last executing test programs:

2m48.903885126s ago: executing program 1 (id=198):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000002480)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18)

2m48.709863471s ago: executing program 1 (id=201):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000740)=[{&(0x7f0000000040)="d6", 0x1}], 0x1)

2m46.865224847s ago: executing program 1 (id=218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x50040)

2m46.653444582s ago: executing program 1 (id=221):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

2m45.909480101s ago: executing program 1 (id=227):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)

2m45.15279804s ago: executing program 1 (id=233):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
fcntl$notify(r0, 0x402, 0x80000030)
r1 = syz_open_procfs(0x0, &(0x7f0000000840)='net\x00')
getdents64(r1, &(0x7f0000000900)=""/4096, 0x1000)

2m44.73533206s ago: executing program 32 (id=233):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
fcntl$notify(r0, 0x402, 0x80000030)
r1 = syz_open_procfs(0x0, &(0x7f0000000840)='net\x00')
getdents64(r1, &(0x7f0000000900)=""/4096, 0x1000)

1m16.132481115s ago: executing program 3 (id=1061):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m15.94648479s ago: executing program 3 (id=1064):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @my=0x1, 0x1, 0x0, 0x9, 0xfffffffffffffff9})

1m15.809035023s ago: executing program 3 (id=1065):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f00000003c0)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e36")

1m15.725032085s ago: executing program 3 (id=1068):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f0000005800)={[{@adaptive_mode}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5533, &(0x7f00000002c0)="$eJzs3EtvG1UUAOBjp+mbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abm1PFLtuyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlVDjxKT5Pml85t65c+beURTpzFgO4NBayn77pRJn4kRELETE6Yhiv1JuhaspvBARZyOi+tBWKfv/6jgaEScj4sw0ecpZKQ99cX5y7vLPb//67ffHjpz68psf5rdqYEaqT3riSxExWE/7DwYp5t0U75b9zUmviINLkzKmA4N7ZTtP8UFnrcjwoLk9rlnEi900Pl+/P5rGO/1maxq7vTtF//owXXA06W7nKU6429wo2u3OWhF7o7yI3a00r82t9L9tazROedplvo+L9DEeb8fU39nspPWs3ytiazgu+1PevN3ZnMZJGcvLRSvvt4t5rD3pXf7fe/Gd3vD+ZjbpbIx6+TC7XG+8XG9cqTU28nZn3LlUaw7aVy5ly93+dFht3GkOrnbzvNvv1Fv5YCVb7rZatUYjW77WWes1h1mjUb9Yv1C7vFLunc/euPl+1m9ny9P4Wm94f9zrj7I7+UaWzljJVusXX1nJzjWyd2/cym7dvn79xq33Prz2wc1Xb7z1ejnoH9PKllcvrK7WGhdqq42V3d2AA7X+T8tJz3D9sCuVeU8A4OBR/wPzsHf1/8btiL2v/0P9PxMHqv497PX/HqwfdkX9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwaP24+NWbxc5Sap8q+58pu54r25WIqEbEH/9iIY7uyLlQ5ll8zPjFR+bwXSWKDNNrHCu3kxFxtdx+f3av7wIAAAA8vb7+5OznqVpPH0vznhD7KT20qZ7+aEb5KhGxuPTTjLJVpx/PzyhZ8fd9JDZnlK14gHV8RsnSI7cjs8r2nyzsCMcfCpUUqo+eMbPVAgAAc7OzEtjfKgQAAID99Nljj9zb13mwzyqx/Spz+11w8c37v1/2nUhtr/4AAADg4KrMewIAAADAnivqf7//BwAAAE+39Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7NxLbtpAHAfgvw0u9KWiqvtepTs4Ro/QZZcVB+glOAK5Qi7AGcguR4ggwuOgEJEH8Rgr0fdJ9mDL/GaGx2JmpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALl1Vy9nFv5//2+Zstu3k6Q0AAABwzLpazuoXk3T9ubn/tbn1vbkuIqKMiGNj90F8OMgcNDnVI89XD9pwGVEn7OoYNceniPiVjm186/pTAAAAgHdpuDut5otpGq2n06TvVtHaCd9hmrQpv/zOVHUREdXkOlNaucv7kSms/n0P42+mtHoCa5wpLE25DXOlvUj9d9/P2o3vFUUqyqffn63vAADAGQ0OivOOQgAAADinP303gC58fPaJIu6WMvdLgaNUjA8iLPYBAADA21X03QAAAACgc/X4/5T9/6Kf/f/ixv5/AAAA8Gpp/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6tK6Ws9V8MW2bs9m2k6c3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMv+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X38A4gjohiAEEgMs9HotLd0QAyhi4E9AitJrCb3yo81AqwopCxvK3AXBiBASKGz9B5i6IbVSl7J1uKFILCyH7LNzToPEpVHsS/L5SM/v64vj9322FOXr5wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS6L1pnGSbziSOi8/uPb61kvX3n+gzdzYeLGYti6M6kz4YXqnuRN3mEgEAAODoSMr6PoTwMN1cyvq4k9f/aXlMVvN//9wkLuv5J+v+si9r/6z99uujl7YG6kzGyU56aXU4OL0zldb+zXK+Pf+/R7TyK58/e0nyGxJ/uP7iKM2vZ/Tt3bvvt/PwWB3ZAgBP41TZF0H5+1DW95tMDIAjo1UpvMv6P+k0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHUbr4ZkyjkIIi61pnLn/+NbKf/V3Nh4slu387dsb1XNmp0hDCJdWh4PTNc5l3l2/cfPK8nA4uFZ/8GoIoanR3y2mf+XjGQ4OoZHrs1/BP+PxeFffdbz5nPcUxMXNnpd8DkbQ4A8lAAAOpbRoWV3/MN1cyj6LFkIY/7C9/n+jEocZ6/9Hn5y/Vx2rWv/3a5vh/OutXf2id/3GzbdWry5fHlwefPb2mf47/bMXzp270MuflfQ8MQEAAGBv2kWr1v/xws71/5OVOMxY/3/5Xf/r6Uh/5Fv1/07TRb+mMwEAADjaXnjt77+iyn676KN2O3y1vLZ2rT/Zbu2fmWwbSndXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//1opCqA==")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m14.72418581s ago: executing program 3 (id=1076):
r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0x3, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0)

1m14.017087098s ago: executing program 3 (id=1077):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1004801, &(0x7f0000000140)=ANY=[], 0x1, 0x224, &(0x7f0000000340)="$eJzsmb9rFFEQx7/v7d7uGUWw0MLmLAJGMHu7eyppLGIrgpCIWh5mDdFNTi5X5AIWwcbGP8B/RCGVhZ2NWFgJ/gDBwpQ2Cj55PzY7l70kS0KwyHyKx/fNzps3M5ebhRwYhjm2fPv668uLGzPzlwGcwiRCZ//hlT6S+H966TWcfLty+ummlY3t5wKAUqW/v8/9AU7izaynL7eo32qnj1JKzUNi0u3vQOKS03chEHnE0Z3OIHDfmR8ZbTPpnXDGPBMPevnCw6U8i/WS6CXVpXYANZL/1obAAoCmu0KQ3FaH64+7OdC3Is8K0VDFPZVHdYQ+WlhsoM9j+2fym5W4Tlqgi7j3/NmG3kfOHpP+JZBInO5AYM7pGYSIoqjltllC6j/vl/E9/bGN1F+3tmY957DsWniw9llxZnpPn6KIw1xRR/xVRxI5ONBHcDRC57G/s/7iUItsVU8FNeLQJtRzLgaUTWOnjyBftuG5rc131Tjf/2t7DyfM4AJQefRhIs9vUcv7m06cHYlzgfaHiIB2ddyfhJ0fwgcukvnkk7dCe7D8pL06XJ9eWu4uZovZSpp2rsVX4vhq2jaz2a5jZ5+N3zTzaYLEb+ziG4gAa93BoJ+sAYN+sr1P7VoWgLlXvZ/mjDTzT2Lqj1LF68WUHY6/w7z/QntOmN2Ut2vyDMMwDMMwDMMwDMMwDMMwe9D6WLHgNdz/KkXxm1gVP71tvP8FAAD//zPPXKY=")
open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

1m13.595066709s ago: executing program 33 (id=1077):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1004801, &(0x7f0000000140)=ANY=[], 0x1, 0x224, &(0x7f0000000340)="$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")
open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

56.003871926s ago: executing program 4 (id=1217):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x2, 0xa1b, &(0x7f0000001f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)

55.630196186s ago: executing program 4 (id=1222):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00'})
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)={0x200})

55.343234453s ago: executing program 4 (id=1224):
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
unshare(0x6020400)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4)

55.193943116s ago: executing program 4 (id=1227):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

53.606978096s ago: executing program 4 (id=1243):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x9e1c, 0xc97, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)

52.159710582s ago: executing program 4 (id=1251):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@host}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff})

51.716618273s ago: executing program 34 (id=1251):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@host}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff})

46.047086974s ago: executing program 5 (id=1296):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240), 0x7, 0x504, &(0x7f0000001180)="$eJzs3E9sVMcdAODfe15jA6a4lNLi0mJKq1qtaoOhhUOliqqVemilKOSQHC3bIOIFR7YjxRaCRYrIMULKNYpyzDWHXJMol4RTpFzJMRckFHEBctro7b5d767Xi/+tHezvk9aemZ19M7Pz5u28Ga8D2LOGsx9JxEBEPIiIwxGRtmYYrv56+vjm5LPHNyejVC5f/j7JXhZPsnguqfxM42AeGUkj0reT2hNN5heXZnqjOD2Xx8cWrr8xNr+49Ndr1yeuTl+dvjF+8eL5c2cv/H38b+tvVJvysnY9Gbo1e+L4f1+79//JQi29P//d2I6tMhzD7apS8cetLmyHHWoIJ4VOOf/Z/cqwZtn5n3VXb2X8H46e6Nh5wC5SLpfLfas/XSq3urMiBXhhJdHp2XT7KgJss9oHfXb/W3u0mwjs6870Y8c9ulS9Acra/TR/RJysJKYRMZLfwB/qUvnDUYhXSz98kD2yeKEL6xAAAI0+u1SbCbbM/wYjjjXk+1m+hzIYET+PiCMR8YuIOBoRv4xq3l9FxK9bjt8TEeUO5Q+3xFfOP9OHm2thZ9n87x/53tby/C8ad8EGe/LYoYjahHn6TP6ejERv35VrxemzHcr4/N/fvLsyNSlF3v7a/C97ZOXX5oJ5PR4WWhbopiYWJjbX6mWP7kQMFVrbnxQikvpOQDYFPh4RQ1+8v+bjDjaEr/35oxP1SG9zvue3v+Krk+0K2YKtivKHEX+q9n8pmvp/eecu6bw/OdYfxekzY9lZcKZtGfe/vvtSS1L94M9t/yfftR7uPxc+vZyPrM3L+v9Aw/mfpR1sruJgEpHMLy7NTBSL03Pzqxzo9upl3P32nVXvaTZ6/u9LXqmEa/elb00sLMydjdiX/G9l+vjya2vx7HeUqu0fOd1+/B/JX5O9E7+JiOwk/m1E/C6qd4jDUb59KiJ+HxGnV29+fPmvP7y+8fZ3V9b+qbbXv6b+j+X+X1yayVLnmlImitXLWcRySj3QM3PqwbOh9uWvrf/PV0IjeUr761/StNW+shbtA5t8+wAAAOCFkEbEQMNa0kCk6ehodQ3oaBxIi7PzC39JZt+8MVX9jsBgQ97qenBvUlv/HGyIj7fEz+Xrxu/17K/ERydni1M71Gag6mBlzCfpaP1akKajtS/FbM0SM/BT5is/sHc9b/wfu7dNFQG2nc9/2KvmbjVESqtkKvlLGdid1vL5by0Qdqd247/D33O7YYBdomw4w562nvFfaPr3jvcPd6M+wPYpxMv1cLqjNQG2m/k/7Elr+pL8hgPlvvZP9cfKzNHf+YA9sbFq7G9T1o4EspnVjpS+fyOvqv03hVXzRLq+A/ZFPVA/8kb69Mqm35a0Cyd/Od8fW0PmvvUc+eNtGaftAp2vG+MD3bgaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbL0fAwAA//+1kNRC")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1)
pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe)

45.79764757s ago: executing program 5 (id=1297):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
unshare(0x6020400)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
pselect6(0x40, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)

45.632253035s ago: executing program 5 (id=1298):
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000000c0)={0x1ff, 0x6, 0x7, 0xef2, 0xce, 0xa})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f00000000c0))

45.548836527s ago: executing program 5 (id=1299):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235222bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856a24cedd963c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75474939c664ff1849f8fbc403959f9c2de4b235261aba126be33a1762054cf2fad7dfc679c611c046f5764cfd3b84268cf21e9b8cd374866e2d55c4bfdd180a43e4fae7f5ddab3469cda8da12808566a285524ac700c24595dcd5c7784b30a4baafe80e10cecfe2393ecc927520408071c6901003dd15417429bfa90a54f501dd193865ebbb27e85c50605c45115595b04c410c2b2d6ef11e53872cba8091c88311d00c175bcf0a780265fe60228a640a746847d0138dc9f673fac8658d57ebaab4212bdcb1625a73bbda3c4a6e4282480077305b6afa3ebbcd525e588bf55760e556f1211a02cfe2e533ce915d86d62374332773744fcc8fdaf51812edd747c93b23bbe70d"], 0x1, 0x553a, &(0x7f0000006040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

43.02413676s ago: executing program 5 (id=1308):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x468a, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000200)=@can={{0x3, 0x0, 0x1}, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x20090804}, 0x4054)

41.534644836s ago: executing program 5 (id=1312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

40.913701062s ago: executing program 35 (id=1312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

35.381179019s ago: executing program 0 (id=1335):
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0], 0x1})
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4})
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})

35.143775096s ago: executing program 0 (id=1338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000030301"], 0x38}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040)

34.882753432s ago: executing program 0 (id=1341):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef01010100000000000000000ffe000086dd00002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0)

