last executing test programs:

1m12.960734261s ago: executing program 2 (id=110):
r0 = socket$inet(0x2, 0xa, 0x37)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x24}}, 0x20000000)

1m12.82871159s ago: executing program 2 (id=111):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0x7ff, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

1m12.828503486s ago: executing program 2 (id=112):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002080)=""/172, 0xac}], 0x1}, 0xffff}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0xc0, 0x0)

1m12.65483112s ago: executing program 2 (id=115):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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")
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3853008, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m12.576285988s ago: executing program 2 (id=116):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94)

1m12.295301671s ago: executing program 2 (id=120):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e31000000000000000000000008000140"], 0xfc}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)

1m12.16721184s ago: executing program 32 (id=120):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e31000000000000000000000008000140"], 0xfc}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)

49.416083005s ago: executing program 3 (id=377):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x7f2, &(0x7f0000001280)="$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")
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300)

49.361578578s ago: executing program 3 (id=379):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {{@in6=@mcast1, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in6=@loopback, 0x20, 0x6c}, @in6=@mcast2, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@extra_flags={0x8, 0x18, 0x9}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)

49.304597876s ago: executing program 3 (id=381):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000040)={0x0, 0x989680})

49.233862102s ago: executing program 3 (id=382):
r0 = userfaultfd(0x801)
r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x252, &(0x7f0000000600)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000540)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @b})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

48.937177412s ago: executing program 3 (id=386):
prctl$PR_SCHED_CORE(0x35, 0x2, 0x0, 0x0, 0x0)

48.484007343s ago: executing program 3 (id=394):
r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f000000ac40)={0x0, 0x5c5})

48.356389374s ago: executing program 33 (id=394):
r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X1sVeUdB/BzKQWkQLs4FEMyGUNdls0gZoJOscjAUUHuwA1Jxmhl0iBBu2ZuaRdd49hwcS6Vl20sQV0iI6uNdnSDzBHFhCjE8TI0xoxXGaMZccjrwpjGpffe53LvubS9Mmd9+XxIe85zf+d57nNPzh/3e+lzbgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRFCWntzYv/t1Vm9849c7TDVe93LfvoxP+Vv+TW1cOHfu5R/5atvJP+1+aN7Jm+MTLWvcl5jbsHbskihKpfolM/7k3fWXG/Jlzpw0IA1Z/Nb2tqOjqKdNd96cb/fIe7OyX/1MTRVFpbICSzHZSWXrbJ2+A7G594YDdGjfozcWDj1a1rKkuq1368NRjhS+dTgN6ewK9JXNdHTx7LVWmfveJHZFt51x6ibxLNN0/fsG9Ly8CAHhXRidTm+zb0cxb3Gy7KV6PtStj7eZYO7xDaM5tnI/0uP26mueIeL2X5lmZjgr9u5xnrJ45/9l2Mt4/1o5FjXcxz/xDM5FmQFfzrIvVe2ueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8kD2zd9K+bpz13eOJNT0y5bu9rs58/Oelrzy/63rED/x5+8eoD/1mz/6V5I2uGT7ysdV9ibsPesUuiqCLVL5Hunpg5cPLFX/hV1fd/39Ewdd2g5pdLMuOGbd+cg6PXws615VF0R07lYBj2H0OiKJlfSDWjlYWFBamdKaEAAADAR8klqd99su10HCzNaydSaTKR+hekw+K4QW8uHny0qmVNdVnt0oenHjv/8ZJdjFd5zvGy7YqzP4mcYBzib3y8s/VwaH3BON2LjxjP8yUdVy5Pbl/7jR2Pnn7x6r23bxtec881F97VUrv2kxdUHd/x99kF+b+i+/wfzpz8DwAAwP9C/o+P072e8v9FB8p2Ljrz6obrv/zHZ75527a7T/3mx1u+fVfHoSNNY35Qu2TzloL8PyLvKQvyf5hxyP99ovPL/wAAAPBB9v/O/5UF43Svp/xfOfrtZffcW7d26c6tZ8b/4fLWJ9reuHz1tTNGrWiN5j/bfuitgvw/urj83zd32uHBP4cJLyyPotHFn1QAAAAgT/h/97MfLYS8nv7kIJ7X77hlQvnu45d+d9Km2+7fM6zhwJ2n7xxXs3bh5gWfGX3ftMcqDxbk/8ri8n/p+/NyAQAAgCKMWrWj5q1ZV+4e88qe++qf2t06YPX0f75y/faWK5pOHF60ZeftBfk/WVz+7987LwcAAAA4h58+c82Pbm5c/K05VZvGnznx+uAH395zYX3rrgk/W7Fv2zvPrthVkP+ri8v/AzPbzMqHdKcXwl8hLCuPogGdO3XpwotR843ZAgAAAPAeCTl96aixHSvmD/3srP5TaluWr3ro0hGHP5VofnDonMbxpXs2Hrm3IP/XdX///3Cng7D+P+/+fwXr/3MK6bv+fcmNAQAAAPg4KlzPH26Pn/7mgq6+f7/Y9f+rrtv6622JG1+f3nTJvF+OWDRu8uQj+zY2nnyg+vObXh24ft0jBfm/qbj8X5K7fS+//w8AAADOw4ft+/9mF4zTvZ7u/998dePTj+2/+7kXntx8y6kLDp25of2KJ9vX33p/++HhJ6PG7acL8n9zcfk/bMtyX97GcH5+WB5Fwzp3MncT/G2Y7sJYoa00p5A+8bEeM0OPTKGtf04hpS7WY0x5FH26c6cpVvhEKDTHCkeHZAqPxwrbQyFzPWQLT8UKG8OV9vMhmenGC+tDIbPAoi2soCjLLomI9TjRVY/Owjl77Mo+OQAAwMdKCM+ZLFua34ziUbYt0dMBA3s6oE9PB5T0dEDf2AHxA7t6PKrOL4TH23+xoGb+X5bdMHRD+YxZO0u+fnDahC8uX1f9nQ1zJh8feVF5R0H+f7y4/B9ORb/0pqv1/1FY/5/5XsPs+v/qUKiIFdpCIRm/Y0AyPEc67D4UnqMimelxdFi2AAAAAB9p4XOBkl6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyXvTsPk6q6EwZ8uumFbpruNvoIar6EYNh8pGkg4hITUQwkaLSJe4wKQqNIiyiQCEE/XOJuPk38RmNmDIyJWxBxGbfRiKJohESigyOKS6IO7ga3jMsj83RXnaLqVpddCCjtvO8fXafqd9ZbS9e599a5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/w4HvTB63pQZZ6y67JUVr4ehd14+6uKSX2w3fOnSPtf98urrf/XSA88tHd973HYj+sx/tuSomc/sfHYITW3lSlLFSw6oHtlj4OWjf3rL6pn73lpz0WMV6XrT8dCt9U9p+s6ZsdUXuodwW0kIZcnAwJpUoDx9vybW9+WaELYI6wKZEs3VqRLJhsMDVSHMDesCmaruqAqhJitw4KP33XNha+KSqhD6hBAqk208XZlqoyoZ6FuRClQnAyeUpQL/WJuSCdxemgrABotvhsyLfmFTbob69ssVeP2Vb7SOfb6Sw+sSE/WF872+5ybuVJaK5ANNG/S05VXHJpH39ljk3dYJ3m152/kiT1v2F6n0N5S160KVoXRC88RxM1qmx0dKQ0NDl0I1baLneeWa2ePXJ91pXoexA/Ub5XVY3nfYQX16jj7yyhXLFz1Ut3iD/xk8kbVJs9ObWmVIv+Y6zfMYDfd50gnefnlvjF6+dIUQDt1y5ajdRx700qDD6v+1zwU7X9/wq5t/WPrKlFW7HLzbguU/O7Iqb/5f/8nz/8zHUvq2NCd3bPXD2tTcPD5SExNv1qbm5gAAANBpdIa9pv94f8sF7yy5t/n6c4a+d8OcGwYuvq9uSfWYAbcePGzfO9b0bVqRN//vVdzx/3jIvyZ7tItCGN6WOKMuhJ5tj6cC18buHF0XwtfaUk25gT0TgUUhbNOWGJCpKlGiayzRKxFYXZsODE8ElsRAUyLwuxi4KBE4MwYWJgLjY2BRIrBXDIRJuePYoTY9jqIDVTEwNrURF8azEN6uja0lttVTmaoAAAA2kvTssDz3bta5DhuaIU4vF1Z1lCGegV0wQ2WihuQMNjOtKlhDWUc1lHZUQ2bccz55+Hk1l3RUc95pGCW5GUZc++C8Pz92Vp/59b9d/fX/6vnfO15+yHHTzxy65Yw5r75z6MrVPfLm/42fPP+vbKcjJXnH/0MY0/Y35i5NR1oy8bFNORkAAACADTB7h0sefuX42of7TVn0+nn//uP/X/H7W2cdsetri3/x5DM/Kq1ZdXDe/H94cef/x30iXbIyh2VxN8TkuhAacwOpar+ZH0gd9e6WDgAAAEBnkDkenzkWPil9mzpFOzmfzs/ftJ7544H/4e3mP7Bl0ZcOm95/7KPbXvKP+7f//d3zljXsf832V+yy8poRS7b69qiP8+b/TcWd/1+de5vqxJLYi1/WhdA1K/Bg7GVroE2vGHhuj9xAevxL4gY4P1aVPjEhU9X5scTYGGhMBOYWKrE8U6JnbiD9ZGUaPyMzjknpElkBAAAA+MzF3QHxuHw8//+qv/W/eeceF2+9d/3ybd6d/MJPbnj+vv5rSpde+vZ7x5z75Qtv/Hne/H/s+p3/3zYPzju9v6VbCIPKQuiS/GHAsurUwoAxUFOSTtxdnaqrS7Kq06pD2L11YMmq/ppe/78sucbgo1WpqmKgZ+9r1vRtTVxZFcKg7MDjh8/bqTUxPRHINH5QVQhfbR1tsvF/65pqvDzZ+KVdQ/hKViBT1dFdQ2htrCJZ1X2V6esYJKu6oTKELbMCmaqGVYYwMwDQScV/pROyH5w2c9bkcS0tzSdtwkTch18VJk5qaW4Yf0LLhMoCfZqQ6HPOMkan5Y+p2CvfPJVeouij7/SuLyad+Z1gY3Zb6f34eScOpu/H70LlbeMcUp5zd2hyyP23z28iZH2TKjTk0k085OrsStY9iXn1x/wVoVvoOmNa80kNJ4+bPv2kwam/xWYfkvobDzOlttXg5Laqbq9vRbw8Cq6WlfBpt1W/7EoGTT9+6qBpM2cNnHT8uGOaj2meMnhIY+OuuwwdOqRxUOuo0n87GGq/9qpODHXtvCLHtRGHum1ZViWfxaeGhIREZ0t87YRjH5l65VtX7Fe3y1m3DPv+DTce98bBP2nceu3ZNYfvM/m1xbPy5v9TP3n+Hz914id/en2GQsf/6+Nh/tTj6w7zj42BucUe/68vdDQ/c2JAr0RgTgzMcZgfAACAL4a4OzLuzYx7pbc85Nu3r9rjr8+8stuu/+cPdx9a++FVXQ4b9f+m7fjkFo+U//Hwl/bJm//PKe73/xtp/f/M0vWjCy3zPyCWaCy0/n9ymf/M+v9zCq3/n1zmP7P+/9zPYf3/GZlAYpO8bf1/AADgi+CzW/+/w+X9kxcIyMvQ4fL+yQsE5GXocBn/Yi8QsN7r/zesOnrkhT1//dWXv3nIvj+Y8uKUBf2P/NYe1/zwvHvDNXd/Y0W/OXnz/4uKm/9buB8AAAA2HxOe/N3qwcfv+sEjD91eutdPl7/4lTeeOKbp7gfWXvzqHe9cMWKbiXnz/7nFzf8/+/X/QqHz/3sVCjQVWhjQ+n8AAAB0UoXW/3vxT996cGTlTxpPffS3f7hqp8sP3+PUh6+6d6+JV9fuc9MOo3913q558/+Fxc3/42kXpTm5Y28+rE2taReSa9q9WZv5yQAAAAB0DqWhoaG8yLw5K6Pu+enbXJleCvST0tlmXP7uqgmX7D1w3N9eHXDgf9w4+83vn/jEHac/PfvpWUsve3Pvd5blzf8XFTf/z/ldRnnfYQf16Tn6yA+vXLF80UN1iyvWHf8HAAAANp1i90sAAAAAAAAAAAAAAACfvzvXvPfro7a+b9jP77z1xj1Hvdpnu4/3ffGt58/Z7XsPz/7z1Y99sDTv9/9hTFu5Qr//j9f9i78v2Cond2y14/X/0vcP3GfBzLYlC5fVhrB9dmDy6ZO3COlr8/fLDtxzxIAerYnTkyXuemavF1sTRyUD3x34pfdaE7snAmPjIonbJAPxqorvdU8E4vKKjyUDcXssTAYq0oFzu6fGUZLcVi/XpLZVSXJbPVkTQl1WILOtbqtJtVGSHOAliUBmgCcmA3GA+6UDpcleLeiW6lUM1MSiv+mW6hUAAJut+C2wPEyc1NLcGL/Cx9tty3Jvo5wly07Lr7akyOafSi9N9tF3etcXk+6S/C667lrj5aGydQiD876uZmcpaRvlxqmlg023VYEhd7TaW2mBcknru+kqCo+oKjWihvEntEwo73DgQzvOMqSswyyD8yY72VlK2zZpEbUU0ZciRlTktimiy/F+aWho6JLItVsM1occHb0iiv29fvY6f4VeBdl56vcetcfWpTsNOXjns08cM2TJN7ZY/MrbO52y7OQXVvzTbd8be2rPvPl/fXHz/8rscb2XvhjAnHhlvW/WhTC2yBEBAADAF9/1/3f+TYeesOTliYvK/vMvf5lcuv+h5Wtn3zJ71s+evPv8756749UbGr/goVNaRk4sq7jx5t/ude3yc07ft+nQ5mGr7yx9ftmfLm3u/0b++v+9ipv/xz1Y6UPBqb0di+L1/8+oC6Ht0vr1qcC1cbhH14XwtbZUUyyRuqD+6FiiMRW4Nu4wGRBLjG3KraprDCxMBFbXpgOLEoElMZDeS3FNSO/Kubg2hJ3aUmNyS0yNJeoTgf1joFci0BADjYlA9xgYngi81j0daEoElsZAmJS7rW7unt5WAAAA6yM9zyrPvRuS87yFZR1lKOkoQ3VHGUo7ylDZUYZCo4j3b4oZyhMnr5RkZSpP1lqVqCUvQ7wY/nr3Ky9DWJ6bM1kwr+l4/kHmfIOS3AyndLvgrMe/HYYteG23h2e+Nbphu7/vd/9T90+/dPm5Kz8896DlL+TN/xuLm/9X596mWl8S5//rrv+XCjwYu/fLeOp4rxh4bo/cQHrHwJI42T0/U1VTukR60n5+LDE8BnolAlNjYHgiMHZMOjC3R24gPdPONH5GpvFJ6RJZAQAAAPjMxR0EcTdNnP8fu1/vRy+/+bqWxecMuP3da689r9eIZ2+cc9ezFxz2VGh6feWEN/Pm/8OLm//H9rplN3Zm7M0L3UO4rWRdbzKBgTWpQNyPURN/Hv/lmhC2yNrBkSnRXJ0qUZFoODxQlfqFekWyqjuqUmsMxPsHPnrfPRe2Ji6pCqFP1t6XTBtPV6baqEoG+lakAtXJwAllqUDc85MJ3F6aCsAGy+wVjC+o9KkuGfXtlyvw+vuiXBM0Oby8faDt5GvvN1ebSmXygfQ+1Yz1e9ryqmOTyHt7LPJu64zvtnrvtuwvUulvKGvXhSpD6YTmieNmtEyPj2T/kjXPJnqes3+lWkx6I7wO53z63nasMtmBxsTHR2P75dp/HZZkFtrqO+ygPj1HH3nliuWLHqpbXFF0NwqIPxQ+o+7i+ieyNu+mVhnSr7lO93nS5POkM/4b6OVpCyF0feK4poV7f/z02V23fmCbmz96aOdDV1z19rfuOXr3J7cYNeKKhT/Mm/83FTf/L0vctnk/bsxpdSH0z9q4y+LmH1GX+hzMCqQ+JbfMD6QOuT9fW/CTEwAAADa2zO6OzP6CSenb1AnhyXlyfv6m9cwf91cMbzd/sf1++eNVP3p+4bwPTq2bcdabp87d9/2xj1837u8Nu9xXd/Ir/zLvgGPz5v9jP3n+3zXRTcf/Hf9nE3H8v12b+67orskH5mzQrui86tgkHP9v1+b+bnP8v12O/zv+3x7H/zvg+H+7NvenLe9b0lRfukII83+0w13LLxt/y0tNLVefPWvk19/9ftPiU+4aPuXXD7y6ZOaf7+yXN/+fWtz83/p/7S/al1n/b2yh9f+mFlr/b471/wAAgE2qwEJzyXle3up9eRmSq/flZehwgcAOlxi0/t96r/939KpH99/jlt1/80TpvBuv2/+DytuOGLLVDdvPn3j4+688tWb+vb/Pm//PKW7+H18O3bJb7yzr//UaU6Cqi2JgqoUBAQAA2BwV2kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA56ux/48fm73ghSUf/vjIvd4+f/FFlx6wY8/5Y+5/640eB77z1iEjlz63dHzvcduN6DP/2ZKjZj6z89khTGorV5IqXnJA9cgeAy8f/dNbVs/c99aaix6rTNdbnr7dLid3bPXD2hDmZj1SExNv1rbeWRc4cJ8FM8taE8tqQ9g+OzD59MlbtCZ+VxtCv+zAPUcM6NGaOD1Z4q5n9nqxNXFUMvDdgV96rzWxezpQkuzuP3dPdbck2d0Lu4dQlxXIdPe47rlVZdoYlQ6UJtu4uibVRgzUxKKX1aTaiIGWWGJS1xAGlYXQJVnVHytTVXVJVnVnZaqqLsmqTq0MYfcQQlmyqmcqUlWVJUf+SEWqqhjo2fuaNX1bE3MrQhiUHXj88Hk7tSZOTAQyjf+gIoSvtr5kko3fVJ5qvDzZ+CXlIXwlhFCRLPFOWapERbLEX8tC2DIrkGn82LIQZga+EOKHz4TsB6fNnDV5XEtL80mbMFGRbqsqTJzU0tww/oSWCZWJPhVSkpVee9qnH/tTa2aPb7396Du964tJl6XLlbd1eUh5zt2hm3vvY7+qsytZ93zk1R/zV4RuoeuMac0nNZw8bvr0kwan/habfUjqb5d0NLWtBneWbdUvu5JB04+fOmjazFkDJx0/7pjmY5qnDB7S2LjrLkOHDmkc1Dqq9N+NMdR5n/1Qty3LquSz+ACQkJDobInSnE+3xs39gzzvi/66jpaHyrYP6LxpRXaWkrZRboxB7/kpR/xpvqd0OKLBeROHvCxDOs4yNG8ysS5LVSpL2/e6vMlhdk2lbZs03i8NDQ1dCm2H+ty72Zv39Q3YvCvTm67YNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8DztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBLAQAA//8d6cf4")
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f000000ac40)={0x0, 0x5c5})

