last executing test programs:

1m31.590782975s ago: executing program 5 (id=125):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
shutdown(r0, 0x1)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000)

1m31.414331145s ago: executing program 5 (id=128):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040)={[{@resgid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80002009})
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24008840}, 0x0)

1m30.900839792s ago: executing program 5 (id=131):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x1b, '\x00', @auto="7645f4758559b4a813709b805561ac36"})

1m30.23685301s ago: executing program 5 (id=135):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

1m29.109175622s ago: executing program 5 (id=143):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd82, &(0x7f0000000640)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0xd4c, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@routing={0x73, 0x4, 0x0, 0x80, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2]}, @dstopts={0x84, 0x1a0, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x6, 0xb0, "cbc12f7ae3edf4305260157d6e79d0f5da0413cb63f05d411cd975e1a88f080a331a218ac844b9b13e2694a110514ce5d4fe5a79c4725be01c747dd78e6f76d120e48ffbc41c08dc3a09566e862909fc5030a89af80b8323f979f6c025d0229b692eb5f59a3b00f3a9fc6d21e6fbf37cbac386a8c058cefc7f29bb80c48d46f934b4599d3cfa67c8fb55f68f4afff3da8b8987a106977fa97a70d8814849d3a6f7466f68100b36cf826bf2ecd59d4ba5"}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0xc1, [0x8000000, 0x7, 0x7, 0x4]}}, @generic={0xa7, 0xc1a, "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"}]}], @ndisc_ns={0x87, 0x0, 0x0, @local}}}}}}, 0x0)

1m27.74521487s ago: executing program 5 (id=152):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x200400d4)

1m27.273908852s ago: executing program 32 (id=152):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x200400d4)

15.525335662s ago: executing program 0 (id=572):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4c3, &(0x7f00000005c0)="$eJzs3U1oXNUeAPD/nXw0L01f8j54r3SV9wp9fZQmTad5pdAH7apQtGArKOjC0EzStJO2NCmYLMQP0IoK7aYbi6ALBekirlQEkS5ERXDRjaAUVBAbSKtVpAshcu/MxLSZpE1Tc2n8/eBwz7kzc89/5uSeueefSxLAH1ZnROyKiIaI2BIR7dX9hWqJJyslfV6pOHEoLUlMTx+4mkQSEXuLE4dqx0qq29XVA7RExIUPI1ob5/Y7MjZ+pK9cLp2otrtHh493j4yNbx4a7hssDZaOFnu2F4vF3h3F3rv2Xn/45fCZd67vef7sle8//ebi2+eT2BVt1cdmv4+7pTM6Zz6T2RqTiP/f7c5y1pJ3ACza+fvPvJR3DADA8kuv8f8aEf/Orv/boyEqF+uHJx+91h7XBuZ7XcfPr1xezjgBAACAOzcd7bEz3QIAAAArViEi2iIpdFXvBWiLQqGrq3IP79+jtVA+NjK6aeDYyaP9kd0r2xFNhYGhcql2r3BHNCVpuyer/9beelO7GBF/iYhT7X/K2l0Hj5X7805+AAAAwArXFnHpkWfe/efqedb/qS/b844SAAAAWIp0/b/mUmv2p7p+ss4HAACAFSld/1979srHYf0PAAAAK1Zt/T/zf7hUVFRUZip5z1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw1/R0EtMAAADAipZ3/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHvL3uLEoVpZrj4n9yxXT8xnandEdFTGv1QtlUcaoyXbtkRTRLT+mETjrNclEdGwxL67NkR0xqbPTz/x3VtpierP4RIPyz1i4uu8IyBPzdvyjoA8rXsg7wjI02en8o6APF2cyjsC8rT/QN4RkKd9/8s7AvL08tW8I+CD3RGxpV7+rxBrs20lC3Rz/qchyxAtzSfnIjqj69vZ++bmfwqTS+yGBUztjtgZEaU5+b9C7SkdDdXWmixV2JQMDJVLWyLizxGxMZpWpe2eBfrYu/ZC3UzPi/9Ix//kvlr+Ly1p/7VcYDWOycZVN76uv2+0b6nvm4qppyLWNdYb/2Qm/5vMk/9ddZt9vPfV/uF6+69/lI7/C+8vPP78nqZfjfhP3fM/mXlOWuseHT7ePTI2vnlouG+wNFg6WuzZXiwWe3cUe7uz+aC7NivM9ebTr9f9pv/XwWz+HzP++UnP/9aFxz+b/0fGxo/0lculEyOL7+O5DWfrfoe/cTYd/+YLdzL/NycPZgE2V/c93jc6eqInojm5b+7+rYuPeaWqfR61zysd/43r63//167/KvN/Yc78/7fqtlD5FeK8/vva5br7vzidjn/xIed/ftLx77/F+Z/ccP4vvvLY+v0b6/X9cGTXf+duff5vy4KpHcT1363d7gDlHScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMz2awAAAP//MEf3BQ==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}})

15.040334075s ago: executing program 0 (id=575):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

14.248977148s ago: executing program 3 (id=581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x4000010)

14.10893089s ago: executing program 0 (id=583):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

14.034373569s ago: executing program 3 (id=584):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
close_range(r1, 0xffffffffffffffff, 0x2)
r2 = dup3(r0, r1, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r2, 0x0, 0x80000000}, 0x50)

13.601256444s ago: executing program 3 (id=589):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x3}, 0x5})
write$sndseq(r1, &(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)

13.299765587s ago: executing program 3 (id=591):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)

13.186302647s ago: executing program 0 (id=592):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')

13.036506345s ago: executing program 3 (id=593):
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x19c)
r1 = fanotify_init(0xf00, 0x40000)
fanotify_mark(r1, 0x105, 0x4000997d, r0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10)
rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00')

12.720945695s ago: executing program 0 (id=595):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

12.556780684s ago: executing program 3 (id=596):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000540)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x6}}, {@nodatacow}, {@clear_cache}, {@rescan_uuid_tree}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0xd1)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x1, 0xffffffffff7ffe01, 0x6, 0x53d9, 0x2, [0xe, 0x2500, 0x1000000, 0x7fffffff]})

11.881191472s ago: executing program 0 (id=602):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
ptrace(0x4206, r0)
ptrace(0x4208, r0)

11.05185646s ago: executing program 33 (id=602):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
ptrace(0x4206, r0)
ptrace(0x4208, r0)

6.972955024s ago: executing program 2 (id=617):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000040000701"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

6.170672251s ago: executing program 6 (id=622):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r1, 0x2)
pread64(r0, &(0x7f0000000000)=""/16, 0x9600, 0x3ff)

5.511023382s ago: executing program 6 (id=625):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
sendto$inet6(r0, &(0x7f0000000380)="b3", 0x1, 0x20060000, 0x0, 0x0)

5.195316464s ago: executing program 1 (id=626):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18)

5.195167636s ago: executing program 6 (id=627):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read(r0, &(0x7f0000000380)=""/144, 0x90)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

5.173313742s ago: executing program 4 (id=628):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r2=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000001c0)={r3, 0x2, 0x1000007, 0x0, &(0x7f0000000480)})

4.902008578s ago: executing program 2 (id=629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48801}, 0x8000)

4.780703048s ago: executing program 4 (id=630):
r0 = gettid()
timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000002000)=""/4102, 0x1006}], 0x1)

