last executing test programs:

10m54.505824057s ago: executing program 1 (id=64):
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}], 0x1)
syz_usbip_server_init(0x5)
fsopen(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x2880)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mq_notify(r1, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r5 = syz_open_pts(r4, 0x141601)
fcntl$setstatus(r5, 0x4, 0x182400)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x19)
close_range(r3, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, 0x0)

10m52.33002491s ago: executing program 1 (id=68):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9, 0x10000}, &(0x7f00000010c0)=0x18)
ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1003, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000103c0))
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$FUSE_INIT(r6, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)

10m50.949989483s ago: executing program 1 (id=69):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

10m46.740379715s ago: executing program 1 (id=77):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x800010, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x47c, &(0x7f0000000640)="$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")
open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})

10m42.604488754s ago: executing program 1 (id=84):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
poll(&(0x7f0000000100), 0x0, 0x3ff)
listen(0xffffffffffffffff, 0xda90)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x9, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x8, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x44, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0xfffffffe, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

10m39.498235739s ago: executing program 1 (id=90):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x4)
write(0xffffffffffffffff, &(0x7f0000000140)="24000000010006", 0x7)
r4 = memfd_secret(0x80000)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r4, r4}, 0xc)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fanotify_init(0xf00, 0x1000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_mptcp_buf(r6, 0x11c, 0x1, &(0x7f0000000400), &(0x7f0000000500)=0x100)

10m37.019476038s ago: executing program 32 (id=90):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x4)
write(0xffffffffffffffff, &(0x7f0000000140)="24000000010006", 0x7)
r4 = memfd_secret(0x80000)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r4, r4}, 0xc)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fanotify_init(0xf00, 0x1000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_mptcp_buf(r6, 0x11c, 0x1, &(0x7f0000000400), &(0x7f0000000500)=0x100)

1m44.40713892s ago: executing program 4 (id=1471):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x5, {0x9, 0x38, 0x2, 0x14, 0x3, 0x7fe0, 0x0, 0xbd, 0xfffffffffffffffe}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m44.297782472s ago: executing program 4 (id=1473):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13})
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x50)
ioctl$UI_DEV_CREATE(r2, 0x5501)
socket$inet6_udp(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000)

1m44.193351065s ago: executing program 4 (id=1475):
r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100a, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000600)=[@acquire], 0x0, 0x0, 0x0})

1m40.832800026s ago: executing program 4 (id=1481):
syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)=<r2=>0x0, &(0x7f0000001240)=<r3=>0x0, &(0x7f0000001280)=<r4=>0x0)
read$char_usb(r0, &(0x7f0000000100)=""/159, 0x9f)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000012c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x0)

1m40.624033191s ago: executing program 4 (id=1485):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xf, 0xfff, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write(r2, &(0x7f0000000500)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/nullb/nullb1/memory_backed\x00', 0x80000, 0x0)
write(r3, &(0x7f0000000e00)='1\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff)
mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001000)="53464f5ad309e7e5", 0x1000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
close(0xffffffffffffffff)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, 0x0, &(0x7f0000000200)=0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680))
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/66)

1m39.165866526s ago: executing program 4 (id=1491):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m38.981633841s ago: executing program 33 (id=1491):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

9.632050478s ago: executing program 3 (id=1779):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

9.493758272s ago: executing program 2 (id=1780):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x8000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240))

8.154227754s ago: executing program 2 (id=1781):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_procfs(r0, &(0x7f0000000580)='mountinfo\x00')

8.127318984s ago: executing program 3 (id=1782):
setns(0xc9, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33)

7.846121511s ago: executing program 3 (id=1783):
r0 = msgget$private(0x0, 0x1ba)
msgsnd(r0, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0)

6.485636414s ago: executing program 3 (id=1784):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

5.880690688s ago: executing program 5 (id=1786):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}])

5.860758149s ago: executing program 0 (id=1787):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xf, 0xfff, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write(r2, &(0x7f0000000500)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/nullb/nullb1/memory_backed\x00', 0x80000, 0x0)
write(r3, &(0x7f0000000e00)='1\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff)
mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0)
write(r5, &(0x7f0000001000)="53464f5ad309e7e5", 0x1000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, &(0x7f0000000200)=0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680))
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/66)

5.559197496s ago: executing program 0 (id=1788):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'multiq3\x00', [0x100, 0x4, 0x0, 0x2, 0x44, 0xf3, 0x79, 0x4, 0x80008, 0x5, 0x2, 0x64, 0xea, 0x1, 0x80006, 0xfd, 0x6, 0x3, 0x3, 0x7fffffff, 0xb740, 0xca9d, 0xdc, 0x20001e58, 0x8, 0xf39c, 0x8003, 0x1539b804, 0x5, 0x1, 0x2]})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x4010012, r1, 0x1000)

5.506463627s ago: executing program 5 (id=1789):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x8000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240))

4.187628179s ago: executing program 5 (id=1790):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="2e000000010002", 0x7)

4.054958732s ago: executing program 0 (id=1791):
setns(0xc9, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfe33)

3.823327598s ago: executing program 0 (id=1792):
r0 = msgget$private(0x0, 0x1ba)
msgsnd(r0, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0)

2.500497049s ago: executing program 0 (id=1793):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.332380363s ago: executing program 3 (id=1794):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000000)=""/49, 0x31)
unlinkat(r4, &(0x7f00000000c0)='./file0\x00', 0x200)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)

1.933747873s ago: executing program 2 (id=1795):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

885.684098ms ago: executing program 2 (id=1796):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xf, 0xfff, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write(r2, &(0x7f0000000500)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/nullb/nullb1/memory_backed\x00', 0x80000, 0x0)
write(r3, &(0x7f0000000e00)='1\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff)
mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0)
write(r5, &(0x7f0000001000)="53464f5ad309e7e5", 0x1000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, &(0x7f0000000200)=0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680))
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/66)

775.332771ms ago: executing program 5 (id=1797):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}])

530.628387ms ago: executing program 2 (id=1798):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x890c, &(0x7f0000000100))

359.586791ms ago: executing program 2 (id=1799):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1}, 0x0)

281.905713ms ago: executing program 5 (id=1800):
setns(0xc9, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfe33)

246.568374ms ago: executing program 0 (id=1801):
r0 = msgget$private(0x0, 0x1ba)
msgsnd(r0, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0)

125.360477ms ago: executing program 3 (id=1802):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

0s ago: executing program 5 (id=1803):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8854)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfd, 0x80}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xf}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

kernel console output (not intermixed with test programs):