4.204888875s ago: executing program 1 (id=951):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

3.994022641s ago: executing program 1 (id=952):
r0 = socket$inet6(0xa, 0x3, 0xa)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0)

3.807701237s ago: executing program 1 (id=957):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(r0, 0xfffffffc)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0)

2.899274413s ago: executing program 1 (id=964):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0xfffffffc, 0x2110, 0x2})
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000980)='./file0\x00', 0x24a080, &(0x7f0000000000)={[{@gid}, {@unhide}, {@block={'block', 0x3d, 0x100}}]}, 0x1, 0x92f, &(0x7f0000001c80)="$eJzs3T9vG+cZAPDnKDFhlcBxaieWlSFEbBWq0cokDds1vFQWKZkpJRaSDCToorZWCsNCUyQt4AYdXKDoVKMdig7t5rGTgSyZCn+KDl38FYJO2hjckbKkmBRlQdLJ9u8HHO8Pn3uf5/Qe74VIkBe8yDqdTjbtc/3Wv4+yWI6fGyNPHj56kE5/vB+vxUhcTr6KKEVEOWI0IsYjirP1pfbCkIbuRqxGxOOIJCJej+58T1Yj+Wu8ubX+OJJ/pXk5fB1eaXmffwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBwls/VKpZpEq7l466PyYNktwHd5frO9diF9LLSH5o1I0ilKpc1bfY+f2nr6nfThgzjTXTuT3ZA8SvHFG++evH5qtLC5/y4FHYnPf//F3Z+vr699lnchOZlvLDaX282FmflGubncLl+7cqVy8ebccnmu2Wosf7y80lgozy41ZlbaS+Wp2e+Xq9euXSo3pj9u31qcr8+0Gpsbr/6wVqlcKX84/dPGzNJye/Hih9PLszebrVZzcT6LSZ9OY66mJ+JPmivllcbMQrn8yZ31tUvDikyDqnsJqg0LqlVqtWq1VqteuXzt8tVKZfSZDZVviWci8j9pydeBX8Nhvzq98R8AAAB4eSXZe+zp///F7H34JOaarUZlR0xnJLfyAAAAgAOQffJ/Jp0V06XxSJ79/x8AAAB4sQ3/jt3QiOQHcbYbcfZ2d367F9H7nt/YXLPVmJ5tt65X43tPv+3Xv7Vi9vbDhZjoRk2MdedjO1sspVHV6evVuBDvdSPemzqXzs5N9YmsdSN737wp7xJ5KY0EgJfdB0PG472M/xdishsxOZEOpjE60WdkrRhZAeC4ePoLNoe4kPcxAgA7GaUBAAAAAAAAAAAAAAAAAAAAAAAAAADg4B3F7//va6EUEcegjBd24bU4FmVYeFEX8r4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8mpKIkX7bCxGvR0QlIi4efVWH537eBeQs2YiNuBcn8q4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBl0/v9/0J05290N8VoIWIyIlYj4md513iQNvIuIGfbfv8/7fPoJDHa7fZIirP1pfZC2v3ZvR8KTx4+epBO+8mTNpBm2HFziV6GwXu9ne01Vl/7/O5vP/1NuX4jK/LGylyrvjC/9OOtwHeTLyPK0Z02bdb7h8n//K3PkX+ZHune8s5leevP5j3Tb+/d8+7mzvpaLc200vho5Xe/vnNv21PfjYmIc1MRUzsz/SqdBmSaiOJu2ZKvkz8nJ+IfsZr1f/rXSDpJ2kVvZcf/nU/urK9N//LT9dsDajoZ4xFxO6K095rGs+tJX9lZVyimWStZUPpwequ90m4HM6zF6oBjeDvORsTYcx3D2cHHkBnyd+9VdGlARafi/efu6feHZOwr+Tr5X3Iz/ht/2nb/j0La/5Oxl1dnGpNFbjtTBkYWupHZkdd2bXPgq5JD8Jf4Rfzoaf8Xtl3/e311NNejbRmP5HXx2Vg2Ip3+1ojUu/oMqrJX5+lu1IA634nzEaMTz3VFOT/kinJYr/9/JlPx/7jv/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxl0SM9NteiJiMiJMR8Va6Xo7oHES+wlhyEM3s2/1cs+cv2YiNuBcn8q4DAAAAAAAAgINxo/7k4aMH6ZR9Hj8S55OvIkrdT/pHI+Jk8vfibH2pvTCkoWLEakQ83kcN6X7x5tb643RtfB8NAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw0vomAAD//7ZNs3I=")

2.319706857s ago: executing program 1 (id=972):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x7}}, 0x30)

1.954884581s ago: executing program 1 (id=975):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x8001, 0x0, 0xfffffffe, 0x0, 0x1}})

1.887956371s ago: executing program 34 (id=975):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x8001, 0x0, 0xfffffffe, 0x0, 0x1}})

1.841983089s ago: executing program 0 (id=977):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d", @ANYBLOB="510f"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000400)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0)

1.17953107s ago: executing program 4 (id=978):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000)

1.073181377s ago: executing program 4 (id=979):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

973.799777ms ago: executing program 4 (id=980):
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

913.528319ms ago: executing program 4 (id=981):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x80, 0x80842)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9c)

913.319039ms ago: executing program 4 (id=982):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000))

203.98136ms ago: executing program 0 (id=983):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

154.353349ms ago: executing program 0 (id=984):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000240))

104.773296ms ago: executing program 0 (id=985):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002480)='./binderfs/binder0\x00', 0x800, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040))

52.775423ms ago: executing program 0 (id=986):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"})

271.058µs ago: executing program 4 (id=987):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680))
r2 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
write$binfmt_script(r0, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0)

0s ago: executing program 0 (id=988):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$caif_seqpacket(0x25, 0x5, 0x0)
r1 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20)
fadvise64(r2, 0xfcff, 0x20000, 0x3)

kernel console output (not intermixed with test programs):