34.682937667s ago: executing program 0 (id=1345):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[])

34.199645459s ago: executing program 0 (id=1348):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@loopback, @broadcast, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x1, 0x7a, 0x6b}, 0x3c)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4)

33.637765663s ago: executing program 0 (id=1349):
r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r0, 0x2)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1})
keyctl$read(0xb, r0, &(0x7f0000000280)=""/182, 0xb6)

33.047398488s ago: executing program 36 (id=1349):
r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r0, 0x2)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1})
keyctl$read(0xb, r0, &(0x7f0000000280)=""/182, 0xb6)

2.988781066s ago: executing program 2 (id=1530):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x5, 0x7, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf68})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./bus\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000000)='./bus\x00')

2.261043494s ago: executing program 2 (id=1536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x20004800)

2.205548596s ago: executing program 8 (id=1537):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6, 0x3032, 0xffffffffffffffff, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write$binfmt_script(r0, &(0x7f0000000cc0), 0xfd45)

1.939241982s ago: executing program 2 (id=1540):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
listen(r0, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4)

1.770286496s ago: executing program 2 (id=1542):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}})
r0 = socket$inet(0x2, 0x3, 0x30)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

1.769648726s ago: executing program 6 (id=1543):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x60000, 0x0)
read(r0, 0x0, 0x0)

1.61654457s ago: executing program 2 (id=1545):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})

1.497052703s ago: executing program 6 (id=1546):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0xc})

1.442252525s ago: executing program 7 (id=1547):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}, 0xff}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x60054841}, 0x4000000)

1.317239568s ago: executing program 6 (id=1548):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
close(0x3)

1.164261331s ago: executing program 7 (id=1549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000300)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="00112233445566778899aabb0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.163642141s ago: executing program 8 (id=1550):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x79cf, 0x4)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)

1.038975544s ago: executing program 6 (id=1551):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x2, {{0x2, 0xfffc, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2=0x64010102}}]}, 0x110)

971.788386ms ago: executing program 7 (id=1552):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x4004, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

867.214559ms ago: executing program 8 (id=1553):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000a80)={&(0x7f0000005000/0x1000)=nil, &(0x7f000000d000/0x2000)=nil, 0x1000})

865.325869ms ago: executing program 2 (id=1554):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00001a2000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x1)
mbind(&(0x7f0000590000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x9, 0x28, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x0)

745.045202ms ago: executing program 6 (id=1555):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)='20000000 2g', 0xb)

743.986232ms ago: executing program 7 (id=1556):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

547.175977ms ago: executing program 8 (id=1557):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
unshare(0x22020600)
connect$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x40, @none}, 0xe)

479.340839ms ago: executing program 6 (id=1558):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/53, 0x35}, {0x0, 0x500}], 0x2)

446.471599ms ago: executing program 7 (id=1559):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495ca41e818d4808b18592610bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a76127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb697ab825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cfd5099a59147bcc872fafe7565f98c3c3edb83c96b0aff30779783467d4348d5e28d9afd5e77ce5dabc1c4d5d790339490703d9050ef8d919d5d5f71a26bd9b72ea53933eecb6cd8a09bc67f5a6b0450fbfcce6837ab696975ba8387815bfa1c497f37ed8b9151bb1105d5efbf3b5034e5bdde5fdb60f996c1fcf75201c52d47ab3b31a4112d6cb61c3beaeb97d03744cfb01409dd1b1258e0d5856df535c241017509a193043296e202834cc4eb50417c56f93093ca61a9c1373904faa2564ad469d8329dd1256f9648af69d6007d8bca7b566cee8a263c07021e9f71b82c07ca8fbe3", 0x3f3}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa853", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0)

324.822582ms ago: executing program 8 (id=1560):
r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000004c0)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

272.327713ms ago: executing program 7 (id=1561):
mkdirat(0xffffffffffffff9c, &(0x7f00000022c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0xebb7, 0x6})

0s ago: executing program 8 (id=1562):
r0 = io_uring_setup(0x3c91, &(0x7f0000000300)={0x0, 0x84d6e9, 0x1, 0x2, 0x13b})
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
close_range(r0, 0xffffffffffffffff, 0x2)
sendfile(r1, r1, 0x0, 0x80000000)

kernel console output (not intermixed with test programs):