][   T27] audit: type=1800 audit(1786341732.286:87): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.483" name="memory_backed" dev="configfs" ino=14421 res=0 errno=0
[  286.493577][   T27] audit: type=1800 audit(1786341732.296:88): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.483" name="zone_nr_conv" dev="configfs" ino=14422 res=0 errno=0
[  287.476294][ T7851] input: syz0 as /devices/virtual/input/input9
[  288.396215][ T7858] netlink: 'syz.0.491': attribute type 4 has an invalid length.
[  288.642009][    T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  288.846367][    T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.893030][    T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.920978][    T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  288.963313][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.988717][    T8] usb 3-1: Product: syz
[  288.998680][    T8] usb 3-1: Manufacturer: syz
[  289.005143][    T8] usb 3-1: SerialNumber: syz
[  289.134989][   T27] audit: type=1800 audit(1786341734.976:89): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.495" name="memory_backed" dev="configfs" ino=14477 res=0 errno=0
[  289.163834][   T27] audit: type=1800 audit(1786341734.996:90): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.495" name="zone_nr_conv" dev="configfs" ino=14478 res=0 errno=0
[  289.265665][    T8] usb 3-1: USB disconnect, device number 4
[  289.728233][ T7882] input: syz0 as /devices/virtual/input/input10
[  290.239175][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802b693c00: rx timeout, send abort
[  290.747557][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802b693c00: abort rx timeout. Force session deactivation
[  293.529983][ T7909] input: syz0 as /devices/virtual/input/input11
[  295.362382][ T3569] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  295.592925][ T3569] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.628424][ T3569] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.654199][ T3569] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  295.663412][ T3569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.671503][ T3569] usb 5-1: Product: syz
[  295.679186][ T3569] usb 5-1: Manufacturer: syz
[  295.685219][ T3569] usb 5-1: SerialNumber: syz
[  295.924981][ T3569] usb 5-1: USB disconnect, device number 4
[  299.240217][ T7946] loop4: detected capacity change from 0 to 1024
[  300.748718][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'.
[  303.651924][    C1] sched: RT throttling activated
[  303.840144][   T28] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  304.171423][ T7979] loop3: detected capacity change from 0 to 512
[  304.371512][ T7980] loop0: detected capacity change from 0 to 32768
[  304.382747][ T7980] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  304.395431][   T28] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.399850][ T5761] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  304.405798][   T28] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  304.431859][   T28] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  304.633171][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.641325][   T28] usb 5-1: Product: syz
[  304.645659][   T28] usb 5-1: Manufacturer: syz
[  304.650352][   T28] usb 5-1: SerialNumber: syz
[  304.698444][ T6017] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  304.969029][   T28] usb 5-1: USB disconnect, device number 5
[  305.917641][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'.
[  306.678035][ T8000] loop3: detected capacity change from 0 to 1024
[  308.416431][ T8001] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  309.979345][ T8016] loop0: detected capacity change from 0 to 128
[  310.181204][ T8019] loop3: detected capacity change from 0 to 32768
[  310.190919][ T8015] input: syz0 as /devices/virtual/input/input13
[  310.210140][ T8019] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  310.672452][    T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  310.903438][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.928593][    T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  310.967147][    T8] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  310.992049][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.000068][    T8] usb 5-1: Product: syz
[  311.017761][    T8] usb 5-1: Manufacturer: syz
[  311.027930][    T8] usb 5-1: SerialNumber: syz
[  311.287983][    T8] usb 5-1: USB disconnect, device number 6
[  312.251265][ T8039] loop3: detected capacity change from 0 to 1024
[  313.285759][ T8049] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  315.231177][ T8060] input: syz0 as /devices/virtual/input/input14
[  316.129102][ T8063] loop0: detected capacity change from 0 to 32768
[  316.148521][ T8063] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  316.541063][ T5761] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  316.790564][ T8070] loop3: detected capacity change from 0 to 128
[  317.157923][ T8070] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  317.186664][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.193100][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  317.294318][ T6017] udevd[6017]: incorrect ext4 checksum on /dev/loop3
[  317.328963][ T6017] udevd[6017]: incorrect ext4 checksum on /dev/loop3
[  317.502202][ T8077] loop4: detected capacity change from 0 to 512
[  317.549273][ T8077] journal_path: Lookup failure for './file0'
[  317.568625][ T8077] EXT4-fs: error: could not find journal device path
[  317.587201][ T8069] loop3: detected capacity change from 0 to 1024
[  317.866500][ T8081] loop2: detected capacity change from 0 to 1024
[  318.855573][ T8089] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  320.110775][ T8098] loop4: detected capacity change from 0 to 32768
[  320.132305][ T8098] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  320.144499][ T8098] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  320.153281][ T8098] BTRFS info (device loop4): turning on sync discard
[  320.159971][ T8098] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  320.169395][ T8098] BTRFS info (device loop4): use zstd compression, level 3
[  320.176631][ T8098] BTRFS info (device loop4): turning on async discard
[  320.183426][ T8098] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  320.194300][ T8098] BTRFS info (device loop4): trying to use backup root at mount time
[  320.202444][ T8098] BTRFS info (device loop4): enabling auto defrag
[  320.208851][ T8098] BTRFS info (device loop4): using free space tree
[  320.311092][ T5918] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  320.334790][ T8098] BTRFS error (device loop4): failed to load root extent
[  320.342085][ T8098] BTRFS warning (device loop4): try to load backup roots slot 1
[  320.350110][ T5887] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  320.391262][ T8098] BTRFS warning (device loop4): couldn't read tree root
[  320.398829][ T8098] BTRFS warning (device loop4): try to load backup roots slot 2
[  320.409317][ T5918] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  320.483923][ T8098] BTRFS warning (device loop4): couldn't read tree root
[  320.490927][ T8098] BTRFS warning (device loop4): try to load backup roots slot 3
[  320.512097][ T8098] BTRFS info (device loop4): enabling ssd optimizations
[  320.533754][ T8098] BTRFS info (device loop4): rebuilding free space tree
[  320.547110][ T8098] BTRFS info (device loop4): checking UUID tree
[  320.908001][ T6308] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  322.214360][ T8145] loop2: detected capacity change from 0 to 1024
[  324.013231][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'.
[  324.156949][ T8157] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  325.180972][ T8159] loop4: detected capacity change from 0 to 32768
[  325.358122][ T8159] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.574 (8159)
[  325.481279][ T8159] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  325.491571][ T8159] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  325.500356][ T8159] BTRFS info (device loop4): turning on sync discard
[  325.507157][ T8159] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  325.517953][ T8159] BTRFS info (device loop4): use zstd compression, level 3
[  325.525345][ T8159] BTRFS info (device loop4): turning on async discard
[  325.532244][ T8159] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  325.543076][ T8159] BTRFS info (device loop4): trying to use backup root at mount time
[  325.551214][ T8159] BTRFS info (device loop4): enabling auto defrag
[  325.557757][ T8159] BTRFS info (device loop4): using free space tree
[  326.298747][ T5914] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  326.587052][ T8159] BTRFS error (device loop4): failed to load root extent
[  326.595528][ T8159] BTRFS warning (device loop4): try to load backup roots slot 1
[  326.604782][ T5914] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  326.637843][ T8159] BTRFS warning (device loop4): couldn't read tree root
[  326.646148][ T8159] BTRFS warning (device loop4): try to load backup roots slot 2
[  326.654797][ T5918] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  326.721015][ T8159] BTRFS warning (device loop4): couldn't read tree root
[  326.728965][ T8159] BTRFS warning (device loop4): try to load backup roots slot 3
[  326.761201][ T8159] BTRFS info (device loop4): enabling ssd optimizations
[  326.812320][ T8159] BTRFS info (device loop4): rebuilding free space tree
[  326.839183][ T8159] BTRFS info (device loop4): checking UUID tree
[  326.882690][ T3569] IPVS: starting estimator thread 0...
[  327.843012][ T8200] IPVS: using max 18 ests per chain, 43200 per kthread
[  328.398908][ T8205] loop0: detected capacity change from 0 to 1024
[  329.477109][ T6308] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  330.153792][ T8211] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  331.071658][ T8215] ecryptfs_parse_options: eCryptfs: unrecognized option [³(]
[  331.079096][ T8215] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)]
[  331.086571][ T8215] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  331.099634][ T8215] Error parsing options; rc = [-22]
[  331.401441][ T5761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (5761)
[  331.437165][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'.
[  333.836516][ T5775] Bluetooth: hci2: command 0x0406 tx timeout
[  336.932170][ T6676] IPVS: starting estimator thread 0...
[  337.032065][ T8249] IPVS: using max 36 ests per chain, 86400 per kthread
[  338.789045][ T8256] ecryptfs_parse_options: eCryptfs: unrecognized option [³(]
[  338.796521][ T8256] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)]
[  338.804026][ T8256] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  338.817138][ T8256] Error parsing options; rc = [-22]
[  338.947950][ T8259] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  343.668330][ T5775] Bluetooth: hci3: unexpected event for opcode 0x1408
[  345.108409][ T8302] loop2: detected capacity change from 0 to 128
[  347.520508][ T8308] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  350.902180][ T8341] loop3: detected capacity change from 0 to 128
[  352.041234][ T8346] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  352.303597][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'.
[  353.655903][ T8360] binder_alloc: 8356: binder_alloc_buf, no vma
[  355.859498][ T8384] loop2: detected capacity change from 0 to 1024
[  356.236111][ T8395] input: syz0 as /devices/virtual/input/input19
[  356.536106][ T8393] loop2: detected capacity change from 0 to 4096
[  356.821283][ T8393] EXT4-fs (loop2): Test dummy encryption mode enabled
[  357.079132][ T8393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.373269][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.662392][ T8417] binder_alloc: 8414: binder_alloc_buf, no vma
[  359.877374][ T8434] loop0: detected capacity change from 0 to 1024
[  360.720296][ T8443] loop2: detected capacity change from 0 to 16
[  360.748135][ T8443] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  360.873083][ T8448] input: syz0 as /devices/virtual/input/input20
[  366.710032][ T8483] loop4: detected capacity change from 0 to 1024
[  367.718751][ T8500] loop4: detected capacity change from 0 to 4096
[  367.756231][ T8500] EXT4-fs (loop4): Test dummy encryption mode enabled
[  367.821193][ T8500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.478821][ T6308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.862416][ T8527] input: syz0 as /devices/virtual/input/input21
[  371.049906][ T8532] loop2: detected capacity change from 0 to 1024
[  371.321860][ T8537] loop2: detected capacity change from 0 to 1024
[  372.650176][ T8546] nvme_fcloop: unknown parameter or missing value 'ww'
[  373.946961][ T8556] binder: 8555:8556 ioctl c00c6211 0 returned -14
[  375.409727][ T8572] loop2: detected capacity change from 0 to 1024
[  376.495317][ T8577] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  376.659325][ T8585] loop2: detected capacity change from 0 to 1024
[  378.637575][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  378.647075][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  380.718178][ T8616] nvme_fcloop: unknown parameter or missing value 'ww'
[  381.099626][ T8620] loop0: detected capacity change from 0 to 1024
[  381.696767][ T8622] loop2: detected capacity change from 0 to 32768
[  381.740378][ T8622] JBD2: Ignoring recovery information on journal
[  381.889214][ T8622] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  381.932873][ T5896] (kworker/u4:14,5896,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  382.241119][ T5770] ocfs2: Unmounting device (7,2) on (node local)
[  383.468278][ T8648] loop0: detected capacity change from 0 to 4096
[  383.515094][ T8648] EXT4-fs (loop0): Test dummy encryption mode enabled
[  383.534185][ T8650] loop4: detected capacity change from 0 to 1024
[  383.636430][ T8648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.420767][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.179575][ T8665] nvme_fcloop: unknown parameter or missing value 'ww'
[  388.811682][ T8687] loop2: detected capacity change from 0 to 1024
[  391.536018][ T8696] loop4: detected capacity change from 0 to 4096
[  391.665479][ T8696] EXT4-fs (loop4): Test dummy encryption mode enabled
[  391.987124][ T8696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.549227][ T6308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.084955][ T8755] input: syz0 as /devices/virtual/input/input22
[  403.116681][ T8753] loop2: detected capacity change from 0 to 1024
[  408.997662][ T8799] Bluetooth: MGMT ver 1.22
[  411.088649][ T8811] input: syz0 as /devices/virtual/input/input23
[  411.111172][ T8810] loop0: detected capacity change from 0 to 4096
[  411.154258][ T8810] EXT4-fs (loop0): Test dummy encryption mode enabled
[  411.280684][ T8810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.409099][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.328384][ T8825] Process accounting resumed
[  415.724598][ T8836] nfs: Unknown parameter '0'
[  417.528103][ T8845] loop4: detected capacity change from 0 to 4096
[  417.661049][ T8845] EXT4-fs (loop4): Test dummy encryption mode enabled
[  418.495723][ T8845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.525328][ T8856] nvme_fcloop: unknown parameter or missing value 'ww'
[  420.311886][ T6308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.134044][ T8880] loop0: detected capacity change from 0 to 512
[  423.342814][ T8747] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  423.403168][ T8880] overlayfs: missing 'lowerdir'
[  424.303385][ T8887] netlink: 'syz.0.764': attribute type 4 has an invalid length.
[  426.598321][ T8897] loop0: detected capacity change from 0 to 4096
[  426.642205][ T8897] EXT4-fs (loop0): Test dummy encryption mode enabled
[  426.675716][ T8897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.943832][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.976184][ T8905] device-mapper: ioctl: name not supplied when creating device
[  427.673393][ T8913] nvme_fcloop: unknown parameter or missing value 'ww'
[  428.972365][ T8926] syz.4.775 uses obsolete (PF_INET,SOCK_PACKET)
[  430.921589][ T8940] device-mapper: ioctl: name not supplied when creating device
[  433.102698][   T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  433.372294][   T28] usb 1-1: Using ep0 maxpacket: 32
[  433.382812][   T28] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  433.391109][   T28] usb 1-1: config 0 has no interface number 0
[  433.430626][   T28] usb 1-1: config 0 interface 184 has no altsetting 0
[  433.534743][   T28] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  433.649805][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.658374][   T28] usb 1-1: Product: syz
[  433.663163][   T28] usb 1-1: Manufacturer: syz
[  433.667787][   T28] usb 1-1: SerialNumber: syz
[  433.713183][   T28] usb 1-1: config 0 descriptor??
[  433.734653][   T28] smsc75xx v1.0.0
[  435.456505][ T8968] loop4: detected capacity change from 0 to 4096
[  435.467120][ T8968] EXT4-fs (loop4): Test dummy encryption mode enabled