0 has no interface number 0
[   59.135050][   T33] audit: type=1326 audit(1755298057.675:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.0.27" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa69858ebe9 code=0x0
[   59.139004][ T1937] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[   59.148395][ T1937] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[   59.161271][ T1937] usb 2-1: config 0 interface 48 has no altsetting 0
[   59.168657][ T1937] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[   59.174422][ T1937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.189570][ T1937] usb 2-1: config 0 descriptor??
[   59.241657][  T791] usb 1-1: USB disconnect, device number 2
[   59.347473][ T5993] loop2: detected capacity change from 0 to 32768
[   59.357880][ T5993] (syz.2.33,5993,0):ocfs2_verify_heartbeat:830 ERROR: Mismatching o2cb heartbeat modes
[   59.366255][ T5993] (syz.2.33,5993,0):ocfs2_fill_super:1177 ERROR: status = -22
[   59.496664][ T1937] usb 2-1: string descriptor 0 read error: -71
[   59.510836][ T1937] usb 2-1: USB disconnect, device number 4
[   60.180721][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.291352][ T6020] loop1: detected capacity change from 0 to 16
[   60.297314][ T6020] erofs (device loop1): mounted with root inode @ nid 36.
[   60.304781][ T6020] loop1: Can't mount, would change RO state
[   60.577447][ T6029] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET)
[   60.639325][ T5855] Bluetooth: hci1: command tx timeout
[   60.649175][ T5855] Bluetooth: hci2: command tx timeout
[   60.649408][ T5860] Bluetooth: hci0: command tx timeout
[   61.286165][ T6039] loop2: detected capacity change from 0 to 16
[   61.313770][ T6039] erofs (device loop2): mounted with root inode @ nid 36.
[   61.332906][ T6039] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[   61.339029][ T6039] erofs (device loop2): failed to decompress -11 in[52, 4044] out[1851]
[   61.343022][ T6039] erofs (device loop2): read error -117 @ 43 of nid 36
[   61.542356][ T6045] loop0: detected capacity change from 0 to 512
[   61.951227][ T6072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.60'.
[   61.960028][ T6072] netlink: 88 bytes leftover after parsing attributes in process `syz.0.60'.
[   62.109951][ T6083] loop0: detected capacity change from 0 to 1024
[   62.113591][ T6083] EXT4-fs: Ignoring removed i_version option
[   62.116191][ T6083] EXT4-fs: Ignoring removed oldalloc option
[   62.121252][ T6083] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   62.125636][ T6083] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   62.143301][ T6083] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   62.151010][ T6083] EXT4-fs (loop0): filesystem has both journal inode and journal device!
[   62.250585][ T6095] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.70'.
[   62.278417][ T6097] netlink: 'syz.1.72': attribute type 1 has an invalid length.
[   62.281636][ T6097] netlink: 'syz.1.72': attribute type 2 has an invalid length.
[   62.718995][ T5860] Bluetooth: hci2: command tx timeout
[   62.719104][ T5855] Bluetooth: hci1: command tx timeout
[   62.721208][   T54] Bluetooth: hci0: command tx timeout
[   63.548046][ T6114] tmpfs: Bad value for 'mpol'
[   64.714423][ T6129] loop1: detected capacity change from 0 to 2048
[   64.732956][ T6129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.753228][   T33] audit: type=1800 audit(1755298063.295:5): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.85" name="file1" dev="loop1" ino=1415 res=0 errno=0
[   64.844697][ T6135] netlink: 60 bytes leftover after parsing attributes in process `syz.1.88'.
[   64.847750][ T6135] netlink: 35 bytes leftover after parsing attributes in process `syz.1.88'.
[   65.916310][ T6161] loop2: detected capacity change from 0 to 1024
[   65.994254][   T26] hfsplus: b-tree write err: -5, ino 4
[   66.203876][ T6162] mmap: syz.1.98 (6162) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   66.270940][ T6171] process 'syz.2.103' launched '/dev/fd/3' with NULL argv: empty string added
[   66.301425][ T6174] capability: warning: `syz.2.104' uses deprecated v2 capabilities in a way that may be insecure
[   66.389225][ T5883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.392259][ T6178] Zero length message leads to an empty skb
[   66.396687][ T5883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.406525][ T5883] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.411470][ T5883] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.463961][ T6180] loop2: detected capacity change from 0 to 2048
[   66.490707][ T5996]  loop2: p3 < > p4 < >
[   66.492781][ T5996] loop2: partition table partially beyond EOD, truncated
[   66.496133][ T5996] loop2: p3 start 4284289 is beyond EOD, truncated
[   66.504715][ T6180]  loop2: p3 < > p4 < >
[   66.506484][ T6180] loop2: partition table partially beyond EOD, truncated
[   66.509990][ T6180] loop2: p3 start 4284289 is beyond EOD, truncated
[   66.571957][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   66.934256][ T6202] loop2: detected capacity change from 0 to 512
[   66.968719][ T6202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.974172][ T6202] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.038111][ T5859] VFS: Lookup of '' in ext4 loop2 would have caused loop
[   67.043941][ T5859] VFS: Lookup of '' in ext4 loop2 would have caused loop
[   67.177964][ T6200] loop1: detected capacity change from 0 to 32768
[   67.223241][ T6200] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   67.240911][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.257168][ T6200] XFS (loop1): Ending clean mount
[   67.263972][ T5859] syz-executor (5859) used greatest stack depth: 19752 bytes left
[   67.272736][ T5864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.275641][   T10] kernel read not supported for file /audio1 (pid: 10 comm: kworker/0:1)
[   67.277060][ T5864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.302968][ T6200] XFS (loop1): User initiated shutdown received.
[   67.306075][ T6200] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[   67.311990][ T6200] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   67.344800][ T5852] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   67.377779][ T5864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.387211][ T5864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.513064][ T5864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.516580][ T5864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.589877][ T5864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.593801][ T5864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.681459][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.684449][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.687162][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.691401][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.694514][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.833210][ T5864] bridge_slave_1: left allmulticast mode
[   67.837096][ T5864] bridge_slave_1: left promiscuous mode
[   67.842549][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.850525][ T5864] bridge_slave_0: left allmulticast mode
[   67.854242][ T5864] bridge_slave_0: left promiscuous mode
[   67.856649][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.065932][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.071229][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.074861][ T5864] bond0 (unregistering): Released all slaves
[   68.523704][ T6242] chnl_net:caif_netlink_parms(): no params data found
[   68.548409][ T6270] loop1: detected capacity change from 0 to 2048
[   68.575227][ T6273] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.765460][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.768066][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.772330][ T6242] bridge_slave_0: entered allmulticast mode
[   68.775240][ T6242] bridge_slave_0: entered promiscuous mode
[   68.781152][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.783616][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.785983][ T6242] bridge_slave_1: entered allmulticast mode
[   68.790001][ T6242] bridge_slave_1: entered promiscuous mode
[   68.941214][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.983043][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.066274][ T6242] team0: Port device team_slave_0 added
[   69.096122][ T5864] hsr_slave_0: left promiscuous mode
[   69.105090][ T5864] hsr_slave_1: left promiscuous mode
[   69.113608][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.117791][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.125202][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.130684][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.149377][ T5864] veth1_macvtap: left promiscuous mode
[   69.151384][ T5864] veth0_macvtap: left promiscuous mode
[   69.153374][ T5864] veth1_vlan: left promiscuous mode
[   69.155250][ T5864] veth0_vlan: left promiscuous mode
[   69.380711][ T5864] team0 (unregistering): Port device team_slave_1 removed
[   69.401833][  T972] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   69.406099][ T5864] team0 (unregistering): Port device team_slave_0 removed
[   69.553983][  T972] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[   69.557732][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.565295][  T972] usb 1-1: Product: syz
[   69.572145][  T972] usb 1-1: Manufacturer: syz
[   69.573691][  T972] usb 1-1: SerialNumber: syz
[   69.586743][  T972] usb 1-1: config 0 descriptor??
[   69.603183][  T972] comedi comedi5: This driver needs USB 2.0 to operate. Aborting...
[   69.621425][  T972] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[   69.626867][ T6295] netlink: 76 bytes leftover after parsing attributes in process `syz.1.142'.
[   69.637452][ T6295] netlink: 76 bytes leftover after parsing attributes in process `syz.1.142'.
[   69.702801][ T6242] team0: Port device team_slave_1 added
[   69.731825][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.143'.
[   69.755365][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.758230][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.759405][ T5860] Bluetooth: hci2: command tx timeout
[   69.779122][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.792203][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.798654][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.798890][ T6255] usb 1-1: USB disconnect, device number 3
[   69.834853][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.933482][ T6242] hsr_slave_0: entered promiscuous mode
[   69.936314][ T6242] hsr_slave_1: entered promiscuous mode
[   69.944824][ T6307] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.952040][ T6242] debugfs: 'hsr0' already exists in 'hsr'
[   69.954338][ T6242] Cannot create hsr debugfs directory
[   70.080888][ T6312] delete_channel: no stack
[   70.255235][ T6242] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.277081][ T6242] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.294087][ T6242] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.307967][ T6242] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.371347][ T6330] loop1: detected capacity change from 0 to 1024
[   70.375446][ T6330] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   70.403104][ T6330] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[   70.500120][ T6340] Illegal XDP return value 1655171249 on prog  (id 18) dev syz_tun, expect packet loss!
[   70.525419][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.552166][ T6242] 8021q: adding VLAN 0 to HW filter on device team0
[   70.567019][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.569947][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.584168][ T6255] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   70.588556][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.591655][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.701147][ T6351] netlink: 104 bytes leftover after parsing attributes in process `syz.1.158'.
[   70.742667][ T6255] usb 1-1: unable to get BOS descriptor or descriptor too short
[   70.747731][ T6255] usb 1-1: config 176 has an invalid interface number: 122 but max is 0
[   70.764491][ T6255] usb 1-1: config 176 has no interface number 0
[   70.766596][ T6255] usb 1-1: config 176 interface 122 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   70.774062][ T6255] usb 1-1: config 176 interface 122 has no altsetting 0
[   70.788363][ T6255] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[   70.788870][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.793834][ T6255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.804799][ T6255] usb 1-1: Product: syz
[   70.806669][ T6255] usb 1-1: Manufacturer: syz
[   70.808690][ T6255] usb 1-1: SerialNumber: syz
[   70.847291][ T6242] veth0_vlan: entered promiscuous mode
[   70.872694][ T6242] veth1_vlan: entered promiscuous mode
[   70.877292][ T6360] syzkaller1: entered promiscuous mode
[   70.881665][ T6360] syzkaller1: entered allmulticast mode
[   70.933465][ T6242] veth0_macvtap: entered promiscuous mode
[   70.945096][ T6242] veth1_macvtap: entered promiscuous mode
[   70.963731][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.966701][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.001324][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.019479][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.037110][ T6255] radioshark2 1-1:176.122: Invalid radioSHARK2 device
[   71.038032][ T5864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.044279][ T5864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.047160][ T5864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.049356][ T6255] radioshark2 1-1:176.122: probe with driver radioshark2 failed with error -22
[   71.057191][ T5864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.061920][ T6255] usbhid 1-1:176.122: couldn't find an input interrupt endpoint
[   71.078438][ T6255] usb 1-1: USB disconnect, device number 4
[   71.138152][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.146174][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.166659][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.170844][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.204543][ T6378] netlink: 'syz.3.121': attribute type 10 has an invalid length.
[   71.207146][ T6378] team0: Device dummy0 is up. Set it down before adding it as a team port
[   71.215166][ T6375] loop1: detected capacity change from 0 to 2048
[   71.234241][ T6375] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   71.237935][ T6375] NILFS (loop1): mounting unchecked fs
[   71.249269][ T5996] udevd[5996]: incorrect nilfs2 checksum on /dev/loop1
[   71.268822][ T6375] NILFS (loop1): recovery complete
[   71.280974][ T6382] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.289703][   T33] audit: type=1800 audit(1755298069.835:6): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.164" name="file1" dev="loop1" ino=15 res=0 errno=0
[   71.307659][   T33] audit: type=1804 audit(1755298069.835:7): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.164" name="/newroot/78/file0/file1" dev="loop1" ino=15 res=1 errno=0
[   71.826134][ T6375] syz.1.164 (6375) used greatest stack depth: 19592 bytes left
[   71.850420][ T5860] Bluetooth: hci2: command tx timeout
[   72.217707][   T33] audit: type=1326 audit(1755298070.755:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   72.242568][   T33] audit: type=1326 audit(1755298070.755:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   72.260523][   T33] audit: type=1326 audit(1755298070.755:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   72.281757][   T33] audit: type=1326 audit(1755298070.755:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   72.309198][   T33] audit: type=1326 audit(1755298070.755:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   72.341909][ T6394] loop0: detected capacity change from 0 to 40427
[   72.349129][ T6394] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   72.354745][ T6394] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   72.359154][ T6394] F2FS-fs (loop0): invalid crc value
[   72.409881][ T6420] loop3: detected capacity change from 0 to 2048
[   72.420396][ T6394] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.429465][ T6394] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   72.432502][ T6394] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   72.470633][ T6417] f2fs_ckpt-7:0: attempt to access beyond end of device
[   72.470633][ T6417] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   72.476662][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: f2fs_ckpt-7:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   72.476674][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.476678][ T6417] Call Trace:
[   72.476681][ T6417]  <TASK>
[   72.476684][ T6417]  dump_stack_lvl+0x189/0x250
[   72.476698][ T6417]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.476707][ T6417]  ? __pfx_queue_work_on+0x10/0x10
[   72.476714][ T6417]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   72.476723][ T6417]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   72.476736][ T6417]  f2fs_handle_critical_error+0x37c/0x540
[   72.476749][ T6417]  f2fs_write_end_io+0x886/0xb60
[   72.476763][ T6417]  __submit_merged_bio+0x27a/0x6a0
[   72.476775][ T6417]  __submit_merged_write_cond+0x255/0x530
[   72.476786][ T6417]  f2fs_write_data_pages+0x261d/0x3000
[   72.476810][ T6417]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   72.476849][ T6417]  ? __lock_acquire+0xab9/0xd20
[   72.476863][ T6417]  ? do_raw_spin_lock+0x121/0x290
[   72.476875][ T6417]  ? do_raw_spin_unlock+0x4d/0x240
[   72.476883][ T6417]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   72.476893][ T6417]  do_writepages+0x32e/0x550
[   72.476908][ T6417]  ? do_raw_spin_unlock+0x4d/0x240
[   72.476917][ T6417]  filemap_fdatawrite+0x199/0x240
[   72.476927][ T6417]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   72.476955][ T6417]  ? do_raw_spin_unlock+0x4d/0x240
[   72.476965][ T6417]  f2fs_sync_dirty_inodes+0x31f/0x830
[   72.476978][ T6417]  f2fs_write_checkpoint+0x95a/0x1df0
[   72.477022][ T6417]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   72.477028][ T6417]  ? lockdep_unlock+0x89/0x120
[   72.477052][ T6417]  ? down_write+0x162/0x1f0
[   72.477061][ T6417]  ? __pfx_down_write+0x10/0x10
[   72.477071][ T6417]  ? __pfx___schedule+0x10/0x10
[   72.477082][ T6417]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[   72.477091][ T6417]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[   72.477104][ T6417]  issue_checkpoint_thread+0xd9/0x260
[   72.477113][ T6417]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   72.477119][ T6417]  ? __pfx_autoremove_wake_function+0x10/0x10
[   72.477128][ T6417]  ? __kthread_parkme+0x7b/0x200
[   72.477136][ T6417]  ? __kthread_parkme+0x1a1/0x200
[   72.477145][ T6417]  kthread+0x711/0x8a0
[   72.477155][ T6417]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   72.477162][ T6417]  ? __pfx_kthread+0x10/0x10
[   72.477170][ T6417]  ? _raw_spin_unlock_irq+0x23/0x50
[   72.477178][ T6417]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.477186][ T6417]  ? __pfx_kthread+0x10/0x10