4.693648924s ago: executing program 2 (id=631):
syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120110010d6a2f109e1c020a0000000203010902"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20)

4.021232051s ago: executing program 1 (id=632):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

3.69432045s ago: executing program 4 (id=633):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc19, &(0x7f0000002140)="$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")
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000440)=""/140)

3.138700589s ago: executing program 4 (id=634):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

3.114981286s ago: executing program 2 (id=635):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x84a8, 0x515f3157, 0x4, "78e1141009fd93233bce43f20613281f43d01f"})
write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
read$FUSE(r1, &(0x7f0000001b80)={0x2020}, 0x2020)

3.043180122s ago: executing program 6 (id=636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0x2)

2.729472675s ago: executing program 2 (id=637):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x181, 0x0, 0x6, 0x100}, 0x10)
timer_create(0xfffffffd, 0x0, &(0x7f00000011c0))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
timer_gettime(0x0, &(0x7f0000000200))

2.622429036s ago: executing program 6 (id=638):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.u'}, 0xfe78)

2.218016778s ago: executing program 4 (id=639):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0xa, 0x5, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x48, 0xec3, 0xfdffffffffffb5b2, 0x4, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x78)

1.757749081s ago: executing program 2 (id=640):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x5, 0x4, 0x8a0f, 0x7fff, 0x100000005]}, &(0x7f0000000080)=0x78)

1.757566336s ago: executing program 6 (id=641):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49)
landlock_restrict_self(0xffffffffffffffff, 0xc)

1.677766227s ago: executing program 1 (id=642):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f0000000180)='./file1\x00', 0x24c42, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9)
fallocate(r1, 0x8, 0x4000, 0x8000)

1.453153203s ago: executing program 1 (id=643):
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x7e, 0x0, 0x0, 0x0, 0x1})
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='sync\x00', 0x0, 0x0)

1.225708793s ago: executing program 1 (id=644):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x21c5, &(0x7f0000000340)={0x0, 0xced, 0x20000, 0xfffffff7, 0x1c5}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000000))
pselect6(0x40, &(0x7f0000000000)={0x9, 0x1, 0x4e51e018, 0x67, 0x5, 0xf6d, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0)

646.702685ms ago: executing program 4 (id=645):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=646):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xccc134f448c8365a, 0x12, r1, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x4, 0x2)

kernel console output (not intermixed with test programs):