  T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  170.560190][    T8] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  170.571303][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  170.582330][    T8] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  170.591737][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.600503][    T8] usb 5-1: Product: syz
[  170.604865][    T8] usb 5-1: Manufacturer: syz
[  170.615075][    T8] usb 5-1: SerialNumber: syz
[  170.626218][    T8] usb 5-1: config 0 descriptor??
[  171.044743][    T8] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  171.256813][    T8] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  171.287806][    T8] gs_usb: probe of 5-1:0.0 failed with error -22
[  171.463330][    T8] usb 5-1: USB disconnect, device number 7
[  171.697641][ T7940] loop3: detected capacity change from 0 to 256
[  171.725579][ T7940] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  171.790726][ T5813] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  171.997260][ T5813] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  171.998388][ T7949] can0: slcan on ptm0.
[  172.031084][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.054766][ T5813] usb 1-1: config 0 descriptor??
[  172.081203][ T5813] cp210x 1-1:0.0: cp210x converter detected
[  172.130934][ T7949] can0 (unregistered): slcan off ptm0.
[  172.151155][ T7949] Falling back ldisc for ptm0.
[  172.479429][ T5813] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  172.510526][ T5813] usb 1-1: cp210x converter now attached to ttyUSB0
[  172.720462][ T5763] usb 1-1: USB disconnect, device number 9
[  172.780949][ T5763] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  172.829881][ T5763] cp210x 1-1:0.0: device disconnected
[  173.318503][ T7992] loop3: detected capacity change from 0 to 64
[  173.593790][ T7998] loop4: detected capacity change from 0 to 256
[  173.687349][ T7998] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  174.483904][ T8001] loop3: detected capacity change from 0 to 32768
[  174.571903][ T8001] JBD2: Ignoring recovery information on journal
[  174.713240][ T8001] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  175.028332][ T8034] loop4: detected capacity change from 0 to 512
[  175.042893][ T5782] ocfs2: Unmounting device (7,3) on (node local)
[  175.098106][ T8034] EXT4-fs (loop4): orphan cleanup on readonly fs
[  175.113739][ T8034] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  175.144121][ T8034] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  175.173707][ T8034] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #13: comm syz.4.773: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  175.235123][ T8034] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.773: couldn't read orphan inode 13 (err -117)
[  175.276487][ T8034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  175.340184][ T8034] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  175.376890][ T8034] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  175.455466][ T6427] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.995460][ T8070] loop0: detected capacity change from 0 to 512
[  176.014310][ T8070] EXT4-fs (loop0): orphan cleanup on readonly fs
[  176.035000][ T8070] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  176.057840][ T8070] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  176.065987][ T8070] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #13: comm syz.0.781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  176.086254][ T8070] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.781: couldn't read orphan inode 13 (err -117)
[  176.100647][ T8070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  176.138526][ T8070] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  176.150160][    T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  176.154904][ T8070] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  176.204080][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.340053][    T8] usb 3-1: Using ep0 maxpacket: 32
[  176.354958][    T8] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  176.370861][    T8] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  176.384928][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  176.400296][    T8] usb 3-1: config 1 has no interface number 0
[  176.406451][    T8] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  176.439223][    T8] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  176.457437][    T8] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  176.466909][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.494776][    T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  176.606796][ T8081] loop4: detected capacity change from 0 to 4096
[  176.629621][ T8081] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  176.736893][ T8064] loop2: detected capacity change from 0 to 512
[  176.824725][ T8064] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.779: bg 0: block 16: invalid block bitmap
[  176.940467][ T8064] EXT4-fs (loop2): Remounting filesystem read-only
[  176.947570][ T8064] EXT4-fs (loop2): 1 truncate cleaned up
[  176.975450][ T8064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.025162][    T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  177.100577][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  177.179258][ T8104] loop4: detected capacity change from 0 to 128
[  177.239226][ T8104] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  177.268956][ T8104] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  177.293709][    T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  177.303623][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.323467][    T9] usb 1-1: config 0 descriptor??
[  177.343574][    T9] cp210x 1-1:0.0: cp210x converter detected
[  177.418685][ T6427] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.548409][ T5813] usb 3-1: USB disconnect, device number 8
[  177.555896][ T5813] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  177.778518][    T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  177.812694][ T5778] Bluetooth: hci2: command tx timeout
[  177.828925][    T9] usb 1-1: cp210x converter now attached to ttyUSB0
[  178.028558][ T1202] usb 1-1: USB disconnect, device number 10
[  178.056215][ T1202] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  178.094124][ T1202] cp210x 1-1:0.0: device disconnected
[  178.176976][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.481828][ T8135] loop2: detected capacity change from 0 to 128
[  178.525018][ T8135] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.552901][ T8139] can0: slcan on ptm0.
[  178.571065][ T8135] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  178.612447][ T8139] can0 (unregistered): slcan off ptm0.
[  178.620618][ T8139] Falling back ldisc for ptm0.
[  178.741149][ T8143] loop0: detected capacity change from 0 to 128
[  178.800771][ T8146] overlayfs: workdir and upperdir must be separate subtrees
[  178.892640][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  179.745023][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'.
[  179.879405][ T8177] ������: renamed from vlan0 (while UP)
[  180.330612][ T8163] loop3: detected capacity change from 0 to 40427
[  180.343369][ T8163] F2FS-fs (loop3): invalid crc value
[  180.387804][ T8163] F2FS-fs (loop3): Found nat_bits in checkpoint
[  180.392872][ T8195] loop4: detected capacity change from 0 to 256
[  180.567147][ T8163] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  181.200208][ T8214] batadv_slave_1: entered promiscuous mode
[  181.215984][ T8214] batadv_slave_1: left promiscuous mode
[  181.752303][ T8232] loop0: detected capacity change from 0 to 4096
[  181.765020][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  181.769048][ T8234] loop4: detected capacity change from 0 to 512
[  181.813789][ T8234] EXT4-fs (loop4): Test dummy encryption mode enabled
[  181.834789][ T8234] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #11: comm syz.4.849: casefold flag without casefold feature
[  181.849381][ T8234] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.849: couldn't read orphan inode 11 (err -117)
[  181.850421][ T5816] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  181.888869][ T8234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.979539][    T9] usb 4-1: Using ep0 maxpacket: 32
[  182.005900][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  182.030769][    T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  182.061387][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  182.086552][    T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  182.107431][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.116552][    T9] usb 4-1: Product: syz
[  182.126407][ T5816] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  182.135706][    T9] usb 4-1: Manufacturer: syz
[  182.140560][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.150110][    T9] usb 4-1: SerialNumber: syz
[  182.161326][    T9] usb 4-1: config 0 descriptor??
[  182.177207][ T5816] usb 3-1: config 0 descriptor??
[  182.204375][ T5816] cp210x 3-1:0.0: cp210x converter detected
[  182.579377][ T8240] loop0: detected capacity change from 0 to 32768
[  182.601421][    T9] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  182.629417][ T5816] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  182.666595][ T8240] find_entry called with index = 0
[  182.669398][ T5816] usb 3-1: cp210x converter now attached to ttyUSB0
[  182.696418][ T8240] read_mapping_page failed!
[  182.713352][ T8240] ERROR: (device loop0): txCommit: 
[  182.713352][ T8240] 
[  182.751281][ T6427] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.813608][    T9] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  182.856410][    T9] gs_usb: probe of 4-1:0.0 failed with error -22
[  182.961684][    T9] usb 3-1: USB disconnect, device number 9
[  182.983627][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  183.028640][    T9] cp210x 3-1:0.0: device disconnected
[  183.076949][ T5813] usb 4-1: USB disconnect, device number 12
[  183.260124][ T5816] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  183.442635][ T5816] usb 1-1: Using ep0 maxpacket: 8
[  183.449542][ T5816] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30
[  183.460571][ T5816] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  183.476418][ T5816] usb 1-1: config 0 interface 0 has no altsetting 0
[  183.483581][ T5816] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  183.492770][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.504598][ T5816] usb 1-1: config 0 descriptor??
[  183.853968][ T5763] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  183.877886][ T5763] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  183.947632][ T5813] IPVS: starting estimator thread 0...
[  183.957781][ T5816] nintendo 0003:057E:200E.0006: item fetching failed at offset 7/37
[  183.981258][ T5816] nintendo 0003:057E:200E.0006: HID parse failed
[  183.990358][ T5816] nintendo 0003:057E:200E.0006: probe - fail = -22
[  183.999817][ T5816] nintendo: probe of 0003:057E:200E.0006 failed with error -22
[  184.050324][ T8264] IPVS: using max 17 ests per chain, 40800 per kthread
[  184.066114][ T8267] loop3: detected capacity change from 0 to 2048
[  184.094090][ T8267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.153015][ T5763] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  184.223695][ T5813] usb 1-1: USB disconnect, device number 11
[  184.310153][ T8269] loop4: detected capacity change from 0 to 1024
[  184.663076][ T8259] ceph: No mds server is up or the cluster is laggy
[  184.671025][ T5816] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  184.927232][ T8283] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  185.553666][ T8313] loop2: detected capacity change from 0 to 1024
[  185.567044][ T8313] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  185.580112][ T5813] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  185.700234][ T5814] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  185.806401][ T5813] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  185.824413][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.856646][ T5813] usb 1-1: Product: syz
[  185.864661][ T5813] usb 1-1: Manufacturer: syz
[  185.869320][ T5813] usb 1-1: SerialNumber: syz
[  185.897389][ T5813] rtl8150 1-1:1.0: Interface 0 is not authorized for usage
[  185.915236][ T5813] usbtest 1-1:1.0: Interface 0 is not authorized for usage
[  185.923190][ T5814] usb 5-1: Using ep0 maxpacket: 8
[  185.931059][ T5814] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30
[  185.953061][ T5814] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  185.978933][ T5814] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.986394][ T5814] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  186.000615][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.020929][ T5814] usb 5-1: config 0 descriptor??
[  186.045402][   T28] audit: type=1400 audit(2000000349.688:12): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8324 comm="syz.3.889" name="unknown" offset=28
[  186.169598][ T5778] Bluetooth: hci1: unknown advertising packet type: 0xff
[  186.169674][ T5778] Bluetooth: hci1: unknown advertising packet type: 0xfa
[  186.170834][ T5813] usb 1-1: USB disconnect, device number 12
[  186.179074][ T5778] Bluetooth: hci1: unknown advertising packet type: 0x09
[  186.190926][ T5778] Bluetooth: hci1: unknown advertising packet type: 0x05
[  186.198899][ T5778] Bluetooth: hci1: Dropping invalid advertising data
[  186.214008][ T5778] Bluetooth: hci1: Malformed LE Event: 0x02
[  186.267593][ T8331] netlink: 'syz.3.891': attribute type 2 has an invalid length.
[  186.491301][ T5814] nintendo 0003:057E:200E.0007: item fetching failed at offset 7/37
[  186.508730][ T5814] nintendo 0003:057E:200E.0007: HID parse failed
[  186.548107][ T5814] nintendo 0003:057E:200E.0007: probe - fail = -22
[  186.563904][ T5814] nintendo: probe of 0003:057E:200E.0007 failed with error -22
[  186.684636][ T8333] loop2: detected capacity change from 0 to 32768
[  186.724059][ T8333] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  186.749838][ T5816] usb 5-1: USB disconnect, device number 8
[  186.805928][ T8333] XFS (loop2): Ending clean mount
[  186.827840][ T8333] XFS (loop2): Quotacheck needed: Please wait.
[  186.908377][ T8333] XFS (loop2): Quotacheck: Done.
[  187.075763][ T5773] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  187.362630][   T28] audit: type=1400 audit(2000000351.008:13): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8356 comm="syz.0.900" name="unknown" offset=28
[  187.454791][ T8361] loop4: detected capacity change from 0 to 2048
[  187.506227][ T8361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.885229][ T5816] IPVS: starting estimator thread 0...
[  187.990519][ T8379] IPVS: using max 17 ests per chain, 40800 per kthread
[  188.110105][ T5763] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  188.303881][ T5763] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  188.314610][ T5763] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  188.325093][ T5763] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  188.335267][ T5763] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  188.346598][ T5763] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  188.361974][ T5763] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  188.377572][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  188.389657][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'.
[  188.394206][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'.
[  188.399094][ T5763] usb 4-1: Product: syz
[  188.415145][ T5763] usb 4-1: Manufacturer: syz
[  188.434962][ T5763] cdc_wdm 4-1:1.0: skipping garbage
[  188.440667][ T5763] cdc_wdm 4-1:1.0: skipping garbage
[  188.447826][ T5763] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  188.457739][ T5763] cdc_wdm 4-1:1.0: Unknown control protocol
[  188.633863][ T8407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.670032][ T8407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.700000][ T8407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.729990][ T8407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.750357][ T8407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.780119][ T8407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.800042][ T8407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.820049][ T8407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.851646][ T8407] ipvlan2: entered allmulticast mode
[  188.857016][ T8407] batadv_slave_1: entered allmulticast mode
[  188.873616][ T8407] batman_adv: batadv0: Adding interface: ipvlan2
[  188.890317][ T8407] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.917006][    C0] cdc_wdm 4-1:1.0: Unexpected error -71
[  188.922693][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  188.929328][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  188.932958][ T8407] batman_adv: batadv0: Interface activated: ipvlan2
[  188.938082][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  188.948650][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  188.955379][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  188.962024][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  188.968817][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  188.975457][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  188.982003][ T5763] usb 4-1: USB disconnect, device number 13
[  189.207655][ T8405] loop2: detected capacity change from 0 to 32768
[  189.286534][ T8405] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  189.382319][ T8405] XFS (loop2): Ending clean mount
[  189.572638][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  189.919288][ T8429] loop4: detected capacity change from 0 to 32768
[  189.972107][ T8429] find_entry called with index = 0
[  189.977909][ T8429] read_mapping_page failed!
[  189.983142][ T8429] ERROR: (device loop4): txCommit: 
[  189.983142][ T8429] 
[  190.060405][ T5815] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  190.281995][ T5815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.300168][ T5815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.320342][ T5815] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  190.329447][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  190.348818][ T5815] usb 4-1: SerialNumber: syz
[  190.587818][ T5815] usb 4-1: 0:2 : does not exist
[  190.642388][ T5815] usb 4-1: USB disconnect, device number 14
[  190.777408][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  190.891760][ T8445] loop4: detected capacity change from 0 to 40427
[  190.917117][ T8445] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  190.945855][ T8445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  190.972706][ T8445] F2FS-fs (loop4): Found nat_bits in checkpoint
[  191.104285][ T8445] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  191.111647][ T8445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  191.168411][ T8445] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  191.418832][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'.
[  191.650154][ T5816] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  191.860709][ T5816] usb 1-1: Using ep0 maxpacket: 16
[  191.875243][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short
[  191.891931][ T5816] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  191.914562][ T5816] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  191.930129][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.958632][ T5816] usb 1-1: Product: syz
[  191.963377][ T5816] usb 1-1: Manufacturer: syz
[  191.968021][ T5816] usb 1-1: SerialNumber: syz
[  192.010223][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  192.214312][ T5816] usbtest 1-1:1.0: Interface 0 is not authorized for usage
[  192.226525][    T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  192.237212][ T5816] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage
[  192.245235][    T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  192.264506][ T5816] usbtest 1-1:1.1: Interface 1 is not authorized for usage
[  192.277601][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  192.288031][ T5816] snd-usb-audio 1-1:1.1: Interface 1 is not authorized for usage
[  192.291475][ T8478] netlink: 'syz.4.949': attribute type 5 has an invalid length.
[  192.296748][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  192.323018][ T5816] usbtest 1-1:1.2: Interface 2 is not authorized for usage
[  192.333328][ T5816] snd-usb-audio 1-1:1.2: Interface 2 is not authorized for usage
[  192.341500][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  192.365190][    T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  192.380062][    T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  192.388144][    T9] usb 3-1: Product: syz
[  192.400163][    T9] usb 3-1: Manufacturer: syz