[   72.477194][ T6417]  ret_from_fork+0x3fc/0x770
[   72.477203][ T6417]  ? __pfx_ret_from_fork+0x10/0x10
[   72.477212][ T6417]  ? __switch_to_asm+0x39/0x70
[   72.477220][ T6417]  ? __switch_to_asm+0x33/0x70
[   72.477227][ T6417]  ? __pfx_kthread+0x10/0x10
[   72.477236][ T6417]  ret_from_fork_asm+0x1a/0x30
[   72.477257][ T6417]  </TASK>
[   72.477260][ T6417] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   72.576056][ T6255] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   72.729266][ T6255] usb 2-1: Using ep0 maxpacket: 8
[   72.736969][ T6255] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[   72.743684][ T6255] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[   72.752775][ T6255] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[   72.771863][ T6255] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   72.775349][ T6255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.777999][ T6255] usb 2-1: Product: syz
[   72.781928][ T6255] usb 2-1: Manufacturer: syz
[   72.783676][ T6255] usb 2-1: SerialNumber: syz
[   73.024609][ T6255] adutux 2-1:168.0: interrupt endpoints not found
[   73.048398][ T6255] usb 2-1: USB disconnect, device number 5
[   73.796126][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   73.919044][ T5860] Bluetooth: hci2: command tx timeout
[   74.038322][ T6468] loop1: detected capacity change from 0 to 32768
[   74.164100][ T6468] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   74.164117][ T6468]   allowing incompatible features above 0.0: (unknown version)
[   74.164124][ T6468]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   74.180505][ T6468] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   74.183955][ T6468] bcachefs (loop1): initializing new filesystem
[   74.194428][ T6468] bcachefs (loop1): going read-write
[   74.206411][ T6468] bcachefs (loop1): marking superblocks
[   74.213772][ T6468] bcachefs (loop1): initializing freespace
[   74.217582][ T6468] bcachefs (loop1): done initializing freespace
[   74.221692][ T6468] bcachefs (loop1): reading snapshots table
[   74.223724][ T6468] bcachefs (loop1): reading snapshots done
[   74.310283][ T5905] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   74.369589][ T6468] bcachefs (loop1): done starting filesystem
[   74.472330][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   74.497425][ T5905] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   74.513536][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.525644][ T5905] usb 1-1: Product: syz
[   74.532430][ T5905] usb 1-1: Manufacturer: syz
[   74.541330][ T5905] usb 1-1: SerialNumber: syz
[   74.586166][ T5905] usb 1-1: config 0 descriptor??
[   74.600925][ T6468] syz.1.192 (6468) used greatest stack depth: 17432 bytes left
[   74.621876][ T5852] bcachefs (loop1): shutting down
[   74.623740][ T5852] bcachefs (loop1): going read-only
[   74.626117][ T5852] bcachefs (loop1): finished waiting for writes to stop
[   74.632309][ T5852] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   74.655701][ T5852] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   74.663889][ T5852] bcachefs (loop1): clean shutdown complete, journal seq 4
[   74.667347][ T5852] bcachefs (loop1): marking filesystem clean
[   74.685319][ T5852] bcachefs (loop1): shutdown complete
[   74.813891][ T5905] usb 1-1: USB disconnect, device number 5
[   74.829819][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   75.111212][ T6502] loop3: detected capacity change from 0 to 1764
[   75.546754][ T6521] netlink: 'syz.0.210': attribute type 1 has an invalid length.
[   75.552262][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'.
[   75.592876][ T6523] loop0: detected capacity change from 0 to 2048
[   75.614773][ T6523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.626478][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'.
[   75.634644][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'.
[   75.890872][ T6531] loop1: detected capacity change from 0 to 1024
[   75.893416][ T6531] EXT4-fs: Ignoring removed orlov option
[   75.912918][ T6531] EXT4-fs (loop1): invalid inodes per group: 0
[   75.912918][ T6531] 
[   76.005327][ T5860] Bluetooth: hci2: command tx timeout
[   76.111388][ T6543] loop0: detected capacity change from 0 to 512
[   76.122416][ T6543] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[   76.265702][ T6554] o2cb: This node has not been configured.
[   76.268086][ T6554] o2cb: Cluster check failed. Fix errors before retrying.
[   76.280640][ T6554] (syz.3.224,6554,1):user_dlm_register:674 ERROR: status = -22
[   76.283811][ T6554] (syz.3.224,6554,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[   76.768884][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   76.928838][   T10] usb 1-1: Using ep0 maxpacket: 16
[   76.938706][   T10] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[   76.944012][   T10] usb 1-1: config 0 has no interface number 0
[   76.947148][   T10] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.953356][   T10] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.957923][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[   76.963219][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.974714][ T6571] loop1: detected capacity change from 0 to 32768
[   76.981560][   T10] usb 1-1: config 0 descriptor??
[   77.018359][ T6571] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   77.076217][ T6571] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   77.204477][   T33] audit: type=1800 audit(1755298075.745:13): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.233" name="file1" dev="loop1" ino=17058 res=0 errno=0
[   77.473479][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[   77.587825][ T6580] overlayfs: maximum fs stacking depth exceeded
[   77.615621][   T10] usb 1-1: USB disconnect, device number 6
[   77.930105][ T6601] loop1: detected capacity change from 0 to 8192
[   78.762353][ T6611] netlink: 'syz.0.247': attribute type 1 has an invalid length.
[   78.975024][ T6611] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.987245][ T6614] bond1: (slave geneve2): making interface the new active one
[   78.990745][ T6614] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   80.579771][ T6636] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[   80.725873][ T6651] loop0: detected capacity change from 0 to 256
[   80.728699][ T6651] exfat: Deprecated parameter 'utf8'
[   80.730993][ T6651] exfat: Deprecated parameter 'utf8'
[   80.749819][ T6651] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[   80.851132][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'.
[   80.977938][ T6661] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   80.986538][ T6661] CIFS mount error: No usable UNC path provided in device string!
[   80.986538][ T6661] 
[   80.990486][ T6661] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   81.263902][ T6663] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   81.319160][ T1951] cfg80211: failed to load regulatory.db
[   81.682092][   T33] audit: type=1326 audit(1755298080.225:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   81.691477][   T33] audit: type=1326 audit(1755298080.225:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   81.698408][   T33] audit: type=1326 audit(1755298080.235:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.270" exe="/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   81.706078][   T33] audit: type=1326 audit(1755298080.235:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   81.714607][   T33] audit: type=1326 audit(1755298080.235:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.3.270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068558ebe9 code=0x7ffc0000
[   81.783245][ T5917] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   81.932203][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   81.935407][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[   81.941385][ T5917] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   81.944207][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.946707][ T5917] usb 2-1: Product: syz
[   81.948013][ T5917] usb 2-1: Manufacturer: syz
[   81.949941][ T5917] usb 2-1: SerialNumber: syz
[   81.952691][ T5917] usb 2-1: config 0 descriptor??
[   82.118818][ T1937] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   82.170267][ T5917] usb 2-1: USB disconnect, device number 6
[   82.184259][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   82.292428][ T1937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.296696][ T1937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   82.302108][ T1937] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   82.305649][ T1937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.310777][ T1937] usb 1-1: config 0 descriptor??
[   82.724040][ T1937] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   82.740254][ T1937] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   82.915433][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.285'.
[   82.998144][   T24] IPVS: starting estimator thread 0...
[   83.002018][   T24] usb 1-1: USB disconnect, device number 7
[   83.055701][ T6741] 9pnet: p9_errstr2errno: server reported unknown error 
[   83.089992][ T6737] IPVS: using max 82 ests per chain, 196800 per kthread
[   83.999292][ T5860] Bluetooth: hci2: command tx timeout
[   84.065566][ T6755] loop0: detected capacity change from 0 to 32768
[   84.092929][ T6755] XFS: ikeep mount option is deprecated.
[   84.151755][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'.
[   84.157043][ T6755] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   84.240987][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.297'.
[   84.244710][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[   84.247502][ T6755] XFS (loop0): Ending clean mount
[   84.248963][ T6780] netlink: 156 bytes leftover after parsing attributes in process `syz.1.297'.
[   84.255620][ T6755] XFS (loop0): Quotacheck needed: Please wait.
[   84.284317][ T6755] XFS (loop0): Quotacheck: Done.
[   84.376454][   T33] audit: type=1800 audit(1755298082.915:19): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.293" name="file1" dev="loop0" ino=4422 res=0 errno=0
[   84.470343][ T5850] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   84.811692][ T6787] loop1: detected capacity change from 0 to 1024
[   84.842125][ T6787] hfsplus: unable to find HFS+ superblock
[   85.043904][ T6791] loop1: detected capacity change from 0 to 1024
[   85.103253][ T6791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.170955][ T6791] syz.1.301 (6791) used greatest stack depth: 16936 bytes left
[   85.241721][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.301408][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[   85.425683][ T6811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.307'.
[   85.450805][ T6815] warning: `syz.0.309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.510089][ T6819] loop3: detected capacity change from 0 to 512
[   85.513680][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[   85.513923][ T6822] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   85.513940][ T6822] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.570945][ T6819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   85.605050][ T6819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.611201][ T6819] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.691803][ T6242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.772525][ T6841] loop0: detected capacity change from 0 to 128
[   85.804260][ T6841] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   85.817255][ T6841] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   85.866188][ T6849] loop3: detected capacity change from 0 to 128
[   85.872382][ T6849] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   85.884011][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.921826][ T6849] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   86.237261][ T6881] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   86.237261][ T6881] The task syz.1.336 (6881) triggered the difference, watch for misbehavior.
[   86.368478][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   86.778894][   T10] usb 1-1: Using ep0 maxpacket: 32
[   86.783270][   T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   86.786145][   T10] usb 1-1: config 0 has no interface number 0
[   86.790671][   T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   86.793801][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.796595][   T10] usb 1-1: Product: syz
[   86.798117][   T10] usb 1-1: Manufacturer: syz
[   86.801363][   T10] usb 1-1: SerialNumber: syz
[   86.807052][   T10] usb 1-1: config 0 descriptor??
[   86.811561][   T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   87.027139][   T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   87.040391][   T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   87.318728][ T6889] loop1: detected capacity change from 0 to 40427
[   87.345782][ T6889] F2FS-fs (loop1): Image doesn't support compression
[   87.348182][ T6889] F2FS-fs (loop1): build fault injection rate: 690
[   87.357183][ T6889] F2FS-fs (loop1): invalid crc value
[   87.418303][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   87.419130][   T24] usb 1-1: USB disconnect, device number 8
[   87.426206][ T6889] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.436824][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   87.442730][ T6889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   87.452125][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   87.467792][   T24] quatech2 1-1:0.51: device disconnected
[   88.039853][ T6921] sctp: [Deprecated]: syz.1.351 (pid 6921) Use of int in maxseg socket option.
[   88.039853][ T6921] Use struct sctp_assoc_value instead
[   88.116437][ T6927] loop0: detected capacity change from 0 to 4096
[   88.120725][ T6927] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   88.235086][ T6941] Bluetooth: MGMT ver 1.23
[   88.242087][ T6943] loop1: detected capacity change from 0 to 1024
[   88.244691][ T6943] hfsplus: Unknown parameter 'creatS'
[   88.248266][ T6943] CIFS mount error: No usable UNC path provided in device string!
[   88.248266][ T6943] 
[   88.254389][ T6943] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   88.308072][ T6946] loop0: detected capacity change from 0 to 8192
[   88.628867][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   88.781927][   T10] usb 1-1: Using ep0 maxpacket: 16
[   88.787940][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.798976][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.804501][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.807339][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.822066][   T10] usb 1-1: Product: syz
[   88.823580][   T10] usb 1-1: Manufacturer: syz
[   88.825367][   T10] usb 1-1: SerialNumber: syz
[   89.090724][   T10] usb 1-1: 0:2 : does not exist
[   89.105590][   T10] usb 1-1: USB disconnect, device number 9
[   89.125130][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.617969][   T33] audit: type=1800 audit(1755298088.155:20): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.372" name="file1" dev="tmpfs" ino=801 res=0 errno=0
[   89.944038][ T6976] bridge0: port 3(syz_tun) entered blocking state
[   89.946536][ T6976] bridge0: port 3(syz_tun) entered disabled state
[   89.950106][ T6976] syz_tun: entered allmulticast mode
[   89.957712][ T6976] syz_tun: entered promiscuous mode
[   89.964036][ T6976] bridge0: port 3(syz_tun) entered blocking state
[   89.966566][ T6976] bridge0: port 3(syz_tun) entered forwarding state
[   89.977066][ T6976] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   90.209793][ T6982] loop3: detected capacity change from 0 to 764
[   90.213926][ T6982] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   90.276493][   T33] audit: type=1326 audit(1755298088.815:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.0.380" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa69858ebe9 code=0x0
[   90.346886][ T6992] loop3: detected capacity change from 0 to 128
[   90.361087][ T6992] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.370571][ T6992] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.653894][ T6242] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 0
[   90.684324][ T6242] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 7168
[   90.689600][ T6242] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 11264
[   90.694817][ T6242] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: comm syz-executor: Directory block failed checksum
[   90.700977][ T6242] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 0
[   90.706671][ T6242] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 7168
[   90.712616][ T6242] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 11264
[   90.719269][ T6242] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: comm syz-executor: Directory block failed checksum
[   90.729192][ T6242] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 0
[   90.735288][ T6242] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 7168
[   90.824393][ T7010] netlink: 'syz.1.390': attribute type 7 has an invalid length.
[   91.059064][ T6242] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.105767][ T5864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.219808][ T5864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.316788][ T5864] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.430272][ T5864] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.512283][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   91.516414][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   91.521399][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   91.525581][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   91.531933][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   91.584039][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.399'.
[   91.636333][ T5864] bridge_slave_1: left allmulticast mode
[   91.642786][ T5864] bridge_slave_1: left promiscuous mode
[   91.645583][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.677602][ T5864] bridge_slave_0: left allmulticast mode
[   91.681082][ T5864] bridge_slave_0: left promiscuous mode
[   91.683409][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.700776][ T7040] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[   91.910677][   T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[   92.085011][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[   92.100907][   T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   92.104116][   T24] usb 1-1: config 1 has no interface number 1
[   92.106312][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   92.115669][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   92.118675][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.121950][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.126545][   T24] usb 1-1: Product: syz
[   92.128002][   T24] usb 1-1: Manufacturer: syz
[   92.130384][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.133241][   T24] usb 1-1: SerialNumber: syz
[   92.138336][ T5864] bond0 (unregistering): Released all slaves
[   92.371614][   T24] usb 1-1: failed to enable PITCH for EP 0x82