00.
[  128.691489][   T29] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  128.706788][   T10] usb 5-1: USB disconnect, device number 3
[  128.712239][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.801422][   T29] usb 2-1: config 0 descriptor??
[  128.952934][ T6251] loop5: detected capacity change from 0 to 512
[  128.980504][ T6248] loop3: detected capacity change from 0 to 1024
[  129.014486][ T6251] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.131: inode has both inline data and extents flags
[  129.035288][ T6251] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  129.043327][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  129.048842][ T6242] syzkaller1: entered promiscuous mode
[  129.053779][    C1] EXT4-fs (loop5): initial error at time 1778441452: ext4_orphan_get:1397: inode 15
[  129.073906][    C1] EXT4-fs (loop5): last error at time 1778441452: ext4_orphan_get:1397: inode 15
[  129.089700][ T6251] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.131: couldn't read orphan inode 15 (err -117)
[  129.103563][ T6251] loop5: lost filesystem error report for type 5 error -117
[  129.105589][ T6242] syzkaller1: entered allmulticast mode
[  129.128426][ T6251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.263092][   T29] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  129.290065][   T29] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  129.357077][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.414653][ T6255] loop0: detected capacity change from 0 to 256
[  129.453633][   T29] ft260 0003:0403:6030.0004: chip code: 0000 0000
[  129.465027][ T6254] xt_hashlimit: size too large, truncated to 1048576
[  129.716218][ T6260] loop5: detected capacity change from 0 to 1024
[  129.759169][ T6260] EXT4-fs: Ignoring removed orlov option
[  129.885616][ T6260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.032546][ T5766] usb 2-1: USB disconnect, device number 2
[  130.081822][ T6260] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  130.210975][ T6260] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.135: unexpected EA_INODE flag
[  130.305985][ T6275] loop3: detected capacity change from 0 to 512
[  130.312396][ T6260] overlayfs: failed to look up (file1) for ino (-117)
[  130.344532][ T6276] syz.4.141 uses obsolete (PF_INET,SOCK_PACKET)
[  130.423153][ T6275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.463012][ T6275] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.477427][ T5625] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz-executor: bit already cleared for inode 11
[  130.549023][ T6280] loop2: detected capacity change from 0 to 64
[  130.658094][ T6275] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  130.689342][ T5625] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  130.762646][ T6275] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 24576 with max blocks 1 with error 28
[  130.794187][ T5625] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  130.834976][ T6275] EXT4-fs (loop3): This should not happen!! Data will be lost
[  130.834976][ T6275] 
[  130.846311][ T5625] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz-executor: deleted inode referenced: 14
[  130.858364][ T6275] EXT4-fs (loop3): Total free blocks count 0
[  130.883539][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  130.883571][   T30] audit: type=1800 audit(1778441453.954:17): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.142" name="file1" dev="loop2" ino=22 res=0 errno=0
[  130.883662][ T6275] EXT4-fs (loop3): Free/Dirty block details
[  130.924403][ T6275] EXT4-fs (loop3): free_blocks=65280
[  130.938703][ T6275] EXT4-fs (loop3): dirty_blocks=1
[  130.939696][ T5625] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz-executor: deleted inode referenced: 14
[  130.944042][ T6275] EXT4-fs (loop3): Block reservation details
[  130.944071][ T6275] EXT4-fs (loop3): i_reserved_data_blocks=1
[  131.051209][ T5628] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  131.076550][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.153425][   T29] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  131.316252][   T29] usb 2-1: Using ep0 maxpacket: 8
[  131.342014][   T29] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  131.368075][   T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  131.391923][ T6291] loop3: detected capacity change from 0 to 2048
[  131.410639][   T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  131.438356][   T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  131.478044][ T6291]  loop3: p1 < > p4
[  131.483813][   T29] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.517878][   T29] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  131.551174][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.565822][ T6291] loop3: p4 size 8388608 extends beyond EOD, truncated
[  131.642936][ T6298] EXT4-fs (loop7): unable to read superblock
[  131.681407][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.840409][   T29] usb 2-1: usb_control_msg returned -32
[  131.872075][   T29] usbtmc 2-1:16.0: can't read capabilities
[  131.933076][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.940118][ T5654] udevd[5654]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  132.003953][ T5618] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  132.032496][ T5618] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.090094][ T5618] Buffer I/O error on dev loop3p4, logical block 1, async page read
[  132.126318][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  132.162366][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  132.172966][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  132.215860][   T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  132.229355][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.389885][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.390345][ T6307] loop2: detected capacity change from 0 to 4096
[  132.426906][   T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  132.461021][   T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  132.472697][ T6307] NILFS (loop2): invalid segment: Checksum error in segment payload
[  132.479293][   T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  132.492663][ T6307] NILFS (loop2): trying rollback from an earlier position
[  132.497302][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.520741][ T5747] usb 2-1: USB disconnect, device number 3
[  132.588430][ T6302] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  132.650094][ T6307] NILFS (loop2): recovery complete
[  132.668500][   T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  132.697821][ T6310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  132.700438][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.768582][ T6307] capability: warning: `syz.2.154' uses 32-bit capabilities (legacy support in use)
[  132.902297][ T5645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  132.921400][ T5645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  132.935263][ T5645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  132.949847][ T5645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  132.968333][ T5645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  133.335057][   T29] usb 5-1: USB disconnect, device number 4
[  133.773245][   T36] bridge_slave_1: left allmulticast mode
[  133.813236][   T36] bridge_slave_1: left promiscuous mode
[  133.854630][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.864168][ T6309] loop3: detected capacity change from 0 to 40427
[  133.937982][ T6309] F2FS-fs (loop3): invalid crc value
[  134.005129][   T36] bridge_slave_0: left allmulticast mode
[  134.029430][   T36] bridge_slave_0: left promiscuous mode
[  134.042090][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.075576][   T50] Bluetooth: hci2: command 0x1003 tx timeout
[  134.077250][ T5631] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  134.451269][ T6335] loop4: detected capacity change from 0 to 32768
[  134.465090][ T6335] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.160 (6335)
[  134.510447][ T6335] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.521457][ T6335] BTRFS info (device loop4): using sha256 checksum algorithm
[  134.650788][ T6335] BTRFS info (device loop4): rebuilding free space tree
[  134.707705][ T6335] BTRFS info (device loop4): disabling free space tree
[  134.719412][ T6335] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  134.729319][ T6335] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  134.746724][ T6309] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  134.760425][ T6335] BTRFS info (device loop4): setting nodatasum
[  134.767037][ T6335] BTRFS info (device loop4): setting nodatacow
[  134.773222][ T6335] BTRFS info (device loop4): turning off barriers
[  134.781259][ T6335] BTRFS info (device loop4): force clearing of disk cache
[  134.849181][ T6309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.033425][ T5631] Bluetooth: hci6: command tx timeout
[  135.235121][ T5626] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.022061][ T5628] syz-executor: attempt to access beyond end of device
[  136.022061][ T5628] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  136.092712][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  136.092769][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  136.092791][ T5628] Call Trace:
[  136.092803][ T5628]  <TASK>
[  136.092816][ T5628]  dump_stack_lvl+0x100/0x190
[  136.092864][ T5628]  f2fs_stop_checkpoint+0x600/0x9b0
[  136.092932][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.092979][ T5628]  ? errseq_set+0xe3/0x150
[  136.093018][ T5628]  ? errseq_set+0xe3/0x150
[  136.093057][ T5628]  f2fs_write_end_io+0xf59/0x1340
[  136.093100][ T5628]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  136.093145][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.093204][ T5628]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  136.093242][ T5628]  bio_endio+0x78f/0x8f0
[  136.093300][ T5628]  submit_bio_noacct+0x64c/0x2000
[  136.093354][ T5628]  f2fs_submit_write_bio+0x135/0x340
[  136.093418][ T5628]  __submit_merged_bio+0x331/0x780
[  136.093464][ T5628]  __submit_merged_write_cond+0x3fe/0x510
[  136.093522][ T5628]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  136.093573][ T5628]  ? __pfx___might_resched+0x10/0x10