[  435.525396][ T8968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.584816][   T28] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  435.651243][   T28] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  435.688018][   T28] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  435.704150][ T6308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.718231][   T28] smsc75xx: probe of 1-1:0.184 failed with error -71
[  435.772388][   T28] usb 1-1: USB disconnect, device number 4
[  435.938968][ T8973] device-mapper: ioctl: name not supplied when creating device
[  439.843727][ T9010] device-mapper: ioctl: name not supplied when creating device
[  440.067709][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.092091][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  441.499336][ T9019] loop3: detected capacity change from 0 to 4096
[  441.521113][ T9019] EXT4-fs (loop3): Test dummy encryption mode enabled
[  441.594546][ T9019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.850122][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.445351][ T9048] device-mapper: ioctl: name not supplied when creating device
[  449.166457][ T9081] device-mapper: ioctl: name not supplied when creating device
[  451.389711][ T9098] input: syz0 as /devices/virtual/input/input25
[  454.587000][ T9130] device-mapper: ioctl: name not supplied when creating device
[  454.818995][ T9135] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  455.944083][ T9153] input: syz0 as /devices/virtual/input/input26
[  457.269022][ T9170] device-mapper: ioctl: name not supplied when creating device
[  460.650113][ T9203] device-mapper: ioctl: name not supplied when creating device
[  462.733227][ T9225] nvme_fcloop: unknown parameter or missing value 'ww'
[  465.430714][ T9254] netlink: 'syz.3.856': attribute type 4 has an invalid length.
[  468.062905][ T9289] netlink: 'syz.0.866': attribute type 4 has an invalid length.
[  468.848546][ T9303] nvme_fcloop: unknown parameter or missing value 'ww'
[  471.491468][ T9339] input: syz0 as /devices/virtual/input/input27
[  474.589072][ T9362] nvme_fcloop: unknown parameter or missing value 'ww'
[  474.662768][ T3569] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  474.682756][ T9372] input: syz0 as /devices/virtual/input/input28
[  476.443740][ T3569] usb 3-1: Using ep0 maxpacket: 32
[  476.487566][ T3569] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  476.509019][ T3569] usb 3-1: config 0 has no interface number 0
[  476.533410][ T3569] usb 3-1: config 0 interface 184 has no altsetting 0
[  476.571535][ T3569] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  476.586192][ T3569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.608357][ T3569] usb 3-1: Product: syz
[  476.612958][ T3569] usb 3-1: Manufacturer: syz
[  476.617690][ T3569] usb 3-1: SerialNumber: syz
[  476.632690][ T3569] usb 3-1: config 0 descriptor??
[  476.649352][ T3569] smsc75xx v1.0.0
[  476.868867][ T3569] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  476.917526][ T3569] smsc75xx: probe of 3-1:0.184 failed with error -71
[  477.342811][ T3569] usb 3-1: USB disconnect, device number 5
[  479.388142][ T9405] input: syz0 as /devices/virtual/input/input29
[  481.060417][ T3569] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  481.241012][ T9421] binder: BINDER_SET_CONTEXT_MGR already set
[  481.252086][ T9421] binder: 9419:9421 ioctl 4018620d 200000004a80 returned -16
[  481.293109][ T3569] usb 1-1: Using ep0 maxpacket: 8
[  481.299669][ T3569] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  481.309531][ T3569] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  481.323480][ T3569] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping
[  481.334425][ T3569] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  481.354999][ T9422] nvme_fcloop: unknown parameter or missing value 'ww'
[  481.362357][ T3569] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  481.376933][ T3569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.400390][ T3569] usbtmc 1-1:16.0: bulk endpoints not found
[  483.233018][ T6676] usb 1-1: USB disconnect, device number 5
[  484.673448][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'.
[  485.013918][ T9467] loop4: detected capacity change from 0 to 1024
[  490.557540][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  491.783313][ T9503] loop2: detected capacity change from 0 to 1024
[  492.513599][ T9511] fuse: Bad value for 'fd'
[  495.584330][ T9547] loop0: detected capacity change from 0 to 1024
[  498.218109][ T9564] loop3: detected capacity change from 0 to 32768
[  498.237374][ T9564] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  498.332137][ T8758] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  500.399620][ T9601] loop2: detected capacity change from 0 to 1024
[  501.378873][ T9606] input: syz0 as /devices/virtual/input/input30
[  501.530680][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  501.550570][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  503.213738][ T9644] tmpfs: Unknown parameter 'grpquota_block_hardli'
[  504.122380][ T9661] input: syz0 as /devices/virtual/input/input31
[  506.075387][ T9676] loop0: detected capacity change from 0 to 1024
[  508.126962][ T9703] input: syz0 as /devices/virtual/input/input32
[  509.258170][ T9713] loop4: detected capacity change from 0 to 1024
[  511.943783][ T9727] syz.4.992 (9727): drop_caches: 2
[  512.102235][ T6676] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  512.228794][ T9750] input: syz0 as /devices/virtual/input/input33
[  512.402018][ T6676] usb 4-1: Using ep0 maxpacket: 32
[  512.402178][ T5156] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  512.848953][ T5156] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  512.985592][ T5156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.565470][ T6676] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  514.303245][ T6676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.322758][ T6676] usb 4-1: config 0 descriptor??
[  514.369141][ T6676] as10x_usb: device has been detected
[  514.398463][ T6676] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  514.488709][ T9754] loop4: detected capacity change from 0 to 1024
[  514.829507][ T5156] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  514.837259][ T6676] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  514.860101][ T5156] usb 1-1: USB disconnect, device number 6
[  515.033661][ T6676] as10x_usb: error during firmware upload part1
[  515.040517][ T6676] Registered device nBox DVB-T Dongle
[  515.058967][ T6676] usb 4-1: USB disconnect, device number 5
[  515.329484][ T6676] Unregistered device nBox DVB-T Dongle
[  515.384959][ T6676] as10x_usb: device has been disconnected
[  519.224055][ T9777] Process accounting resumed
[  519.549081][ T9786] input: syz0 as /devices/virtual/input/input34
[  522.774864][ T9805] loop2: detected capacity change from 0 to 1024
[  524.409817][ T9815] Process accounting resumed
[  524.642384][ T9828] input: syz0 as /devices/virtual/input/input35
[  526.584490][ T9839] loop2: detected capacity change from 0 to 1024
[  527.377442][ T9862] input: syz0 as /devices/virtual/input/input36
[  528.557314][ T9870] loop0: detected capacity change from 0 to 1024
[  530.654915][ T9897] input: syz0 as /devices/virtual/input/input37
[  531.843836][ T9906] loop0: detected capacity change from 0 to 1024
[  535.394982][ T9953] loop3: detected capacity change from 0 to 1024
[  537.324036][ T9966] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1067'.
[  538.355590][ T6676] IPVS: starting estimator thread 0...
[  538.453825][ T9973] IPVS: using max 25 ests per chain, 60000 per kthread
[  543.123659][ T6676] IPVS: starting estimator thread 0...
[  543.222176][T10005] IPVS: using max 22 ests per chain, 52800 per kthread
[  543.359936][T10007] loop3: detected capacity change from 0 to 32768
[  543.403243][T10007] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  545.444548][ T8758] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  546.793409][T10033] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1087'.
[  552.625943][   T27] audit: type=1800 audit(1786341998.466:91): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1094" name="zoned" dev="configfs" ino=22125 res=0 errno=0
[  552.879216][T10075] zonefs (nullb1) ERROR: Not a zoned block device
[  552.925803][   T27] audit: type=1800 audit(1786341998.466:92): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1094" name="memory_backed" dev="configfs" ino=22126 res=0 errno=0
[  553.202118][   T27] audit: type=1800 audit(1786341998.476:93): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1094" name="zone_nr_conv" dev="configfs" ino=22127 res=0 errno=0
[  553.240895][   T27] audit: type=1800 audit(1786341998.476:94): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1094" name="power" dev="configfs" ino=22128 res=0 errno=0
[  553.372092][   T27] audit: type=1800 audit(1786341999.196:95): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1104" name="zone_size" dev="configfs" ino=22148 res=0 errno=0
[  555.434258][T10104] syzkaller0: entered promiscuous mode
[  555.439801][T10104] syzkaller0: entered allmulticast mode
[  555.454440][ T5894] syzkaller0: tun_net_xmit 48
[  555.460374][T10104] syzkaller0: tun_net_xmit 1
[  556.033311][T10113] fuse: blksize only supported for fuseblk
[  558.050969][T10120] Process accounting resumed
[  560.789461][T10148] Process accounting resumed
[  561.127962][   T27] audit: type=1326 audit(1786342006.966:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.151957][    C1] vkms_vblank_simulate: vblank timer overrun
[  561.238748][   T27] audit: type=1326 audit(1786342006.966:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.289468][   T27] audit: type=1326 audit(1786342006.966:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.313495][    C1] vkms_vblank_simulate: vblank timer overrun
[  561.336769][   T27] audit: type=1326 audit(1786342006.966:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.365204][   T27] audit: type=1326 audit(1786342006.966:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.428993][   T27] audit: type=1326 audit(1786342006.966:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.453069][    C1] vkms_vblank_simulate: vblank timer overrun
[  561.470421][   T27] audit: type=1326 audit(1786342006.966:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.538011][   T27] audit: type=1326 audit(1786342006.966:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.643799][ T5892] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  561.652887][   T27] audit: type=1326 audit(1786342006.966:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  561.681584][   T27] audit: type=1326 audit(1786342006.966:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.0.1130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3aae99e0d9 code=0x7ffc0000
[  562.432155][ T5892] usb 5-1: device descriptor read/64, error -71
[  562.456308][T10178] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  562.482191][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  562.691320][    T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  562.710684][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.712084][ T5892] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  562.726579][    T9] usb 1-1: Product: syz
[  562.726599][    T9] usb 1-1: Manufacturer: syz
[  562.726614][    T9] usb 1-1: SerialNumber: syz
[  562.741673][    T9] usb 1-1: config 0 descriptor??
[  562.943466][ T5892] usb 5-1: device descriptor read/64, error -71
[  562.950247][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  562.957109][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  563.041768][    T9] usb 1-1: USB disconnect, device number 7
[  563.235977][ T5892] usb usb5-port1: attempt power cycle
[  564.283648][ T5892] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  564.352274][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'.
[  564.508296][T10225] loop3: detected capacity change from 0 to 32768
[  564.522217][ T5892] usb 5-1: device not accepting address 9, error -71
[  564.539105][T10225] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  564.543738][T10220] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  564.558680][T10220] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  564.567549][T10220] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  564.576339][T10220] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  564.788574][ T9413] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  566.372055][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  566.552165][    T9] usb 4-1: device descriptor read/64, error -71
[  566.730532][T10270] loop0: detected capacity change from 0 to 32768
[  566.748600][T10270] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  566.919138][ T8758] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  566.942278][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  567.102643][    T9] usb 4-1: device descriptor read/64, error -71
[  567.288057][    T9] usb usb4-port1: attempt power cycle
[  568.303374][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  568.344921][    T9] usb 4-1: device descriptor read/8, error -71
[  568.376038][T10286] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  568.450846][T10286] rt1719: probe of 0-0049 failed with error -5
[  568.467243][T10286] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49
[  568.484543][T10288] wusb3801 0-004a: supply vbus not found, using dummy regulator
[  568.563909][T10288] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a
[  568.784951][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  568.938236][   T27] kauditd_printk_skb: 35 callbacks suppressed
[  568.938354][   T27] audit: type=1800 audit(1786342014.656:141): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1174" name="zoned" dev="configfs" ino=22757 res=0 errno=0
[  568.992152][    T9] usb 4-1: device descriptor read/8, error -71
[  569.162096][   T27] audit: type=1800 audit(1786342014.696:142): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1174" name="memory_backed" dev="configfs" ino=22758 res=0 errno=0
[  569.172235][    T9] usb usb4-port1: unable to enumerate USB device
[  569.182972][    C1] vkms_vblank_simulate: vblank timer overrun
[  569.236725][   T27] audit: type=1800 audit(1786342014.726:143): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1174" name="zone_nr_conv" dev="configfs" ino=22759 res=0 errno=0
[  569.262948][   T27] audit: type=1800 audit(1786342014.746:144): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1174" name="power" dev="configfs" ino=22760 res=0 errno=0
[  569.574223][T10295] loop3: detected capacity change from 0 to 32768
[  569.582810][T10295] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  571.306315][ T8758] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  571.524025][T10319] 9pnet_virtio: no channels available for device syz
[  571.907809][T10337] binder: 10332:10337 unknown command 1074553619
[  571.915047][T10337] binder: 10332:10337 ioctl c0306201 200000000040 returned -22
[  572.147928][T10336] loop2: detected capacity change from 0 to 32768
[  572.157366][T10336] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  572.276453][ T8758] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  575.112027][   T27] audit: type=1800 audit(1786342020.926:145): pid=10378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1200" name="/" dev="fuse" ino=1 res=0 errno=0
[  575.398886][T10384] loop4: detected capacity change from 0 to 32768
[  575.483445][T10384] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  575.496300][T10384] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  575.505354][T10384] BTRFS info (device loop4): turning on sync discard
[  575.512317][T10384] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  575.521746][T10384] BTRFS info (device loop4): use zstd compression, level 3
[  575.529062][T10384] BTRFS info (device loop4): turning on async discard
[  575.535882][T10384] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  575.546541][T10384] BTRFS info (device loop4): trying to use backup root at mount time
[  575.554664][T10384] BTRFS info (device loop4): enabling auto defrag
[  575.561131][T10384] BTRFS info (device loop4): using free space tree
[  575.688199][ T5898] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  575.772262][T10384] BTRFS error (device loop4): failed to load root extent
[  575.779857][T10384] BTRFS warning (device loop4): try to load backup roots slot 1
[  575.793442][ T5902] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  575.850908][T10384] BTRFS warning (device loop4): couldn't read tree root
[  575.858045][T10384] BTRFS warning (device loop4): try to load backup roots slot 2
[  575.869773][ T5898] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  575.907190][T10384] BTRFS warning (device loop4): couldn't read tree root
[  575.914411][T10384] BTRFS warning (device loop4): try to load backup roots slot 3
[  575.930068][T10384] BTRFS info (device loop4): enabling ssd optimizations
[  575.937826][T10384] BTRFS info (device loop4): rebuilding free space tree
[  575.954969][T10384] BTRFS info (device loop4): checking UUID tree