[   92.411753][   T24] usb 1-1: USB disconnect, device number 10
[   92.419434][ T7030] chnl_net:caif_netlink_parms(): no params data found
[   92.502964][ T7050] udevd[7050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.516268][ T5864] hsr_slave_0: left promiscuous mode
[   92.520506][ T5864] hsr_slave_1: left promiscuous mode
[   92.523110][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.526080][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.563598][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.566922][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.595345][ T5864] veth1_macvtap: left promiscuous mode
[   92.597605][ T5864] veth0_macvtap: left promiscuous mode
[   92.602614][ T5864] veth1_vlan: left promiscuous mode
[   92.604540][ T5864] veth0_vlan: left promiscuous mode
[   93.006849][   T24] libceph: connect (1)[c::]:6789 error -101
[   93.010599][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   93.124705][ T5864] team0 (unregistering): Port device team_slave_1 removed
[   93.173488][ T5864] team0 (unregistering): Port device team_slave_0 removed
[   93.343011][ T7069] loop0: detected capacity change from 0 to 1024
[   93.345590][ T7069] EXT4-fs: Ignoring removed orlov option
[   93.347490][ T7069] EXT4-fs: Ignoring removed mblk_io_submit option
[   93.374678][ T7069] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   93.453044][ T7069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.491972][   T24] libceph: connect (1)[c::]:6789 error -101
[   93.524781][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   93.544174][ T7060] ceph: No mds server is up or the cluster is laggy
[   93.608951][   T54] Bluetooth: hci2: command tx timeout
[   93.688726][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'.
[   93.802910][ T7084] netlink: 'syz.1.411': attribute type 1 has an invalid length.
[   93.805621][ T7084] netlink: 'syz.1.411': attribute type 1 has an invalid length.
[   93.895237][ T7086] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   93.920318][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.964715][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.967640][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.974055][ T7030] bridge_slave_0: entered allmulticast mode
[   93.976688][ T7093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.413'.
[   93.978230][ T7030] bridge_slave_0: entered promiscuous mode
[   93.995435][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.997803][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.002261][ T7030] bridge_slave_1: entered allmulticast mode
[   94.009177][ T7030] bridge_slave_1: entered promiscuous mode
[   94.059254][ T7030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.073478][ T7030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.117731][ T7030] team0: Port device team_slave_0 added
[   94.123291][ T7030] team0: Port device team_slave_1 added
[   94.188566][ T7106] loop1: detected capacity change from 0 to 1024
[   94.203073][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.211887][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.221756][ T7030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.227128][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.234847][ T7109] vivid-001: disconnect
[   94.235673][ T7106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.244483][ T7102] vivid-001: reconnect
[   94.246985][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.259999][ T7030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.344171][ T7030] hsr_slave_0: entered promiscuous mode
[   94.348384][ T7030] hsr_slave_1: entered promiscuous mode
[   94.351200][ T7030] debugfs: 'hsr0' already exists in 'hsr'
[   94.351690][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.353063][ T7030] Cannot create hsr debugfs directory
[   94.572271][ T7129] loop1: detected capacity change from 0 to 2048
[   94.574318][ T7030] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.585460][ T7030] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.605209][ T7030] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.611686][ T7030] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.612936][ T7129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.629798][ T7129] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.650627][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.653857][ T7030] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.656881][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.659769][ T7030] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.683956][ T7129] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.425: bg 0: block 345: padding at end of block bitmap is not set
[   94.690627][ T7030] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.699828][ T7030] 8021q: adding VLAN 0 to HW filter on device team0
[   94.709451][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.712466][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.717342][ T7129] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0
[   94.725996][ T7129] fs-verity (loop1, inode 13): Error -117 building Merkle tree
[   94.745422][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.747724][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.759356][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.762323][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.823318][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.897430][ T7030] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.643792][ T7030] veth0_vlan: entered promiscuous mode
[   95.654743][ T7030] veth1_vlan: entered promiscuous mode
[   95.678954][   T54] Bluetooth: hci2: command 0x041b tx timeout
[   95.698414][ T7030] veth0_macvtap: entered promiscuous mode
[   95.716989][ T7030] veth1_macvtap: entered promiscuous mode
[   95.740960][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.756416][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.771576][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.777518][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.786141][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.791323][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.968244][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.976364][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.038405][ T7178] netlink: 'syz.0.432': attribute type 1 has an invalid length.
[   96.043549][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.046874][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.052228][ T7178] nbd: couldn't find a device at index 393224
[   96.667940][ T7212] evm: overlay not supported
[   96.674188][ T7215] loop0: detected capacity change from 0 to 2048
[   96.797307][ T7223] netlink: 128 bytes leftover after parsing attributes in process `syz.0.446'.
[   96.803375][ T7223] netlink: 128 bytes leftover after parsing attributes in process `syz.0.446'.
[   97.742094][ T7267] loop4: detected capacity change from 0 to 1024
[   97.760727][ T5860] Bluetooth: hci2: command 0x041b tx timeout
[   97.798700][ T7267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   97.805918][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.830229][   T33] audit: type=1800 audit(1755298096.375:22): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.458" name="file1" dev="loop4" ino=15 res=0 errno=0
[   97.846029][ T7267] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.458: bg 0: block 88: padding at end of block bitmap is not set
[   97.854847][ T7267] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   97.885885][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.887043][ T7279] loop1: detected capacity change from 0 to 1024
[   97.909360][ T7279] ext3: Unknown parameter 'smackfsfloor'
[   98.187347][ T7300] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.468'.
[   98.194234][ T7297] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.468'.
[   98.537063][ T7324] netlink: 'syz.0.478': attribute type 5 has an invalid length.
[   98.668199][ T7331] netlink: 'syz.4.480': attribute type 1 has an invalid length.
[   98.788632][ T7339] loop4: detected capacity change from 0 to 128
[   98.806892][ T7339] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   98.827564][ T7339] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   98.890355][ T7343] bond1: entered promiscuous mode
[   98.892001][ T7343] bond1: entered allmulticast mode
[   98.893800][ T7343] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.965424][ T7349] netlink: 164 bytes leftover after parsing attributes in process `syz.1.488'.
[   99.089084][ T7341] loop0: detected capacity change from 0 to 32768
[   99.093459][ T7341] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section ext: field too small (8 < 88)
[   99.093459][ T7341] ext (size 8):
[   99.093459][ T7341] Recovery passes required:      
[   99.093459][ T7341] Errors to silently fix:        
[   99.093459][ T7341] Btrees with missing data:      
[   99.093459][ T7341] 
[   99.109168][ T7341] bcachefs: bch2_fs_get_tree() error: invalid_sb_ext
[   99.113315][ T7357] vlan0: entered promiscuous mode
[   99.257126][ T7362] macvlan2: entered promiscuous mode
[   99.259854][ T7362] macvlan2: entered allmulticast mode
[   99.266229][ T7362] veth1_vlan: entered allmulticast mode
[   99.272148][ T7362] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[   99.332636][ T7369] loop0: detected capacity change from 0 to 8
[   99.334977][ T7367] loop1: detected capacity change from 0 to 1024
[   99.339441][ T7369] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   99.351269][ T7369] cramfs: unsupported filesystem features
[   99.362637][ T7367] EXT4-fs: Ignoring removed orlov option
[   99.384858][ T7367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.424901][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.506613][ T7383] loop4: detected capacity change from 0 to 256
[   99.522829][ T7383] FAT-fs (loop4): Directory bread(block 64) failed
[   99.525952][ T7383] FAT-fs (loop4): Directory bread(block 65) failed
[   99.528329][ T7383] FAT-fs (loop4): Directory bread(block 66) failed
[   99.535158][ T7383] FAT-fs (loop4): Directory bread(block 67) failed
[   99.537935][ T7383] FAT-fs (loop4): Directory bread(block 68) failed
[   99.542711][ T7383] FAT-fs (loop4): Directory bread(block 69) failed
[   99.546319][ T7383] FAT-fs (loop4): Directory bread(block 70) failed
[   99.548560][ T7383] FAT-fs (loop4): Directory bread(block 71) failed
[   99.551043][ T7383] FAT-fs (loop4): Directory bread(block 72) failed
[   99.554127][ T7383] FAT-fs (loop4): Directory bread(block 73) failed
[   99.674134][ T7400] trusted_key: syz.0.506 sent an empty control message without MSG_MORE.
[   99.859884][ T5860] Bluetooth: hci2: command 0x041b tx timeout
[  100.536991][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.518'.
[  100.583362][ T7427] loop0: detected capacity change from 0 to 164
[  100.960063][ T5860] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  100.963448][ T5860] Bluetooth: hci0: Injecting HCI hardware error event
[  100.966671][   T54] Bluetooth: hci0: hardware error 0x00
[  101.015700][ T7433] loop4: detected capacity change from 0 to 256
[  101.021102][ T7433] exfat: Deprecated parameter 'utf8'
[  101.023376][ T7433] exfat: Deprecated parameter 'utf8'
[  101.025819][ T7433] exfat: Deprecated parameter 'utf8'
[  101.065888][ T7433] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  101.085942][   T33] audit: type=1800 audit(1755298099.625:23): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.522" name="file2" dev="loop4" ino=1048601 res=0 errno=0
[  101.552840][ T5917] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  101.724214][ T5917] usb 5-1: Using ep0 maxpacket: 16
[  101.731355][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.735911][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.736414][ T7477] loop0: detected capacity change from 0 to 128
[  101.749135][ T5917] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  101.753123][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.759916][ T5917] usb 5-1: config 0 descriptor??
[  101.781335][   T33] audit: type=1800 audit(1755298100.325:24): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.543" name="file2" dev="loop0" ino=1048602 res=0 errno=0
[  101.903721][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'.
[  101.919110][ T5860] Bluetooth: hci2: command 0x041b tx timeout
[  102.322774][ T7498] loop0: detected capacity change from 0 to 512
[  102.325728][ T7498] EXT4-fs: inline encryption not supported
[  102.347838][ T7498] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.553: corrupted in-inode xattr: invalid ea_ino
[  102.364728][ T7498] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.553: couldn't read orphan inode 15 (err -117)
[  102.387031][ T5917] usb 5-1: language id specifier not provided by device, defaulting to English
[  102.393400][ T7498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.394776][ T7504] loop1: detected capacity change from 0 to 128
[  102.405420][ T7504] hpfs: 
[  102.405420][ T7504] HPFS filesystem options:
[  102.405420][ T7504]       help              do not mount and display this text
[  102.405420][ T7504]       uid=xxx           set uid of files that don't have uid specified in eas
[  102.405420][ T7504]       gid=xxx           set gid of files that don't have gid specified in eas
[  102.405420][ T7504]       umask=xxx         set mode of files that don't have mode specified in eas
[  102.405420][ T7504]       case=lower        lowercase all files
[  102.405420][ T7504]       case=asis         do not lowercase files (default)
[  102.405420][ T7504]       check=none        no fs checks - kernel may crash on corrupted filesystem
[  102.405420][ T7504]       check=normal      do some checks - it should not crash (default)
[  102.405420][ T7504]       check=strict      do extra time-consuming checks, used for debugging
[  102.405420][ T7504]       errors=continue   continue on errors
[  102.405420][ T7504]       errors=remount-ro remount read-only if errors found (default)
[  102.405420][ T7504]       errors=panic      panic on errors
[  102.405420][ T7504]       chkdsk=no         do not mark fs for chkdsking even if there were errors
[  102.405420][ T7504]       chkdsk=errors     mark fs dirty if errors found (default)
[  102.405420][ T7504]       chkdsk=always     always mark fs dirty - used for debugging
[  102.405420][ T7504]       e
[  102.420592][ T7498] cgroup: name respecified
[  102.590878][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.598187][ T5917] letsketch 0003:6161:4D15.0003: Device info: ᑔ
[  102.837775][ T5917] usb 5-1: Max retries (5) exceeded reading string descriptor 201
[  102.850043][ T5917] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -71
[  102.856153][ T5917] usb 5-1: USB disconnect, device number 2
[  103.053050][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  103.922543][ T5917] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  104.080598][ T5917] usb 1-1: config 2 has an invalid interface number: 1 but max is 0
[  104.083962][ T5917] usb 1-1: config 2 has no interface number 0
[  104.086591][ T5917] usb 1-1: config 2 interface 1 has no altsetting 0
[  104.094122][ T5917] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78
[  104.097718][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.101221][ T5917] usb 1-1: Product: syz
[  104.102960][ T5917] usb 1-1: Manufacturer: syz
[  104.104699][ T5917] usb 1-1: SerialNumber: syz
[  104.470689][ T5917] snd-usb-audio 1-1:2.1: probe with driver snd-usb-audio failed with error -22
[  104.476395][ T5917] snd-usb-us122l 1-1:2.1: usb_set_interface error
[  104.809325][ T5917] snd-usb-us122l 1-1:2.1: probe with driver snd-usb-us122l failed with error -22
[  104.816349][ T5917] usb 1-1: USB disconnect, device number 11
[  104.831134][ T7551] tmpfs: Bad value for 'mpol'
[  104.843658][ T7050] udevd[7050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.935145][ T7556] loop1: detected capacity change from 0 to 2048
[  104.948305][ T7557] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.243037][ T7569] loop4: detected capacity change from 0 to 512
[  105.245896][ T7569] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  105.264512][ T7569] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  105.276513][ T7569] EXT4-fs (loop4): 1 truncate cleaned up
[  105.289224][ T7569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.389361][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.426190][ T7585] netlink: 'syz.4.582': attribute type 2 has an invalid length.
[  105.454346][ T7587] netlink: 'syz.0.585': attribute type 1 has an invalid length.
[  105.524157][ T7588] trusted_key: encrypted_key: keyword 'updat`fault' not recognized
[  105.543887][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'.
[  106.655882][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'.
[  107.073385][ T7648] loop0: detected capacity change from 0 to 1024
[  107.077695][ T7648] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.084118][ T7648] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  107.118466][ T7648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.161989][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.113311][ T7666] loop0: detected capacity change from 0 to 32768
[  108.126020][ T7666] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.617 (7666)
[  108.148282][ T7666] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.153163][ T7666] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  108.157007][ T7666] BTRFS info (device loop0): using free-space-tree
[  108.251581][ T5850] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.728882][  T972] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  108.791229][ T7708] loop1: detected capacity change from 0 to 32768
[  108.807439][ T7708] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  108.887744][ T7723] loop4: detected capacity change from 0 to 2048
[  108.892645][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.897314][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.912572][ T7725] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.929482][  T972] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  108.933385][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.951086][ T7725] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  108.952939][  T972] usb 1-1: config 0 descriptor??
[  108.957996][ T7725] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  108.965538][ T7725] Remounting filesystem read-only
[  108.971567][  T972] usbhid 1-1:0.0: can't add hid device: -22
[  108.975161][ T7030] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  108.979160][  T972] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  108.996142][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[  109.228737][   T10] usb 1-1: USB disconnect, device number 12
[  110.341185][ T7763] loop1: detected capacity change from 0 to 8
[  110.355598][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.635'.
[  110.378343][ T7763] SQUASHFS error: xz decompression failed, data probably corrupt
[  110.389541][ T7763] SQUASHFS error: Failed to read block 0x108: -5
[  110.394757][ T7763] SQUASHFS error: Unable to read metadata cache entry [106]
[  110.398130][ T7763] SQUASHFS error: Unable to read inode 0x11f