[  136.093627][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.093682][ T5628]  f2fs_write_cache_pages+0x20e9/0x2630
[  136.093754][ T5628]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  136.093806][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.093851][ T5628]  ? bpf_ksym_find+0x124/0x1c0
[  136.093908][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.093953][ T5628]  ? __kasan_check_byte+0x13/0x50
[  136.094009][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.094055][ T5628]  ? unwind_next_frame+0x3be/0x2090
[  136.094108][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.094153][ T5628]  ? rcu_is_watching+0x12/0xc0
[  136.094208][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.094268][ T5628]  ? bpf_ksym_find+0x124/0x1c0
[  136.094378][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.094427][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.094473][ T5628]  ? add_lock_to_list+0x99/0x110
[  136.094616][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.094674][ T5628]  ? rcu_is_watching+0x12/0xc0
[  136.094748][ T5628]  f2fs_write_data_pages+0x799/0x16d0
[  136.094903][ T5628]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  136.094954][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.095014][ T5628]  ? do_writepages+0x4b5/0x600
[  136.095077][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.095125][ T5628]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  136.095173][ T5628]  do_writepages+0x278/0x600
[  136.095235][ T5628]  ? __pfx_do_writepages+0x10/0x10
[  136.095290][ T5628]  ? do_raw_spin_unlock+0x145/0x1e0
[  136.095342][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.095384][ T5628]  ? _raw_spin_unlock+0x28/0x50
[  136.095437][ T5628]  filemap_writeback+0x22d/0x2e0
[  136.095499][ T5628]  ? __pfx_filemap_writeback+0x10/0x10
[  136.095556][ T5628]  ? check_noncircular+0x97/0x160
[  136.095645][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.095688][ T5628]  ? find_held_lock+0x2b/0x80
[  136.095745][ T5628]  ? f2fs_sync_dirty_inodes+0x3a6/0x990
[  136.095809][ T5628]  ? f2fs_sync_dirty_inodes+0x3a6/0x990
[  136.095854][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.095907][ T5628]  f2fs_sync_dirty_inodes+0x469/0x990
[  136.095971][ T5628]  block_operations+0x2a6/0xfc0
[  136.096014][ T5628]  ? __bfs+0x150/0x2a0
[  136.096055][ T5628]  ? __pfx_block_operations+0x10/0x10
[  136.096101][ T5628]  ? check_noncircular+0x97/0x160
[  136.096184][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.096232][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.096274][ T5628]  ? rcu_is_watching+0x12/0xc0
[  136.096325][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.096375][ T5628]  f2fs_write_checkpoint+0x582/0x5550
[  136.096429][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.096471][ T5628]  ? _raw_spin_unlock_irq+0x2e/0x50
[  136.096518][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.096558][ T5628]  ? __wait_for_common+0x1f3/0x4c0
[  136.096610][ T5628]  ? __pfx_schedule_timeout+0x10/0x10
[  136.096656][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.096698][ T5628]  ? try_to_wake_up+0x5f6/0x1900
[  136.096755][ T5628]  ? __pfx___wait_for_common+0x10/0x10
[  136.096817][ T5628]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  136.096874][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.096916][ T5628]  ? rcu_is_watching+0x12/0xc0
[  136.096967][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.097009][ T5628]  ? kthread_stop+0x280/0x640
[  136.097056][ T5628]  kill_f2fs_super+0x3f1/0x4a0
[  136.097102][ T5628]  ? __pfx_kill_f2fs_super+0x10/0x10
[  136.097168][ T5628]  ? lockdep_hardirqs_on+0x78/0x100
[  136.097221][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.097264][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.097321][ T5628]  deactivate_locked_super+0xc1/0x1b0
[  136.097376][ T5628]  deactivate_super+0xe7/0x110
[  136.097429][ T5628]  cleanup_mnt+0x21f/0x450
[  136.097466][ T5628]  task_work_run+0x150/0x240
[  136.097511][ T5628]  ? __pfx_task_work_run+0x10/0x10
[  136.097558][ T5628]  ? srso_alias_return_thunk+0x5/0xfbef5
[  136.097600][ T5628]  ? rcu_is_watching+0x12/0xc0
[  136.097658][ T5628]  exit_to_user_mode_loop+0x107/0x4f0
[  136.097702][ T5628]  ? rcu_is_watching+0x12/0xc0
[  136.097759][ T5628]  do_syscall_64+0x706/0xf80
[  136.097829][ T5628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.097865][ T5628] RIP: 0033:0x7fcc1e39e017
[  136.097893][ T5628] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  136.097930][ T5628] RSP: 002b:00007ffebc04a608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  136.097962][ T5628] RAX: 0000000000000000 RBX: 00007fcc1e432120 RCX: 00007fcc1e39e017
[  136.097984][ T5628] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebc04a6c0
[  136.098005][ T5628] RBP: 00007ffebc04a6c0 R08: 00007ffebc04b6c0 R09: 00000000ffffffff
[  136.098027][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffebc04b750
[  136.098048][ T5628] R13: 00007fcc1e432120 R14: 0000000000021036 R15: 00007ffebc04b790
[  136.098094][ T5628]  </TASK>
[  136.712159][ T5628] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  137.115264][ T5631] Bluetooth: hci6: command tx timeout
[  137.231834][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.326820][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.364158][   T36] bond0 (unregistering): Released all slaves
[  137.390140][   T10] IPVS: starting estimator thread 0...
[  137.477586][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[  137.496184][ T6386] IPVS: using max 23 ests per chain, 55200 per kthread
[  137.983146][ T6403] loop0: detected capacity change from 0 to 1024
[  138.015558][ T6403] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  138.097917][ T6403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.487526][ T6414] loop3: detected capacity change from 0 to 4096
[  138.499942][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.608665][ T6414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.867036][ T6414] EXT4-fs (loop3): shut down requested (1)
[  139.127891][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.195059][ T5631] Bluetooth: hci6: command tx timeout
[  139.220679][ T6433] netlink: 'syz.1.182': attribute type 21 has an invalid length.
[  139.371912][ T6433] netlink: 'syz.1.182': attribute type 6 has an invalid length.
[  139.393109][ T6433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.182'.
[  139.510157][   T36] hsr_slave_0: left promiscuous mode
[  139.527795][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.183'.
[  139.548318][   T36] hsr_slave_1: left promiscuous mode
[  139.573179][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.610423][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.649398][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.683025][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.773383][ T5766] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  139.854796][   T36] veth1_macvtap: left promiscuous mode
[  139.876117][   T36] veth0_macvtap: left promiscuous mode
[  139.895451][   T36] veth1_vlan: left promiscuous mode
[  139.927653][   T36] veth0_vlan: left promiscuous mode
[  139.965715][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.183'.
[  139.967785][ T5766] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  140.030094][ T6449] nbd: device at index 64 is going down
[  140.031228][ T5766] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  140.101342][ T5766] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  140.139794][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.205459][ T6445] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  140.258257][ T5766] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  140.483822][ T5654] udevd[5654]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  141.016550][ T6483] loop3: detected capacity change from 0 to 256
[  141.039343][ T6483] exfat: Deprecated parameter 'utf8'
[  141.057091][ T6483] exfat: Deprecated parameter 'utf8'
[  141.077514][ T6483] exfat: Deprecated parameter 'utf8'
[  141.163207][ T6483] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  141.178794][   T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  141.269010][   T36] team0 (unregistering): Port device team_slave_1 removed
[  141.280416][ T5631] Bluetooth: hci6: command tx timeout
[  141.309455][ T5747] usb 5-1: USB disconnect, device number 5
[  141.335923][   T29] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  141.351976][   T29] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  141.366099][   T29] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  141.389094][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.407033][   T36] team0 (unregistering): Port device team_slave_0 removed
[  141.440989][ T6485] loop3: detected capacity change from 0 to 2048
[  141.456505][ T6479] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  141.507938][ T6485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.585682][   T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  141.831605][  T149] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  141.858686][  T149] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  141.874782][  T149] EXT4-fs (loop3): This should not happen!! Data will be lost
[  141.874782][  T149] 
[  141.897162][  T149] EXT4-fs (loop3): Total free blocks count 0
[  141.903949][  T149] EXT4-fs (loop3): Free/Dirty block details
[  141.911114][   T29] usb 3-1: USB disconnect, device number 3
[  141.919217][  T149] EXT4-fs (loop3): free_blocks=2415919104
[  141.930651][  T149] EXT4-fs (loop3): dirty_blocks=32
[  141.938351][  T149] EXT4-fs (loop3): Block reservation details
[  141.946154][  T149] EXT4-fs (loop3): i_reserved_data_blocks=2
[  141.958470][ T5628] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  141.995367][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.023013][ T6490] loop4: detected capacity change from 0 to 256
[  142.092289][ T6490] FAT-fs (loop4): Directory bread(block 64) failed
[  142.105383][ T6490] FAT-fs (loop4): Directory bread(block 65) failed
[  142.112459][ T6490] FAT-fs (loop4): Directory bread(block 66) failed
[  142.120678][ T6490] FAT-fs (loop4): Directory bread(block 67) failed
[  142.129783][ T6490] FAT-fs (loop4): Directory bread(block 68) failed
[  142.136919][ T6490] FAT-fs (loop4): Directory bread(block 69) failed