[  192.413135][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  192.418401][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  192.452534][    T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  192.458550][    T9] cdc_wdm 3-1:1.0: Unknown control protocol
[  192.845707][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'.
[  192.896200][    C0] cdc_wdm 3-1:1.0: Unexpected error -71
[  192.901889][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  192.908491][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  192.915185][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  192.921823][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  192.930391][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  192.937058][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  192.943880][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  192.950611][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  192.957305][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  192.963908][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  192.970229][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  192.976843][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  192.983439][    T9] usb 3-1: USB disconnect, device number 10
[  192.989432][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  193.728112][ T8502] loop4: detected capacity change from 0 to 256
[  193.746369][ T8502] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  193.797543][ T8502] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  193.900293][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'.
[  194.282811][ T8519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.321070][ T8521] loop3: detected capacity change from 0 to 256
[  194.338928][ T8521] exfat: Deprecated parameter 'utf8'
[  194.370586][ T8521] exfat: Deprecated parameter 'utf8'
[  194.376014][ T8521] exfat: Deprecated parameter 'namecase'
[  194.404143][ T8521] exfat: Deprecated parameter 'namecase'
[  194.418313][ T5816] usb 1-1: USB disconnect, device number 13
[  194.439902][ T8521] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf6e788d, utbl_chksum : 0xe619d30d)
[  194.618577][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  194.630440][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.700446][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  194.722258][ T8534] loop3: detected capacity change from 0 to 256
[  194.903992][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  194.929995][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  194.949659][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  194.979524][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  195.009392][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  195.032484][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  195.041884][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  195.049918][    T9] usb 5-1: Product: syz
[  195.059123][    T9] usb 5-1: Manufacturer: syz
[  195.087144][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  195.107245][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  195.119162][ T8546] Bluetooth: ISO socket layer initialized
[  195.125659][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  195.136652][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  195.147333][ T8548] loop3: detected capacity change from 0 to 256
[  195.588948][    C0] cdc_wdm 5-1:1.0: Unexpected error -71
[  195.594660][    C0] wdm_int_callback: 3 callbacks suppressed
[  195.594679][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  195.607122][    C0] wdm_int_callback: 3 callbacks suppressed
[  195.607140][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  195.619230][    C0] vkms_vblank_simulate: vblank timer overrun
[  195.625893][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  195.632527][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  195.638874][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  195.645494][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  195.651876][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  195.658511][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  195.664843][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  195.671480][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  195.678163][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  195.684812][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  195.691672][ T5816] usb 5-1: USB disconnect, device number 9
[  195.698007][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  195.698032][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  195.698048][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  196.038508][ T8568] loop0: detected capacity change from 0 to 256
[  196.096271][ T8553] loop2: detected capacity change from 0 to 40427
[  196.117582][ T8553] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  196.129174][ T8553] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  196.129214][ T8570] program syz.3.990 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.187918][ T8553] F2FS-fs (loop2): Found nat_bits in checkpoint
[  196.340839][ T8575] loop0: detected capacity change from 0 to 256
[  196.358677][ T8553] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  196.365948][ T8553] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  196.531852][ T8553] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  196.569700][ T8582] loop0: detected capacity change from 0 to 256
[  196.994817][ T8595] loop3: detected capacity change from 0 to 256
[  197.038709][ T8595] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  197.121030][ T8595] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.208580][ T8599] loop4: detected capacity change from 0 to 256
[  197.249092][ T8599] exfat: Deprecated parameter 'utf8'
[  197.280288][ T8599] exfat: Deprecated parameter 'utf8'
[  197.285750][ T8599] exfat: Deprecated parameter 'namecase'
[  197.300525][ T8599] exfat: Deprecated parameter 'namecase'
[  197.383801][ T8599] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf6e788d, utbl_chksum : 0xe619d30d)
[  197.660745][ T8604] loop3: detected capacity change from 0 to 2048
[  197.754312][ T8604]  loop3: p4 < >
[  197.945020][ T8617] loop0: detected capacity change from 0 to 512
[  197.983801][ T8617] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1005: bg 0: block 5: invalid block bitmap
[  198.004422][ T8616] loop2: detected capacity change from 0 to 1024
[  198.059384][ T8617] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  198.105213][ T8617] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1005: invalid indirect mapped block 3 (level 2)
[  198.148796][ T8617] EXT4-fs (loop0): 1 orphan inode deleted
[  198.195063][ T8617] EXT4-fs (loop0): 1 truncate cleaned up
[  198.205957][ T8617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.475040][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.992398][ T8646] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1020'.
[  199.076033][ T8625] syz.4.1010 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  199.360843][ T8660] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(6)
[  199.690511][ T8676] loop2: detected capacity change from 0 to 16
[  199.757216][ T8676] erofs: (device loop2): mounted with root inode @ nid 36.
[  199.857855][ T8676] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  199.882453][ T8676] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  200.090096][ T5763] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  200.202367][ T8692] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1042'.
[  200.290473][ T5763] usb 5-1: Using ep0 maxpacket: 16
[  200.304209][ T5763] usb 5-1: unable to get BOS descriptor or descriptor too short
[  200.323573][ T5763] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  200.344506][ T5763] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  200.364004][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.372073][ T8699] EXT4-fs: Ignoring removed orlov option
[  200.388573][ T5763] usb 5-1: Product: syz
[  200.397013][ T5763] usb 5-1: Manufacturer: syz
[  200.412716][ T5763] usb 5-1: SerialNumber: syz
[  200.417603][ T8699] EXT4-fs (loop0): Test dummy encryption mode enabled
[  200.461597][ T8699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.677035][ T5763] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  200.689732][   T28] audit: type=1400 audit(2000000364.328:14): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=8708 comm="syz.2.1048" name="foo" offset=81
[  200.698424][ T5763] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  200.785478][ T8699] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  200.816203][ T8699] FS-Cache: Cache "CacheFiles" added (type cachefiles)
[  200.828991][ T8699] CacheFiles: File cache on CacheFiles registered
[  200.887989][ T8698] CacheFiles: File cache on CacheFiles unregistering
[  200.897518][ T8698] FS-Cache: Withdrawing cache "CacheFiles" (0 objs)
[  200.967066][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.967372][ T8717] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:�b�Ez���[�������۵��>,: -22
[  201.069313][ T5763] usb 5-1: 2:1 : can't get Cluster Descriptor
[  201.206358][ T8719] set_capacity_and_notify: 2 callbacks suppressed
[  201.206374][ T8719] loop0: detected capacity change from 0 to 2048
[  201.216187][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'.
[  201.244417][ T8723] gretap0: entered promiscuous mode
[  201.254479][ T8723] macvlan2: entered allmulticast mode
[  201.259918][ T8723] gretap0: entered allmulticast mode
[  201.360211][ T8724] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.443634][ T5763] usb 5-1: USB disconnect, device number 10
[  201.596160][ T8732] loop3: detected capacity change from 0 to 256
[  201.771220][ T8736] loop2: detected capacity change from 0 to 256
[  201.810727][ T5786] Bluetooth: hci2: command 0x0406 tx timeout
[  201.811288][ T5776] Bluetooth: hci0: command 0x0406 tx timeout
[  201.816961][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[  201.880442][ T8736] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d)
[  202.530636][ T5763] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  202.750711][ T5763] usb 5-1: Using ep0 maxpacket: 16
[  202.762478][ T5763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.782123][ T5763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.791669][ T8753] loop3: detected capacity change from 0 to 40427
[  202.820210][ T5763] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  202.850783][ T5763] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  202.860703][ T8753] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  202.865510][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.867682][ T8753] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  202.887322][ T5763] usb 5-1: config 0 descriptor??
[  202.893724][ T8753] F2FS-fs (loop3): build fault injection attr: rate: 64, type: 0x7ffff
[  202.905903][ T8753] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x5
[  202.915193][ T8753] F2FS-fs (loop3): invalid crc value
[  202.923820][ T8753] F2FS-fs (loop3): Found nat_bits in checkpoint
[  202.995056][ T8753] F2FS-fs (loop3): Start checkpoint disabled!
[  203.023509][ T8753] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  203.036953][ T8753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  203.109163][ T8753] F2FS-fs (loop3): inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x1e0/0x1310
[  203.124285][ T8753] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only
[  203.178621][ T5782] syz-executor: attempt to access beyond end of device
[  203.178621][ T5782] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  203.194480][ T5782] syz-executor: attempt to access beyond end of device
[  203.194480][ T5782] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  203.313063][ T5763] microsoft 0003:045E:07DA.0008: unknown main item tag 0x1
[  203.335291][ T5763] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  203.355648][ T5763] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  203.368325][ T5763] microsoft 0003:045E:07DA.0008: no inputs found
[  203.375434][ T5763] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  203.521697][ T5814] usb 5-1: USB disconnect, device number 11
[  203.562181][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.616596][ T4607] kworker/u4:9: attempt to access beyond end of device
[  203.616596][ T4607] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  203.630929][ T4607] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  203.638382][ T4607] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  203.646069][ T4607] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  203.693490][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.798452][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.938809][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.834613][ T8793] loop2: detected capacity change from 0 to 4096
[  204.845268][ T8793] EXT4-fs: Ignoring removed orlov option
[  204.925258][ T8793] EXT4-fs (loop2): Test dummy encryption mode enabled
[  204.984382][ T8793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.111692][ T8793] FS-Cache: Cache "CacheFiles" added (type cachefiles)
[  205.173432][ T8793] CacheFiles: File cache on CacheFiles registered
[  205.216869][ T8791] CacheFiles: File cache on CacheFiles unregistering
[  205.254685][ T8791] FS-Cache: Withdrawing cache "CacheFiles" (0 objs)
[  205.432093][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.446562][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.459668][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.470408][   T12] gretap0 (unregistering): left allmulticast mode
[  205.470460][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.491189][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.507779][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  205.530426][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.943357][ T5813] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  206.035194][ T8825] loop0: detected capacity change from 0 to 256
[  206.067178][ T8825] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d)
[  206.147010][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  206.186838][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short
[  206.199089][ T5813] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  206.235626][ T5813] usb 5-1: string descriptor 0 read error: -22
[  206.250473][ T5813] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  206.261105][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.381871][   T12] hsr_slave_0: left promiscuous mode
[  206.401655][   T12] hsr_slave_1: left promiscuous mode
[  206.415899][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.425529][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.444793][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.462508][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.471006][   T12] bridge_slave_1: left allmulticast mode
[  206.472531][ T8833] loop0: detected capacity change from 0 to 16
[  206.476683][   T12] bridge_slave_1: left promiscuous mode
[  206.476956][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.491264][ T8833] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  206.522010][ T5780] udevd[5780]: incorrect cramfs checksum on /dev/loop0
[  206.544711][   T12] bridge_slave_0: left allmulticast mode
[  206.565470][   T12] bridge_slave_0: left promiscuous mode
[  206.586756][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.609532][ T5780] udevd[5780]: incorrect cramfs checksum on /dev/loop0
[  206.673419][   T12] veth1_macvtap: left promiscuous mode
[  206.681260][   T12] veth0_macvtap: left promiscuous mode
[  206.709907][   T12] veth1_vlan: left promiscuous mode
[  206.718503][   T12] veth0_vlan: left promiscuous mode
[  207.118027][ T8847] loop4: detected capacity change from 0 to 7
[  207.146041][ T8847] Dev loop4: unable to read RDB block 7
[  207.160407][ T8847]  loop4: unable to read partition table
[  207.178879][ T5813] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[  207.186219][ T8847] loop4: partition table beyond EOD, truncated
[  207.209502][ T8847] loop_reread_partitions: partition scan of loop4 (���������-ý?���	���%��`��{������5FLQk݊A�) failed (rc=-5)
[  207.239308][ T5813] usb 5-1: USB disconnect, device number 12
[  207.580382][ T5085] Bluetooth: hci2: command tx timeout
[  208.280006][   T12] team0 (unregistering): Port device team_slave_1 removed
[  208.387987][   T12] team0 (unregistering): Port device team_slave_0 removed
[  208.494209][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.583350][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.884757][ T8871] loop4: detected capacity change from 0 to 32768
[  209.233966][   T12] bond0 (unregistering): Released all slaves
[  209.554732][ T8809] chnl_net:caif_netlink_parms(): no params data found
[  209.650269][ T5085] Bluetooth: hci2: command tx timeout
[  209.710101][ T5816] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  209.711656][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'.
[  209.747577][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'.
[  209.918882][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.934801][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.942988][ T8809] bridge_slave_0: entered allmulticast mode
[  209.950813][ T8809] bridge_slave_0: entered promiscuous mode
[  209.958945][ T8889] macvlan0: entered promiscuous mode
[  209.965510][ T8889] netlink: 'syz.2.1109': attribute type 1 has an invalid length.
[  209.984108][ T5816] usb 1-1: Using ep0 maxpacket: 32
[  209.992703][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short
[  210.005195][ T5816] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  210.030120][ T8889] netlink: 'syz.2.1109': attribute type 2 has an invalid length.
[  210.033640][ T5816] usb 1-1: string descriptor 0 read error: -22
[  210.060901][ T5816] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  210.070323][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.077494][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.080396][   T12] IPVS: stop unused estimator thread 0...
[  210.094868][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.109826][ T8809] bridge_slave_1: entered allmulticast mode
[  210.128735][ T8809] bridge_slave_1: entered promiscuous mode
[  210.160845][ T5816] usbtest 1-1:1.0: Interface 0 is not authorized for usage
[  210.169182][ T5816] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage
[  210.247066][ T5816] usbtest 1-1:1.1: Interface 1 is not authorized for usage
[  210.278647][ T8809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.291486][ T5816] usbtest 1-1:1.2: Interface 2 is not authorized for usage
[  210.325188][ T8809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.485089][ T8809] team0: Port device team_slave_0 added
[  210.593506][ T8809] team0: Port device team_slave_1 added
[  210.687988][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.720346][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.780022][ T8809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.801823][ T8904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1113'.
[  210.833330][ T8906] netlink: 'syz.2.1113': attribute type 12 has an invalid length.
[  210.862631][ T8906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1113'.
[  210.890721][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.897733][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.991101][ T8809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.076230][ T8911] loop2: detected capacity change from 0 to 8
[  211.095201][ T8911] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  211.152224][ T5780] udevd[5780]: incorrect cramfs checksum on /dev/loop2
[  211.191500][ T8809] hsr_slave_0: entered promiscuous mode
[  211.220639][ T8809] hsr_slave_1: entered promiscuous mode
[  211.244856][ T5780] udevd[5780]: incorrect cramfs checksum on /dev/loop2
[  211.276295][ T8809] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.285351][ T8809] Cannot create hsr debugfs directory
[  211.695572][ T8809] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  211.720148][ T8809] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  211.730188][ T5085] Bluetooth: hci2: command tx timeout
[  211.744318][ T8809] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  211.757143][ T8809] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  211.859502][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.885029][ T8809] 8021q: adding VLAN 0 to HW filter on device team0
[  211.904515][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.911734][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.940794][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.948173][ T4607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.343705][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.449874][ T5815] usb 1-1: USB disconnect, device number 14