[  110.853523][ T7794] autofs4:pid:7794:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  111.029387][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  111.189729][   T10] usb 1-1: Using ep0 maxpacket: 32
[  111.194581][   T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  111.198541][   T10] usb 1-1: config 0 has no interface number 0
[  111.204733][   T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  111.209021][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.213045][   T10] usb 1-1: Product: syz
[  111.215043][   T10] usb 1-1: Manufacturer: syz
[  111.217242][   T10] usb 1-1: SerialNumber: syz
[  111.222603][   T10] usb 1-1: config 0 descriptor??
[  111.230729][   T10] smsc95xx v2.0.0
[  111.483362][ T7803] loop4: detected capacity change from 0 to 128
[  111.505634][   T33] audit: type=1800 audit(1755298110.045:25): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.645" name="file1" dev="loop4" ino=1048603 res=0 errno=0
[  111.652621][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  111.657179][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  111.798968][ T5917] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  111.950380][ T5917] usb 2-1: config 2 has an invalid interface number: 1 but max is 0
[  111.953566][ T5917] usb 2-1: config 2 has no interface number 0
[  111.955954][ T5917] usb 2-1: config 2 interface 1 has no altsetting 0
[  111.963034][ T5917] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78
[  111.966464][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.969720][ T5917] usb 2-1: Product: syz
[  111.971353][ T5917] usb 2-1: Manufacturer: syz
[  111.973162][ T5917] usb 2-1: SerialNumber: syz
[  112.225840][ T5917] snd-usb-audio 2-1:2.1: probe with driver snd-usb-audio failed with error -22
[  112.232021][ T5917] snd-usb-us122l 2-1:2.1: usb_set_interface error
[  112.233974][ T7813] gretap0: entered promiscuous mode
[  112.235317][ T5917] snd-usb-us122l 2-1:2.1: probe with driver snd-usb-us122l failed with error -22
[  112.245300][ T5917] usb 2-1: USB disconnect, device number 7
[  112.257851][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  112.265238][   T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  112.290143][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.310360][   T10] usb 1-1: USB disconnect, device number 13
[  112.494133][ T7827] delete_channel: no stack
[  112.823275][ T7849] loop1: detected capacity change from 0 to 128
[  112.878312][ T7853] comedi: No check for data length of config insn id 4095 is implemented
[  112.883023][ T7853] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  112.893556][ T7853] comedi: Assuming n=15 is correct
[  112.941768][ T7860] loop4: detected capacity change from 0 to 22
[  112.944794][ T7860] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  112.963562][ T7860] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  113.228869][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  113.320136][ T7883] loop1: detected capacity change from 0 to 32768
[  113.366289][ T7883] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  113.395292][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  113.398248][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.401942][   T10] usb 1-1: Product: syz
[  113.403329][   T10] usb 1-1: Manufacturer: syz
[  113.405150][   T10] usb 1-1: SerialNumber: syz
[  113.417597][   T10] usb 1-1: config 0 descriptor??
[  113.423824][   T10] usb 1-1: interface 1 not found
[  113.453710][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[  113.493977][ T7895] vlan2: entered promiscuous mode
[  113.496051][ T7895] hsr0: entered promiscuous mode
[  113.662172][   T33] audit: type=1326 audit(1755298112.205:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.1.693" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f941d18ebe9 code=0x0
[  113.849348][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  113.999068][   T10] usb 5-1: Using ep0 maxpacket: 8
[  114.006815][   T10] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b
[  114.011324][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.014926][   T10] usb 5-1: Product: syz
[  114.016988][   T10] usb 5-1: Manufacturer: syz
[  114.019239][   T10] usb 5-1: SerialNumber: syz
[  114.026572][   T10] usb 5-1: config 0 descriptor??
[  114.035269][   T10] upd78f0730 5-1:0.0: upd78f0730 converter detected
[  114.041852][   T10] usb 5-1: upd78f0730 converter now attached to ttyUSB0
[  114.243151][   T24] usb 5-1: USB disconnect, device number 3
[  114.248326][   T24] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  114.255031][   T24] upd78f0730 5-1:0.0: device disconnected
[  114.680142][ T7918] loop1: detected capacity change from 0 to 2048
[  114.684405][ T7918] EXT4-fs: Ignoring removed mblk_io_submit option
[  114.687319][ T7918] EXT4-fs: Ignoring removed bh option
[  114.707693][ T7918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.717236][   T33] audit: type=1800 audit(1755298113.255:27): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.698" name="file1" dev="loop1" ino=15 res=0 errno=0
[  114.720053][ T7918] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  114.734295][ T7918] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  114.742792][ T7918] EXT4-fs (loop1): This should not happen!! Data will be lost
[  114.742792][ T7918] 
[  114.746921][ T7918] EXT4-fs (loop1): Total free blocks count 0
[  114.750974][ T7918] EXT4-fs (loop1): Free/Dirty block details
[  114.757678][ T7918] EXT4-fs (loop1): free_blocks=2415919104
[  114.760769][ T7918] EXT4-fs (loop1): dirty_blocks=16
[  114.763166][ T7918] EXT4-fs (loop1): Block reservation details
[  114.765626][ T7918] EXT4-fs (loop1): i_reserved_data_blocks=1
[  114.816964][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.168983][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  115.328898][   T10] usb 5-1: Using ep0 maxpacket: 32
[  115.334481][   T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  115.338308][   T10] usb 5-1: config 0 has no interface number 0
[  115.345032][   T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  115.349150][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.352677][   T10] usb 5-1: Product: syz
[  115.354772][   T10] usb 5-1: Manufacturer: syz
[  115.357069][   T10] usb 5-1: SerialNumber: syz
[  115.364476][   T10] usb 5-1: config 0 descriptor??
[  115.369742][   T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  115.415832][ T7951] netlink: 300 bytes leftover after parsing attributes in process `syz.1.713'.
[  115.584200][   T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  115.613389][   T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  116.158937][   T10] usb 1-1: USB disconnect, device number 14
[  116.278274][ T7965] loop0: detected capacity change from 0 to 764
[  116.301786][ T7965] rock: directory entry would overflow storage
[  116.311284][ T7965] rock: sig=0x4654, size=5, remaining=4
[  116.394695][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  116.395136][   T24] usb 5-1: USB disconnect, device number 4
[  116.494395][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  116.512251][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  116.524317][   T24] quatech2 5-1:0.51: device disconnected
[  116.947145][ T7973] loop1: detected capacity change from 0 to 4096
[  117.013505][ T7975] loop1: detected capacity change from 0 to 2048
[  117.069497][ T7976] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.085337][ T7975] syz.1.723: attempt to access beyond end of device
[  117.085337][ T7975] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  117.094497][ T7978] loop4: detected capacity change from 0 to 512
[  117.094609][ T7975] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15)
[  117.098080][ T7978] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  117.104727][ T7975] syz.1.723: attempt to access beyond end of device
[  117.104727][ T7975] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  117.116580][ T7975] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15)
[  117.121185][ T7975] NILFS (loop1): error -5 truncating bmap (ino=16)
[  117.123616][ T7978] EXT4-fs (loop4): orphan cleanup on readonly fs
[  117.144445][ T7978] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.724: Block bitmap for bg 0 marked uninitialized
[  117.159332][ T7978] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  117.198458][ T7978] EXT4-fs (loop4): 1 orphan inode deleted
[  117.206140][ T7978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  117.680734][ T7990] loop1: detected capacity change from 0 to 4096
[  118.037608][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.233248][ T8021] loop0: detected capacity change from 0 to 128
[  118.240939][ T8021] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  118.270741][ T8021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.377290][ T8031] netlink: 132 bytes leftover after parsing attributes in process `syz.4.746'.
[  119.688975][  T972] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  119.854095][  T972] usb 2-1: Using ep0 maxpacket: 32
[  119.859123][  T972] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.867486][  T972] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.874297][  T972] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  119.877870][  T972] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  119.881228][  T972] usb 2-1: Product: syz
[  119.884823][  T972] usb 2-1: Manufacturer: syz
[  119.897958][  T972] hub 2-1:4.0: USB hub found
[  120.106772][ T8058] netlink: 'syz.0.759': attribute type 1 has an invalid length.
[  120.116186][  T972] hub 2-1:4.0: config failed, hub has too many ports! (err -19)
[  120.441432][ T8060] loop0: detected capacity change from 0 to 32768
[  120.448927][  T972] usb 2-1: USB disconnect, device number 8
[  120.459570][ T8060] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.760 (8060)
[  120.496917][ T8060] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.504332][ T8060] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  120.508209][ T8060] BTRFS info (device loop0): using free-space-tree
[  120.511647][ T8069] netlink: 'syz.4.764': attribute type 14 has an invalid length.
[  120.562852][ T8086] loop4: detected capacity change from 0 to 256
[  120.575868][ T8086] MINIX-fs: mounting file system with errors, running fsck is recommended
[  120.603556][   T33] audit: type=1800 audit(1755298119.135:28): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.760" name="file1" dev="loop0" ino=260 res=0 errno=0
[  120.648093][ T8089] ieee802154 phy0 wpan0: encryption failed: -22
[  120.780967][ T8060] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 0 free, is not full
[  120.784693][ T8060] BTRFS info (device loop0): space_info total=3276800, used=167936, pinned=335872, reserved=53248, may_use=2719744, readonly=0 zone_unusable=0
[  120.789776][ T8060] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792
[  120.792829][ T8060] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
[  120.795348][ T8060] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
[  120.797885][ T8060] BTRFS info (device loop0): delayed_block_rsv: size 32768 reserved 32768
[  120.800922][ T8060] BTRFS info (device loop0): delayed_refs_rsv: size 1245184 reserved 1245184
[  121.060285][ T5850] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.517388][ T8111] loop0: detected capacity change from 0 to 32768
[  121.522718][ T8111] (syz.0.774,8111,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.528412][ T8111] (syz.0.774,8111,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.539730][ T8111] JBD2: Ignoring recovery information on journal
[  121.573713][ T8111] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  121.681617][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  121.815314][ T8119] netlink: 'syz.1.777': attribute type 12 has an invalid length.
[  122.081095][ T8127] loop0: detected capacity change from 0 to 32768
[  122.130804][ T8127] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  122.216894][ T5850] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.715902][ T8152] loop4: detected capacity change from 0 to 512
[  122.744973][ T8152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.751205][ T8152] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.778306][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.000980][ T6490] block nbd0: Receive control failed (result -32)
[  123.210257][ T8178] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  123.837610][ T8192] loop0: detected capacity change from 0 to 128
[  123.977335][ T8194] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  124.407196][ T8202] netlink: 277 bytes leftover after parsing attributes in process `syz.0.809'.
[  124.609002][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  124.751306][ T8206] loop0: detected capacity change from 0 to 128
[  124.759839][ T8206] EXT4-fs (loop0): Test dummy encryption mode enabled
[  124.761169][ T5917] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  124.766100][ T5917] usb 5-1: config 0 has no interface number 0
[  124.767426][ T8206] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.768645][ T5917] usb 5-1: config 0 interface 12 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  124.773036][ T8206] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.776720][ T5917] usb 5-1: config 0 interface 12 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511
[  124.785902][ T8206] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  124.790250][ T5917] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=5f.c4
[  124.793285][   T33] audit: type=1800 audit(1755298123.335:29): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.811" name="file1" dev="loop0" ino=12 res=0 errno=0
[  124.793375][ T8206] EXT4-fs (loop0): Online defrag not supported for encrypted files
[  124.799980][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.799990][ T5917] usb 5-1: Product: syz
[  124.799996][ T5917] usb 5-1: Manufacturer: syz
[  124.805427][   T33] audit: type=1800 audit(1755298123.335:30): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.811" name="file2" dev="loop0" ino=13 res=0 errno=0
[  124.808892][ T5917] usb 5-1: SerialNumber: syz
[  124.818318][ T5917] usb 5-1: config 0 descriptor??
[  124.820988][ T8201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  124.824166][ T8201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  124.828095][ T5917] option 5-1:0.12: GSM modem (1-port) converter detected
[  124.833254][ T5917] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0
[  125.032719][ T1951] usb 5-1: USB disconnect, device number 5
[  125.036848][ T1951] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  125.041926][ T6255] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  125.044848][ T1951] option 5-1:0.12: device disconnected
[  125.202421][ T6255] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  125.206223][ T6255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.213201][ T6255] usb 1-1: config 0 descriptor??
[  125.618364][ T6255] ath6kl: Failed to read usb control message: -71
[  125.622228][ T6255] ath6kl: Unable to read the bmi data from the device: -71
[  125.624575][ T6255] ath6kl: Unable to recv target info: -71
[  125.632962][ T6255] ath6kl: Failed to init ath6kl core: -71
[  125.637934][ T6255] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  125.651232][ T6255] usb 1-1: USB disconnect, device number 15
[  126.133729][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.262079][ T8231] netlink: 'syz.0.821': attribute type 2 has an invalid length.
[  126.324509][   T33] audit: type=1804 audit(1755298124.865:31): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.823" name="file0" dev="ramfs" ino=15565 res=1 errno=0
[  126.376990][ T8239] capability: warning: `syz.0.825' uses 32-bit capabilities (legacy support in use)
[  126.444640][ T8243] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  126.500275][ T8247] vcan0: entered allmulticast mode
[  126.502295][ T8247] vcan0: left allmulticast mode
[  126.528523][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'.
[  126.531676][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'.
[  126.560873][ T8253] loop1: detected capacity change from 0 to 512
[  126.568368][ T8253] EXT4-fs: Ignoring removed i_version option
[  126.570897][ T8253] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  126.603149][ T8253] EXT4-fs (loop1): 1 truncate cleaned up
[  126.606413][ T8253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.691994][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.758932][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  126.821607][ T8260] loop4: detected capacity change from 0 to 40427
[  126.825609][ T8260] F2FS-fs (loop4): build fault injection rate: 14
[  126.827797][ T8260] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  126.831204][ T8260] F2FS-fs (loop4): invalid crc value
[  126.835731][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  126.843339][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  126.874947][ T8260] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.878017][ T8260] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  126.883088][ T8260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  126.906064][ T8260] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  126.912048][   T33] audit: type=1800 audit(1755298125.455:32): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.835" name="file1" dev="loop4" ino=10 res=0 errno=0
[  126.920504][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  126.925629][ T5917] usb 1-1: config 0 has an invalid interface number: 151 but max is 1
[  126.928403][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.929987][ T8260] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_symlink+0x23a/0x880
[  126.932948][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  126.941138][ T5917] usb 1-1: config 0 has no interface number 0
[  126.943315][ T5917] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  126.947396][ T5917] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  126.954591][ T7030] syz-executor: attempt to access beyond end of device
[  126.954591][ T7030] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  126.960670][ T5917] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  126.962650][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  126.962665][ T7030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.962672][ T7030] Call Trace:
[  126.962678][ T7030]  <TASK>
[  126.962683][ T7030]  dump_stack_lvl+0x189/0x250
[  126.962703][ T7030]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.962717][ T7030]  ? __pfx_queue_work_on+0x10/0x10
[  126.962728][ T7030]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  126.962742][ T7030]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  126.962764][ T7030]  f2fs_handle_critical_error+0x37c/0x540
[  126.962784][ T7030]  f2fs_write_end_io+0x886/0xb60
[  126.962808][ T7030]  __submit_merged_bio+0x27a/0x6a0
[  126.962827][ T7030]  __submit_merged_write_cond+0x255/0x530
[  126.962845][ T7030]  f2fs_write_data_pages+0x261d/0x3000
[  126.962884][ T7030]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.962947][ T7030]  ? __lock_acquire+0xab9/0xd20