[  142.144535][ T6490] FAT-fs (loop4): Directory bread(block 70) failed
[  142.158003][ T6490] FAT-fs (loop4): Directory bread(block 71) failed
[  142.173715][ T6490] FAT-fs (loop4): Directory bread(block 72) failed
[  142.183218][ T6490] FAT-fs (loop4): Directory bread(block 73) failed
[  142.327878][ T6492] loop3: detected capacity change from 0 to 4096
[  142.462990][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[  143.083497][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'.
[  143.120928][   T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  143.356794][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.371034][ T6506] Zero length message leads to an empty skb
[  143.393397][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.425682][   T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  143.461329][   T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  143.461378][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.485260][   T29] usb 5-1: config 0 descriptor??
[  143.871771][ T5631] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  143.881795][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  143.881841][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  143.881866][ T5631] Workqueue: hci1 hci_rx_work
[  143.881921][ T5631] Call Trace:
[  143.881933][ T5631]  <TASK>
[  143.881946][ T5631]  dump_stack_lvl+0x100/0x190
[  143.881992][ T5631]  sysfs_warn_dup.cold+0x1c/0x28
[  143.882050][ T5631]  sysfs_create_dir_ns+0x24b/0x2b0
[  143.882116][ T5631]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  143.882179][ T5631]  ? find_held_lock+0x2b/0x80
[  143.882240][ T5631]  ? kobject_add_internal+0x25f/0x930
[  143.882282][ T5631]  ? kobject_add_internal+0x25f/0x930
[  143.882328][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.882376][ T5631]  ? do_raw_spin_unlock+0x145/0x1e0
[  143.882436][ T5631]  kobject_add_internal+0x2c8/0x930
[  143.882486][ T5631]  kobject_add+0x16a/0x1e0
[  143.882534][ T5631]  ? __pfx_kobject_add+0x10/0x10
[  143.882574][ T5631]  ? class_to_subsys+0x10f/0x150
[  143.882631][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.882679][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.882726][ T5631]  ? kobject_put+0xb9/0x640
[  143.882760][ T5631]  ? _raw_spin_unlock+0x28/0x50
[  143.882825][ T5631]  device_add+0x294/0x1950
[  143.882875][ T5631]  ? __pfx_dev_set_name+0x10/0x10
[  143.882933][ T5631]  ? __pfx_device_add+0x10/0x10
[  143.882983][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.883029][ T5631]  ? mgmt_send_event_skb+0x2fb/0x460
[  143.883101][ T5631]  hci_conn_add_sysfs+0x1a3/0x260
[  143.883166][ T5631]  le_conn_complete_evt+0x11eb/0x1f60
[  143.883234][ T5631]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  143.883295][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.883350][ T5631]  hci_le_conn_complete_evt+0x23c/0x3a0
[  143.883409][ T5631]  ? skb_pull_data+0x15f/0x1e0
[  143.883469][ T5631]  hci_le_meta_evt+0x34a/0x5f0
[  143.883539][ T5631]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  143.883602][ T5631]  hci_event_packet+0x51c/0xcd0
[  143.883657][ T5631]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  143.883718][ T5631]  ? __pfx_hci_event_packet+0x10/0x10
[  143.883777][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.883827][ T5631]  ? kcov_remote_start+0x374/0x660
[  143.883870][ T5631]  ? lockdep_hardirqs_on+0x78/0x100
[  143.883928][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.883986][ T5631]  hci_rx_work+0x451/0xfc0
[  143.884048][ T5631]  process_one_work+0xa0e/0x1980
[  143.884119][ T5631]  ? __pfx_process_one_work+0x10/0x10
[  143.884165][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.884227][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.884283][ T5631]  worker_thread+0x5ef/0xe50
[  143.884350][ T5631]  ? kthread+0x13a/0x450
[  143.884391][ T5631]  ? __pfx_worker_thread+0x10/0x10
[  143.884437][ T5631]  kthread+0x370/0x450
[  143.884478][ T5631]  ? __pfx_kthread+0x10/0x10
[  143.884530][ T5631]  ret_from_fork+0x72b/0xd50
[  143.884580][ T5631]  ? __pfx_ret_from_fork+0x10/0x10
[  143.884625][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.884672][ T5631]  ? rcu_is_watching+0x12/0xc0
[  143.884728][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.884774][ T5631]  ? __switch_to+0x800/0x1100
[  143.884830][ T5631]  ? __switch_to_asm+0x39/0x70
[  143.884883][ T5631]  ? __pfx_kthread+0x10/0x10
[  143.884929][ T5631]  ret_from_fork_asm+0x1a/0x30
[  143.885006][ T5631]  </TASK>
[  144.213254][ T5631] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  144.227545][ T5631] Bluetooth: hci1: failed to register connection device
[  144.294335][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.346470][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.364715][ T6311] bridge_slave_0: entered allmulticast mode
[  144.366684][   T29] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd
[  144.372933][ T6311] bridge_slave_0: entered promiscuous mode
[  144.389568][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.396774][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.406670][ T6311] bridge_slave_1: entered allmulticast mode
[  144.416859][ T6311] bridge_slave_1: entered promiscuous mode
[  144.471113][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.484872][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.530142][ T6311] team0: Port device team_slave_0 added
[  144.546773][ T6311] team0: Port device team_slave_1 added
[  144.618325][   T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  144.781339][   T29] usb 5-1: USB disconnect, device number 6
[  144.923156][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.940116][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  144.978961][ T6540] loop3: detected capacity change from 0 to 2048
[  144.996422][ T6540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.016524][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.127408][ T6537] fido_id[6537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  145.158131][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3
[  145.187860][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.217246][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  145.338570][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.729589][ T6311] hsr_slave_0: entered promiscuous mode
[  145.758703][ T6311] hsr_slave_1: entered promiscuous mode
[  145.776199][ T6311] debugfs: 'hsr0' already exists in 'hsr'
[  145.792252][ T6311] Cannot create hsr debugfs directory
[  145.851376][ T6551] syzkaller1: entered promiscuous mode
[  145.872874][ T6551] syzkaller1: entered allmulticast mode
[  145.885479][ T5766] libceph: connect (1)[c::]:6789 error -101
[  145.905757][ T5766] libceph: mon0 (1)[c::]:6789 connect error
[  145.954762][ T6555] ceph: No mds server is up or the cluster is laggy
[  146.202524][ T6569] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  146.731328][ T6585] loop2: detected capacity change from 0 to 512
[  146.778872][ T6585] EXT4-fs: Ignoring removed orlov option
[  146.845563][ T6585] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  146.960793][ T6585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  146.992575][ T6585] EXT4-fs error (device loop2): ext4_iget_extra_inode:5127: inode #15: comm syz.2.220: corrupted in-inode xattr: e_value size too large
[  147.030642][ T6587] loop3: detected capacity change from 0 to 4096
[  147.076534][ T6585] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  147.082527][ T6585] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.220: couldn't read orphan inode 15 (err -117)
[  147.091807][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  147.091843][    C0] EXT4-fs (loop2): initial error at time 1778441470: ext4_iget_extra_inode:5127: inode 15
[  147.091897][    C0] EXT4-fs (loop2): last error at time 1778441470: ext4_iget_extra_inode:5127: inode 15
[  147.185197][ T6587] ntfs3(loop3): ino=19, mi_enum_attr
[  147.210415][ T6587] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  147.215872][ T6585] loop2: lost filesystem error report for type 5 error -117
[  147.269146][ T6585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.516277][ T6587] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  147.550044][ T6587] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  147.700523][ T6311] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  147.788119][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  147.825393][ T6311] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  147.897678][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  147.921534][ T6311] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  148.025538][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.068649][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  148.118251][ T6311] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  148.154099][   T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  148.194637][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  148.333186][   T29] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  148.389982][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.412384][ T6608] loop4: detected capacity change from 0 to 4096
[  148.431504][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4
[  148.459687][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.502175][   T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  148.535657][   T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  148.563762][   T29] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  148.590985][   T29] usb 1-1: Manufacturer: syz
[  148.652719][   T29] usb 1-1: config 0 descriptor??
[  149.023067][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.031276][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'.
[  149.059481][ T6628] Bluetooth: MGMT ver 1.23
[  149.142080][   T29] appleir 0003:05AC:8243.0006: unknown main item tag 0x0
[  149.191588][   T29] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  149.384620][ T6311] 8021q: adding VLAN 0 to HW filter on device team0
[  149.503116][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.510375][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.534112][ T6634] loop2: detected capacity change from 0 to 1024
[  149.610985][    T9] usb 1-1: USB disconnect, device number 3