[  212.591386][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'.
[  212.613773][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'.
[  212.824334][ T8954] loop4: detected capacity change from 0 to 7
[  212.861747][ T8954] Dev loop4: unable to read RDB block 7
[  212.877615][ T8954]  loop4: unable to read partition table
[  212.898805][ T8954] loop4: partition table beyond EOD, truncated
[  212.915604][ T8954] loop_reread_partitions: partition scan of loop4 (���������-ý?���	���%��`��{������5FLQk݊A�) failed (rc=-5)
[  213.146582][ T8962] loop4: detected capacity change from 0 to 512
[  213.171618][ T8962] EXT4-fs: Ignoring removed bh option
[  213.218693][ T8962] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  213.222507][ T8809] veth0_vlan: entered promiscuous mode
[  213.280674][ T8962] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  213.291699][ T8809] veth1_vlan: entered promiscuous mode
[  213.322810][ T8962] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1122: Corrupt directory, running e2fsck is recommended
[  213.388003][ T8962] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  213.430777][ T8962] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1122: corrupted in-inode xattr: e_name out of bounds
[  213.433654][ T8809] veth0_macvtap: entered promiscuous mode
[  213.475476][ T8962] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1122: couldn't read orphan inode 15 (err -117)
[  213.502188][ T8809] veth1_macvtap: entered promiscuous mode
[  213.518054][ T8962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.563153][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.609985][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.614390][ T8962] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  213.635767][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.657125][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.671280][ T8962] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  213.687711][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.713350][ T8962] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1122: Corrupt directory, running e2fsck is recommended
[  213.719989][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.754024][ T8962] CacheFiles: Lookup cache failed with error -117
[  213.778340][ T8962] CacheFiles: Failed to register: -117
[  213.779706][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.810198][ T5085] Bluetooth: hci2: command tx timeout
[  213.827548][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.860115][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.919990][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.956316][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.990254][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.014606][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.040258][ T8809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  214.069509][ T8955] loop0: detected capacity change from 0 to 32768
[  214.080104][ T8809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.104798][ T6427] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.116076][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.198382][ T8809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.245256][ T8809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.274478][ T8809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.286736][ T8809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.498878][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.535006][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.596337][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.628002][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.104806][ T8998] loop4: detected capacity change from 0 to 128
[  215.129411][ T8998] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  215.284341][   T11] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  216.031157][ T9033] loop2: detected capacity change from 0 to 128
[  216.065152][ T9033] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  216.133871][ T9035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.274136][   T49] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  216.284085][ T9039] loop5: detected capacity change from 0 to 512
[  216.305460][ T9039] EXT4-fs: Ignoring removed bh option
[  216.392390][ T9039] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  216.405557][ T9039] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  216.416433][ T9039] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1147: Corrupt directory, running e2fsck is recommended
[  216.444813][ T9039] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  216.491451][ T9039] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1147: corrupted in-inode xattr: e_name out of bounds
[  216.567236][ T9039] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1147: couldn't read orphan inode 15 (err -117)
[  216.593454][ T9039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.720797][ T9039] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  216.749220][ T9039] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  216.775967][ T9039] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1147: Corrupt directory, running e2fsck is recommended
[  216.793231][ T9039] CacheFiles: Lookup cache failed with error -117
[  216.799801][ T9039] CacheFiles: Failed to register: -117
[  216.920644][ T8809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.124479][ T5085] Bluetooth: hci0: Zero size dump init pkt
[  217.319419][ T9078] loop2: detected capacity change from 0 to 2048
[  217.383908][ T9079] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.559091][ T9082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.037143][ T5085] Bluetooth: hci0: Zero size dump init pkt
[  219.396819][ T5085] Bluetooth: hci0: Zero size dump init pkt
[  219.419501][ T9150] loop2: detected capacity change from 0 to 512
[  219.572944][ T9150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.619605][ T9150] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.755158][   T28] audit: type=1800 audit(2000000383.398:15): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1179" name="file2" dev="loop2" ino=16 res=0 errno=0
[  219.899565][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.214443][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'.
[  220.584092][ T9206] loop2: detected capacity change from 0 to 512
[  220.655283][ T9206] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.1202: corrupted in-inode xattr: invalid ea_ino
[  220.679540][ T9206] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1202: couldn't read orphan inode 15 (err -117)
[  220.765654][ T9206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.808947][ T9214] loop5: detected capacity change from 0 to 512
[  220.875591][ T9214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.905682][ T9214] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  220.963152][ T9215] loop4: detected capacity change from 0 to 4096
[  220.998911][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.082524][ T9220] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.097681][ T8809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.230639][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'.
[  222.001017][ T9246] syz.2.1218 (9246): /proc/9244/oom_adj is deprecated, please use /proc/9244/oom_score_adj instead.
[  222.017795][ T9245] loop4: detected capacity change from 0 to 1024
[  222.043137][ T9245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.060583][ T9248] loop9: detected capacity change from 0 to 524287998
[  222.345383][ T9253] loop5: detected capacity change from 0 to 512
[  222.418469][ T9253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.431798][ T9253] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.471078][   T28] audit: type=1800 audit(2000000386.108:16): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1221" name="file2" dev="loop5" ino=16 res=0 errno=0
[  222.532352][ T8809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.857230][ T9274] loop2: detected capacity change from 0 to 128
[  222.883094][ T9274] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  222.898489][ T9274] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  223.019959][   T28] audit: type=1800 audit(2000000386.658:17): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1228" name="file1" dev="loop2" ino=12 res=0 errno=0
[  223.133380][ T9281] loop0: detected capacity change from 0 to 128
[  223.169143][ T9281] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  223.198899][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  223.223374][   T28] audit: type=1800 audit(2000000386.868:18): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1232" name="file1" dev="loop0" ino=94 res=0 errno=0
[  223.758239][ T9272] loop4: detected capacity change from 0 to 40427
[  223.779206][ T9272] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  223.832112][ T9272] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  223.877278][ T9272] F2FS-fs (loop4): invalid crc value
[  224.170113][ T9272] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  224.177229][ T9272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  224.245221][ T9285] JBD2: Ignoring recovery information on journal
[  224.269602][ T9285] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  224.292505][ T6427] syz-executor: attempt to access beyond end of device
[  224.292505][ T6427] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  224.334773][ T9285] JBD2: bad block at offset 32
[  224.382735][ T6427] syz-executor: attempt to access beyond end of device
[  224.382735][ T6427] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  224.401729][ T9285] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  224.525811][ T9285] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  224.564354][ T6427] syz-executor: attempt to access beyond end of device
[  224.564354][ T6427] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  224.582722][ T9285] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  224.598740][ T6427] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  224.609159][ T9285] OCFS2: File system is now read-only.
[  224.615579][ T9285] (syz.2.1235,9285,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  224.624363][ T9285] (syz.2.1235,9285,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  224.637109][ T9285] (syz.2.1235,9285,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  224.645665][ T9285] (syz.2.1235,9285,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  224.711017][ T9285] (syz.2.1235,9285,0):ocfs2_write_cluster:1155 ERROR: status = -30
[  224.751405][ T9285] (syz.2.1235,9285,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30
[  224.774214][ T9285] (syz.2.1235,9285,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30
[  224.810399][ T9285] (syz.2.1235,9285,0):ocfs2_write_begin:1909 ERROR: status = -30
[  225.138926][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  225.556100][ T9331] set_capacity_and_notify: 1 callbacks suppressed
[  225.556119][ T9331] loop5: detected capacity change from 0 to 2048
[  225.559510][   T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.660185][ T9333] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.834332][   T28] audit: type=1800 audit(2000000389.478:19): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1249" name="bus" dev="loop5" ino=2097152 res=0 errno=0
[  225.836588][ T9337] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  225.886705][   T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.055198][   T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.150794][   T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.991256][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  227.004229][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  227.015323][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  227.028963][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  227.039299][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  227.047098][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  227.466847][ T9379] loop0: detected capacity change from 0 to 256
[  227.605541][   T28] audit: type=1800 audit(2000000391.248:20): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1263" name="file2" dev="loop0" ino=1048709 res=0 errno=0
[  227.646051][ T9379] syz.0.1263: attempt to access beyond end of device
[  227.646051][ T9379] loop0: rw=0, sector=272, nr_sectors = 4 limit=256
[  227.717648][ T9379] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198)
[  227.727218][ T9379] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198)
[  228.117616][ T9359] loop2: detected capacity change from 0 to 40427
[  228.187396][ T9359] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[  228.227979][ T9359] F2FS-fs (loop2): invalid crc value
[  228.294896][ T9359] F2FS-fs (loop2): Found nat_bits in checkpoint
[  228.420801][ T9359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  228.571417][   T37] hsr_slave_0: left promiscuous mode
[  228.597234][   T37] hsr_slave_1: left promiscuous mode
[  228.680188][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.687842][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.737358][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.760322][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.762254][ T9404] loop0: detected capacity change from 0 to 128
[  228.790861][   T37] bridge_slave_1: left allmulticast mode
[  228.796756][   T37] bridge_slave_1: left promiscuous mode
[  228.832094][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.857291][ T9404] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  228.878788][   T37] bridge_slave_0: left allmulticast mode
[  228.886897][ T9404] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  228.895070][   T37] bridge_slave_0: left promiscuous mode
[  228.964964][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.977185][   T28] audit: type=1800 audit(2000000392.618:21): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1278" name="file1" dev="loop0" ino=12 res=0 errno=0
[  229.087790][   T37] veth1_macvtap: left promiscuous mode
[  229.098100][   T37] veth0_macvtap: left promiscuous mode
[  229.100338][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.126477][ T5085] Bluetooth: hci3: command tx timeout
[  229.140207][   T37] veth1_vlan: left promiscuous mode
[  229.145778][   T37] veth0_vlan: left promiscuous mode
[  229.393444][ T9424] loop5: detected capacity change from 0 to 1024
[  229.486198][ T9424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  229.554937][ T9424] System zones: 0-1, 3-12
[  229.591174][ T9424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.771754][ T8809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.787202][ T9436] loop2: detected capacity change from 0 to 128
[  229.791107][ T9434] loop0: detected capacity change from 0 to 512
[  229.844245][ T9434] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.1284: corrupted in-inode xattr: invalid ea_ino
[  229.859653][ T9436] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  229.892921][ T9434] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1284: couldn't read orphan inode 15 (err -117)
[  229.944819][ T9434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.020150][   T28] audit: type=1800 audit(2000000393.658:22): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1276" name="file1" dev="loop2" ino=94 res=0 errno=0
[  230.232579][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.499521][ T9448] loop2: detected capacity change from 0 to 1024
[  230.550059][ T9448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  230.649638][ T9452] loop5: detected capacity change from 0 to 128
[  230.718202][ T9452] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  230.774883][ T9452] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  230.922173][   T28] audit: type=1800 audit(2000000394.568:23): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1282" name="file1" dev="loop5" ino=12 res=0 errno=0
[  231.049726][ T8809] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  231.170467][ T5085] Bluetooth: hci3: command tx timeout
[  231.412548][   T37] team0 (unregistering): Port device team_slave_1 removed
[  231.510309][   T37] team0 (unregistering): Port device team_slave_0 removed
[  231.576441][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.629861][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.886272][ T9475] loop5: detected capacity change from 0 to 512
[  231.909750][ T9475] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.1296: bg 0: block 5: invalid block bitmap
[  231.928364][ T9475] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  231.945097][ T9475] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1296: invalid indirect mapped block 3 (level 2)
[  231.980967][ T9475] EXT4-fs (loop5): 1 orphan inode deleted
[  231.986767][ T9475] EXT4-fs (loop5): 1 truncate cleaned up
[  231.993900][ T9475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.043186][   T28] audit: type=1800 audit(2000000395.688:24): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1296" name="file1" dev="loop5" ino=15 res=0 errno=0
[  232.113733][ T8809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.254271][   T37] bond0 (unregistering): Released all slaves
[  232.356875][ T9364] chnl_net:caif_netlink_parms(): no params data found
[  232.412459][ T9461] netlink: 'syz.2.1287': attribute type 8 has an invalid length.
[  232.426247][ T9461] sch_fq: defrate 0 ignored.
[  232.824472][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.861255][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.868543][ T9364] bridge_slave_0: entered allmulticast mode
[  232.905698][ T9364] bridge_slave_0: entered promiscuous mode
[  232.937001][ T9364] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.971043][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.978320][ T9364] bridge_slave_1: entered allmulticast mode
[  233.006652][ T9364] bridge_slave_1: entered promiscuous mode
[  233.082469][ T9499] loop2: detected capacity change from 0 to 512
[  233.146994][ T9499] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  233.177729][ T9499] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.1303: corrupted in-inode xattr: e_value size too large
[  233.182369][ T9364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.224981][ T9499] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1303: couldn't read orphan inode 15 (err -117)
[  233.250889][ T5085] Bluetooth: hci3: command tx timeout
[  233.258219][ T9499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.262344][ T9364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.443449][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.458971][ T9364] team0: Port device team_slave_0 added
[  233.493537][ T9489] loop0: detected capacity change from 0 to 32768
[  233.504938][ T9364] team0: Port device team_slave_1 added
[  233.588472][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.618299][ T9489] JBD2: Ignoring recovery information on journal
[  233.642191][ T9489] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  233.650676][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.677557][ T9489] JBD2: bad block at offset 32
[  233.695831][ T9364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.714211][ T9489] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  233.715388][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.765209][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.836914][ T9364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.886405][ T9489] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  233.918758][ T9489] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  233.945728][ T9489] OCFS2: File system is now read-only.
[  234.004223][ T9489] (syz.0.1300,9489,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  234.026574][ T9364] hsr_slave_0: entered promiscuous mode
[  234.035947][ T9482] loop5: detected capacity change from 0 to 40427
[  234.043452][ T9489] (syz.0.1300,9489,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  234.054441][ T9364] hsr_slave_1: entered promiscuous mode
[  234.065094][ T9489] (syz.0.1300,9489,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  234.074652][ T9489] (syz.0.1300,9489,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  234.083686][ T9482] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  234.090815][ T9364] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.098410][ T9364] Cannot create hsr debugfs directory
[  234.103961][ T9482] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  234.130554][ T9489] (syz.0.1300,9489,0):ocfs2_write_cluster:1155 ERROR: status = -30
[  234.156047][ T9489] (syz.0.1300,9489,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30
[  234.165078][ T9482] F2FS-fs (loop5): invalid crc value