[  126.962969][ T7030]  ? do_raw_spin_lock+0x121/0x290
[  126.962991][ T7030]  ? do_raw_spin_unlock+0x4d/0x240
[  126.963004][ T7030]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.963020][ T7030]  do_writepages+0x32e/0x550
[  126.963043][ T7030]  ? do_raw_spin_unlock+0x4d/0x240
[  126.963059][ T7030]  filemap_fdatawrite+0x199/0x240
[  126.963074][ T7030]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  126.963129][ T7030]  ? do_raw_spin_unlock+0x4d/0x240
[  126.963146][ T7030]  f2fs_sync_dirty_inodes+0x31f/0x830
[  126.963166][ T7030]  f2fs_write_checkpoint+0x95a/0x1df0
[  126.963193][ T7030]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  126.963237][ T7030]  ? kill_f2fs_super+0x298/0x6c0
[  126.963252][ T7030]  kill_f2fs_super+0x2c3/0x6c0
[  126.963268][ T7030]  ? __pfx_kill_f2fs_super+0x10/0x10
[  126.963277][ T7030]  ? radix_tree_delete_item+0x2b6/0x400
[  126.963296][ T7030]  ? shrinker_free+0x2ce/0x3e0
[  126.963310][ T7030]  deactivate_locked_super+0xbc/0x130
[  126.963325][ T7030]  cleanup_mnt+0x425/0x4c0
[  126.963338][ T7030]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.963354][ T7030]  task_work_run+0x1d4/0x260
[  126.963372][ T7030]  ? __pfx_task_work_run+0x10/0x10
[  126.963384][ T7030]  ? __x64_sys_umount+0x122/0x160
[  126.963402][ T7030]  ? exit_to_user_mode_loop+0x40/0x110
[  126.963420][ T7030]  exit_to_user_mode_loop+0xec/0x110
[  126.963435][ T7030]  do_syscall_64+0x2bd/0x3b0
[  126.963449][ T7030]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.963462][ T7030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.963473][ T7030]  ? exc_page_fault+0x9f/0xf0
[  126.963488][ T7030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.963499][ T7030] RIP: 0033:0x7f98da58ff17
[  126.963509][ T7030] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  126.963518][ T7030] RSP: 002b:00007fff82003a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  126.963531][ T7030] RAX: 0000000000000000 RBX: 00007f98da611c05 RCX: 00007f98da58ff17
[  126.963538][ T7030] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff82003ac0
[  126.963575][ T7030] RBP: 00007fff82003ac0 R08: 0000000000000000 R09: 0000000000000000
[  126.963581][ T7030] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff82004b50
[  126.963588][ T7030] R13: 00007f98da611c05 R14: 000000000001ef63 R15: 00007fff82004b90
[  126.963609][ T7030]  </TASK>
[  126.963613][ T7030] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  126.987398][ T5917] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  127.123257][ T5917] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  127.137717][ T5917] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  127.141744][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.145007][ T5917] usb 1-1: Product: syz
[  127.146668][ T5917] usb 1-1: Manufacturer: syz
[  127.148519][ T5917] usb 1-1: SerialNumber: syz
[  127.155521][ T5917] usb 1-1: config 0 descriptor??
[  127.158399][ T8249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  127.191201][ T5917] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  127.385598][   T24] usb 1-1: USB disconnect, device number 16
[  128.113061][ T8290] netlink: 60 bytes leftover after parsing attributes in process `syz.4.845'.
[  128.803739][ T8294] loop1: detected capacity change from 0 to 32768
[  128.808893][ T8294] btrfs: Deprecated parameter 'usebackuproot'
[  128.868952][ T8294] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  128.872120][ T8294] BTRFS error: unrecognized compression value n
[  129.210585][ T8312] loop0: detected capacity change from 0 to 40427
[  129.215880][ T8312] F2FS-fs (loop0): build fault injection rate: 14
[  129.218400][ T8312] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  129.222072][ T8312] F2FS-fs (loop0): invalid crc value
[  129.229357][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  129.235482][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  129.261431][ T8312] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.264408][ T8312] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  129.269384][ T8312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  129.291619][ T8312] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  129.296095][   T33] audit: type=1800 audit(1755298127.835:33): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.854" name="file1" dev="loop0" ino=10 res=0 errno=0
[  129.303733][ T8312] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_symlink+0x23a/0x880
[  129.321312][ T5850] syz-executor: attempt to access beyond end of device
[  129.321312][ T5850] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.326638][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.326648][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.326653][ T5850] Call Trace:
[  129.326656][ T5850]  <TASK>
[  129.326659][ T5850]  dump_stack_lvl+0x189/0x250
[  129.326671][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.326679][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[  129.326685][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.326694][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.326706][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  129.326717][ T5850]  f2fs_write_end_io+0x886/0xb60
[  129.326730][ T5850]  __submit_merged_bio+0x27a/0x6a0
[  129.326741][ T5850]  __submit_merged_write_cond+0x255/0x530
[  129.326752][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[  129.326773][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.326802][ T5850]  ? __mod_zone_page_state+0xd7/0x140
[  129.326815][ T5850]  ? folios_put_refs+0x560/0x640
[  129.326827][ T5850]  ? __lock_acquire+0xab9/0xd20
[  129.326839][ T5850]  ? do_raw_spin_lock+0x121/0x290
[  129.326851][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  129.326859][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.326868][ T5850]  do_writepages+0x32e/0x550
[  129.326881][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  129.326890][ T5850]  filemap_fdatawrite+0x199/0x240
[  129.326899][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  129.326923][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  129.326932][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[  129.326944][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[  129.326959][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.326982][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[  129.326990][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[  129.326998][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.327003][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[  129.327015][ T5850]  ? shrinker_free+0x2ce/0x3e0
[  129.327022][ T5850]  deactivate_locked_super+0xbc/0x130
[  129.327031][ T5850]  cleanup_mnt+0x425/0x4c0
[  129.327038][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.327048][ T5850]  task_work_run+0x1d4/0x260
[  129.327057][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  129.327065][ T5850]  ? __x64_sys_umount+0x122/0x160
[  129.327092][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[  129.327104][ T5850]  exit_to_user_mode_loop+0xec/0x110
[  129.327113][ T5850]  do_syscall_64+0x2bd/0x3b0
[  129.327122][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.327130][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.327136][ T5850]  ? exc_page_fault+0x9f/0xf0
[  129.327145][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.327151][ T5850] RIP: 0033:0x7fa69858ff17
[  129.327157][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.327163][ T5850] RSP: 002b:00007fff91d0b478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.327171][ T5850] RAX: 0000000000000000 RBX: 00007fa698611c05 RCX: 00007fa69858ff17
[  129.327176][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff91d0b530
[  129.327180][ T5850] RBP: 00007fff91d0b530 R08: 0000000000000000 R09: 0000000000000000
[  129.327184][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff91d0c5c0
[  129.327189][ T5850] R13: 00007fa698611c05 R14: 000000000001f8a9 R15: 00007fff91d0c600
[  129.327200][ T5850]  </TASK>
[  129.327274][ T5850] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  129.567452][ T8319] netlink: 'syz.4.857': attribute type 21 has an invalid length.
[  129.672015][ T8324] loop4: detected capacity change from 0 to 64
[  129.688122][ T8324] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4
[  129.843010][ T8336] loop0: detected capacity change from 0 to 8
[  130.081799][ T8339] netlink: 'syz.0.864': attribute type 1 has an invalid length.
[  130.090219][ T8339] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.864'.
[  130.373470][ T8351] loop1: detected capacity change from 0 to 4096
[  130.696904][ T8363] misc userio: Can't change port type on an already running userio instance
[  130.747853][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'.
[  130.923075][ T8380] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[  130.934061][ T8380] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms
[  130.965890][ T8380] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.218637][ T8398] netlink: 240 bytes leftover after parsing attributes in process `syz.4.888'.
[  131.253760][ T8402] loop4: detected capacity change from 0 to 512
[  131.256968][ T8402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  131.281103][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  131.286075][ T8402] EXT4-fs error (device loop4): ext4_quota_enable:7120: comm syz.4.891: Bad quota inum: 29696, type: 1
[  131.291867][ T8402] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix.
[  131.299488][ T8402] EXT4-fs (loop4): mount failed
[  131.451734][   T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  131.455344][   T10] usb 2-1: config 0 has no interface number 0
[  131.458036][   T10] usb 2-1: config 0 interface 12 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  131.462409][   T10] usb 2-1: config 0 interface 12 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511
[  131.469874][   T10] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=5f.c4
[  131.474196][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.477788][   T10] usb 2-1: Product: syz
[  131.480154][   T10] usb 2-1: Manufacturer: syz
[  131.482183][   T10] usb 2-1: SerialNumber: syz
[  131.486443][   T10] usb 2-1: config 0 descriptor??
[  131.489671][ T8391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  131.492862][ T8391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  131.497605][   T10] option 2-1:0.12: GSM modem (1-port) converter detected
[  131.504053][   T10] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0
[  131.639011][ T6255] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  131.704589][   T24] usb 2-1: USB disconnect, device number 9
[  131.712906][   T24] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  131.716910][   T24] option 2-1:0.12: device disconnected
[  131.788843][ T6255] usb 5-1: Using ep0 maxpacket: 8
[  131.800885][ T6255] usb 5-1: config 2 has an invalid interface number: 226 but max is 0
[  131.804384][ T6255] usb 5-1: config 2 has no interface number 0
[  131.807170][ T6255] usb 5-1: config 2 interface 226 has no altsetting 0
[  131.814737][ T6255] usb 5-1: New USB device found, idVendor=05c8, idProduct=0403, bcdDevice=d4.d4
[  131.818676][ T6255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.831551][ T6255] usb 5-1: Product: syz
[  131.833389][ T6255] usb 5-1: Manufacturer: syz
[  131.835588][ T6255] usb 5-1: SerialNumber: syz
[  132.057541][ T6255] usb 5-1: Found UVC 0.00 device syz (05c8:0403)
[  132.060570][ T6255] usb 5-1: No valid video chain found.
[  132.065871][ T6255] usb 5-1: USB disconnect, device number 6
[  132.404687][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.407042][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.883066][ T8438] loop0: detected capacity change from 0 to 2048
[  132.888101][ T8438] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  132.896847][ T8438] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  132.900053][ T8438] UDF-fs: Scanning with blocksize 512 failed
[  132.904921][ T8438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.992286][ T8444] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  132.994833][ T8444] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  133.067048][ T8450] [U] 2
[  133.069638][ T8449] [U] 2
[  133.288368][ T8470] loop0: detected capacity change from 0 to 1024
[  133.305486][ T8470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.324410][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.363048][ T8474] bond0: option mode: unable to set because the bond device has slaves
[  133.478922][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  133.587362][ T8480] loop0: detected capacity change from 0 to 32768
[  133.649124][   T24] usb 2-1: Using ep0 maxpacket: 32
[  133.660439][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  133.667831][   T24] usb 2-1: config 120 has an invalid interface number: 86 but max is 0
[  133.675584][   T24] usb 2-1: config 120 has no interface number 0
[  133.683699][   T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  133.688995][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.692461][   T24] usb 2-1: Product: syz
[  133.697747][   T24] usb 2-1: Manufacturer: syz
[  133.702799][   T24] usb 2-1: SerialNumber: syz
[  133.915999][   T24] huawei_cdc_ncm 2-1:120.86: More than one union descriptor, skipping ...
[  133.919396][   T24] huawei_cdc_ncm 2-1:120.86: CDC Union missing and no IAD found
[  133.922141][   T24] huawei_cdc_ncm 2-1:120.86: bind() failure
[  133.927465][   T24] usb 2-1: USB disconnect, device number 10
[  134.158940][ T8489] loop0: detected capacity change from 0 to 32768
[  134.163288][ T8489] 
[  134.163288][ T8489]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.163288][ T8489] 
[  134.187450][ T5850] 
[  134.187450][ T5850]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.187450][ T5850] 
[  134.192975][ T5850] 
[  134.192975][ T5850]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.192975][ T5850] 
[  134.402872][ T8496] CIFS mount error: No usable UNC path provided in device string!
[  134.402872][ T8496] 
[  134.407100][ T8496] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  134.827022][ T8507] loop1: detected capacity change from 0 to 32768
[  134.855910][ T8507] (syz.1.937,8507,1):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  134.859193][ T8507] (syz.1.937,8507,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  134.862055][ T8507] (syz.1.937,8507,1):ocfs2_check_volume:2420 ERROR: status = -13
[  134.864783][ T8507] (syz.1.937,8507,1):ocfs2_check_volume:2432 ERROR: status = -13
[  134.867434][ T8507] (syz.1.937,8507,1):ocfs2_mount_volume:1764 ERROR: status = -13
[  134.878901][ T8507] (syz.1.937,8507,1):ocfs2_fill_super:1177 ERROR: status = -13
[  135.127364][ T8519] loop4: detected capacity change from 0 to 128
[  135.155076][ T8519] EXT4-fs (loop4): Test dummy encryption mode enabled
[  135.174740][ T8519] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.187864][ T8519] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.208062][   T33] audit: type=1800 audit(1755298133.745:34): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.941" name="file1" dev="loop4" ino=12 res=0 errno=0
[  135.210729][ T8519] EXT4-fs (loop4): Online defrag not supported for encrypted files
[  135.223278][   T33] audit: type=1800 audit(1755298133.755:35): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.941" name="file2" dev="loop4" ino=13 res=0 errno=0
[  135.295940][ T8533] syz_tun: entered allmulticast mode
[  135.313046][ T8530] syz_tun: left allmulticast mode
[  135.468955][ T6255] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  135.507763][ T8542] loop1: detected capacity change from 0 to 32768
[  135.525905][ T8542] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  135.539325][ T8542] (syz.1.951,8542,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  135.564572][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[  135.623993][ T6255] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  135.627682][ T6255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.648566][ T6255] usb 5-1: config 0 descriptor??
[  135.776324][ T8555] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  135.850215][ T8561] loop0: detected capacity change from 0 to 256
[  135.864886][ T8561] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  135.940513][   T33] audit: type=1326 audit(1755298134.485:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.0.961" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa69858ebe9 code=0x0
[  136.072647][ T6255] ath6kl: Failed to read usb control message: -71
[  136.075134][ T6255] ath6kl: Unable to read the bmi data from the device: -71
[  136.078966][ T6255] ath6kl: Unable to recv target info: -71
[  136.087353][ T6255] ath6kl: Failed to init ath6kl core: -71
[  136.090366][ T6255] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  136.094808][ T6255] usb 5-1: USB disconnect, device number 7
[  136.616344][ T7030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.845672][ T8571] loop1: detected capacity change from 0 to 40427
[  136.869427][ T8571] F2FS-fs (loop1): invalid crc value
[  136.933797][ T8571] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  136.938171][ T8571] F2FS-fs (loop1): Start checkpoint disabled!
[  136.952675][ T8571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  136.991208][ T8580] loop4: detected capacity change from 0 to 32768
[  137.019107][ T8571] loop1: detected capacity change from 40427 to 0
[  137.027426][ T8571] syz.1.964: attempt to access beyond end of device
[  137.027426][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.034782][ T8571] syz.1.964: attempt to access beyond end of device
[  137.034782][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.041029][ T8571] syz.1.964: attempt to access beyond end of device
[  137.041029][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.047210][ T8571] syz.1.964: attempt to access beyond end of device
[  137.047210][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.055965][ T8571] syz.1.964: attempt to access beyond end of device
[  137.055965][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.063903][ T8571] syz.1.964: attempt to access beyond end of device
[  137.063903][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.069515][ T8571] syz.1.964: attempt to access beyond end of device
[  137.069515][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.075315][ T8571] syz.1.964: attempt to access beyond end of device
[  137.075315][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.080252][ T8571] syz.1.964: attempt to access beyond end of device
[  137.080252][ T8571] loop1: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  137.095101][   T10] kworker/0:1: attempt to access beyond end of device
[  137.095101][   T10] loop1: rw=395265, sector=8, nr_sectors = 8 limit=0
[  137.101031][ T8571] CPU: 0 UID: 0 PID: 8571 Comm: syz.1.964 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  137.101042][ T8571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.101047][ T8571] Call Trace:
[  137.101050][ T8571]  <TASK>
[  137.101054][ T8571]  dump_stack_lvl+0x189/0x250
[  137.101067][ T8571]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.101076][ T8571]  ? __pfx_queue_work_on+0x10/0x10