[  149.622360][ T6634] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  149.688989][ T6633] loop4: detected capacity change from 0 to 32768
[  149.700099][ T6633] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.230 (6633)
[  149.711653][  T149] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.721804][  T149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.771463][ T6633] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  149.784111][ T6633] BTRFS info (device loop4): using crc32c checksum algorithm
[  149.792033][ T6633] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  149.836110][ T6634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.987458][ T6633] BTRFS info (device loop4): rebuilding free space tree
[  150.002717][ T6637] fido_id[6637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  150.041558][ T6633] BTRFS info (device loop4): disabling free space tree
[  150.049148][ T6633] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.049206][ T6633] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.082058][ T6633] BTRFS info (device loop4): enabling ssd optimizations
[  150.082108][ T6633] BTRFS info (device loop4): turning on async discard
[  150.082139][ T6633] BTRFS info (device loop4): enabling disk space caching
[  150.082169][ T6633] BTRFS info (device loop4): force clearing of disk cache
[  150.082200][ T6633] BTRFS info (device loop4): use zstd compression, level 3
[  150.395930][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  150.458263][ T5626] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  150.751570][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.378858][ T6690] warning: `syz.0.244' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  151.549423][ T6693] input: syz1 as /devices/virtual/input/input7
[  151.877767][ T6705] loop0: detected capacity change from 0 to 256
[  151.908784][ T6705] vfat: Deprecated parameter 'posix'
[  151.940079][ T6705] FAT-fs: "posix" option is obsolete, not supported now
[  152.138365][ T6709] loop3: detected capacity change from 0 to 1024
[  152.176186][ T6709] EXT4-fs: Ignoring removed orlov option
[  152.190428][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.327743][ T6709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.673837][ T6684] loop2: detected capacity change from 0 to 32768
[  153.186061][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.331938][ T6311] veth0_vlan: entered promiscuous mode
[  153.408353][ T6311] veth1_vlan: entered promiscuous mode
[  153.584764][ T6311] veth0_macvtap: entered promiscuous mode
[  153.638339][ T6311] veth1_macvtap: entered promiscuous mode
[  153.696587][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.721494][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.747113][   T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.763578][ T5771] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  153.787106][   T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.827465][   T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.848326][   T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.959729][ T5771] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  153.990048][ T5771] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  154.044937][ T5771] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  154.073865][ T5771] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  154.110161][ T5771] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  154.142010][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.165439][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.181386][ T5771] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  154.195756][ T6745] loop2: detected capacity change from 0 to 512
[  154.215892][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  154.247705][ T5771] usb 4-1: Product: syz
[  154.263591][ T5771] usb 4-1: Manufacturer: syz
[  154.275363][ T6745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.297083][ T5771] cdc_wdm 4-1:1.0: skipping garbage
[  154.302373][ T5771] cdc_wdm 4-1:1.0: skipping garbage
[  154.312858][ T5771] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  154.321275][ T5771] cdc_wdm 4-1:1.0: Unknown control protocol
[  154.335101][ T6745] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  154.386489][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.423514][   T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  154.433030][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.606002][   T29] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  154.624883][   T29] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  154.645783][   T29] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  154.663724][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.688681][ T6741] loop4: detected capacity change from 0 to 40427
[  154.708573][ T6746] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  154.732260][ T6741] F2FS-fs (loop4): build fault injection rate: 771
[  154.760624][ T6741] F2FS-fs (loop4): invalid crc value
[  154.768691][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.795522][   T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  155.185142][ T6754] input: syz1 as /devices/virtual/input/input8
[  155.238527][   T29] usb 2-1: USB disconnect, device number 4
[  155.308398][ T6741] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.381747][ T6741] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  156.065769][ T5626] syz-executor: attempt to access beyond end of device
[  156.065769][ T5626] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  156.140261][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  156.140311][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  156.140338][ T5626] Call Trace:
[  156.140350][ T5626]  <TASK>
[  156.140364][ T5626]  dump_stack_lvl+0x100/0x190
[  156.140414][ T5626]  f2fs_stop_checkpoint+0x600/0x9b0
[  156.140488][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.140536][ T5626]  ? errseq_set+0xe3/0x150
[  156.140575][ T5626]  ? errseq_set+0xe3/0x150
[  156.140614][ T5626]  f2fs_write_end_io+0xf59/0x1340
[  156.140658][ T5626]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  156.140703][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.140758][ T5626]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  156.140798][ T5626]  bio_endio+0x78f/0x8f0
[  156.140857][ T5626]  submit_bio_noacct+0x64c/0x2000
[  156.140911][ T5626]  f2fs_submit_write_bio+0x135/0x340
[  156.140979][ T5626]  __submit_merged_bio+0x331/0x780
[  156.141027][ T5626]  __submit_merged_write_cond+0x3fe/0x510
[  156.141077][ T5626]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  156.141129][ T5626]  ? __pfx___might_resched+0x10/0x10
[  156.141183][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.141239][ T5626]  f2fs_write_cache_pages+0x20e9/0x2630
[  156.141311][ T5626]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  156.141364][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.141410][ T5626]  ? bpf_ksym_find+0x124/0x1c0
[  156.141468][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.141521][ T5626]  ? __kasan_check_byte+0x13/0x50
[  156.141578][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.141625][ T5626]  ? unwind_next_frame+0x3be/0x2090
[  156.141679][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.141724][ T5626]  ? rcu_is_watching+0x12/0xc0
[  156.141779][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.141839][ T5626]  ? bpf_ksym_find+0x124/0x1c0
[  156.141950][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.141999][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.142045][ T5626]  ? add_lock_to_list+0x99/0x110
[  156.142081][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.142127][ T5626]  ? rcu_is_watching+0x12/0xc0
[  156.142189][ T5626]  f2fs_write_data_pages+0x799/0x16d0
[  156.142251][ T5626]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  156.142297][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.142354][ T5626]  ? do_writepages+0x4b5/0x600
[  156.142413][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.142464][ T5626]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  156.142514][ T5626]  do_writepages+0x278/0x600
[  156.142574][ T5626]  ? __pfx_do_writepages+0x10/0x10
[  156.142629][ T5626]  ? do_raw_spin_unlock+0x145/0x1e0
[  156.142680][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.142721][ T5626]  ? _raw_spin_unlock+0x28/0x50
[  156.142774][ T5626]  filemap_writeback+0x22d/0x2e0
[  156.142834][ T5626]  ? __pfx_filemap_writeback+0x10/0x10
[  156.142888][ T5626]  ? check_noncircular+0x97/0x160
[  156.142990][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.143037][ T5626]  ? find_held_lock+0x2b/0x80
[  156.143097][ T5626]  ? f2fs_sync_dirty_inodes+0x3a6/0x990
[  156.143148][ T5626]  ? f2fs_sync_dirty_inodes+0x3a6/0x990
[  156.143196][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.143255][ T5626]  f2fs_sync_dirty_inodes+0x469/0x990
[  156.143326][ T5626]  block_operations+0x2a6/0xfc0
[  156.143374][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.143420][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.143485][ T5626]  ? __pfx_block_operations+0x10/0x10
[  156.143536][ T5626]  ? __pfx_clockevents_program_event+0x10/0x10
[  156.143648][ T5626]  ? ktime_get+0x23e/0x320
[  156.143689][ T5626]  ? ktime_get+0x24d/0x320
[  156.143730][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.143781][ T5626]  ? rcu_is_watching+0x12/0xc0
[  156.143836][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.143891][ T5626]  f2fs_write_checkpoint+0x582/0x5550
[  156.143964][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.144017][ T5626]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  156.144069][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.144123][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.144169][ T5626]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  156.144236][ T5626]  kill_f2fs_super+0x3f1/0x4a0
[  156.144286][ T5626]  ? __pfx_kill_f2fs_super+0x10/0x10
[  156.144359][ T5626]  ? lockdep_hardirqs_on+0x78/0x100
[  156.144417][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.144464][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.144534][ T5626]  deactivate_locked_super+0xc1/0x1b0
[  156.144593][ T5626]  deactivate_super+0xe7/0x110
[  156.144649][ T5626]  cleanup_mnt+0x21f/0x450
[  156.144688][ T5626]  task_work_run+0x150/0x240
[  156.144738][ T5626]  ? __pfx_task_work_run+0x10/0x10