[  234.176178][ T9489] (syz.0.1300,9489,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30
[  234.198794][ T9489] (syz.0.1300,9489,0):ocfs2_write_begin:1909 ERROR: status = -30
[  234.364267][ T5777] ocfs2: Unmounting device (7,0) on (node local)
[  234.508206][ T9482] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  234.541387][ T9482] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  234.748783][ T9528] loop2: detected capacity change from 0 to 4096
[  234.778553][ T9364] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  234.837201][ T9364] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  234.862747][ T9532] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.865722][ T8809] syz-executor: attempt to access beyond end of device
[  234.865722][ T8809] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  234.894271][ T9364] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  234.936986][ T8809] syz-executor: attempt to access beyond end of device
[  234.936986][ T8809] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  234.952229][ T9364] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  235.063133][ T8809] syz-executor: attempt to access beyond end of device
[  235.063133][ T8809] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.133344][ T8809] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  235.275941][ T9364] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.297400][ T9540] loop2: detected capacity change from 0 to 512
[  235.330521][ T5085] Bluetooth: hci3: command tx timeout
[  235.359211][ T9364] 8021q: adding VLAN 0 to HW filter on device team0
[  235.407815][ T9540] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1309: iget: bad extended attribute block 134217728
[  235.484779][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.492044][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.520494][ T9540] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1309: couldn't read orphan inode 15 (err -117)
[  235.578369][ T9540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.699336][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.707256][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.732352][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.797508][ T9364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.860123][   T56] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  236.016260][ T4607] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.043172][   T56] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  236.059420][   T56] usb 1-1: config 0 has no interface number 0
[  236.090055][   T56] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.119977][   T56] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.160359][   T56] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  236.187081][ T4607] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.190017][   T56] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  236.225030][   T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.254575][   T56] usb 1-1: config 0 descriptor??
[  236.272591][   T56] usbtest 1-1:0.1: Interface 1 is not authorized for usage
[  236.300271][   T56] usbhid 1-1:0.1: Interface 1 is not authorized for usage
[  236.352790][ T4607] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.454149][ T9364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.582895][ T4607] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.511985][ T9364] veth0_vlan: entered promiscuous mode
[  237.537557][ T9364] veth1_vlan: entered promiscuous mode
[  237.725237][ T9364] veth0_macvtap: entered promiscuous mode
[  237.734659][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.747665][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.759213][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.778339][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.786336][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  237.793983][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.851427][ T9364] veth1_macvtap: entered promiscuous mode
[  238.029497][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.047911][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.067007][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.079636][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.095108][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.106130][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.119506][ T9364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.182668][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.194997][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.208559][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.220152][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.230553][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  238.250487][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.266092][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.277071][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.297194][ T9364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.388416][ T9364] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.397600][ T9364] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.408838][ T9364] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.417716][ T9364] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.592960][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.612521][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.645504][    T9] usb 1-1: USB disconnect, device number 15
[  238.745327][ T4607] hsr_slave_0: left promiscuous mode
[  238.761190][ T4607] hsr_slave_1: left promiscuous mode
[  238.781125][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.798866][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.817579][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.835052][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.870923][ T4607] bridge_slave_1: left allmulticast mode
[  238.876673][ T4607] bridge_slave_1: left promiscuous mode
[  238.893293][ T9616] loop0: detected capacity change from 0 to 4096
[  238.901252][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.919589][ T4607] bridge_slave_0: left allmulticast mode
[  238.931717][ T4607] bridge_slave_0: left promiscuous mode
[  238.937557][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.965407][ T9620] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  239.018865][ T4607] veth1_macvtap: left promiscuous mode
[  239.038039][ T4607] veth0_macvtap: left promiscuous mode
[  239.049243][ T4607] veth1_vlan: left promiscuous mode
[  239.055193][ T4607] veth0_vlan: left promiscuous mode
[  239.886849][ T9626] loop0: detected capacity change from 0 to 40427
[  239.898802][ T9626] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  239.903784][   T51] Bluetooth: hci2: command tx timeout
[  239.949137][ T9626] F2FS-fs (loop0): invalid crc value
[  239.981977][ T9626] F2FS-fs (loop0): Found nat_bits in checkpoint
[  240.082649][ T9626] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  240.378758][ T4607] team0 (unregistering): Port device team_slave_1 removed
[  240.459983][ T4607] team0 (unregistering): Port device team_slave_0 removed
[  240.515407][ T4607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.566657][ T4607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.004383][ T4607] bond0 (unregistering): Released all slaves
[  241.131502][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.174508][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.247790][ T9592] chnl_net:caif_netlink_parms(): no params data found
[  241.305338][ T9634] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1322'.
[  241.340026][ T9634] netlink: 528 bytes leftover after parsing attributes in process `syz.0.1322'.
[  241.385739][ T9637] loop6: detected capacity change from 0 to 7
[  241.429116][ T9637] Dev loop6: unable to read RDB block 7
[  241.443053][ T9637]  loop6: unable to read partition table
[  241.448983][ T9637] loop6: partition table beyond EOD, truncated
[  241.518876][ T9637] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  241.753799][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.790262][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.809022][ T9592] bridge_slave_0: entered allmulticast mode
[  241.843911][ T9592] bridge_slave_0: entered promiscuous mode
[  241.887060][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.918112][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.948550][ T9592] bridge_slave_1: entered allmulticast mode
[  241.969019][ T9592] bridge_slave_1: entered promiscuous mode
[  241.980363][   T51] Bluetooth: hci2: command tx timeout
[  242.073657][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.143520][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.318094][ T9592] team0: Port device team_slave_0 added
[  242.430416][ T9673] input: syz1 as /devices/virtual/input/input13
[  242.486718][ T9592] team0: Port device team_slave_1 added
[  242.603976][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.640648][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.729997][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.763297][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.795944][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.825851][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.915206][ T9688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1338'.
[  242.979857][ T9592] hsr_slave_0: entered promiscuous mode
[  243.009333][ T9592] hsr_slave_1: entered promiscuous mode
[  243.030189][ T9592] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  243.037822][ T9592] Cannot create hsr debugfs directory
[  243.388391][ T9709] loop0: detected capacity change from 0 to 2048
[  243.411875][ T9709] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  243.445127][ T9709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.702906][ T5777] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh
[  243.731480][ T5777] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh
[  243.776093][ T9592] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  243.798609][ T9592] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  243.833936][ T9592] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  243.858993][ T9592] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  243.884198][ T5814] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  244.050078][   T51] Bluetooth: hci2: command tx timeout
[  244.091801][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.109474][ T5814] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  244.127907][ T5814] usb 3-1: config 0 has no interface number 0
[  244.144860][ T5814] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.184412][ T9592] 8021q: adding VLAN 0 to HW filter on device team0
[  244.201267][ T5814] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.228361][ T5814] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  244.268896][ T5814] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  244.298600][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.351477][ T5814] usb 3-1: config 0 descriptor??
[  244.385356][   T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.455500][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.462766][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.503923][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.511169][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.613826][   T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.779175][   T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.995699][ T9738] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1351'.
[  245.048533][ T5814] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0009/input/input14
[  245.068928][   T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.224303][ T5814] uclogic 0003:28BD:0042.0009: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1
[  245.295534][ T5814] usb 3-1: USB disconnect, device number 11
[  245.386858][ T9745] loop6: detected capacity change from 0 to 512
[  245.459580][ T9745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  245.500134][ T9745] System zones: 1-12
[  245.518446][ T9745] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.1352: missing EA_INODE flag
[  245.612800][ T9745] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1352: error while reading EA inode 12 err=-117
[  245.663826][ T9742] fido_id[9742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  245.682123][ T9745] EXT4-fs (loop6): 1 orphan inode deleted
[  245.727590][ T9745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.792799][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.913052][ T9745] fscrypt (loop6, inode 15): Mutually exclusive encryption flags (0x1a)
[  246.021399][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.027594][ T9364] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.064238][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.077881][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.091785][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.100560][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  246.117398][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.131187][   T51] Bluetooth: hci2: command tx timeout
[  246.261775][ T9760] loop2: detected capacity change from 0 to 512
[  246.350608][ T9760] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1355: bg 0: block 5: invalid block bitmap
[  246.418955][ T9760] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  246.459382][ T9760] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1355: invalid indirect mapped block 3 (level 2)
[  246.497109][ T9760] EXT4-fs (loop2): 1 orphan inode deleted
[  246.505607][ T9760] EXT4-fs (loop2): 1 truncate cleaned up
[  246.517985][ T9760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.725785][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.008451][ T9785] loop2: detected capacity change from 0 to 512
[  247.058402][ T9785] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  247.139457][ T9785] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.1359: bad orphan inode 13
[  247.170441][ T9785] ext4_test_bit(bit=12, block=18) = 1
[  247.176197][ T9785] is_bad_inode(inode)=0
[  247.191524][ T9785] NEXT_ORPHAN(inode)=0
[  247.205476][ T9785] max_ino=32
[  247.211662][ T9785] i_nlink=1
[  247.216399][ T9785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  247.339387][ T9792] Quota error (device loop2): do_check_range: Getting block 1536 out of range 0-5
[  247.439000][ T9592] veth0_vlan: entered promiscuous mode
[  247.452771][ T9751] chnl_net:caif_netlink_parms(): no params data found
[  247.559406][ T9592] veth1_vlan: entered promiscuous mode
[  247.741346][   T60] hsr_slave_0: left promiscuous mode
[  247.752461][   T60] hsr_slave_1: left promiscuous mode
[  247.758399][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.767653][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.776139][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.783630][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.792350][   T60] batman_adv: batadv0: Interface deactivated: ipvlan2
[  247.799242][   T60] batman_adv: batadv0: Removing interface: ipvlan2
[  247.807313][   T60] bridge_slave_1: left allmulticast mode
[  247.814902][   T60] bridge_slave_1: left promiscuous mode
[  247.822003][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.835893][   T60] bridge_slave_0: left allmulticast mode
[  247.841827][   T60] bridge_slave_0: left promiscuous mode
[  247.847602][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.879281][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  247.893910][   T60] veth1_macvtap: left promiscuous mode
[  247.906378][   T60] veth0_macvtap: left promiscuous mode
[  247.917926][   T60] veth1_vlan: left promiscuous mode
[  247.930608][   T60] veth0_vlan: left promiscuous mode
[  248.025566][ T9806] loop2: detected capacity change from 0 to 512
[  248.063512][ T9806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  248.071858][ T9806] System zones: 1-12
[  248.082070][ T9806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1362: missing EA_INODE flag
[  248.136901][ T9806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1362: error while reading EA inode 12 err=-117
[  248.160262][ T9806] EXT4-fs (loop2): 1 orphan inode deleted
[  248.169491][ T9806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.208028][ T9806] fscrypt (loop2, inode 15): Mutually exclusive encryption flags (0x1a)
[  248.220402][ T5085] Bluetooth: hci1: command tx timeout
[  248.247015][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.969546][   T60] team0 (unregistering): Port device team_slave_1 removed
[  249.020717][   T60] team0 (unregistering): Port device team_slave_0 removed
[  249.076568][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.138642][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.448180][ T9818] loop6: detected capacity change from 0 to 512
[  249.516420][ T9818] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.1365: bg 0: block 5: invalid block bitmap
[  249.543077][ T9818] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  249.553377][ T9818] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1365: invalid indirect mapped block 3 (level 2)
[  249.588719][ T9818] EXT4-fs (loop6): 1 orphan inode deleted
[  249.601257][ T9818] EXT4-fs (loop6): 1 truncate cleaned up
[  249.608525][ T9818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.812344][ T9364] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.824412][   T60] bond0 (unregistering): Released all slaves
[  250.034006][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.056891][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.086045][ T9751] bridge_slave_0: entered allmulticast mode
[  250.112211][ T9751] bridge_slave_0: entered promiscuous mode
[  250.145125][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.179137][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.200883][ T9751] bridge_slave_1: entered allmulticast mode
[  250.218241][ T9822] loop2: detected capacity change from 0 to 40427
[  250.220604][ T9751] bridge_slave_1: entered promiscuous mode
[  250.269520][ T9822] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  250.290449][ T5085] Bluetooth: hci1: command tx timeout
[  250.304907][ T9822] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  250.323632][ T9751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.339113][ T9751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.379781][ T9822] F2FS-fs (loop2): invalid crc value
[  250.475207][ T9592] veth0_macvtap: entered promiscuous mode
[  250.491784][ T9822] F2FS-fs (loop2): Found nat_bits in checkpoint
[  250.596787][ T9751] team0: Port device team_slave_0 added
[  250.624228][ T9592] veth1_macvtap: entered promiscuous mode
[  250.642911][ T9751] team0: Port device team_slave_1 added
[  250.703459][ T9822] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  250.728626][ T9822] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  250.775172][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.814950][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.832248][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.843325][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.857006][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.881268][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.888443][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.926182][ T9751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.955370][ T5773] syz-executor: attempt to access beyond end of device
[  250.955370][ T5773] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  250.979744][ T9751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.994303][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  250.998084][ T9751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.056185][ T9751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.092643][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.124545][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.140186][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.159980][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.178315][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.296832][ T9751] hsr_slave_0: entered promiscuous mode
[  251.318105][ T9751] hsr_slave_1: entered promiscuous mode
[  251.340203][ T9751] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.384062][ T9751] Cannot create hsr debugfs directory
[  251.412595][ T9592] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.427297][ T9592] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.450002][ T9592] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.458756][ T9592] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.809868][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.846716][ T9855] loop6: detected capacity change from 0 to 512