[  578.510941][ T6308] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  580.432485][ T8758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (8758)
[  580.642478][   T27] audit: type=1800 audit(1786342026.486:146): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1218" name="zoned" dev="configfs" ino=23938 res=0 errno=0
[  580.662649][    C1] vkms_vblank_simulate: vblank timer overrun
[  580.712035][   T27] audit: type=1800 audit(1786342026.516:147): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1218" name="memory_backed" dev="configfs" ino=23939 res=0 errno=0
[  580.743469][T10460] zonefs (nullb1) ERROR: Not a zoned block device
[  580.751247][T10462] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10462]
[  580.780668][   T27] audit: type=1800 audit(1786342026.516:148): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1218" name="zone_nr_conv" dev="configfs" ino=23940 res=0 errno=0
[  580.837330][   T27] audit: type=1800 audit(1786342026.516:149): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1218" name="power" dev="configfs" ino=23941 res=0 errno=0
[  582.385426][T10475] loop0: detected capacity change from 0 to 32768
[  582.396656][T10475] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  582.650555][ T9413] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  583.699276][   T27] audit: type=1326 audit(1786342029.536:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde399e0d9 code=0x7ffc0000
[  583.754183][   T27] audit: type=1326 audit(1786342029.576:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde399e0d9 code=0x7ffc0000
[  583.778748][   T27] audit: type=1326 audit(1786342029.576:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efde395e90e code=0x7ffc0000
[  583.855800][   T27] audit: type=1326 audit(1786342029.576:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efde399f3d7 code=0x7ffc0000
[  583.879913][    C1] vkms_vblank_simulate: vblank timer overrun
[  584.091760][   T27] audit: type=1326 audit(1786342029.576:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efde399e0d9 code=0x7ffc0000
[  584.115804][    C1] vkms_vblank_simulate: vblank timer overrun
[  584.932309][   T27] audit: type=1326 audit(1786342029.576:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efde399f3d7 code=0x7ffc0000
[  585.428434][T10499] zonefs (nullb1) ERROR: Not a zoned block device
[  585.525813][T10502] Process accounting resumed
[  586.477261][T10525] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  586.498559][T10525] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  587.410656][   T27] kauditd_printk_skb: 34 callbacks suppressed
[  587.410672][   T27] audit: type=1800 audit(1786342033.246:190): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1241" name="zoned" dev="configfs" ino=24073 res=0 errno=0
[  587.420336][T10530] zonefs (nullb1) ERROR: Not a zoned block device
[  587.454719][   T27] audit: type=1800 audit(1786342033.246:191): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1241" name="memory_backed" dev="configfs" ino=24074 res=0 errno=0
[  587.482683][   T27] audit: type=1800 audit(1786342033.246:192): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1241" name="zone_nr_conv" dev="configfs" ino=24075 res=0 errno=0
[  587.578521][   T27] audit: type=1800 audit(1786342033.246:193): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1241" name="power" dev="configfs" ino=24076 res=0 errno=0
[  587.608215][T10531] Process accounting resumed
[  589.559583][T10547] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  590.984690][T10554] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  591.004869][T10554] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  592.035291][T10558] loop0: detected capacity change from 0 to 1024
[  592.635084][T10565] Process accounting resumed
[  595.283291][T10589] loop3: detected capacity change from 0 to 1024
[  596.171195][T10605] Process accounting resumed
[  596.814497][T10621] loop0: detected capacity change from 0 to 1024
[  599.048433][T10634] Process accounting resumed
[  599.773647][T10648] loop4: detected capacity change from 0 to 1024
[  600.075090][T10658] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  601.156558][T10663] Process accounting resumed
[  601.429777][T10676] loop3: detected capacity change from 0 to 1024
[  602.272687][T10683] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  602.284592][T10684] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  602.573515][T10688] loop3: detected capacity change from 0 to 1024
[  603.454763][T10693] Process accounting resumed
[  603.819282][T10709] loop0: detected capacity change from 0 to 1024
[  604.701249][ T5892] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  604.794187][T10714] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  604.912621][ T5892] usb 5-1: Using ep0 maxpacket: 32
[  604.920645][ T5892] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  604.930588][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  604.941800][ T5892] usb 5-1: config 0 has no interface number 0
[  604.962754][ T5892] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0
[  604.982115][ T5892] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  605.069316][ T5892] usb 5-1: config 0 interface 184 has no altsetting 0
[  605.086885][T10719] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  605.113257][T10719] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  605.122373][T10719] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  605.199997][ T5892] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  605.289590][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.379915][ T5892] usb 5-1: Product: syz
[  605.416825][ T5892] usb 5-1: Manufacturer: syz
[  605.458610][ T5892] usb 5-1: SerialNumber: syz
[  605.600365][ T5892] usb 5-1: config 0 descriptor??
[  605.810718][ T5892] smsc75xx v1.0.0
[  605.821843][ T5892] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  605.849376][T10721] loop3: detected capacity change from 0 to 1024
[  605.914363][ T5892] smsc75xx: probe of 5-1:0.184 failed with error -22
[  606.700938][T10732] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  606.722952][T10732] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  606.732104][T10732] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  607.467471][T10725] Process accounting resumed
[  607.492733][ T5892] usb 5-1: USB disconnect, device number 11
[  607.764810][T10734] loop3: detected capacity change from 0 to 32768
[  607.774089][T10734] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  607.889765][ T9413] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  608.026225][T10738] loop2: detected capacity change from 0 to 1024
[  608.939639][T10754] loop3: detected capacity change from 0 to 1024
[  611.334222][T10757] Process accounting resumed
[  611.421333][T10767] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  611.445778][T10767] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  611.454858][T10767] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  611.632235][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  611.893850][    T9] usb 5-1: Using ep0 maxpacket: 32
[  611.970238][    T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  612.071389][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  612.199456][    T9] usb 5-1: config 0 has no interface number 0
[  612.248844][T10771] fuse: Bad value for 'fd'
[  612.258698][    T9] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0
[  612.288256][    T9] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  612.322133][    T9] usb 5-1: config 0 interface 184 has no altsetting 0
[  612.367202][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  612.400240][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.421012][    T9] usb 5-1: Product: syz
[  612.429948][    T9] usb 5-1: Manufacturer: syz
[  612.479651][T10773] loop0: detected capacity change from 0 to 32768
[  612.493435][T10773] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  612.508794][    T9] usb 5-1: SerialNumber: syz
[  612.640594][    T9] usb 5-1: config 0 descriptor??
[  612.655420][    T9] smsc75xx v1.0.0
[  612.659836][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  612.670671][    T9] smsc75xx: probe of 5-1:0.184 failed with error -22
[  613.287690][T10776] loop3: detected capacity change from 0 to 1024
[  613.406247][ T8758] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  613.584428][T10782] loop0: detected capacity change from 0 to 1024
[  614.389557][ T6676] usb 5-1: USB disconnect, device number 12
[  615.968006][T10799] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  615.990851][T10799] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  616.000808][T10799] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  616.190201][T10794] Process accounting resumed
[  616.451239][T10808] loop3: detected capacity change from 0 to 32768
[  616.471178][T10808] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  616.690290][T10806] loop2: detected capacity change from 0 to 1024
[  619.440101][ T8758] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  619.654702][T10818] loop2: detected capacity change from 0 to 1024
[  619.941012][T10831] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  619.963411][T10831] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  619.972717][T10831] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  619.992138][ T6676] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  620.892043][ T6676] usb 5-1: Using ep0 maxpacket: 32
[  622.448052][ T6676] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  622.534331][ T6676] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  622.545184][ T6676] usb 5-1: config 0 has no interface number 0
[  622.554103][ T6676] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  622.567134][ T6676] usb 5-1: config 0 interface 184 has no altsetting 0
[  622.578645][ T6676] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  622.587951][ T6676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.600749][T10840] loop2: detected capacity change from 0 to 1024
[  622.607998][ T6676] usb 5-1: Product: syz
[  622.612250][ T6676] usb 5-1: Manufacturer: syz
[  622.616862][ T6676] usb 5-1: SerialNumber: syz
[  622.645529][ T6676] usb 5-1: config 0 descriptor??
[  622.736476][T10836] Process accounting resumed
[  622.792803][ T6676] usb 5-1: can't set config #0, error -71
[  622.813396][ T6676] usb 5-1: USB disconnect, device number 13
[  623.209292][T10843] loop4: detected capacity change from 0 to 32768
[  623.228403][T10843] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  623.238743][T10843] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  623.247596][T10843] BTRFS info (device loop4): turning on sync discard
[  623.254353][T10843] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  623.264343][T10843] BTRFS info (device loop4): use zstd compression, level 3
[  623.271568][T10843] BTRFS info (device loop4): turning on async discard
[  623.278421][T10843] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  623.289060][T10843] BTRFS info (device loop4): trying to use backup root at mount time
[  623.297616][T10843] BTRFS info (device loop4): enabling auto defrag
[  623.304090][T10843] BTRFS info (device loop4): using free space tree
[  624.160354][T10856] loop3: detected capacity change from 0 to 1024
[  624.276483][ T5900] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  624.308390][T10843] BTRFS error (device loop4): failed to load root extent
[  624.316061][T10843] BTRFS warning (device loop4): try to load backup roots slot 1
[  624.327488][ T2925] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  624.371260][T10843] BTRFS warning (device loop4): couldn't read tree root
[  624.380281][T10843] BTRFS warning (device loop4): try to load backup roots slot 2
[  624.400610][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  624.400724][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  624.416649][ T5896] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  624.427886][T10843] BTRFS warning (device loop4): couldn't read tree root
[  624.434938][T10843] BTRFS warning (device loop4): try to load backup roots slot 3
[  624.492110][T10843] BTRFS info (device loop4): enabling ssd optimizations
[  624.501569][T10843] BTRFS info (device loop4): rebuilding free space tree
[  624.544733][T10843] BTRFS info (device loop4): checking UUID tree
[  625.400712][T10895] Process accounting resumed
[  625.448348][ T6308] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  625.490447][   T27] audit: type=1800 audit(1786342071.326:194): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1365" name="zoned" dev="configfs" ino=25615 res=0 errno=0
[  625.526864][T10897] zonefs (nullb1) ERROR: Not a zoned block device
[  625.527876][   T27] audit: type=1800 audit(1786342071.326:195): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1365" name="memory_backed" dev="configfs" ino=25616 res=0 errno=0
[  625.556864][   T27] audit: type=1800 audit(1786342071.326:196): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1365" name="zone_nr_conv" dev="configfs" ino=25617 res=0 errno=0
[  625.587393][   T27] audit: type=1800 audit(1786342071.326:197): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1365" name="power" dev="configfs" ino=25618 res=0 errno=0
[  627.418734][T10924] loop3: detected capacity change from 0 to 32768
[  627.428711][T10924] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1373 (10924)
[  627.450727][T10924] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  627.461026][T10924] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  627.470049][T10924] BTRFS info (device loop3): turning on sync discard
[  627.476807][T10924] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  627.486272][T10924] BTRFS info (device loop3): use zstd compression, level 3
[  627.494052][T10924] BTRFS info (device loop3): turning on async discard
[  627.500843][T10924] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  627.511565][T10924] BTRFS info (device loop3): trying to use backup root at mount time
[  627.519727][T10924] BTRFS info (device loop3): enabling auto defrag
[  627.526229][T10924] BTRFS info (device loop3): using free space tree
[  627.557259][ T5909] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  627.577648][T10924] BTRFS error (device loop3): failed to load root extent
[  627.585007][T10924] BTRFS warning (device loop3): try to load backup roots slot 1
[  627.597949][ T5914] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  627.611316][T10924] BTRFS warning (device loop3): couldn't read tree root
[  627.620741][T10924] BTRFS warning (device loop3): try to load backup roots slot 2
[  627.631862][ T5909] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  627.642600][T10924] BTRFS warning (device loop3): couldn't read tree root
[  627.649604][T10924] BTRFS warning (device loop3): try to load backup roots slot 3
[  627.679080][T10924] BTRFS info (device loop3): enabling ssd optimizations
[  627.686699][T10924] BTRFS info (device loop3): rebuilding free space tree
[  627.713462][T10924] BTRFS info (device loop3): checking UUID tree
[  628.631691][T10951] input: syz0 as /devices/virtual/input/input38
[  629.084667][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  630.822113][ T3569] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  630.841129][T10975] input: syz0 as /devices/virtual/input/input39
[  631.619937][ T8758] udevd[8758]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  631.675963][ T8758] udevd[8758]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  631.759517][T10983] rtc_cmos 00:00: Alarms can be up to one day in the future
[  631.832059][ T3569] usb 5-1: Using ep0 maxpacket: 32
[  631.843887][ T3569] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  631.852728][ T3569] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  631.863509][ T3569] usb 5-1: config 0 has no interface number 0
[  631.869967][ T3569] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  631.885916][ T3569] usb 5-1: config 0 interface 184 has no altsetting 0
[  631.905035][ T3569] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  631.917863][ T3569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.930561][ T3569] usb 5-1: Product: syz
[  631.935899][ T3569] usb 5-1: Manufacturer: syz
[  631.940677][ T3569] usb 5-1: SerialNumber: syz
[  631.953006][ T3569] usb 5-1: config 0 descriptor??
[  631.962813][ T3569] smsc75xx v1.0.0
[  631.966543][ T3569] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  631.978693][ T3569] smsc75xx: probe of 5-1:0.184 failed with error -22
[  632.027649][   T27] audit: type=1800 audit(1786342077.866:198): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1390" name="zoned" dev="configfs" ino=24831 res=0 errno=0
[  632.049536][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  632.054124][T10992] zonefs (nullb1) ERROR: Not a zoned block device
[  632.058489][   T27] audit: type=1800 audit(1786342077.866:199): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1390" name="memory_backed" dev="configfs" ino=24832 res=0 errno=0