[  137.101083][ T8571]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  137.101093][ T8571]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  137.101106][ T8571]  f2fs_handle_critical_error+0x37c/0x540
[  137.101118][ T8571]  f2fs_get_meta_folio_retry+0x84/0xa0
[  137.101129][ T8571]  do_garbage_collect+0x72e/0x6410
[  137.101145][ T8571]  ? f2fs_get_victim+0x5a9a/0x6260
[  137.101155][ T8571]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  137.101167][ T8571]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  137.101177][ T8571]  ? check_path+0x21/0x40
[  137.101187][ T8571]  ? __pfx_do_garbage_collect+0x10/0x10
[  137.101194][ T8571]  ? f2fs_get_victim+0x5a9a/0x6260
[  137.101210][ T8571]  ? __lock_acquire+0xab9/0xd20
[  137.101235][ T8571]  ? up_write+0x1c4/0x420
[  137.101249][ T8571]  f2fs_gc+0xc87/0x2590
[  137.101279][ T8571]  ? __pfx_f2fs_gc+0x10/0x10
[  137.101292][ T8571]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  137.101312][ T8571]  ? sb_start_write+0x114/0x1c0
[  137.101324][ T8571]  ? mnt_want_write_file+0x164/0x200
[  137.101339][ T8571]  __f2fs_ioc_gc_range+0x754/0xb10
[  137.101364][ T8571]  ? __pfx___f2fs_ioc_gc_range+0x10/0x10
[  137.101378][ T8571]  __f2fs_ioctl+0x2e00/0xb610
[  137.101391][ T8571]  ? file_ioctl+0x22d/0x780
[  137.101400][ T8571]  ? __pfx_file_ioctl+0x10/0x10
[  137.101412][ T8571]  ? kasan_quarantine_put+0xdd/0x220
[  137.101421][ T8571]  ? __pfx___f2fs_ioctl+0x10/0x10
[  137.101429][ T8571]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  137.101438][ T8571]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  137.101448][ T8571]  ? do_vfs_ioctl+0xb33/0x1430
[  137.101477][ T8571]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  137.101494][ T8571]  ? __lock_acquire+0xab9/0xd20
[  137.101508][ T8571]  ? has_not_enough_free_secs+0xf8b/0x18c0
[  137.101523][ T8571]  ? f2fs_ioctl+0x184/0x250
[  137.101530][ T8571]  ? __pfx_f2fs_ioctl+0x10/0x10
[  137.101537][ T8571]  __se_sys_ioctl+0xfc/0x170
[  137.101546][ T8571]  do_syscall_64+0xfa/0x3b0
[  137.101556][ T8571]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.101564][ T8571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.101571][ T8571]  ? exc_page_fault+0x9f/0xf0
[  137.101580][ T8571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.101586][ T8571] RIP: 0033:0x7f941d18ebe9
[  137.101593][ T8571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.101599][ T8571] RSP: 002b:00007f941df7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  137.101607][ T8571] RAX: ffffffffffffffda RBX: 00007f941d3b5fa0 RCX: 00007f941d18ebe9
[  137.101612][ T8571] RDX: 0000200000000000 RSI: 000000004018f50b RDI: 0000000000000004
[  137.101616][ T8571] RBP: 00007f941d211e19 R08: 0000000000000000 R09: 0000000000000000
[  137.101620][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.101624][ T8571] R13: 00007f941d3b6038 R14: 00007f941d3b5fa0 R15: 00007fff34469e18
[  137.101635][ T8571]  </TASK>
[  137.101638][ T8571] F2FS-fs (loop1): Stopped filesystem due to reason: 2
[  137.220406][   T10] F2FS-fs (loop1): f2fs_commit_super fails to record stop_reason, err:-5
[  137.250618][ T8592] loop4: detected capacity change from 0 to 256
[  137.262100][ T8592] FAT-fs (loop4): Directory bread(block 64) failed
[  137.264551][ T8592] FAT-fs (loop4): Directory bread(block 65) failed
[  137.266876][ T8592] FAT-fs (loop4): Directory bread(block 66) failed
[  137.274579][ T8592] FAT-fs (loop4): Directory bread(block 67) failed
[  137.287170][ T8592] FAT-fs (loop4): Directory bread(block 68) failed
[  137.290495][ T8592] FAT-fs (loop4): Directory bread(block 69) failed
[  137.295251][ T8592] FAT-fs (loop4): Directory bread(block 70) failed
[  137.307336][ T8592] FAT-fs (loop4): Directory bread(block 71) failed
[  137.317488][ T8592] FAT-fs (loop4): Directory bread(block 72) failed
[  137.320306][ T8592] FAT-fs (loop4): Directory bread(block 73) failed
[  137.383447][ T8594] loop4: detected capacity change from 0 to 512
[  137.387718][ T8594] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  137.410038][ T8594] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  137.416711][ T8594] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  137.419939][ T8594] System zones: 0-2, 18-18, 34-34
[  137.435294][ T8594] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.973: iget: bad i_size value: 360287970189639680
[  137.442311][ T5852] bridge0: port 3(syz_tun) entered disabled state
[  137.451560][ T8594] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.973: couldn't read orphan inode 15 (err -117)
[  137.456909][ T5852] syz_tun (unregistering): left allmulticast mode
[  137.459065][ T5852] syz_tun (unregistering): left promiscuous mode
[  137.460373][ T8594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.461423][ T5852] bridge0: port 3(syz_tun) entered disabled state
[  137.486761][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.627096][ T5883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.707815][ T5883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.804610][ T5883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.867887][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  137.870630][ T5883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.871670][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  137.878981][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  137.882290][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  137.885310][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  138.014252][ T5883] bridge_slave_1: left allmulticast mode
[  138.016427][ T5883] bridge_slave_1: left promiscuous mode
[  138.018608][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.022509][ T6255] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  138.028318][ T5883] bridge_slave_0: left allmulticast mode
[  138.031090][ T5883] bridge_slave_0: left promiscuous mode
[  138.033359][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.144589][ T5883] dvmrp1 (unregistering): left allmulticast mode
[  138.181974][ T6255] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.185361][ T6255] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  138.188555][ T6255] usb 1-1: config 1 has no interface number 0
[  138.191139][ T6255] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.194743][ T6255] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  138.198089][ T6255] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  138.209198][ T6255] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  138.212120][ T6255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.215022][ T6255] usb 1-1: Product: syz
[  138.216821][ T6255] usb 1-1: Manufacturer: syz
[  138.218701][ T6255] usb 1-1: SerialNumber: syz
[  138.311838][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.316404][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.321058][ T5883] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  138.324263][ T5883] veth1_vlan: left allmulticast mode
[  138.326960][ T5883] bond0 (unregistering): Released all slaves
[  138.343508][ T8603] chnl_net:caif_netlink_parms(): no params data found
[  138.521366][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.527142][ T8615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.979'.
[  138.527179][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.534633][ T8603] bridge_slave_0: entered allmulticast mode
[  138.537849][ T8603] bridge_slave_0: entered promiscuous mode
[  138.549965][ T8615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.979'.
[  138.550102][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.562998][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.566009][ T8603] bridge_slave_1: entered allmulticast mode
[  138.584327][ T8603] bridge_slave_1: entered promiscuous mode
[  138.775384][ T5883] hsr_slave_0: left promiscuous mode
[  138.778124][ T5883] hsr_slave_1: left promiscuous mode
[  138.784881][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.788017][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.791877][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.794296][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.811974][ T5883] veth1_macvtap: left promiscuous mode
[  138.814038][ T5883] veth0_macvtap: left promiscuous mode
[  138.816611][ T5883] veth1_vlan: left promiscuous mode
[  138.820384][ T5883] veth0_vlan: left promiscuous mode
[  138.838370][ T6255] cdc_ncm 1-1:1.1: bind() failure
[  138.848633][ T6255] usb 1-1: USB disconnect, device number 17
[  139.165551][ T5883] team0 (unregistering): Port device team_slave_1 removed
[  139.192962][ T5883] team0 (unregistering): Port device team_slave_0 removed
[  139.490638][ T8632] binder: 8631:8632 ioctl c00c620f 200000000040 returned -22
[  139.556762][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.584694][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.645726][ T8639] loop0: detected capacity change from 0 to 16
[  139.659090][ T8639] erofs (device loop0): mounted with root inode @ nid 36.
[  139.689499][ T8603] team0: Port device team_slave_0 added
[  139.692754][ T8603] team0: Port device team_slave_1 added
[  139.767776][ T8642] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[  139.791160][ T8642] erofs (device loop0): readahead error at folio 47 @ nid 36
[  139.793786][ T8642] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[  139.797105][ T8642] erofs (device loop0): readahead error at folio 46 @ nid 36
[  139.818702][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.825956][ T8642] erofs (device loop0): readahead error at folio 45 @ nid 36
[  139.833359][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.848879][ T8642] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  139.929239][ T5860] Bluetooth: hci1: command tx timeout
[  140.111740][ T8642] erofs (device loop0): readahead error at folio 43 @ nid 36
[  140.117030][ T8642] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  140.125360][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.132209][ T8642] erofs (device loop0): readahead error at folio 42 @ nid 36
[  140.142060][ T8642] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[  140.146709][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.152139][ T8642] erofs (device loop0): readahead error at folio 41 @ nid 36
[  140.155152][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.172792][ T8642] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[  140.180329][ T8642] erofs (device loop0): readahead error at folio 40 @ nid 36
[  140.185810][ T8642] erofs (device loop0): readahead error at folio 39 @ nid 36
[  140.193624][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.200255][ T8642] erofs (device loop0): readahead error at folio 38 @ nid 36
[  140.216228][ T8642] erofs (device loop0): readahead error at folio 36 @ nid 36
[  140.223502][ T8642] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36
[  140.250080][ T8642] erofs (device loop0): readahead error at folio 31 @ nid 36
[  140.266001][ T8642] erofs (device loop0): readahead error at folio 25 @ nid 36
[  140.276026][ T8642] erofs (device loop0): readahead error at folio 24 @ nid 36
[  140.296305][ T8642] erofs (device loop0): readahead error at folio 19 @ nid 36
[  140.348312][ T8603] hsr_slave_0: entered promiscuous mode
[  140.365931][ T8603] hsr_slave_1: entered promiscuous mode
[  140.563629][ T5883] ------------[ cut here ]------------
[  140.565631][ T5883] WARNING: CPU: 1 PID: 5883 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  140.569124][ T5883] Modules linked in:
[  140.571172][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  140.576827][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.580840][ T5883] Workqueue: netns cleanup_net
[  140.582777][ T5883] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  140.585499][ T5883] Code: e5 8e df f7 4b 83 3c 2c 00 75 19 e8 89 25 7c f7 49 81 fd f8 07 00 00 74 1d e8 7b 25 7c f7 49 83 c5 08 eb c9 e8 70 25 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  140.592520][ T5883] RSP: 0018:ffffc9000393f8b0 EFLAGS: 00010293
[  140.594644][ T5883] RAX: ffffffff8a438470 RBX: ffff8881061d0000 RCX: ffff8880203b1cc0
[  140.597318][ T5883] RDX: 0000000000000000 RSI: ffffffff8d9b6b97 RDI: ffff8881061d0000
[  140.600179][ T5883] RBP: ffffc9000393f9b0 R08: ffffffff8fa37d37 R09: 1ffffffff1f46fa6
[  140.603522][ T5883] R10: dffffc0000000000 R11: fffffbfff1f46fa7 R12: ffff8881061d0000
[  140.606709][ T5883] R13: 0000000000000000 R14: ffff8881061c0000 R15: dffffc0000000000
[  140.609769][ T5883] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  140.612794][ T5883] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.615191][ T5883] CR2: 00007fa777e1b440 CR3: 0000000105ea8000 CR4: 00000000000006f0
[  140.618395][ T5883] Call Trace:
[  140.620335][ T5883]  <TASK>
[  140.621462][ T5883]  ops_undo_list+0x49a/0x990
[  140.623093][ T5883]  ? __pfx_ops_undo_list+0x10/0x10
[  140.624693][ T5883]  ? do_raw_spin_unlock+0x4d/0x240
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  140.630526][ T5883]  cleanup_net+0x4c5/0x800
[  140.632042][ T5883]  ? __pfx_cleanup_net+0x10/0x10
[  140.633997][ T5883]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.636319][ T5883]  ? process_scheduled_works+0x9ef/0x17b0
[  140.638177][ T5883]  ? process_scheduled_works+0x9ef/0x17b0
[  140.640255][ T5883]  process_scheduled_works+0xae1/0x17b0
[  140.642159][ T5883]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.644139][ T5883]  worker_thread+0x8a0/0xda0
[  140.645680][ T5883]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.647769][ T5883]  ? __kthread_parkme+0x7b/0x200
[  140.650302][ T5883]  kthread+0x711/0x8a0
[  140.652020][ T5883]  ? __pfx_worker_thread+0x10/0x10
[  140.654952][ T5883]  ? __pfx_kthread+0x10/0x10
[  140.658252][ T5883]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.660636][ T5883]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.662709][ T5883]  ? __pfx_kthread+0x10/0x10
[  140.664639][ T5883]  ret_from_fork+0x3fc/0x770
[  140.666484][ T5883]  ? __pfx_ret_from_fork+0x10/0x10
[  140.668421][ T5883]  ? __switch_to_asm+0x39/0x70
[  140.670290][ T5883]  ? __switch_to_asm+0x33/0x70
[  140.672137][ T5883]  ? __pfx_kthread+0x10/0x10
[  140.673794][ T5883]  ret_from_fork_asm+0x1a/0x30
[  140.675604][ T5883]  </TASK>
[  140.676697][ T5883] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  140.679076][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  140.683132][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.686338][ T5883] Workqueue: netns cleanup_net
[  140.688087][ T5883] Call Trace:
[  140.689484][ T5883]  <TASK>
[  140.690705][ T5883]  dump_stack_lvl+0x99/0x250
[  140.692591][ T5883]  ? __asan_memcpy+0x40/0x70
[  140.694485][ T5883]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.696601][ T5883]  ? __pfx__printk+0x10/0x10
[  140.698495][ T5883]  vpanic+0x281/0x750
[  140.700114][ T5883]  ? __pfx__printk+0x10/0x10
[  140.702021][ T5883]  ? __pfx_vpanic+0x10/0x10
[  140.703877][ T5883]  ? is_bpf_text_address+0x292/0x2b0
[  140.706044][ T5883]  panic+0xb9/0xc0
[  140.707599][ T5883]  ? __pfx_panic+0x10/0x10
[  140.709425][ T5883]  __warn+0x31b/0x4b0
[  140.711082][ T5883]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  140.713262][ T5883]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  140.715455][ T5883]  report_bug+0x2be/0x4f0
[  140.717225][ T5883]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  140.719332][ T5883]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  140.721120][ T5883]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  140.722884][ T5883]  handle_bug+0x84/0x160
[  140.724290][ T5883]  exc_invalid_op+0x1a/0x50
[  140.725787][ T5883]  asm_exc_invalid_op+0x1a/0x20
[  140.727406][ T5883] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  140.729375][ T5883] Code: e5 8e df f7 4b 83 3c 2c 00 75 19 e8 89 25 7c f7 49 81 fd f8 07 00 00 74 1d e8 7b 25 7c f7 49 83 c5 08 eb c9 e8 70 25 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  140.735685][ T5883] RSP: 0018:ffffc9000393f8b0 EFLAGS: 00010293
[  140.737962][ T5883] RAX: ffffffff8a438470 RBX: ffff8881061d0000 RCX: ffff8880203b1cc0
[  140.740869][ T5883] RDX: 0000000000000000 RSI: ffffffff8d9b6b97 RDI: ffff8881061d0000
[  140.743755][ T5883] RBP: ffffc9000393f9b0 R08: ffffffff8fa37d37 R09: 1ffffffff1f46fa6
[  140.746679][ T5883] R10: dffffc0000000000 R11: fffffbfff1f46fa7 R12: ffff8881061d0000
[  140.749337][ T5883] R13: 0000000000000000 R14: ffff8881061c0000 R15: dffffc0000000000
[  140.751802][ T5883]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  140.753570][ T5883]  ops_undo_list+0x49a/0x990
[  140.755061][ T5883]  ? __pfx_ops_undo_list+0x10/0x10
[  140.756671][ T5883]  ? do_raw_spin_unlock+0x4d/0x240
[  140.758321][ T5883]  cleanup_net+0x4c5/0x800
[  140.759726][ T5883]  ? __pfx_cleanup_net+0x10/0x10
[  140.761315][ T5883]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.763010][ T5883]  ? process_scheduled_works+0x9ef/0x17b0
[  140.764851][ T5883]  ? process_scheduled_works+0x9ef/0x17b0
[  140.766706][ T5883]  process_scheduled_works+0xae1/0x17b0
[  140.768851][ T5883]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.771148][ T5883]  worker_thread+0x8a0/0xda0
[  140.772946][ T5883]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.775341][ T5883]  ? __kthread_parkme+0x7b/0x200
[  140.777027][ T5883]  kthread+0x711/0x8a0
[  140.778419][ T5883]  ? __pfx_worker_thread+0x10/0x10
[  140.780079][ T5883]  ? __pfx_kthread+0x10/0x10
[  140.781563][ T5883]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.783217][ T5883]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.784958][ T5883]  ? __pfx_kthread+0x10/0x10
[  140.786458][ T5883]  ret_from_fork+0x3fc/0x770
[  140.787944][ T5883]  ? __pfx_ret_from_fork+0x10/0x10
[  140.789689][ T5883]  ? __switch_to_asm+0x39/0x70
[  140.791273][ T5883]  ? __switch_to_asm+0x33/0x70
[  140.792866][ T5883]  ? __pfx_kthread+0x10/0x10
[  140.794389][ T5883]  ret_from_fork_asm+0x1a/0x30
[  140.795990][ T5883]  </TASK>
[  140.797659][ T5883] Kernel Offset: disabled
[  140.799101][ T5883] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:48:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139ee0 RBP=ffffffff8172c195 RSP=ffffc9000471e158
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000471e318 R11=ffffffff81ac36c0
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5aec RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555576aea500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff91d0acc8 CR3=0000000124c4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 0000000000000000 XMM05=0000000000000000 00007fd704c12e53
XMM06=0000000000000000 00007fd704c12e4d XMM07=0000000000000000 00007fd704c12e61
XMM08=0000000000000000 00007fd704c12ee7 XMM09=0000000000000000 00007fd704c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000393f050
R8 =ffff88801ff88237 R9 =1ffff11003ff1046 R10=dffffc0000000000 R11=ffffffff854efc10
R12=dffffc0000000000 R13=ffffffff99af98e5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efc8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa777e1b440 CR3=0000000105ea8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=00000000000002aa 0000000000002e2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=00000000000002c1 000000000000312e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