[  251.854323][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.985429][ T9855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.012135][ T9855] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  252.076785][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.119964][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.218038][ T9364] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.370196][ T5085] Bluetooth: hci1: command tx timeout
[  252.445403][ T9751] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  252.489701][ T9751] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  252.525438][ T9751] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  252.548673][ T9751] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  252.815024][ T9751] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.876208][ T9751] 8021q: adding VLAN 0 to HW filter on device team0
[  252.934404][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.935437][ T9884] loop2: detected capacity change from 0 to 512
[  252.941607][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.970968][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.978158][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.982695][ T9884] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  253.121390][ T9884] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1381: invalid indirect mapped block 32768 (level 2)
[  253.144877][ T9751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  253.167104][ T9884] EXT4-fs (loop2): Remounting filesystem read-only
[  253.215805][ T9884] EXT4-fs (loop2): 1 orphan inode deleted
[  253.242174][ T9884] EXT4-fs (loop2): 1 truncate cleaned up
[  253.249552][ T9884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.474524][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.832990][ T9751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.050207][   T27] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  254.232504][   T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.261767][   T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  254.296839][   T27] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  254.327048][   T27] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.360525][   T27] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  254.380035][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.452503][ T5085] Bluetooth: hci1: command tx timeout
[  254.493616][ T9751] veth0_vlan: entered promiscuous mode
[  254.510652][ T9751] veth1_vlan: entered promiscuous mode
[  254.595504][ T9751] veth0_macvtap: entered promiscuous mode
[  254.631039][ T9751] veth1_macvtap: entered promiscuous mode
[  254.674714][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.706151][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.726676][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.747690][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.768637][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.801794][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.829816][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.850372][   T27] gud: probe of 7-1:1.0 failed with error -121
[  254.884336][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.911111][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.947286][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.978231][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.998817][ T9751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.024556][ T9751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.047107][ T9751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.089105][ T9751] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.111647][ T9751] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.129657][ T1202] usb 7-1: USB disconnect, device number 2
[  255.134288][ T9751] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.177383][ T9751] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.370049][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.389076][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.464886][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.495755][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.735254][ T9939] loop2: detected capacity change from 0 to 32768
[  255.758608][ T9939] (syz.2.1394,9939,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  255.832156][ T9939] (syz.2.1394,9939,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  255.916106][ T9939] JBD2: Ignoring recovery information on journal
[  256.070534][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  256.076917][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.111185][ T9939] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  256.257662][   T28] audit: type=1400 audit(2000000931.899:25): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9968 comm="syz.7.1398" name="unknown" offset=16
[  256.425849][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  256.986387][ T9991] netlink: 'syz.2.1406': attribute type 17 has an invalid length.
[  256.997437][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'.
[  257.023728][ T9991] bond0: option all_slaves_active: invalid value (8)
[  258.260875][T10041] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  258.460008][T10044] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1423'.
[  258.964842][T10063] loop6: detected capacity change from 0 to 512
[  259.127403][T10063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.220375][T10063] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.445418][T10063] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  259.556319][T10063] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  259.623542][T10063] EXT4-fs (loop6): This should not happen!! Data will be lost
[  259.623542][T10063] 
[  259.682696][T10063] EXT4-fs (loop6): Total free blocks count 0
[  259.721543][T10063] EXT4-fs (loop6): Free/Dirty block details
[  259.765583][T10063] EXT4-fs (loop6): free_blocks=65280
[  259.782559][T10063] EXT4-fs (loop6): dirty_blocks=33
[  259.811234][T10063] EXT4-fs (loop6): Block reservation details
[  259.817299][T10063] EXT4-fs (loop6): i_reserved_data_blocks=33
[  260.022966][ T9364] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.041922][T10059] loop8: detected capacity change from 0 to 131072
[  260.057062][T10059] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945)
[  260.065793][T10059] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  260.084092][T10059] F2FS-fs (loop8): invalid crc value
[  260.119017][T10059] F2FS-fs (loop8): Found nat_bits in checkpoint
[  260.160177][   T56] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  260.200056][T10059] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  260.207236][T10059] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  260.228902][T10059] F2FS-fs (loop8): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix.
[  260.393653][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  260.416022][   T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.450534][   T56] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  260.510323][   T56] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  260.560583][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.589443][   T56] usb 3-1: config 0 descriptor??
[  261.031539][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.051752][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.075770][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.084903][T10104] veth1_to_hsr: entered allmulticast mode
[  261.099999][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.108625][T10101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1440'.
[  261.138792][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.159092][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.193864][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.213340][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.240104][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.260425][T10076] loop7: detected capacity change from 0 to 32768
[  261.262016][   T56] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0
[  261.340283][   T56] hid-generic 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  261.366780][T10076] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  261.386455][   T56] usb 3-1: USB disconnect, device number 12
[  261.564193][T10076] XFS (loop7): Ending clean mount
[  261.607139][T10115] fido_id[10115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  261.776341][ T9592] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  261.852330][T10127] loop2: detected capacity change from 0 to 256
[  261.941995][T10127] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d)
[  263.310754][ T5815] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  263.411868][T10177] loop7: detected capacity change from 0 to 2048
[  263.470657][T10177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.520330][ T5815] usb 9-1: Using ep0 maxpacket: 16
[  263.531954][ T5815] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  263.550751][T10177] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.578919][ T5815] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  263.650329][ T5815] usb 9-1: config 0 interface 0 has no altsetting 0
[  263.657052][ T5815] usb 9-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00
[  263.710264][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.760313][ T5815] usb 9-1: config 0 descriptor??
[  263.798393][ T9592] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.254675][T10200] loop7: detected capacity change from 0 to 4096
[  264.271783][ T5815] logitech 0003:046D:C704.000B: hiddev0,hidraw0: USB HID v3.4f Device [HID 046d:c704] on usb-dummy_hcd.8-1/input0
[  264.284551][T10200] NILFS (loop7): invalid segment: Checksum error in segment payload
[  264.284578][T10200] NILFS (loop7): trying rollback from an earlier position
[  264.325454][T10200] NILFS (loop7): recovery complete
[  264.358929][T10202] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.380190][ T5813] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  264.431383][ T5833] usb 9-1: USB disconnect, device number 2
[  264.580262][ T5813] usb 7-1: Using ep0 maxpacket: 8
[  264.589839][ T5813] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  264.594470][T10201] fido_id[10201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  264.623099][ T5813] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  264.646100][T10204] NILFS (loop7): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  264.653517][T10179] loop2: detected capacity change from 0 to 32768
[  264.677699][ T5813] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  264.713944][ T5813] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  264.756048][ T5813] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  264.810603][T10179] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  264.840941][ T5813] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  264.897262][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.921923][T10202] NILFS (loop7): nilfs_direct_assign (ino=3): invalid pointer: 0
[  264.960640][   T28] audit: type=1800 audit(2000000940.599:26): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1463" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  264.975504][T10202] NILFS error (device loop7): nilfs_bmap_assign: broken bmap (inode number=3)
[  265.022074][T10179] (syz.2.1463,10179,0):ocfs2_double_lock:1192 ERROR: status = -2
[  265.047148][T10202] Remounting filesystem read-only
[  265.072923][ T1099] NILFS (loop7): discard dirty page: offset=0, ino=3
[  265.095818][ T1099] NILFS (loop7): discard dirty block: blocknr=12, size=1024
[  265.124664][ T1099] NILFS (loop7): discard dirty block: blocknr=13, size=1024
[  265.156021][ T5813] usb 7-1: GET_CAPABILITIES returned 0
[  265.160021][ T1099] NILFS (loop7): discard dirty block: blocknr=14, size=1024
[  265.168856][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.182999][ T5813] usbtmc 7-1:16.0: can't read capabilities
[  265.201218][ T1099] NILFS (loop7): discard dirty page: offset=131072, ino=3
[  265.222144][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.236967][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.270761][ T1099] NILFS (loop7): discard dirty block: blocknr=0, size=1024
[  265.278127][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.297053][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  265.309663][ T1099] NILFS (loop7): discard dirty page: offset=0, ino=12
[  265.338520][ T1099] NILFS (loop7): discard dirty block: blocknr=0, size=1024
[  265.368272][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.381564][   T56] usb 7-1: USB disconnect, device number 3
[  265.410848][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.434273][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.460167][ T1099] NILFS (loop7): discard dirty page: offset=0, ino=2
[  265.470285][ T1099] NILFS (loop7): discard dirty block: blocknr=5, size=1024
[  265.488027][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.505934][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.525261][ T1099] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.555410][ T9592] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  265.576964][ T9592] NILFS (loop7): discard dirty page: offset=0, ino=6
[  265.597180][ T9592] NILFS (loop7): discard dirty block: blocknr=6, size=1024
[  265.609985][ T9592] NILFS (loop7): discard dirty block: blocknr=7, size=1024
[  265.632659][ T9592] NILFS (loop7): discard dirty block: blocknr=8, size=1024
[  265.659708][ T9592] NILFS (loop7): discard dirty block: blocknr=9, size=1024
[  265.669053][ T9592] NILFS (loop7): discard dirty page: offset=0, ino=5
[  265.677672][ T9592] NILFS (loop7): discard dirty block: blocknr=11, size=1024
[  265.685350][ T9592] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.695566][ T9592] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.706874][ T9592] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.717074][ T9592] NILFS (loop7): discard dirty page: offset=0, ino=4
[  265.737056][ T9592] NILFS (loop7): discard dirty block: blocknr=10, size=1024
[  265.747794][ T9592] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.757007][ T9592] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.766481][ T9592] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  265.789370][T10224] sd 0:0:1:0: PR command failed: 1026
[  265.833288][T10224] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  265.866225][T10224] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  266.022616][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1468'.
[  266.999215][T10261] loop2: detected capacity change from 0 to 4096
[  267.030121][T10261] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  268.238946][T10271] loop8: detected capacity change from 0 to 32768
[  268.333791][T10271] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  268.467595][T10271] XFS (loop8): Ending clean mount
[  268.676664][ T9751] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  269.346024][T10288] loop7: detected capacity change from 0 to 32768
[  269.443120][T10288] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.590958][T10288] XFS (loop7): Ending clean mount
[  269.609281][T10336] loop8: detected capacity change from 0 to 1024
[  269.736132][T10336] hfsplus: invalid length 1280 has been corrected to 255
[  269.854130][ T9592] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  270.821206][T10370] loop6: detected capacity change from 0 to 128
[  271.137461][T10366] ftl_cs: FTL header not found.
[  271.479672][T10366] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[  271.710053][ T9763] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  271.900875][T10384] 
[  271.934672][ T9763] usb 7-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config
[  271.998349][ T9763] usb 7-1: config 1 interface 0 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  272.062637][ T9763] usb 7-1: config 1 interface 0 has no altsetting 0
[  272.102284][ T9763] usb 7-1: string descriptor 0 read error: -22
[  272.118944][ T9763] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  272.162518][ T9763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.229698][ T9763] usb 7-1: bad CDC descriptors
[  272.238034][T10389] loop2: detected capacity change from 0 to 256
[  272.337758][T10373] loop7: detected capacity change from 0 to 131072
[  272.346315][T10373] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945)
[  272.355313][T10373] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  272.374912][T10373] F2FS-fs (loop7): invalid crc value
[  272.481373][T10373] F2FS-fs (loop7): Found nat_bits in checkpoint
[  272.539103][T10373] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  272.546435][T10373] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  272.619818][ T5813] usb 7-1: USB disconnect, device number 4
[  272.720316][T10373] F2FS-fs (loop7): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix.
[  273.769826][T10386] loop8: detected capacity change from 0 to 40427
[  273.841273][T10386] F2FS-fs (loop8): invalid crc value
[  273.887882][T10386] F2FS-fs (loop8): Found nat_bits in checkpoint
[  274.041671][T10422] C: renamed from team_slave_0 (while UP)
[  274.078244][T10422] netlink: 'syz.2.1522': attribute type 2 has an invalid length.
[  274.098622][T10422] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1522'.
[  274.119257][T10386] F2FS-fs (loop8): Start checkpoint disabled!
[  274.138260][T10422] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  274.210831][T10386] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  274.631587][ T4607] kworker/u4:9: attempt to access beyond end of device
[  274.631587][ T4607] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  274.677734][ T4607] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  274.698073][ T4607] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  275.125563][T10449] loop2: detected capacity change from 0 to 4096
[  275.173118][T10449] EXT4-fs: Ignoring removed nobh option
[  275.178911][T10449] EXT4-fs: Ignoring removed bh option
[  275.226207][T10449] EXT4-fs (loop2): Test dummy encryption mode enabled
[  275.285952][T10449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.616808][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.546994][T10497] loop2: detected capacity change from 0 to 4096
[  276.651166][T10505] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.015356][T10520] loop7: detected capacity change from 0 to 1024
[  277.156568][   T11] hfsplus: b-tree write err: -5, ino 3
[  277.688498][T10540] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  277.741799][T10540] CIFS: Attempting to mount //1#7.0.0.1/�7�/�䅯��yshare
[  277.763848][T10540] CIFS: VFS: Error connecting to socket. Aborting operation.
[  277.780286][T10540] CIFS: VFS: cifs_mount failed w/return code = -111
[  317.496286][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  317.505202][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  350.290156][ T5085] Bluetooth: hci3: command 0x0406 tx timeout
[  360.530146][ T5085] Bluetooth: hci2: command 0x0406 tx timeout
[  378.936491][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.943384][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  401.500207][ T5085] Bluetooth: hci1: command 0x0406 tx timeout
[  423.090108][   T29] INFO: task syz-executor:5761 blocked for more than 143 seconds.
[  423.097978][   T29]       Not tainted syzkaller #0
[  423.103604][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  423.112522][   T29] task:syz-executor    state:D stack:22472 pid:5761  ppid:5760   flags:0x00004002
[  423.121906][   T29] Call Trace:
[  423.125287][   T29]  <TASK>
[  423.128310][   T29]  __schedule+0x15ae/0x4660
[  423.133101][   T29]  ? mark_lock+0x94/0x320
[  423.137578][   T29]  ? asan.module_dtor+0x20/0x20
[  423.142568][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  423.147643][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  423.153623][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  423.158912][   T29]  schedule+0xbd/0x170
[  423.163072][   T29]  io_schedule+0x80/0xd0
[  423.167362][   T29]  bit_wait_io+0x11/0xd0
[  423.171812][   T29]  __wait_on_bit+0x9f/0x2c0
[  423.176358][   T29]  ? bit_wait+0xd0/0xd0
[  423.183615][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  423.189221][   T29]  ? bit_wait+0xd0/0xd0
[  423.193457][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  423.198391][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  423.203850][   T29]  ? bit_waitqueue+0x30/0x30
[  423.208531][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  423.214123][   T29]  do_get_write_access+0x5c9/0xe00
[  423.219483][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  423.225565][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  423.234093][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  423.240356][   T29]  ? __might_sleep+0xe0/0xe0
[  423.244983][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  423.251691][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  423.257232][   T29]  ext4_dirty_inode+0xcb/0x110