[  632.085489][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  632.093103][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  632.101186][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  632.106851][   T27] audit: type=1800 audit(1786342077.866:200): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1390" name="zone_nr_conv" dev="configfs" ino=24833 res=0 errno=0
[  632.108584][ T5847] rtc rtc0: __rtc_set_alarm: err=-22
[  632.153210][   T27] audit: type=1800 audit(1786342077.866:201): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1390" name="power" dev="configfs" ino=24834 res=0 errno=0
[  633.518321][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'.
[  633.559418][T11007] input: syz0 as /devices/virtual/input/input40
[  633.720256][   T28] usb 5-1: USB disconnect, device number 14
[  635.024745][T11029] input: syz0 as /devices/virtual/input/input41
[  636.158459][T11039] loop3: detected capacity change from 0 to 1024
[  636.301083][   T27] audit: type=1800 audit(1786342082.136:202): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1406" name="zoned" dev="configfs" ino=24902 res=0 errno=0
[  636.336344][T11041] zonefs (nullb1) ERROR: Not a zoned block device
[  636.414470][   T27] audit: type=1800 audit(1786342082.136:203): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1406" name="memory_backed" dev="configfs" ino=24903 res=0 errno=0
[  636.435330][    C1] vkms_vblank_simulate: vblank timer overrun
[  636.460238][   T27] audit: type=1800 audit(1786342082.136:204): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1406" name="zone_nr_conv" dev="configfs" ino=24904 res=0 errno=0
[  636.489436][   T27] audit: type=1800 audit(1786342082.176:205): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1406" name="power" dev="configfs" ino=24905 res=0 errno=0
[  638.003382][T11070] input: syz0 as /devices/virtual/input/input43
[  638.149796][T11073] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  638.180998][T11068] loop3: detected capacity change from 0 to 1024
[  638.206848][T11073] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  639.007047][   T27] audit: type=1800 audit(1786342084.836:206): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1419" name="zoned" dev="configfs" ino=24969 res=0 errno=0
[  639.041690][T11077] zonefs (nullb1) ERROR: Not a zoned block device
[  639.093988][   T27] audit: type=1800 audit(1786342084.846:207): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1419" name="memory_backed" dev="configfs" ino=24970 res=0 errno=0
[  639.242527][   T27] audit: type=1800 audit(1786342084.846:208): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1419" name="zone_nr_conv" dev="configfs" ino=24971 res=0 errno=0
[  639.597398][   T27] audit: type=1800 audit(1786342084.846:209): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1419" name="power" dev="configfs" ino=24972 res=0 errno=0
[  640.259926][T11093] loop4: detected capacity change from 0 to 1024
[  640.461302][T11101] loop0: detected capacity change from 0 to 1024
[  640.872170][    T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  641.125792][    T8] usb 5-1: Using ep0 maxpacket: 32
[  641.652469][    T8] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  641.667983][    T8] usb 5-1: config 0 has no interface number 0
[  641.702254][    T8] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  641.765856][    T8] usb 5-1: config 0 interface 184 has no altsetting 0
[  641.802688][    T8] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  641.845470][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.872061][    T8] usb 5-1: Product: syz
[  641.886101][    T8] usb 5-1: Manufacturer: syz
[  641.900929][    T8] usb 5-1: SerialNumber: syz
[  641.933399][    T8] usb 5-1: config 0 descriptor??
[  641.945286][    T8] smsc75xx v1.0.0
[  641.950679][    T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  641.976816][    T8] smsc75xx: probe of 5-1:0.184 failed with error -22
[  642.011388][T11132] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  642.033422][T11132] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  642.818837][T11131] loop2: detected capacity change from 0 to 1024
[  643.139086][T11146] binder: 11144:11146 unknown command 1074553619
[  643.146583][T11146] binder: 11144:11146 ioctl c0306201 200000000040 returned -22
[  643.155695][T11146] binder: 11144:11146 unknown command 1074553620
[  643.163167][T11146] binder: 11144:11146 ioctl c0306201 200000000640 returned -22
[  643.398678][T11150] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  643.411352][T11150] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  643.431556][T11150] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  643.441602][T11150] overlayfs: d_ino too big (., ino=4611686018427387912, xinobits=3)
[  643.451788][T11150] overlayfs: d_ino too big (gadget, ino=4611686018427391282, xinobits=3)
[  643.462453][T11150] overlayfs: d_ino too big (snd_seq, ino=4611686018427391412, xinobits=3)
[  643.488633][T11150] overlayfs: d_ino too big (netdevsim, ino=4611686018427411838, xinobits=3)
[  643.498456][T11150] overlayfs: d_ino too big (serio, ino=4611686018427391299, xinobits=3)
[  643.507274][T11150] overlayfs: d_ino too big (ulpi, ino=4611686018427391241, xinobits=3)
[  643.666900][T11154] loop2: detected capacity change from 0 to 32768
[  643.679449][T11154] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1449 (11154)
[  643.698077][T11154] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  643.708489][T11154] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  643.717532][T11154] BTRFS info (device loop2): turning on sync discard
[  643.724344][T11154] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  643.733970][T11154] BTRFS info (device loop2): use zstd compression, level 3
[  643.741289][T11154] BTRFS info (device loop2): turning on async discard
[  643.748175][T11154] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  643.758883][T11154] BTRFS info (device loop2): trying to use backup root at mount time
[  643.767131][T11154] BTRFS info (device loop2): enabling auto defrag
[  643.774161][T11154] BTRFS info (device loop2): using free space tree
[  643.810788][ T5894] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  643.824416][T11154] BTRFS error (device loop2): failed to load root extent
[  643.831539][T11154] BTRFS warning (device loop2): try to load backup roots slot 1
[  643.845193][ T5847] usb 5-1: USB disconnect, device number 15
[  643.851364][ T5887] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  643.875353][T11154] BTRFS warning (device loop2): couldn't read tree root
[  643.882399][T11154] BTRFS warning (device loop2): try to load backup roots slot 2
[  643.890475][ T5914] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  643.940574][T11154] BTRFS warning (device loop2): couldn't read tree root
[  643.947727][T11154] BTRFS warning (device loop2): try to load backup roots slot 3
[  643.979399][T11154] BTRFS info (device loop2): enabling ssd optimizations
[  643.987489][T11154] BTRFS info (device loop2): rebuilding free space tree
[  644.007261][T11172] loop3: detected capacity change from 0 to 1024
[  644.027030][T11154] BTRFS info (device loop2): checking UUID tree
[  645.094235][T11187] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  645.117626][T11187] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  645.126912][T11187] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  645.688239][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  647.224922][T11201] rtc_cmos 00:00: Alarms can be up to one day in the future
[  647.355192][T11206] input: syz0 as /devices/virtual/input/input46
[  647.724823][T11210] loop2: detected capacity change from 0 to 32768
[  647.741482][T11210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1463 (11210)
[  647.832960][T11210] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  647.843192][T11210] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  647.851871][T11210] BTRFS info (device loop2): turning on sync discard
[  647.858594][T11210] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  647.868402][T11210] BTRFS info (device loop2): use zstd compression, level 3
[  647.875714][T11210] BTRFS info (device loop2): turning on async discard
[  647.882550][T11210] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  647.893192][T11210] BTRFS info (device loop2): trying to use backup root at mount time
[  647.901257][T11210] BTRFS info (device loop2): enabling auto defrag
[  647.907756][T11210] BTRFS info (device loop2): using free space tree
[  648.003071][ T5894] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  648.034985][    T8] rtc_cmos 00:00: Alarms can be up to one day in the future
[  648.043347][    T8] rtc_cmos 00:00: Alarms can be up to one day in the future
[  648.062289][    T8] rtc_cmos 00:00: Alarms can be up to one day in the future
[  648.069826][    T8] rtc_cmos 00:00: Alarms can be up to one day in the future
[  648.092054][    T8] rtc rtc0: __rtc_set_alarm: err=-22
[  648.102457][T11210] BTRFS error (device loop2): failed to load root extent
[  648.109586][T11210] BTRFS warning (device loop2): try to load backup roots slot 1
[  648.120157][ T5894] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  648.139424][T11210] BTRFS warning (device loop2): couldn't read tree root
[  648.146516][T11210] BTRFS warning (device loop2): try to load backup roots slot 2
[  648.156145][ T5894] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  648.166722][T11210] BTRFS warning (device loop2): couldn't read tree root
[  648.173856][T11210] BTRFS warning (device loop2): try to load backup roots slot 3
[  648.189812][T11210] BTRFS info (device loop2): enabling ssd optimizations
[  648.197606][T11210] BTRFS info (device loop2): rebuilding free space tree
[  648.281383][T11210] BTRFS info (device loop2): checking UUID tree
[  649.259684][T11239] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  649.294920][T11239] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  649.305086][T11239] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  649.616429][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  649.671857][T11243] (null): rxe_set_mtu: Set mtu to 1024
[  649.681424][T11243] xfrm0 speed is unknown, defaulting to 1000
[  649.692045][T11243] xfrm0 speed is unknown, defaulting to 1000
[  649.705624][T11243] xfrm0 speed is unknown, defaulting to 1000
[  649.760396][T11244] macvlan0: entered promiscuous mode
[  649.877500][ T8758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (8758)
[  650.245066][    T8] xfrm0 speed is unknown, defaulting to 1000
[  650.262369][T11243] infiniband syz1: set active
[  650.283080][T11256] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000)
[  650.301354][T11243] infiniband syz1: added xfrm0
[  651.162727][T11258] Process accounting resumed
[  651.203034][T11262] rtc_cmos 00:00: Alarms can be up to one day in the future
[  651.311384][T11265] input: syz0 as /devices/virtual/input/input47
[  651.365484][T11243] RDS/IB: syz1: added
[  651.398134][T11243] smc: adding ib device syz1 with port count 1
[  651.412398][T11243] smc:    ib device syz1 port 1 has pnetid 
[  651.430211][ T5847] xfrm0 speed is unknown, defaulting to 1000
[  651.457318][T11243] xfrm0 speed is unknown, defaulting to 1000
[  651.824890][T11273] loop2: detected capacity change from 0 to 32768
[  651.862315][T11273] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  651.872636][T11273] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  651.881356][T11273] BTRFS info (device loop2): turning on sync discard
[  651.888159][T11273] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  651.897604][T11273] BTRFS info (device loop2): use zstd compression, level 3
[  651.904910][T11273] BTRFS info (device loop2): turning on async discard
[  651.911694][T11273] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  651.922390][T11273] BTRFS info (device loop2): trying to use backup root at mount time
[  651.930471][T11273] BTRFS info (device loop2): enabling auto defrag
[  651.936946][T11273] BTRFS info (device loop2): using free space tree
[  652.042165][   T28] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  652.274764][   T28] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  652.312239][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.351920][   T28] usb 5-1: Product: syz
[  652.374282][   T28] usb 5-1: Manufacturer: syz
[  652.385668][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  652.393326][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  652.400841][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  652.408565][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  652.409429][   T28] usb 5-1: SerialNumber: syz
[  652.432111][ T5847] rtc rtc0: __rtc_set_alarm: err=-22
[  652.449690][ T5887] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  652.495353][T11273] BTRFS error (device loop2): failed to load root extent
[  652.502589][T11273] BTRFS warning (device loop2): try to load backup roots slot 1
[  652.508153][T11243] xfrm0 speed is unknown, defaulting to 1000
[  652.517561][ T5887] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  652.546031][T11273] BTRFS warning (device loop2): couldn't read tree root
[  652.553073][T11273] BTRFS warning (device loop2): try to load backup roots slot 2
[  652.566796][ T5896] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  652.606393][T11273] BTRFS warning (device loop2): couldn't read tree root
[  652.613447][T11273] BTRFS warning (device loop2): try to load backup roots slot 3
[  652.647247][T11273] BTRFS info (device loop2): enabling ssd optimizations
[  652.659661][T11273] BTRFS info (device loop2): rebuilding free space tree
[  652.701845][T11273] BTRFS info (device loop2): checking UUID tree
[  653.104116][   T28] rtl8150 5-1:1.0: couldn't reset the device
[  653.113256][   T28] rtl8150: probe of 5-1:1.0 failed with error -5
[  653.330890][   T28] usb 5-1: USB disconnect, device number 16
[  653.598052][T11243] xfrm0 speed is unknown, defaulting to 1000
[  653.634232][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  654.715463][T11305] Process accounting resumed
[  654.824009][T11311] rtc_cmos 00:00: Alarms can be up to one day in the future
[  654.895681][T11243] xfrm0 speed is unknown, defaulting to 1000
[  655.034143][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  655.056134][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  655.072386][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  655.079933][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  655.111991][ T5847] rtc rtc0: __rtc_set_alarm: err=-22
[  655.215304][T11319] input: syz0 as /devices/virtual/input/input48
[  656.198070][ T5775] Bluetooth: hci1: Malformed LE Event: 0x1b
[  656.438223][T11332] Process accounting resumed
[  656.971831][T11346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  656.983851][T11346] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  656.993489][T11346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  657.003774][T11346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  657.012116][T11346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  657.575154][T11346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  657.688920][T11350] input: syz0 as /devices/virtual/input/input49
[  657.788650][T11343] xfrm0 speed is unknown, defaulting to 1000
[  658.510822][T11343] chnl_net:caif_netlink_parms(): no params data found
[  658.626765][T11343] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.637896][T11343] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.677501][T11343] bridge_slave_0: entered allmulticast mode
[  658.694878][T11343] bridge_slave_0: entered promiscuous mode
[  658.746261][T11343] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.772059][T11343] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.786576][T11343] bridge_slave_1: entered allmulticast mode
[  658.794474][T11343] bridge_slave_1: entered promiscuous mode
[  658.839718][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.858877][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.904957][T11343] team0: Port device team_slave_0 added
[  658.914489][T11343] team0: Port device team_slave_1 added
[  658.949382][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.956751][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  658.984514][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.002728][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.009880][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  659.037704][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.091348][T11343] hsr_slave_0: entered promiscuous mode
[  659.098621][T11343] hsr_slave_1: entered promiscuous mode
[  659.662226][T11346] Bluetooth: hci2: command tx timeout
[  661.150529][T11361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  661.214078][T11343] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  661.265888][T11343] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  661.325007][T11343] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  661.353098][T11392] input: syz0 as /devices/virtual/input/input50
[  661.372220][T11343] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  661.527499][   T27] audit: type=1800 audit(1786342107.366:210): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1509" name="zoned" dev="configfs" ino=26698 res=0 errno=0