[  156.144788][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.144833][ T5626]  ? rcu_is_watching+0x12/0xc0
[  156.144894][ T5626]  exit_to_user_mode_loop+0x107/0x4f0
[  156.144942][ T5626]  ? rcu_is_watching+0x12/0xc0
[  156.145002][ T5626]  do_syscall_64+0x706/0xf80
[  156.145066][ T5626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.145105][ T5626] RIP: 0033:0x7f2a91d9e017
[  156.145135][ T5626] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  156.145170][ T5626] RSP: 002b:00007ffe51f52ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  156.145205][ T5626] RAX: 0000000000000000 RBX: 00007f2a91e32120 RCX: 00007f2a91d9e017
[  156.145229][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe51f52ba0
[  156.145253][ T5626] RBP: 00007ffe51f52ba0 R08: 00007ffe51f53ba0 R09: 00000000ffffffff
[  156.145276][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe51f53c30
[  156.145299][ T5626] R13: 00007f2a91e32120 R14: 0000000000026114 R15: 00007ffe51f53c70
[  156.145350][ T5626]  </TASK>
[  156.733252][ T5626] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  156.752506][ T5771] usb 4-1: USB disconnect, device number 4
[  157.051989][ T6767] loop2: detected capacity change from 0 to 32768
[  157.212640][ T6767] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  157.322483][ T6767] XFS (loop2): Ending clean mount
[  157.739430][ T6794] loop3: detected capacity change from 0 to 764
[  157.789361][ T5627] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.038592][ T6794] rock: directory entry would overflow storage
[  158.078937][ T6794] rock: sig=0x4f50, size=4, remaining=3
[  158.101256][ T6794] iso9660: Corrupted directory entry in block 6 of inode 1792
[  158.317613][ T6800] loop0: detected capacity change from 0 to 256
[  158.381433][ T6800] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  158.482293][ T6800] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff)
[  158.561910][ T6803] exFAT-fs (loop0): valid_size(150994954) is greater than size(10)
[  158.658466][   T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  158.837639][   T29] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  158.880153][   T29] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  158.903205][   T29] usb 2-1: config 1 interface 0 has no altsetting 0
[  158.920904][   T29] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  158.941556][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.973410][   T29] usb 2-1: Product: syz
[  158.987549][   T29] usb 2-1: Manufacturer: syz
[  159.001791][   T29] usb 2-1: SerialNumber: syz
[  159.025495][ T6802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.035880][ T5771] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  159.044295][ T6813] netlink: 96 bytes leftover after parsing attributes in process `syz.0.281'.
[  159.069521][ T6802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.235687][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.269955][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.314422][ T5771] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  159.340045][ T5771] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  159.368228][ T5771] usb 5-1: Manufacturer: syz
[  159.399571][ T5771] usb 5-1: config 0 descriptor??
[  160.003440][ T5766] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  160.177619][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.188097][   T29] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:80:8a:93:d5:0d
[  160.212821][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.263007][ T5766] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.294740][ T5771] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0007/input/input10
[  160.307106][ T5766] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.315674][   T29] rtl8150 2-1:1.0: eth5: rtl8150 is detected
[  160.348658][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.372591][   T29] usb 2-1: USB disconnect, device number 5
[  160.392985][ T5766] usb 3-1: config 0 descriptor??
[  160.527359][ T5771] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0007/input/input11
[  160.658997][ T5771] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0007/input/input12
[  160.736853][ T5771] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0007/input/input13
[  160.899158][ T5771] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0
[  160.925665][ T5766] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  161.041568][ T5771] usb 5-1: USB disconnect, device number 7
[  161.908522][ T6852] fido_id[6852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  162.174685][ T6868] loop0: detected capacity change from 0 to 1024
[  162.264495][ T6868] hfsplus: invalid file type 0174377 for inode 21
[  162.266145][  T803] usb 3-1: USB disconnect, device number 4
[  162.295550][   T30] audit: type=1800 audit(1778441485.374:18): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.299" name="file1" dev="loop0" ino=20 res=0 errno=0
[  163.091422][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'.
[  163.125560][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'.
[  163.172037][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'.
[  163.214875][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'.
[  163.314319][ T5611] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  163.342070][ T6895] syzkaller1: entered promiscuous mode
[  163.378430][ T6895] syzkaller1: entered allmulticast mode
[  163.475709][ T5611] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  163.516655][ T5766] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  163.533956][ T5611] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  163.575342][ T5611] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  163.603595][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.643984][ T6887] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  163.692436][ T5611] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  163.713418][ T5766] usb 5-1: Using ep0 maxpacket: 8
[  163.748944][ T5766] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  163.798639][ T5766] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  163.848919][ T5766] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  163.909602][ T5766] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.969042][ T5766] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  164.035507][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.128960][ T5611] usb 3-1: USB disconnect, device number 5
[  164.367835][ T5766] usb 5-1: GET_CAPABILITIES returned 0
[  164.400467][ T5766] usbtmc 5-1:16.0: can't read capabilities
[  164.568804][   T30] audit: type=1326 audit(1778441487.644:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  164.631869][   T30] audit: type=1326 audit(1778441487.684:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  164.679399][   T30] audit: type=1326 audit(1778441487.684:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  164.701511][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.720077][   T29] usb 5-1: USB disconnect, device number 8
[  164.818722][   T30] audit: type=1326 audit(1778441487.684:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  164.901294][   T30] audit: type=1326 audit(1778441487.684:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  165.030521][ T6919] loop0: detected capacity change from 0 to 2048
[  165.055531][   T30] audit: type=1326 audit(1778441487.684:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  165.099707][ T6919] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  165.179786][ T6919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.185180][   T30] audit: type=1326 audit(1778441487.694:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  165.350822][   T30] audit: type=1326 audit(1778441487.694:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  165.377721][ T6929] syzkaller1: entered promiscuous mode
[  165.410893][ T6929] syzkaller1: entered allmulticast mode
[  165.482769][   T30] audit: type=1326 audit(1778441487.694:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.6.308" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756f99cdd9 code=0x7ffc0000
[  165.748701][ T6942] input: syz1 as /devices/virtual/input/input16
[  166.279473][ T6957] bridge0: port 3(syz_tun) entered disabled state
[  166.286998][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.295178][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.629359][ T6949] loop2: detected capacity change from 0 to 32768
[  168.086574][ T6993] loop0: detected capacity change from 0 to 4096
[  168.613267][ T7001] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  168.950050][ T6995] loop6: detected capacity change from 0 to 131072
[  168.956270][ T7004] loop2: detected capacity change from 0 to 4096
[  169.028762][ T6995] F2FS-fs (loop6): Test dummy encryption mode enabled
[  169.044904][ T6995] F2FS-fs (loop6): invalid crc value
[  169.150325][ T7015] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.195664][ T6995] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.214646][ T6995] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  169.419319][ T6995] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  169.706344][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  169.706373][   T30] audit: type=1800 audit(1778441492.774:42): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.340" name="file2" dev="loop2" ino=16 res=0 errno=0
[  170.114857][  T803] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  170.314482][  T803] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  170.353006][  T803] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  170.400026][  T803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  170.448247][  T803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  170.490469][  T803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  170.546343][  T803] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  170.595505][  T803] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  170.623402][  T803] usb 1-1: Product: syz
[  170.632812][  T803] usb 1-1: Manufacturer: syz
[  170.678733][  T803] cdc_wdm 1-1:1.0: skipping garbage
[  170.699623][  T803] cdc_wdm 1-1:1.0: skipping garbage
[  170.714498][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.734918][  T803] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  170.753055][  T803] cdc_wdm 1-1:1.0: Unknown control protocol
