491148][T12169]  cleanup_net+0x4c5/0x800
[  411.493139][T12169]  ? __pfx_cleanup_net+0x10/0x10
[  411.495275][T12169]  ? rcu_is_watching+0x15/0xb0
[  411.497449][T12169]  ? process_scheduled_works+0x9ef/0x17b0
[  411.499921][T12169]  ? process_scheduled_works+0x9ef/0x17b0
[  411.502373][T12169]  process_scheduled_works+0xae1/0x17b0
[  411.504787][T12169]  ? __pfx_process_scheduled_works+0x10/0x10
[  411.507498][T12169]  worker_thread+0x8a0/0xda0
[  411.509543][T12169]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  411.512289][T12169]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  411.514864][T12169]  ? __kthread_parkme+0x7b/0x200
[  411.516988][T12169]  kthread+0x711/0x8a0
[  411.518853][T12169]  ? __pfx_worker_thread+0x10/0x10
[  411.521051][T12169]  ? __pfx_kthread+0x10/0x10
[  411.523078][T12169]  ? rcu_is_watching+0x15/0xb0
[  411.525142][T12169]  ? __pfx_kthread+0x10/0x10
[  411.527169][T12169]  ret_from_fork+0x3fc/0x770
[  411.529303][T12169]  ? __pfx_ret_from_fork+0x10/0x10
[  411.531544][T12169]  ? __switch_to_asm+0x39/0x70
[  411.533642][T12169]  ? __switch_to_asm+0x33/0x70
[  411.535676][T12169]  ? __pfx_kthread+0x10/0x10
[  411.537690][T12169]  ret_from_fork_asm+0x1a/0x30
[  411.539830][T12169]  </TASK>
[  411.541306][T12169] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  411.544439][T12169] CPU: 1 UID: 0 PID: 12169 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  411.548490][T12169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  411.552829][T12169] Workqueue: netns cleanup_net
[  411.554910][T12169] Call Trace:
[  411.556376][T12169]  <TASK>
[  411.557704][T12169]  dump_stack_lvl+0x99/0x250
[  411.559719][T12169]  ? __asan_memcpy+0x40/0x70
[  411.561739][T12169]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.563932][T12169]  ? __pfx__printk+0x10/0x10
[  411.565886][T12169]  vpanic+0x281/0x750
[  411.567540][T12169]  ? __pfx__printk+0x10/0x10
[  411.569403][T12169]  ? __pfx_vpanic+0x10/0x10
[  411.571309][T12169]  ? is_bpf_text_address+0x292/0x2b0
[  411.573500][T12169]  panic+0xb9/0xc0
[  411.575106][T12169]  ? __pfx_panic+0x10/0x10
[  411.576982][T12169]  __warn+0x31b/0x4b0
[  411.578707][T12169]  ? xfrm_state_fini+0x26d/0x2f0
[  411.580860][T12169]  ? xfrm_state_fini+0x26d/0x2f0
[  411.583027][T12169]  report_bug+0x2be/0x4f0
[  411.584923][T12169]  ? xfrm_state_fini+0x26d/0x2f0
[  411.587106][T12169]  ? xfrm_state_fini+0x26d/0x2f0
[  411.589202][T12169]  ? xfrm_state_fini+0x26f/0x2f0
[  411.591307][T12169]  handle_bug+0x84/0x160
[  411.593119][T12169]  exc_invalid_op+0x1a/0x50
[  411.595062][T12169]  asm_exc_invalid_op+0x1a/0x20
[  411.597053][T12169] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  411.599350][T12169] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 c0 e1 f7 e8 f4 95 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e6 95 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  411.607066][T12169] RSP: 0018:ffffc9000641f898 EFLAGS: 00010293
[  411.609624][T12169] RAX: ffffffff8a22153c RBX: ffff88804024a440 RCX: ffff888128abd640
[  411.612884][T12169] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff888128abd640
[  411.616121][T12169] RBP: ffffc9000641f9b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  411.619498][T12169] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[  411.622739][T12169] R13: 1ffff92000c83f40 R14: ffff88804024b8c0 R15: dffffc0000000000
[  411.625889][T12169]  ? xfrm_state_fini+0x26c/0x2f0
[  411.627948][T12169]  ? xfrm_state_fini+0x26c/0x2f0
[  411.629953][T12169]  xfrm_net_exit+0x2d/0x70
[  411.631791][T12169]  ops_undo_list+0x49a/0x990
[  411.633685][T12169]  ? __pfx_ops_undo_list+0x10/0x10
[  411.635765][T12169]  ? do_raw_spin_unlock+0x4d/0x240
[  411.637861][T12169]  cleanup_net+0x4c5/0x800
[  411.639714][T12169]  ? __pfx_cleanup_net+0x10/0x10
[  411.641749][T12169]  ? rcu_is_watching+0x15/0xb0
[  411.643712][T12169]  ? process_scheduled_works+0x9ef/0x17b0
[  411.646032][T12169]  ? process_scheduled_works+0x9ef/0x17b0
[  411.648357][T12169]  process_scheduled_works+0xae1/0x17b0
[  411.650620][T12169]  ? __pfx_process_scheduled_works+0x10/0x10
[  411.653058][T12169]  worker_thread+0x8a0/0xda0
[  411.654945][T12169]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  411.657547][T12169]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  411.659997][T12169]  ? __kthread_parkme+0x7b/0x200
[  411.662079][T12169]  kthread+0x711/0x8a0
[  411.663809][T12169]  ? __pfx_worker_thread+0x10/0x10
[  411.665932][T12169]  ? __pfx_kthread+0x10/0x10
[  411.667920][T12169]  ? rcu_is_watching+0x15/0xb0
[  411.669965][T12169]  ? __pfx_kthread+0x10/0x10
[  411.671907][T12169]  ret_from_fork+0x3fc/0x770
[  411.673846][T12169]  ? __pfx_ret_from_fork+0x10/0x10
[  411.676004][T12169]  ? __switch_to_asm+0x39/0x70
[  411.678006][T12169]  ? __switch_to_asm+0x33/0x70
[  411.680049][T12169]  ? __pfx_kthread+0x10/0x10
[  411.681986][T12169]  ret_from_fork_asm+0x1a/0x30
[  411.684005][T12169]  </TASK>
[  411.686138][T12169] Kernel Offset: disabled
[  411.687999][T12169] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:40:06  Registers:
info registers vcpu 0

CPU#0
RAX=7faac06ed2ea0200 RBX=ffffffff819683b8 RCX=7faac06ed2ea0200 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0e155a2fc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000030a1f7b5 0000000000000001 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000641f030
R8 =ffff888020e10237 R9 =1ffff110041c2046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa902 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558355e81e78 CR3=0000000110966000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