[  423.262166][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  423.268189][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  423.273387][   T29]  file_update_time+0x187/0x1a0
[  423.278273][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  423.283395][   T29]  ? do_wp_page+0x4ce/0x34d0
[  423.288060][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  423.294432][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  423.299490][   T29]  do_page_mkwrite+0x153/0x3f0
[  423.304812][   T29]  do_wp_page+0xd4d/0x34d0
[  423.309279][   T29]  ? folio_put+0xd0/0xd0
[  423.313821][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  423.318884][   T29]  ? __rwlock_init+0x150/0x150
[  423.323769][   T29]  handle_mm_fault+0x1306/0x4a50
[  423.328737][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  423.333817][   T29]  ? numa_migrate_prep+0x350/0x350
[  423.338966][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  423.344320][   T29]  do_user_addr_fault+0x736/0x12d0
[  423.349495][   T29]  exc_page_fault+0x64/0x100
[  423.354168][   T29]  asm_exc_page_fault+0x26/0x30
[  423.359080][   T29] RIP: 0033:0x7f83f087c862
[  423.363636][   T29] RSP: 002b:00007ffe4a922f80 EFLAGS: 00010246
[  423.369767][   T29] RAX: 00007f83ee818000 RBX: 0000555560383c40 RCX: 0000000000000000
[  423.377851][   T29] RDX: 00000000000030ae RSI: 000055556038e578 RDI: 0000000000000001
[  423.385886][   T29] RBP: 00007ffe4a923480 R08: 000055556038e588 R09: 0000000000000090
[  423.394094][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe4a9232c0
[  423.402163][   T29] R13: 00007ffe4a9230b0 R14: 585858582e7a7973 R15: 00007ffe4a923000
[  423.410904][   T29]  </TASK>
[  423.414003][   T29] INFO: task syz.2.1554:10526 blocked for more than 143 seconds.
[  423.421951][   T29]       Not tainted syzkaller #0
[  423.426903][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  423.435724][   T29] task:syz.2.1554      state:D stack:27048 pid:10526 ppid:5773   flags:0x00004004
[  423.445023][   T29] Call Trace:
[  423.448317][   T29]  <TASK>
[  423.451367][   T29]  __schedule+0x15ae/0x4660
[  423.455955][   T29]  ? mark_lock+0x94/0x320
[  423.460402][   T29]  ? asan.module_dtor+0x20/0x20
[  423.465286][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  423.470422][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  423.476361][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  423.481619][   T29]  schedule+0xbd/0x170
[  423.485737][   T29]  io_schedule+0x80/0xd0
[  423.490083][   T29]  bit_wait_io+0x11/0xd0
[  423.494366][   T29]  __wait_on_bit+0x9f/0x2c0
[  423.498897][   T29]  ? bit_wait+0xd0/0xd0
[  423.503145][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  423.509249][   T29]  ? bit_wait+0xd0/0xd0
[  423.513538][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  423.518342][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  423.523451][   T29]  ? bit_waitqueue+0x30/0x30
[  423.528089][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  423.533403][   T29]  do_get_write_access+0x5c9/0xe00
[  423.538555][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  423.544858][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  423.551160][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  423.557352][   T29]  ? __might_sleep+0xe0/0xe0
[  423.562007][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  423.567582][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  423.573137][   T29]  ext4_dirty_inode+0xcb/0x110
[  423.577922][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  423.583998][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  423.589064][   T29]  file_update_time+0x187/0x1a0
[  423.593991][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  423.599039][   T29]  ? filemap_fault+0x103c/0x1540
[  423.604055][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  423.609802][   T29]  ? pte_alloc_one+0x3b6/0x540
[  423.615206][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  423.621621][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  423.626681][   T29]  do_page_mkwrite+0x153/0x3f0
[  423.631546][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  423.636538][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  423.641620][   T29]  ? numa_migrate_prep+0x350/0x350
[  423.646794][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  423.652393][   T29]  do_user_addr_fault+0x736/0x12d0
[  423.657566][   T29]  exc_page_fault+0x64/0x100
[  423.662227][   T29]  asm_exc_page_fault+0x26/0x30
[  423.667104][   T29] RIP: 0033:0x7f12cc072989
[  423.671619][   T29] RSP: 002b:00007ffdc1a11e80 EFLAGS: 00010202
[  423.677716][   T29] RAX: 0000001b2dd24000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  423.685750][   T29] RDX: 0000001b2dd23ffc RSI: 00000000005ffde8 RDI: 00007f12ccf55700
[  423.693786][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f12cc412000
[  423.701887][   T29] R10: 00007f12ccf55700 R11: 0000000000000001 R12: 0000000000000000
[  423.709945][   T29] R13: 00000000000041a4 R14: ffffffff81322060 R15: 00007f12ccf55720
[  423.718312][   T29]  ? fpregs_assert_state_consistent+0xb0/0xe0
[  423.724486][   T29]  </TASK>
[  423.727528][   T29] INFO: task syz.6.1558:10534 blocked for more than 143 seconds.
[  423.735568][   T29]       Not tainted syzkaller #0
[  423.740569][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  423.749251][   T29] task:syz.6.1558      state:D stack:27048 pid:10534 ppid:9364   flags:0x00004004
[  423.758540][   T29] Call Trace:
[  423.761998][   T29]  <TASK>
[  423.764953][   T29]  __schedule+0x15ae/0x4660
[  423.769470][   T29]  ? mark_lock+0x94/0x320
[  423.773893][   T29]  ? asan.module_dtor+0x20/0x20
[  423.778792][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  423.783920][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  423.789910][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  423.795161][   T29]  schedule+0xbd/0x170
[  423.799267][   T29]  io_schedule+0x80/0xd0
[  423.803595][   T29]  bit_wait_io+0x11/0xd0
[  423.807861][   T29]  __wait_on_bit+0x9f/0x2c0
[  423.812497][   T29]  ? bit_wait+0xd0/0xd0
[  423.817032][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  423.822610][   T29]  ? bit_wait+0xd0/0xd0
[  423.826804][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  423.831683][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  423.836775][   T29]  ? bit_waitqueue+0x30/0x30
[  423.841440][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  423.846687][   T29]  do_get_write_access+0x5c9/0xe00
[  423.851895][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  423.857905][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  423.864157][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  423.870637][   T29]  ? __might_sleep+0xe0/0xe0
[  423.875264][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  423.880897][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  423.886403][   T29]  ext4_dirty_inode+0xcb/0x110
[  423.891556][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  423.897409][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  423.902518][   T29]  file_update_time+0x187/0x1a0
[  423.907417][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  423.912744][   T29]  ? filemap_fault+0x103c/0x1540
[  423.917743][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  423.924305][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  423.930816][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  423.935874][   T29]  ? __pte_offset_map+0x20d/0x280
[  423.941177][   T29]  do_page_mkwrite+0x153/0x3f0
[  423.945974][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  423.951199][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  423.956169][   T29]  ? numa_migrate_prep+0x350/0x350
[  423.961370][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  423.966680][   T29]  do_user_addr_fault+0x736/0x12d0
[  423.971995][   T29]  exc_page_fault+0x64/0x100
[  423.976622][   T29]  ? clear_bhb_loop+0x40/0x90
[  423.981614][   T29]  asm_exc_page_fault+0x26/0x30
[  423.986489][   T29] RIP: 0033:0x7f4450e72929
[  423.991000][   T29] RSP: 002b:00007ffd4a82d9e0 EFLAGS: 00010202
[  423.997094][   T29] RAX: 0000001b34f20000 RBX: ffffffff84336485 RCX: 0000001b34f1fff8
[  424.005134][   T29] RDX: 0000001b3492421c RSI: 0000000000000008 RDI: 00007f4451d55720
[  424.013164][   T29] RBP: 0000000000000011 R08: 00007f4451210000 R09: 00007f4451212000
[  424.021778][   T29] R10: 0000000084336489 R11: 0000000000000003 R12: 00007f4451226038
[  424.029772][   T29] R13: 0000000000000010 R14: ffffffff84336255 R15: 00007f4451d55720
[  424.037843][   T29]  ? iovec_from_user+0x1b5/0x240
[  424.042929][   T29]  ? __import_iovec+0x75/0x850
[  424.047731][   T29]  </TASK>
[  424.050929][   T29] INFO: task syz.8.1562:10545 blocked for more than 144 seconds.
[  424.058682][   T29]       Not tainted syzkaller #0
[  424.064232][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  424.073306][   T29] task:syz.8.1562      state:D stack:27560 pid:10545 ppid:9751   flags:0x00004004
[  424.082636][   T29] Call Trace:
[  424.086022][   T29]  <TASK>
[  424.088959][   T29]  __schedule+0x15ae/0x4660
[  424.093583][   T29]  ? mark_lock+0x94/0x320
[  424.098038][   T29]  ? asan.module_dtor+0x20/0x20
[  424.102982][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  424.108040][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  424.114194][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  424.119444][   T29]  schedule+0xbd/0x170
[  424.124053][   T29]  io_schedule+0x80/0xd0
[  424.128336][   T29]  bit_wait_io+0x11/0xd0
[  424.135216][   T29]  __wait_on_bit+0x9f/0x2c0
[  424.139993][   T29]  ? bit_wait+0xd0/0xd0
[  424.144190][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  424.149649][   T29]  ? bit_wait+0xd0/0xd0
[  424.154045][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  424.158860][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  424.163997][   T29]  ? bit_waitqueue+0x30/0x30
[  424.168638][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  424.174012][   T29]  do_get_write_access+0x5c9/0xe00
[  424.179185][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  424.185305][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  424.191655][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  424.197961][   T29]  ? __might_sleep+0xe0/0xe0
[  424.202890][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  424.208479][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  424.214469][   T29]  ext4_dirty_inode+0xcb/0x110
[  424.219459][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  424.226044][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  424.231225][   T29]  file_update_time+0x187/0x1a0
[  424.236118][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  424.241285][   T29]  ? filemap_fault+0x103c/0x1540
[  424.246259][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  424.252121][   T29]  ? pte_alloc_one+0x3b6/0x540
[  424.256917][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  424.263209][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  424.268270][   T29]  do_page_mkwrite+0x153/0x3f0
[  424.273111][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  424.278089][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  424.283113][   T29]  ? numa_migrate_prep+0x350/0x350
[  424.288263][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  424.294071][   T29]  do_user_addr_fault+0x736/0x12d0
[  424.299208][   T29]  exc_page_fault+0x64/0x100
[  424.303877][   T29]  ? clear_bhb_loop+0x40/0x90
[  424.308579][   T29]  asm_exc_page_fault+0x26/0x30
[  424.313739][   T29] RIP: 0033:0x7fe7bb46bc23
[  424.318218][   T29] RSP: 002b:00007ffe5c501d80 EFLAGS: 00010246
[  424.324376][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d264000
[  424.333477][   T29] RDX: 0000001b2d224000 RSI: 0000000000400000 RDI: 00007fe7bb7e2708
[  424.341544][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  424.349535][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  424.357582][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe5c502010
[  424.365612][   T29]  </TASK>
[  424.368641][   T29] 
[  424.368641][   T29] Showing all locks held in the system:
[  424.376467][   T29] 1 lock held by khungtaskd/29:
[  424.381384][   T29]  #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  424.391418][   T29] 6 locks held by kworker/u4:8/3441:
[  424.396732][   T29]  #0: ffff88801de6c138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  424.408085][   T29]  #1: ffffc9000c827d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  424.420880][   T29]  #2: ffff88814dfe20e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  424.432083][   T29]  #3: ffff88814dfe4c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  424.442652][   T29]  #4: ffff88814dfe6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  424.452425][   T29]  #5: ffff888077260288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90
[  424.462303][   T29] 2 locks held by klogd/5128:
[  424.467011][   T29] 2 locks held by getty/5530:
[  424.471843][   T29]  #0: ffff88823bd960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  424.481892][   T29]  #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  424.492139][   T29] 3 locks held by syz-executor/5761:
[  424.497529][   T29]  #0: ffff88807e224420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  424.507538][   T29]  #1: ffff88814dfe2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  424.517415][   T29]  #2: ffff88814dfe6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  424.527168][   T29] 3 locks held by syz.2.1554/10526:
[  424.532542][   T29]  #0: ffff88807ef10b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  424.543432][   T29]  #1: ffff88814dfe2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  424.553278][   T29]  #2: ffff88814dfe6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  424.563013][   T29] 3 locks held by syz.6.1558/10534:
[  424.568224][   T29]  #0: ffff88807ef16a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  424.578222][   T29]  #1: ffff88814dfe2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  424.588090][   T29]  #2: ffff88814dfe6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  424.597862][   T29] 3 locks held by syz.8.1562/10545:
[  424.603167][   T29]  #0: ffff88801886cda0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  424.613225][   T29]  #1: ffff88814dfe2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  424.623083][   T29]  #2: ffff88814dfe6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  424.633072][   T29] 
[  424.635983][   T29] =============================================
[  424.635983][   T29] 
[  424.644798][   T29] NMI backtrace for cpu 1
[  424.649163][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  424.656355][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  424.666405][   T29] Call Trace:
[  424.669682][   T29]  <TASK>
[  424.672609][   T29]  dump_stack_lvl+0x18c/0x250
[  424.677294][   T29]  ? __wake_up_klogd+0xd9/0x100
[  424.682147][   T29]  ? show_regs_print_info+0x20/0x20
[  424.687353][   T29]  ? load_image+0x420/0x420
[  424.691862][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  424.696797][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  424.702967][   T29]  ? load_image+0x420/0x420
[  424.707506][   T29]  ? wq_watchdog_touch+0xef/0x170
[  424.712560][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  424.718636][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  424.724618][   T29]  watchdog+0xf59/0xfa0
[  424.728804][   T29]  ? watchdog+0x1e1/0xfa0
[  424.733137][   T29]  kthread+0x2fa/0x390
[  424.737201][   T29]  ? hungtask_pm_notify+0x50/0x50
[  424.742228][   T29]  ? kthread_blkcg+0xd0/0xd0
[  424.746814][   T29]  ret_from_fork+0x48/0x80
[  424.751245][   T29]  ? kthread_blkcg+0xd0/0xd0
[  424.755861][   T29]  ret_from_fork_asm+0x11/0x20
[  424.760686][   T29]  </TASK>
[  424.764473][   T29] Sending NMI from CPU 1 to CPUs 0:
[  424.769895][    C0] NMI backtrace for cpu 0
[  424.769905][    C0] CPU: 0 PID: 1099 Comm: kworker/u4:7 Not tainted syzkaller #0
[  424.769921][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  424.769930][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  424.769980][    C0] RIP: 0010:kvfree_call_rcu+0x542/0x780
[  424.770004][    C0] Code: 8d 7c b3 38 be 04 00 00 00 e8 8a f3 6e 00 f0 42 ff 44 b3 38 83 3d e9 db fa 0d 02 75 08 48 89 df e8 63 02 00 00 48 8b 7c 24 20 <48> 8b 74 24 10 e8 c4 43 2b 09 48 c7 44 24 40 0e 36 e0 45 4b c7 04
[  424.770061][    C0] RSP: 0018:ffffc9000464f1e0 EFLAGS: 00000006
[  424.770074][    C0] RAX: 1ffffffff1b81e40 RBX: ffff8880b8c29218 RCX: ffffffff81718366
[  424.770086][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880b8c29398
[  424.770096][    C0] RBP: ffffc9000464f2a8 R08: ffff8880b8c293df R09: 1ffff1101718527b
[  424.770107][    C0] R10: dffffc0000000000 R11: ffffed101718527c R12: ffff88801de97028
[  424.770117][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920008c9e44
[  424.770134][    C0] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  424.770148][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.770158][    C0] CR2: 0000555cf1984168 CR3: 000000000dd32000 CR4: 00000000003506f0
[  424.770173][    C0] Call Trace:
[  424.770178][    C0]  <TASK>
[  424.770184][    C0]  ? ret_from_fork_asm+0x11/0x20
[  424.770208][    C0]  ? call_rcu+0x900/0x900
[  424.770233][    C0]  cfg80211_update_known_bss+0x186/0x960
[  424.770258][    C0]  __cfg80211_bss_update+0x144/0x21e0
[  424.770282][    C0]  ? do_raw_spin_lock+0x11f/0x2b0
[  424.770302][    C0]  ? __rwlock_init+0x150/0x150
[  424.770321][    C0]  ? rcu_is_watching+0x15/0xb0
[  424.770341][    C0]  ? cfg80211_inform_bss_frame_data+0xa9d/0x1330
[  424.770364][    C0]  cfg80211_inform_bss_frame_data+0xadb/0x1330
[  424.770393][    C0]  ? cfg80211_parse_ml_sta_data+0x1a80/0x1a80
[  424.770437][    C0]  ? ieee80211_bss_info_update+0x387/0x9f0
[  424.770465][    C0]  ? ieee80211_bss_info_update+0x387/0x9f0
[  424.770485][    C0]  ieee80211_bss_info_update+0x789/0x9f0
[  424.770508][    C0]  ? ieee80211_inform_bss+0xfd0/0xfd0
[  424.770532][    C0]  ? ieee80211_mandatory_rates+0x1cc/0x230
[  424.770552][    C0]  ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0
[  424.770569][    C0]  ? verify_lock_unused+0x140/0x140
[  424.770594][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xecc/0x2dc0
[  424.770611][    C0]  ? ieee80211_ibss_rx_no_sta+0x790/0x790
[  424.770631][    C0]  ? mark_lock+0x94/0x320
[  424.770649][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  424.770667][    C0]  ? __lock_acquire+0x7eb0/0x7eb0
[  424.770684][    C0]  ? lock_chain_count+0x20/0x20
[  424.770700][    C0]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  424.770726][    C0]  ? kcov_remote_start+0x8b/0x810
[  424.770746][    C0]  ? skb_dequeue+0x124/0x160
[  424.770803][    C0]  ieee80211_iface_work+0x730/0xc90
[  424.770823][    C0]  cfg80211_wiphy_work+0x228/0x260
[  424.770840][    C0]  ? process_scheduled_works+0x975/0x1600
[  424.770860][    C0]  process_scheduled_works+0xa60/0x1600
[  424.770893][    C0]  ? worker_attach_to_pool+0x370/0x370
[  424.770914][    C0]  ? assign_work+0x3cc/0x5d0
[  424.770936][    C0]  worker_thread+0xa5e/0xfe0
[  424.770962][    C0]  ? _raw_spin_unlock+0x40/0x40
[  424.770980][    C0]  ? __kthread_parkme+0x71/0x1c0
[  424.771000][    C0]  kthread+0x2fa/0x390
[  424.771014][    C0]  ? pr_cont_work+0x550/0x550
[  424.771032][    C0]  ? kthread_blkcg+0xd0/0xd0
[  424.771047][    C0]  ret_from_fork+0x48/0x80
[  424.771065][    C0]  ? kthread_blkcg+0xd0/0xd0
[  424.771080][    C0]  ret_from_fork_asm+0x11/0x20
[  424.771107][    C0]  </TASK>
[  424.773493][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  425.125039][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  425.132232][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  425.142279][   T29] Call Trace:
[  425.145554][   T29]  <TASK>
[  425.148484][   T29]  dump_stack_lvl+0x18c/0x250
[  425.153182][   T29]  ? show_regs_print_info+0x20/0x20
[  425.158376][   T29]  ? load_image+0x420/0x420
[  425.162884][   T29]  panic+0x2ca/0x720
[  425.166777][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  425.171286][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  425.176852][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  425.182226][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  425.188378][   T29]  watchdog+0xf98/0xfa0
[  425.192535][   T29]  ? watchdog+0x1e1/0xfa0
[  425.196864][   T29]  kthread+0x2fa/0x390
[  425.200927][   T29]  ? hungtask_pm_notify+0x50/0x50
[  425.205948][   T29]  ? kthread_blkcg+0xd0/0xd0
[  425.210572][   T29]  ret_from_fork+0x48/0x80
[  425.215005][   T29]  ? kthread_blkcg+0xd0/0xd0
[  425.219602][   T29]  ret_from_fork_asm+0x11/0x20
[  425.224386][   T29]  </TASK>
[  425.227589][   T29] Kernel Offset: disabled
[  425.231913][   T29] Rebooting in 86400 seconds..