[  661.602122][   T27] audit: type=1800 audit(1786342107.366:211): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1509" name="memory_backed" dev="configfs" ino=26699 res=0 errno=0
[  661.667302][T11343] 8021q: adding VLAN 0 to HW filter on device bond0
[  661.692511][   T27] audit: type=1800 audit(1786342107.366:212): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1509" name="zone_nr_conv" dev="configfs" ino=26700 res=0 errno=0
[  661.736333][T11343] 8021q: adding VLAN 0 to HW filter on device team0
[  661.762773][T11346] Bluetooth: hci2: command tx timeout
[  661.799759][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.806950][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.828564][   T27] audit: type=1800 audit(1786342107.366:213): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1509" name="power" dev="configfs" ino=26701 res=0 errno=0
[  661.845123][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.855844][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.118023][T11408] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  663.267092][T11343] 8021q: adding VLAN 0 to HW filter on device batadv0
[  663.852246][T11346] Bluetooth: hci2: command tx timeout
[  664.978791][T11435] input: syz0 as /devices/virtual/input/input51
[  665.095023][T11343] veth0_vlan: entered promiscuous mode
[  665.119842][T11343] veth1_vlan: entered promiscuous mode
[  665.161082][T11343] veth0_macvtap: entered promiscuous mode
[  665.172671][T11343] veth1_macvtap: entered promiscuous mode
[  665.209468][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  665.223361][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.233784][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  665.244562][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.254723][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  665.266001][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.276627][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  665.287405][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.299239][T11343] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.317635][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  665.333017][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.350394][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  665.363201][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.373459][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  665.384992][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.395223][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  665.406786][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.419125][T11343] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.431080][T11343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.440237][T11343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.450901][T11343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.466767][T11343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.783295][   T27] audit: type=1800 audit(1786342111.626:214): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1519" name="zoned" dev="configfs" ino=26771 res=0 errno=0
[  665.804335][   T27] audit: type=1800 audit(1786342111.626:215): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1519" name="memory_backed" dev="configfs" ino=26772 res=0 errno=0
[  665.826429][   T27] audit: type=1800 audit(1786342111.626:216): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1519" name="zone_nr_conv" dev="configfs" ino=26773 res=0 errno=0
[  665.848051][   T27] audit: type=1800 audit(1786342111.626:217): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1519" name="power" dev="configfs" ino=26774 res=0 errno=0
[  665.902368][T11346] Bluetooth: hci2: command tx timeout
[  665.955473][   T27] audit: type=1800 audit(1786342111.796:218): pid=11438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1517" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0
[  667.290554][T11423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.390053][ T5918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.432443][ T5918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.476297][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.490229][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.858923][T11453] block device autoloading is deprecated and will be removed.
[  668.012076][T11456] block device autoloading is deprecated and will be removed.
[  668.946213][T11471] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000)
[  669.160927][   T27] audit: type=1800 audit(1786342114.996:219): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1529" name="zoned" dev="configfs" ino=27796 res=0 errno=0
[  669.251714][   T27] audit: type=1800 audit(1786342114.996:220): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1529" name="memory_backed" dev="configfs" ino=27797 res=0 errno=0
[  669.380437][   T27] audit: type=1800 audit(1786342115.036:221): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1529" name="zone_nr_conv" dev="configfs" ino=27798 res=0 errno=0
[  669.480140][   T27] audit: type=1800 audit(1786342115.036:222): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1529" name="power" dev="configfs" ino=27799 res=0 errno=0
[  670.875436][T11501] nvme_fcloop: unknown parameter or missing value 'ww'
[  671.255735][T11508] loop0: detected capacity change from 0 to 32768
[  671.282815][T11508] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1539 (11508)
[  671.344181][T11508] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  671.354493][T11508] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  671.363260][T11508] BTRFS info (device loop0): turning on sync discard
[  671.369928][T11508] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  671.379434][T11508] BTRFS info (device loop0): use zstd compression, level 3
[  671.386757][T11508] BTRFS info (device loop0): turning on async discard
[  671.393567][T11508] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  671.404195][T11508] BTRFS info (device loop0): trying to use backup root at mount time
[  671.412311][T11508] BTRFS info (device loop0): enabling auto defrag
[  671.418715][T11508] BTRFS info (device loop0): using free space tree
[  671.609163][ T5918] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  671.680028][T11508] BTRFS error (device loop0): failed to load root extent
[  671.687194][T11508] BTRFS warning (device loop0): try to load backup roots slot 1
[  671.700497][ T5898] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  671.728883][T11508] BTRFS warning (device loop0): couldn't read tree root
[  671.735994][T11508] BTRFS warning (device loop0): try to load backup roots slot 2
[  671.744969][ T5898] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  671.804925][T11508] BTRFS warning (device loop0): couldn't read tree root
[  671.811910][T11508] BTRFS warning (device loop0): try to load backup roots slot 3
[  671.851072][T11508] BTRFS info (device loop0): enabling ssd optimizations
[  671.858740][T11508] BTRFS info (device loop0): rebuilding free space tree
[  671.882663][T11508] BTRFS info (device loop0): checking UUID tree
[  672.189612][T11478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  672.328706][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  673.870227][T11560] loop3: detected capacity change from 0 to 32768
[  673.893137][T11560] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1553 (11560)
[  673.909698][T11560] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  673.920358][T11560] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  673.929176][T11560] BTRFS info (device loop3): turning on sync discard
[  673.935954][T11560] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  673.945421][T11560] BTRFS info (device loop3): use zstd compression, level 3
[  673.952715][T11560] BTRFS info (device loop3): turning on async discard
[  673.959493][T11560] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  673.970106][T11560] BTRFS info (device loop3): trying to use backup root at mount time
[  673.978191][T11560] BTRFS info (device loop3): enabling auto defrag
[  673.985507][T11560] BTRFS info (device loop3): using free space tree
[  674.104563][ T5898] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  674.159404][T11560] BTRFS error (device loop3): failed to load root extent
[  674.166680][T11560] BTRFS warning (device loop3): try to load backup roots slot 1
[  674.176859][ T5887] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  674.194940][T11560] BTRFS warning (device loop3): couldn't read tree root
[  674.201990][T11560] BTRFS warning (device loop3): try to load backup roots slot 2
[  674.219389][ T5887] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  674.284155][T11560] BTRFS warning (device loop3): couldn't read tree root
[  674.292085][T11560] BTRFS warning (device loop3): try to load backup roots slot 3
[  674.314087][T11560] BTRFS info (device loop3): enabling ssd optimizations
[  674.322328][T11560] BTRFS info (device loop3): rebuilding free space tree
[  674.335181][T11560] BTRFS info (device loop3): checking UUID tree
[  674.780863][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  674.906179][ T9413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (9413)
[  675.593329][T11608] nvme_fcloop: unknown parameter or missing value 'ww'
[  676.662107][ T5156] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  676.842196][ T5156] usb 3-1: Using ep0 maxpacket: 8
[  676.850163][ T5156] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  676.858774][ T5156] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  676.869854][ T5156] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  676.881181][ T5156] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  676.891393][ T5156] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  676.904844][ T5156] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  676.914156][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.131137][ T5156] usb 3-1: usb_control_msg returned -32
[  677.137165][ T5156] usbtmc 3-1:16.0: can't read capabilities
[  677.405901][T11629] loop3: detected capacity change from 0 to 32768
[  677.421612][T11629] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  677.431987][T11629] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  677.440716][T11629] BTRFS info (device loop3): turning on sync discard
[  677.447563][T11629] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  677.457006][T11629] BTRFS info (device loop3): use zstd compression, level 3
[  677.465566][T11629] BTRFS info (device loop3): turning on async discard
[  677.472415][T11629] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  677.483131][T11629] BTRFS info (device loop3): trying to use backup root at mount time
[  677.491236][T11629] BTRFS info (device loop3): enabling auto defrag
[  677.498084][T11629] BTRFS info (device loop3): using free space tree
[  677.548049][T11630] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0
[  677.570311][ T5887] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  677.586157][T11629] BTRFS error (device loop3): failed to load root extent
[  677.594912][T11629] BTRFS warning (device loop3): try to load backup roots slot 1
[  677.607323][ T5887] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  677.630984][T11629] BTRFS warning (device loop3): couldn't read tree root
[  677.638229][T11629] BTRFS warning (device loop3): try to load backup roots slot 2
[  677.648607][ T5894] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  677.659353][T11629] BTRFS warning (device loop3): couldn't read tree root
[  677.661394][T11590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  677.668005][T11629] BTRFS warning (device loop3): try to load backup roots slot 3
[  677.732215][T11629] BTRFS info (device loop3): enabling ssd optimizations
[  677.740609][T11629] BTRFS info (device loop3): rebuilding free space tree
[  677.766163][    T8] usb 3-1: USB disconnect, device number 6
[  677.780505][T11629] BTRFS info (device loop3): checking UUID tree
[  677.839512][T11650] rtc_cmos 00:00: Alarms can be up to one day in the future
[  678.349092][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  679.196899][T11680] nvme_fcloop: unknown parameter or missing value 'ww'
[  679.907203][T11692] rtc_cmos 00:00: Alarms can be up to one day in the future
[  680.234641][T11695] loop2: detected capacity change from 0 to 32768
[  680.248433][T11695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1579 (11695)
[  680.283509][T11695] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  680.293851][T11695] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  680.302705][T11695] BTRFS info (device loop2): turning on sync discard
[  680.309762][T11695] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  680.319516][T11695] BTRFS info (device loop2): use zstd compression, level 3
[  680.326868][T11695] BTRFS info (device loop2): turning on async discard
[  680.335949][T11695] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  680.346708][T11695] BTRFS info (device loop2): trying to use backup root at mount time
[  680.354983][T11695] BTRFS info (device loop2): enabling auto defrag
[  680.361466][T11695] BTRFS info (device loop2): using free space tree
[  680.407107][ T5887] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  680.436737][T11695] BTRFS error (device loop2): failed to load root extent
[  680.445220][T11695] BTRFS warning (device loop2): try to load backup roots slot 1
[  680.463955][ T5887] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  680.478661][T11695] BTRFS warning (device loop2): couldn't read tree root
[  680.485801][T11695] BTRFS warning (device loop2): try to load backup roots slot 2
[  680.495039][ T5898] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  680.525126][T11695] BTRFS warning (device loop2): couldn't read tree root
[  680.532532][T11695] BTRFS warning (device loop2): try to load backup roots slot 3
[  680.579715][T11695] BTRFS info (device loop2): enabling ssd optimizations
[  680.587997][T11695] BTRFS info (device loop2): rebuilding free space tree
[  680.601432][T11695] BTRFS info (device loop2): checking UUID tree
[  681.143345][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  681.186377][T11725] loop0: detected capacity change from 0 to 1024
[  682.188151][T11677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  682.847578][T11728] Process accounting resumed
[  683.122542][T11732] loop2: detected capacity change from 0 to 1024
[  685.680705][    T8] IPVS: starting estimator thread 0...
[  685.795891][T11753] device-mapper: ioctl: name not supplied when creating device
[  685.819340][T11749] IPVS: using max 21 ests per chain, 50400 per kthread
[  685.830147][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  685.830199][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  686.825882][T11760] Process accounting resumed
[  686.836249][T11763] nvme_fcloop: unknown parameter or missing value 'ww'
[  686.860377][T11346] block nbd5: Receive control failed (result -32)
[  686.918756][T11757] block nbd5: shutting down sockets
[  687.135619][T11769] loop3: detected capacity change from 0 to 1024
[  690.024627][T11794] device-mapper: ioctl: name not supplied when creating device
[  691.100123][T11799] Process accounting resumed
[  691.389851][T11824] device-mapper: ioctl: name not supplied when creating device
[  691.481513][T11829] fuse: Bad value for 'fd'
[  692.491525][T11838] Process accounting resumed
[  692.921197][T11856] loop0: detected capacity change from 0 to 1024
[  692.927667][T11855] nvme_fcloop: unknown parameter or missing value 'ww'
[  694.642605][T11861] device-mapper: ioctl: name not supplied when creating device
[  694.748381][T11867] fuse: Bad value for 'fd'
[  695.777804][T11874] Process accounting resumed
[  695.784658][T11842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  696.129389][T11882] loop5: detected capacity change from 0 to 32768
[  696.177624][T11882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1629 (11882)
[  696.255112][T11882] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  696.265321][T11882] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  696.274064][T11882] BTRFS info (device loop5): turning on sync discard
[  696.280773][T11882] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  696.290146][T11882] BTRFS info (device loop5): use zstd compression, level 3
[  696.297392][T11882] BTRFS info (device loop5): turning on async discard
[  696.304611][T11882] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  696.315221][T11882] BTRFS info (device loop5): trying to use backup root at mount time
[  696.323304][T11882] BTRFS info (device loop5): enabling auto defrag
[  696.329744][T11882] BTRFS info (device loop5): using free space tree
[  696.420028][T11888] nvme_fcloop: unknown parameter or missing value 'ww'
[  696.437662][T11894] device-mapper: ioctl: name not supplied when creating device
[  696.456691][ T5914] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  696.475910][T11882] BTRFS error (device loop5): failed to load root extent
[  696.483107][T11882] BTRFS warning (device loop5): try to load backup roots slot 1
[  696.501627][ T5894] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  696.515913][T11882] BTRFS warning (device loop5): couldn't read tree root
[  696.522989][T11882] BTRFS warning (device loop5): try to load backup roots slot 2
[  696.532058][ T5894] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  696.578145][T11882] BTRFS warning (device loop5): couldn't read tree root
[  696.585163][T11882] BTRFS warning (device loop5): try to load backup roots slot 3
[  696.601127][T11882] BTRFS info (device loop5): enabling ssd optimizations
[  696.622285][T11882] BTRFS info (device loop5): rebuilding free space tree
[  696.637647][T11882] BTRFS info (device loop5): checking UUID tree
[  696.736185][   T27] audit: type=1800 audit(1786342142.576:223): pid=11912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1634" name="zoned" dev="configfs" ino=28398 res=0 errno=0
[  696.873453][T11912] zonefs (nullb1) ERROR: Not a zoned block device
[  696.931411][   T27] audit: type=1800 audit(1786342142.606:224): pid=11912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1634" name="memory_backed" dev="configfs" ino=28399 res=0 errno=0
[  697.123010][   T27] audit: type=1800 audit(1786342142.606:225): pid=11912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1634" name="power" dev="configfs" ino=28400 res=0 errno=0
[  697.290545][T11343] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  698.164046][T11922] Process accounting resumed
[  699.541244][T11346] Bluetooth: hci2: unexpected cc 0x0c05 length: 4 > 1
[  699.675473][T11949] device-mapper: ioctl: name not supplied when creating device
[  699.709681][T11946] nvme_fcloop: unknown parameter or missing value 'ww'
[  699.711762][   T27] audit: type=1800 audit(1786342145.546:226): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1645" name="zoned" dev="configfs" ino=28459 res=0 errno=0
[  699.766636][T11951] zonefs (nullb1) ERROR: Not a zoned block device
[  699.818475][   T27] audit: type=1800 audit(1786342145.576:227): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1645" name="memory_backed" dev="configfs" ino=28460 res=0 errno=0
[  699.923450][   T27] audit: type=1800 audit(1786342145.596:228): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1645" name="power" dev="configfs" ino=28461 res=0 errno=0
[  700.086286][T11953] loop0: detected capacity change from 0 to 32768
[  700.110653][T11953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1646 (11953)
[  700.151457][T11953] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  700.162277][T11953] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  700.170987][T11953] BTRFS info (device loop0): turning on sync discard
[  700.177846][T11953] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  700.187232][T11953] BTRFS info (device loop0): use zstd compression, level 3
[  700.195271][T11953] BTRFS info (device loop0): turning on async discard
[  700.202223][T11953] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  700.212945][T11953] BTRFS info (device loop0): trying to use backup root at mount time
[  700.221011][T11953] BTRFS info (device loop0): enabling auto defrag
[  700.227577][T11953] BTRFS info (device loop0): using free space tree
[  700.299163][ T5918] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  700.339797][T11953] BTRFS error (device loop0): failed to load root extent
[  700.347065][T11953] BTRFS warning (device loop0): try to load backup roots slot 1
[  700.357669][ T5902] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  700.415732][T11953] BTRFS warning (device loop0): couldn't read tree root
[  700.422791][T11953] BTRFS warning (device loop0): try to load backup roots slot 2
[  700.432264][ T5902] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  700.469424][T11953] BTRFS warning (device loop0): couldn't read tree root
[  700.476515][T11953] BTRFS warning (device loop0): try to load backup roots slot 3
[  700.754559][T11953] BTRFS info (device loop0): enabling ssd optimizations
[  701.029983][T11953] BTRFS info (device loop0): rebuilding free space tree
[  701.091716][T11953] BTRFS info (device loop0): checking UUID tree
[  701.325607][T11971] Process accounting resumed
[  701.695733][T11989] loop3: detected capacity change from 0 to 1024
[  701.808114][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  702.427314][T11995] device-mapper: ioctl: name not supplied when creating device
[  702.704641][   T27] audit: type=1800 audit(1786342148.546:229): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1655" name="zoned" dev="configfs" ino=28514 res=0 errno=0
[  702.770103][T12003] zonefs (nullb1) ERROR: Not a zoned block device
[  702.808419][   T27] audit: type=1800 audit(1786342148.546:230): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1655" name="memory_backed" dev="configfs" ino=28515 res=0 errno=0
[  702.834581][T12007] overlayfs: missing 'lowerdir'
[  702.890093][   T27] audit: type=1800 audit(1786342148.546:231): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1655" name="power" dev="configfs" ino=28516 res=0 errno=0
[  703.187775][T12010] Process accounting resumed
[  703.407772][T12014] loop2: detected capacity change from 0 to 32768
[  703.422615][T12014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1661 (12014)
[  703.608982][T12014] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  703.619294][T12014] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  703.628028][T12014] BTRFS info (device loop2): turning on sync discard
[  703.634824][T12014] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  703.644233][T12014] BTRFS info (device loop2): use zstd compression, level 3
[  703.651456][T12014] BTRFS info (device loop2): turning on async discard
[  703.658313][T12014] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  703.669007][T12014] BTRFS info (device loop2): trying to use backup root at mount time
[  703.678084][T12014] BTRFS info (device loop2): enabling auto defrag
[  703.684664][T12014] BTRFS info (device loop2): using free space tree
[  704.236079][ T5902] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  704.315652][T12014] BTRFS error (device loop2): failed to load root extent
[  704.322866][T12014] BTRFS warning (device loop2): try to load backup roots slot 1
[  704.333616][T11734] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  704.354437][T12014] BTRFS warning (device loop2): couldn't read tree root
[  704.361448][T12014] BTRFS warning (device loop2): try to load backup roots slot 2
[  704.369617][ T5902] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  704.380494][T12014] BTRFS warning (device loop2): couldn't read tree root
[  704.387894][T12014] BTRFS warning (device loop2): try to load backup roots slot 3
[  704.441869][T12014] BTRFS info (device loop2): enabling ssd optimizations
[  704.449670][T12014] BTRFS info (device loop2): rebuilding free space tree
[  704.467060][T12014] BTRFS info (device loop2): checking UUID tree
[  704.736654][T12039] loop0: detected capacity change from 0 to 1024
[  705.365213][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  705.402886][T12009] nvme_fcloop: unknown parameter or missing value 'ww'
[  705.591871][   T27] audit: type=1800 audit(1786342151.426:232): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1667" name="zoned" dev="configfs" ino=28591 res=0 errno=0
[  705.643609][T12050] zonefs (nullb1) ERROR: Not a zoned block device
[  705.647252][   T27] audit: type=1800 audit(1786342151.436:233): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1667" name="memory_backed" dev="configfs" ino=28592 res=0 errno=0
[  705.717338][   T27] audit: type=1800 audit(1786342151.446:234): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1667" name="zone_nr_conv" dev="configfs" ino=28593 res=0 errno=0
[  705.735553][ T8758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (8758)
[  705.741442][   T27] audit: type=1800 audit(1786342151.446:235): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1667" name="power" dev="configfs" ino=28594 res=0 errno=0
[  705.936545][T12057] Process accounting resumed
[  705.954822][T12059] overlayfs: missing 'lowerdir'
[  706.132294][T12064] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  706.141372][T12064] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  707.168029][T12065] warning: `syz.2.1670' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  707.825962][ T5918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.995401][T12071] loop3: detected capacity change from 0 to 32768
[  708.100527][T12071] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  708.974155][   T27] audit: type=1800 audit(1786342154.806:236): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1678" name="zoned" dev="configfs" ino=28650 res=0 errno=0
[  708.989185][T12084] zonefs (nullb1) ERROR: Not a zoned block device
[  709.006461][ T5918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.026086][   T27] audit: type=1800 audit(1786342154.816:237): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1678" name="memory_backed" dev="configfs" ino=28651 res=0 errno=0
[  709.068671][   T27] audit: type=1800 audit(1786342154.826:238): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1678" name="zone_nr_conv" dev="configfs" ino=28652 res=0 errno=0
[  709.189507][   T27] audit: type=1800 audit(1786342154.826:239): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1678" name="power" dev="configfs" ino=28653 res=0 errno=0
[  709.225438][ T5918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.403386][T12092] overlayfs: missing 'lowerdir'
[  709.429622][T12090] nvme_fcloop: unknown parameter or missing value 'ww'
[  709.470195][ T5918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.490766][T12093] Process accounting resumed
[  710.577457][T12102] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  710.587454][T12102] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  711.772776][T12112] loop0: detected capacity change from 0 to 32768
[  711.788797][T12112] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  711.928007][T12116] loop3: detected capacity change from 0 to 1024
[  712.888340][   T27] audit: type=1800 audit(1786342158.716:240): pid=12126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="zoned" dev="configfs" ino=29972 res=0 errno=0
[  712.953865][T12126] zonefs (nullb1) ERROR: Not a zoned block device
[  712.968355][   T27] audit: type=1800 audit(1786342158.716:241): pid=12126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="memory_backed" dev="configfs" ino=29973 res=0 errno=0
[  713.047678][   T27] audit: type=1800 audit(1786342158.736:242): pid=12126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="zone_nr_conv" dev="configfs" ino=29974 res=0 errno=0
[  713.102326][   T27] audit: type=1800 audit(1786342158.736:243): pid=12126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1688" name="power" dev="configfs" ino=29975 res=0 errno=0
[  713.216906][T12137] overlayfs: missing 'lowerdir'
[  713.397876][T12135] Process accounting resumed
[  713.566102][T12143] binder: 12140:12143 ioctl c0306201 0 returned -14
[  714.837786][T12149] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  714.847512][T12149] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  715.270567][T12156] loop3: detected capacity change from 0 to 1024
[  716.231915][T12163] rtc_cmos 00:00: Alarms can be up to one day in the future
[  716.564324][T12177] overlayfs: missing 'lowerdir'
[  716.720358][T12170] Process accounting resumed
[  716.829140][T12178] nvme_fcloop: unknown parameter or missing value 'ww'
[  717.026724][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  717.042984][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  717.051167][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  717.102248][T12185] binder: 12182:12185 ioctl c0306201 0 returned -14
[  717.106383][ T5847] rtc_cmos 00:00: Alarms can be up to one day in the future
[  717.238851][ T5847] rtc rtc0: __rtc_set_alarm: err=-22
[  718.056713][T12194] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  718.066478][T12194] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  719.857747][T12205] loop5: detected capacity change from 0 to 1024
[  720.225007][T12208] loop3: detected capacity change from 0 to 1024
[  720.939741][T12213] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  720.972205][T12213] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  721.369468][T12215] Process accounting resumed
[  721.584439][T12225] binder: 12220:12225 ioctl c0306201 0 returned -14
[  721.692142][ T5918] hsr_slave_0: left promiscuous mode
[  721.707645][ T5918] hsr_slave_1: left promiscuous mode
[  721.726963][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  721.899081][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.351388][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.362135][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.380105][ T5918] bridge_slave_1: left allmulticast mode
[  722.389805][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.444148][ T5918] bridge_slave_0: left allmulticast mode
[  722.452136][ T5918] bridge_slave_0: left promiscuous mode
[  722.468277][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.551345][T12236] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  722.561495][T12236] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  722.924732][ T5918] veth1_macvtap: left promiscuous mode
[  722.993739][ T5918] veth0_macvtap: left promiscuous mode
[  723.069933][ T5918] veth1_vlan: left promiscuous mode
[  723.154812][ T5918] veth0_vlan: left promiscuous mode
[  724.227307][T11346] Bluetooth: hci3: Opcode 0x206a failed: -110
[  724.234005][ T5775] Bluetooth: hci3: command 0x0406 tx timeout
[  724.457246][T12244] loop3: detected capacity change from 0 to 1024
[  725.192721][T12245] rtc_cmos 00:00: Alarms can be up to one day in the future
[  725.403770][T12249] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  725.436905][T12249] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  726.025486][    T8] rtc_cmos 00:00: Alarms can be up to one day in the future
[  726.039634][T12254] nvme_fcloop: unknown parameter or missing value 'ww'
[  726.059529][T12252] Process accounting resumed
[  726.076524][    T8] rtc_cmos 00:00: Alarms can be up to one day in the future
[  726.882762][    T8] rtc_cmos 00:00: Alarms can be up to one day in the future
[  726.890419][    T8] rtc_cmos 00:00: Alarms can be up to one day in the future
[  726.897784][    T8] rtc rtc0: __rtc_set_alarm: err=-22
[  728.191620][T12270] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  728.200951][T12270] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  728.351626][ T5918] team0 (unregistering): Port device team_slave_1 removed
[  728.667443][ T5918] team0 (unregistering): Port device team_slave_0 removed
[  729.762541][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  729.833517][T12279] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  729.844883][T12279] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  729.869458][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  730.373441][T12281] Process accounting resumed
[  731.567808][T12288] loop3: detected capacity change from 0 to 1024
[  733.279493][ T5918] bond0 (unregistering): Released all slaves
[  733.620952][T12295] nvme_fcloop: unknown parameter or missing value 'ww'
[  734.438410][T12309] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  734.447992][T12309] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  735.560254][ T5918] IPVS: stop unused estimator thread 0...
[  735.725201][T12320] overlayfs: missing 'lowerdir'
[  735.801856][T12322] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1744'.
[  736.079564][T12323] Process accounting resumed
[  737.553238][T12347] nvme_fcloop: unknown parameter or missing value 'ww'
[  738.983418][   T27] audit: type=1800 audit(1786342184.826:244): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1743" name="zoned" dev="configfs" ino=30360 res=0 errno=0
[  739.026098][T12357] zonefs (nullb1) ERROR: Not a zoned block device
[  739.053126][   T27] audit: type=1800 audit(1786342184.856:245): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1743" name="memory_backed" dev="configfs" ino=30361 res=0 errno=0
[  739.122701][   T27] audit: type=1800 audit(1786342184.856:246): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1743" name="zone_nr_conv" dev="configfs" ino=30362 res=0 errno=0
[  739.197968][   T27] audit: type=1800 audit(1786342184.856:247): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1743" name="power" dev="configfs" ino=30363 res=0 errno=0
[  739.234110][T12362] overlayfs: missing 'lowerdir'
[  739.249488][T12364] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1753'.
[  739.306698][T12366] Process accounting resumed
[  740.957668][   T27] audit: type=1800 audit(1786342186.786:248): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1763" name="zoned" dev="configfs" ino=30412 res=0 errno=0
[  741.010179][T12395] zonefs (nullb1) ERROR: Not a zoned block device
[  741.032565][   T27] audit: type=1800 audit(1786342186.826:249): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1763" name="memory_backed" dev="configfs" ino=30413 res=0 errno=0
[  741.102005][   T27] audit: type=1800 audit(1786342186.826:250): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1763" name="zone_nr_conv" dev="configfs" ino=30414 res=0 errno=0
[  741.181373][   T27] audit: type=1800 audit(1786342186.836:251): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1763" name="power" dev="configfs" ino=30415 res=0 errno=0
[  741.225689][T12398] nvme_fcloop: unknown parameter or missing value 'ww'
[  742.173680][T12404] Process accounting resumed
[  742.344035][T12410] overlayfs: missing 'lowerdir'
[  742.684434][T12419] binder: BINDER_SET_CONTEXT_MGR already set
[  742.704163][T12419] binder: 12416:12419 ioctl 4018620d 2000000002c0 returned -16
[  743.402311][T12427] nfs: Unknown parameter '0'
[  744.229915][T12442] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1765'.
[  745.544577][T12461] overlayfs: missing 'workdir'
[  745.640409][   T27] audit: type=1800 audit(1786342191.476:252): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1772" name="zoned" dev="configfs" ino=30557 res=0 errno=0
[  745.694955][   T27] audit: type=1800 audit(1786342191.506:253): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1772" name="memory_backed" dev="configfs" ino=30559 res=0 errno=0
[  745.777444][   T27] audit: type=1800 audit(1786342191.506:254): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1772" name="zone_nr_conv" dev="configfs" ino=30560 res=0 errno=0
[  745.801866][T12464] zonefs (nullb1) ERROR: Not a zoned block device
[  745.868253][   T27] audit: type=1800 audit(1786342191.516:255): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1772" name="power" dev="configfs" ino=30561 res=0 errno=0
[  746.091001][T12472] binder_alloc: 12471: binder_alloc_buf, no vma
[  746.358320][T12476] nfs: Unknown parameter '0'
[  747.362587][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  747.368895][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  747.610206][T12482] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1782'.
[  749.258457][T12489] Process accounting resumed
[  749.839079][T12506] overlayfs: missing 'workdir'
[  749.839104][   T27] audit: type=1800 audit(1786342195.676:256): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1787" name="zoned" dev="configfs" ino=30593 res=0 errno=0
[  749.896217][T12505] zonefs (nullb1) ERROR: Not a zoned block device
[  749.899285][   T27] audit: type=1800 audit(1786342195.676:257): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1787" name="memory_backed" dev="configfs" ino=30594 res=0 errno=0
[  749.952111][   T27] audit: type=1800 audit(1786342195.676:258): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1787" name="zone_nr_conv" dev="configfs" ino=30595 res=0 errno=0
[  750.012025][   T27] audit: type=1800 audit(1786342195.716:259): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1787" name="power" dev="configfs" ino=30596 res=0 errno=0
[  750.404278][T12514] nfs: Unknown parameter '0'
[  754.870244][   T27] audit: type=1800 audit(1786342200.706:260): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1796" name="zoned" dev="configfs" ino=30659 res=0 errno=0
[  754.907693][T12555] zonefs (nullb1) ERROR: Not a zoned block device
[  754.935931][   T27] audit: type=1800 audit(1786342200.706:261): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1796" name="memory_backed" dev="configfs" ino=30660 res=0 errno=0
[  754.998651][T12560] overlayfs: missing 'workdir'
[  755.003664][   T27] audit: type=1800 audit(1786342200.716:262): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1796" name="zone_nr_conv" dev="configfs" ino=30661 res=0 errno=0
[  755.107035][   T27] audit: type=1800 audit(1786342200.716:263): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1796" name="power" dev="configfs" ino=30662 res=0 errno=0
[  755.982205][    C1] 
[  755.984552][    C1] ================================
[  755.989638][    C1] WARNING: inconsistent lock state
[  755.994730][    C1] syzkaller #0 Not tainted
[  755.999124][    C1] --------------------------------
[  756.004216][    C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  756.011042][    C1] syz.5.1803/12582 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  756.017435][    C1] ffff888030688130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250
[  756.026855][    C1] {SOFTIRQ-ON-W} state was registered at:
[  756.032559][    C1]   lock_acquire+0x19e/0x420
[  756.037168][    C1]   lock_sock_nested+0x48/0x100
[  756.042022][    C1]   x25_bind+0x20a/0x460
[  756.046248][    C1]   __sys_bind+0x2f0/0x3f0
[  756.050690][    C1]   __x64_sys_bind+0x7a/0x90
[  756.055263][    C1]   do_syscall_64+0x55/0xb0
[  756.059750][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  756.065729][    C1] irq event stamp: 32352
[  756.069945][    C1] hardirqs last  enabled at (32352): [<ffffffff8152ccba>] __local_bh_enable_ip+0x13a/0x1c0
[  756.079926][    C1] hardirqs last disabled at (32351): [<ffffffff8152cc5b>] __local_bh_enable_ip+0xdb/0x1c0
[  756.089797][    C1] softirqs last  enabled at (28790): [<ffffffff8152d8f3>] __irq_exit_rcu+0xd3/0x190
[  756.099143][    C1] softirqs last disabled at (32251): [<ffffffff8152d8f3>] __irq_exit_rcu+0xd3/0x190
[  756.108517][    C1] 
[  756.108517][    C1] other info that might help us debug this:
[  756.116555][    C1]  Possible unsafe locking scenario:
[  756.116555][    C1] 
[  756.123983][    C1]        CPU0
[  756.127244][    C1]        ----
[  756.130507][    C1]   lock(sk_lock-AF_X25);
[  756.134819][    C1]   <Interrupt>
[  756.138252][    C1]     lock(sk_lock-AF_X25);
[  756.142732][    C1] 
[  756.142732][    C1]  *** DEADLOCK ***
[  756.142732][    C1] 
[  756.150853][    C1] 5 locks held by syz.5.1803/12582:
[  756.156038][    C1]  #0: ffff88802d0327a0 (&mm->mmap_lock){++++}-{3:3}, at: __mm_populate+0x183/0x390
[  756.165467][    C1]  #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: handle_mm_fault+0xe6/0x4a50
[  756.174922][    C1]  #2: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: filemap_map_pages+0x1d7/0x19c0
[  756.184638][    C1]  #3: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280
[  756.194092][    C1]  #4: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230
[  756.204139][    C1] 
[  756.204139][    C1] stack backtrace:
[  756.210021][    C1] CPU: 1 PID: 12582 Comm: syz.5.1803 Not tainted syzkaller #0
[  756.217466][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  756.227523][    C1] Call Trace:
[  756.230838][    C1]  <IRQ>
[  756.233698][    C1]  dump_stack_lvl+0x18c/0x250
[  756.238414][    C1]  ? show_regs_print_info+0x20/0x20
[  756.243627][    C1]  ? __kernel_text_address+0xd/0x30
[  756.248810][    C1]  ? unwind_get_return_address+0x91/0xc0
[  756.254439][    C1]  valid_state+0x13b/0x1d0
[  756.258841][    C1]  mark_lock_irq+0xad/0x900
[  756.263350][    C1]  ? stack_trace_save+0xaa/0x100
[  756.268276][    C1]  ? save_trace+0xcd0/0xcd0
[  756.272778][    C1]  ? mark_lock+0x94/0x320
[  756.277102][    C1]  ? save_trace+0x5d/0xcd0
[  756.281500][    C1]  mark_lock+0x208/0x320
[  756.285724][    C1]  __lock_acquire+0xcfc/0x7d80
[  756.290473][    C1]  ? verify_lock_unused+0x140/0x140
[  756.295651][    C1]  ? verify_lock_unused+0x140/0x140
[  756.300832][    C1]  ? mark_lock+0x94/0x320
[  756.305144][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  756.311106][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  756.316136][    C1]  lock_acquire+0x19e/0x420
[  756.320618][    C1]  ? x25_kill_by_neigh+0x10d/0x250
[  756.325714][    C1]  ? read_lock_is_recursive+0x20/0x20
[  756.331063][    C1]  ? __local_bh_enable_ip+0x13a/0x1c0
[  756.336418][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  756.341598][    C1]  ? __local_bh_enable_ip+0x13a/0x1c0
[  756.346955][    C1]  ? _local_bh_enable+0xa0/0xa0
[  756.351784][    C1]  lock_sock_nested+0x48/0x100
[  756.356528][    C1]  ? x25_kill_by_neigh+0x10d/0x250
[  756.361623][    C1]  x25_kill_by_neigh+0x10d/0x250
[  756.366546][    C1]  x25_lapb_receive_frame+0x1a7/0xef0
[  756.371992][    C1]  ? netif_receive_skb_core+0x34/0x230
[  756.377438][    C1]  ? netif_receive_skb_core+0x34/0x230
[  756.382898][    C1]  ? x25_device_event+0x280/0x280
[  756.388165][    C1]  netif_receive_skb_core+0x16a/0x230
[  756.393522][    C1]  lapbeth_napi_poll+0x42/0x80
[  756.398305][    C1]  __napi_poll+0xbb/0x460
[  756.402616][    C1]  net_rx_action+0x65f/0xcc0
[  756.407189][    C1]  ? net_tx_action+0x950/0x950
[  756.411940][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  756.417923][    C1]  ? lock_chain_count+0x20/0x20
[  756.422769][    C1]  handle_softirqs+0x27d/0x820
[  756.427525][    C1]  ? read_tsc+0x9/0x20
[  756.431583][    C1]  ? ktime_get+0x24b/0x280
[  756.435992][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  756.440742][    C1]  ? do_softirq+0x1a0/0x1a0
[  756.445267][    C1]  __irq_exit_rcu+0xd3/0x190
[  756.449843][    C1]  ? irq_exit_rcu+0x20/0x20
[  756.454331][    C1]  irq_exit_rcu+0x9/0x20
[  756.458581][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  756.464201][    C1]  </IRQ>
[  756.467205][    C1]  <TASK>
[  756.470156][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  756.476136][    C1] RIP: 0010:lock_acquire+0x208/0x420
[  756.481407][    C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25
[  756.501033][    C1] RSP: 0018:ffffc900037775c0 EFLAGS: 00000206
[  756.507125][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 634644f10f1d0d00
[  756.515082][    C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0
[  756.523038][    C1] RBP: ffffc900037776c8 R08: dffffc0000000000 R09: 1ffffffff223daa0
[  756.531008][    C1] R10: dffffc0000000000 R11: fffffbfff223daa1 R12: 1ffff920006eeec4
[  756.538960][    C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000
[  756.546922][    C1]  ? read_lock_is_recursive+0x20/0x20
[  756.552282][    C1]  ? xas_descend+0x37f/0x460
[  756.556880][    C1]  __pte_offset_map+0x48/0x280
[  756.561644][    C1]  ? __pte_offset_map+0x2c/0x280
[  756.566564][    C1]  __pte_offset_map_lock+0x47/0x1d0
[  756.571766][    C1]  ? next_uptodate_folio+0xa75/0xb20
[  756.577037][    C1]  filemap_map_pages+0x92e/0x19c0
[  756.582070][    C1]  ? filemap_map_pages+0x1d7/0x19c0
[  756.587249][    C1]  ? filemap_read_folio+0x790/0x790
[  756.592433][    C1]  handle_mm_fault+0x384b/0x4a50
[  756.597353][    C1]  ? handle_mm_fault+0xe6/0x4a50
[  756.602290][    C1]  ? numa_migrate_prep+0x350/0x350
[  756.607378][    C1]  ? follow_page_pte+0x6dd/0x1ae0
[  756.612388][    C1]  ? pmd_lock+0x60/0x60
[  756.616538][    C1]  __get_user_pages+0x604/0x1580
[  756.621487][    C1]  ? populate_vma_page_range+0x380/0x380
[  756.627105][    C1]  populate_vma_page_range+0x2c1/0x380
[  756.632549][    C1]  ? fixup_user_fault+0x750/0x750
[  756.637553][    C1]  ? down_read+0x1ac/0x2e0
[  756.642050][    C1]  __mm_populate+0x260/0x390
[  756.646625][    C1]  ? faultin_page_range+0x8a0/0x8a0
[  756.651806][    C1]  ? up_write+0x1be/0x410
[  756.656116][    C1]  vm_mmap_pgoff+0x2da/0x3f0
[  756.660708][    C1]  ? account_locked_vm+0x200/0x200
[  756.665801][    C1]  ? ksys_mmap_pgoff+0xf3/0x720
[  756.670636][    C1]  ? __x64_sys_mmap+0x7a/0x130
[  756.675382][    C1]  do_syscall_64+0x55/0xb0
[  756.679779][    C1]  ? clear_bhb_loop+0x40/0x90
[  756.684437][    C1]  ? clear_bhb_loop+0x40/0x90
[  756.689097][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  756.694972][    C1] RIP: 0033:0x7f0a7139e0d9
[  756.699381][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.718979][    C1] RSP: 002b:00007f0a72298028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  756.727397][    C1] RAX: ffffffffffffffda RBX: 00007f0a71625fa0 RCX: 00007f0a7139e0d9
[  756.735353][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  756.743307][    C1] RBP: 00007f0a71435024 R08: ffffffffffffffff R09: 0000000000000000
[  756.751261][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  756.759216][    C1] R13: 00007f0a71626038 R14: 00007f0a71625fa0 R15: 00007fff0eb04138
[  756.767198][    C1]  </TASK>
[  756.770277][    C1] BUG: sleeping function called from invalid context at net/core/sock.c:3546
[  756.779033][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12582, name: syz.5.1803
[  756.788134][    C1] preempt_count: 100, expected: 0
[  756.793153][    C1] RCU nest depth: 4, expected: 0
[  756.798066][    C1] INFO: lockdep is turned off.
[  756.802828][    C1] Preemption disabled at:
[  756.802833][    C1] [<ffffffff8152cfe1>] handle_softirqs+0x101/0x820
[  756.813629][    C1] CPU: 1 PID: 12582 Comm: syz.5.1803 Not tainted syzkaller #0
[  756.821077][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  756.831134][    C1] Call Trace:
[  756.834399][    C1]  <IRQ>
[  756.837229][    C1]  dump_stack_lvl+0x18c/0x250
[  756.841891][    C1]  ? show_regs_print_info+0x20/0x20
[  756.847069][    C1]  ? load_image+0x420/0x420
[  756.851580][    C1]  ? handle_softirqs+0x101/0x820
[  756.856499][    C1]  __might_resched+0x48d/0x5f0
[  756.861247][    C1]  ? handle_softirqs+0x101/0x820
[  756.866173][    C1]  ? __might_sleep+0xe0/0xe0
[  756.870748][    C1]  ? read_lock_is_recursive+0x20/0x20
[  756.876104][    C1]  ? __local_bh_enable_ip+0x13a/0x1c0
[  756.881461][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  756.886654][    C1]  ? __local_bh_enable_ip+0x13a/0x1c0
[  756.892017][    C1]  ? _local_bh_enable+0xa0/0xa0
[  756.896852][    C1]  lock_sock_nested+0x5d/0x100
[  756.901596][    C1]  x25_kill_by_neigh+0x10d/0x250
[  756.906522][    C1]  x25_lapb_receive_frame+0x1a7/0xef0
[  756.911879][    C1]  ? netif_receive_skb_core+0x34/0x230
[  756.917322][    C1]  ? netif_receive_skb_core+0x34/0x230
[  756.922763][    C1]  ? x25_device_event+0x280/0x280
[  756.927770][    C1]  netif_receive_skb_core+0x16a/0x230
[  756.933139][    C1]  lapbeth_napi_poll+0x42/0x80
[  756.937885][    C1]  __napi_poll+0xbb/0x460
[  756.942200][    C1]  net_rx_action+0x65f/0xcc0
[  756.946773][    C1]  ? net_tx_action+0x950/0x950
[  756.951520][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  756.957484][    C1]  ? lock_chain_count+0x20/0x20
[  756.962316][    C1]  handle_softirqs+0x27d/0x820
[  756.967061][    C1]  ? read_tsc+0x9/0x20
[  756.971114][    C1]  ? ktime_get+0x24b/0x280
[  756.975514][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  756.980261][    C1]  ? do_softirq+0x1a0/0x1a0
[  756.984745][    C1]  __irq_exit_rcu+0xd3/0x190
[  756.989316][    C1]  ? irq_exit_rcu+0x20/0x20
[  756.993798][    C1]  irq_exit_rcu+0x9/0x20
[  756.998030][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  757.003657][    C1]  </IRQ>
[  757.006569][    C1]  <TASK>
[  757.009481][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  757.015444][    C1] RIP: 0010:lock_acquire+0x208/0x420
[  757.020712][    C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25
[  757.040320][    C1] RSP: 0018:ffffc900037775c0 EFLAGS: 00000206
[  757.046368][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 634644f10f1d0d00
[  757.054319][    C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0
[  757.062282][    C1] RBP: ffffc900037776c8 R08: dffffc0000000000 R09: 1ffffffff223daa0
[  757.070231][    C1] R10: dffffc0000000000 R11: fffffbfff223daa1 R12: 1ffff920006eeec4
[  757.078182][    C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000
[  757.086154][    C1]  ? read_lock_is_recursive+0x20/0x20
[  757.091516][    C1]  ? xas_descend+0x37f/0x460
[  757.096084][    C1]  __pte_offset_map+0x48/0x280
[  757.100846][    C1]  ? __pte_offset_map+0x2c/0x280
[  757.105763][    C1]  __pte_offset_map_lock+0x47/0x1d0
[  757.110954][    C1]  ? next_uptodate_folio+0xa75/0xb20
[  757.116229][    C1]  filemap_map_pages+0x92e/0x19c0
[  757.121241][    C1]  ? filemap_map_pages+0x1d7/0x19c0
[  757.126421][    C1]  ? filemap_read_folio+0x790/0x790
[  757.131610][    C1]  handle_mm_fault+0x384b/0x4a50
[  757.136533][    C1]  ? handle_mm_fault+0xe6/0x4a50
[  757.141456][    C1]  ? numa_migrate_prep+0x350/0x350
[  757.146545][    C1]  ? follow_page_pte+0x6dd/0x1ae0
[  757.151551][    C1]  ? pmd_lock+0x60/0x60
[  757.155689][    C1]  __get_user_pages+0x604/0x1580
[  757.160610][    C1]  ? populate_vma_page_range+0x380/0x380
[  757.166237][    C1]  populate_vma_page_range+0x2c1/0x380
[  757.171686][    C1]  ? fixup_user_fault+0x750/0x750
[  757.176697][    C1]  ? down_read+0x1ac/0x2e0
[  757.181096][    C1]  __mm_populate+0x260/0x390
[  757.185667][    C1]  ? faultin_page_range+0x8a0/0x8a0
[  757.190882][    C1]  ? up_write+0x1be/0x410
[  757.195197][    C1]  vm_mmap_pgoff+0x2da/0x3f0
[  757.199771][    C1]  ? account_locked_vm+0x200/0x200
[  757.204864][    C1]  ? ksys_mmap_pgoff+0xf3/0x720
[  757.209697][    C1]  ? __x64_sys_mmap+0x7a/0x130
[  757.214439][    C1]  do_syscall_64+0x55/0xb0
[  757.218834][    C1]  ? clear_bhb_loop+0x40/0x90
[  757.223491][    C1]  ? clear_bhb_loop+0x40/0x90
[  757.228148][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  757.234025][    C1] RIP: 0033:0x7f0a7139e0d9
[  757.238422][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  757.258006][    C1] RSP: 002b:00007f0a72298028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  757.266397][    C1] RAX: ffffffffffffffda RBX: 00007f0a71625fa0 RCX: 00007f0a7139e0d9
[  757.274351][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  757.282306][    C1] RBP: 00007f0a71435024 R08: ffffffffffffffff R09: 0000000000000000
[  757.290260][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  757.298210][    C1] R13: 00007f0a71626038 R14: 00007f0a71625fa0 R15: 00007fff0eb04138
[  757.306168][    C1]  </TASK>