[  171.032150][ T7039] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  171.073164][ T7039] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  171.293239][   T30] audit: type=1326 audit(1778441494.364:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.349" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5d9cdd9 code=0x7ffc0000
[  171.400553][   T30] audit: type=1326 audit(1778441494.394:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.349" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38a5d9cdd9 code=0x7ffc0000
[  171.469948][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'.
[  171.483054][   T30] audit: type=1326 audit(1778441494.394:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.349" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5d9cdd9 code=0x7ffc0000
[  171.515946][   T30] audit: type=1326 audit(1778441494.394:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.349" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5d9cdd9 code=0x7ffc0000
[  171.587647][   T30] audit: type=1326 audit(1778441494.404:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.349" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f38a5d9cdd9 code=0x7ffc0000
[  171.639192][ T5771] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  171.699261][   T30] audit: type=1326 audit(1778441494.404:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.349" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5d9cdd9 code=0x7ffc0000
[  171.757449][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.770974][   T30] audit: type=1326 audit(1778441494.424:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.349" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f38a5d9cdd9 code=0x7ffc0000
[  171.862095][ T5771] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  171.889864][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.911756][   T30] audit: type=1326 audit(1778441494.424:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.1.349" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5d9cdd9 code=0x7ffc0000
[  171.945713][ T5771] usb 3-1: Product: syz
[  171.957834][ T5771] usb 3-1: Manufacturer: syz
[  171.967629][ T5771] usb 3-1: SerialNumber: syz
[  171.988134][ T5771] usb 3-1: config 0 descriptor??
[  172.156802][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.512637][ T7075] loop4: detected capacity change from 0 to 64
[  172.637903][ T7077] loop6: detected capacity change from 0 to 2048
[  172.676938][ T7077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.796410][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.824577][  T803] usb 1-1: USB disconnect, device number 4
[  173.019450][ T5771] usb 3-1: f81604_read: reg: 100f failed: -EPROTO
[  173.111658][ T5771] usb 3-1: f81604_read: reg: 200f failed: -EPROTO
[  173.162365][ T5771] usb 3-1: USB disconnect, device number 6
[  173.280273][ T5771] usb 3-1: f81604_read: reg: 100f failed: -ENODEV
[  173.456938][ T5280] usb 3-1: f81604_read: reg: 200f failed: -ENODEV
[  173.501370][ T5771] usb 3-1: f81604_read: reg: 200f failed: -ENODEV
[  173.624385][ T5782] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  173.757254][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.795297][ T5782] usb 4-1: Using ep0 maxpacket: 32
[  173.802713][ T5782] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  173.820713][ T5782] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  173.835185][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.869246][ T5782] usb 4-1: config 0 interface 0 has no altsetting 0
[  173.909664][ T5782] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  173.927961][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.940398][ T5782] usb 4-1: Product: syz
[  173.948673][ T5782] usb 4-1: Manufacturer: syz
[  173.959657][ T5782] usb 4-1: SerialNumber: syz
[  173.988906][ T5782] usb 4-1: config 0 descriptor??
[  174.001655][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'.
[  174.261116][ T7113] loop2: detected capacity change from 0 to 2048
[  174.286519][ T7113] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  174.303755][  T803] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  174.325861][ T7113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.473404][  T803] usb 7-1: Using ep0 maxpacket: 32
[  174.474611][ T5782] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  174.488241][  T803] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  174.513133][  T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.523511][ T5771] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  174.540039][  T803] usb 7-1: Product: syz
[  174.554176][  T803] usb 7-1: Manufacturer: syz
[  174.563385][  T803] usb 7-1: SerialNumber: syz
[  174.585446][  T803] usb 7-1: config 0 descriptor??
[  174.670119][ T7121] loop0: detected capacity change from 0 to 2048
[  174.703645][ T7121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.720180][ T5771] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  174.738055][ T5771] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  174.778606][ T5771] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  174.802142][ T5771] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  174.833390][ T5771] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  174.852012][ T5771] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  174.876268][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.888389][ T5782] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  174.908133][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  174.944329][ T5782] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  174.952197][ T5771] usb 5-1: Product: syz
[  174.960437][ T5771] usb 5-1: Manufacturer: syz
[  175.030467][ T5771] cdc_wdm 5-1:1.0: skipping garbage
[  175.050747][  T803] airspy 7-1:0.0: Board ID: 00
[  175.054781][ T5771] cdc_wdm 5-1:1.0: skipping garbage
[  175.076080][  T803] airspy 7-1:0.0: Firmware version: 
[  175.109667][ T5771] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  175.136727][ T5771] cdc_wdm 5-1:1.0: Unknown control protocol
[  175.159554][ T5782] usb 4-1: USB disconnect, device number 5
[  175.203569][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.565161][ T7131] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.665506][  T803] airspy 7-1:0.0: usb_control_msg() failed -71 request 12
[  175.704561][  T803] airspy 7-1:0.0: Registered as swradio24
[  175.717029][  T803] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  175.752729][  T803] usb 7-1: USB disconnect, device number 2
[  175.914011][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.075057][ T5771] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  176.159946][ T7143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.389'.
[  176.257037][ T5771] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  176.281471][ T5771] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  176.316433][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.340092][ T5771] usb 4-1: config 1 interface 0 has no altsetting 0
[  176.368798][ T5771] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  176.386434][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.407537][ T5771] usb 4-1: Product: syz
[  176.427570][ T5771] usb 4-1: Manufacturer: syz
[  176.443236][ T5771] usb 4-1: SerialNumber: syz
[  176.473077][ T7136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  176.486062][ T7136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  176.731631][ T7155] loop2: detected capacity change from 0 to 2048
[  176.814485][ T7155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.828091][ T7157] Bluetooth: MGMT ver 1.23
[  176.847253][ T7157] Bluetooth: hci1: unsupported parameter 65529
[  176.862423][ T7157] Bluetooth: hci1: invalid length 0, exp 2 for type 5
[  176.956002][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.279745][ T5611] usb 5-1: USB disconnect, device number 9
[  177.404850][  T803] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  177.424543][ T5768] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  177.517670][ T7177] loop0: detected capacity change from 0 to 512
[  177.545895][ T7177] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  177.589889][ T5771] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3a:82:c0:82:c4:65
[  177.603403][  T803] usb 3-1: Using ep0 maxpacket: 8
[  177.615933][ T5768] usb 7-1: Using ep0 maxpacket: 8
[  177.625910][  T803] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  177.644301][  T803] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  177.651299][ T7177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.666850][ T5768] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  177.675632][ T5768] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  177.687719][ T5768] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  177.697902][  T803] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  177.707952][ T5768] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  177.710574][ T5771] rtl8150 4-1:1.0: eth5: rtl8150 is detected
[  177.718208][  T803] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.718288][  T803] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  177.718334][  T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.720354][ T5768] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.740026][ T7177] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.751223][ T5768] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  177.822162][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.862440][ T5771] usb 4-1: USB disconnect, device number 6
[  177.993873][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.011917][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.024818][  T803] usb 3-1: GET_CAPABILITIES returned 0
[  178.030554][  T803] usbtmc 3-1:16.0: can't read capabilities
[  178.234302][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.280236][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.296858][  T803] usb 3-1: USB disconnect, device number 7
[  179.034592][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.067907][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.080373][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.331990][ T7208] loop2: detected capacity change from 0 to 131072
[  180.349461][ T7208] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  180.360088][ T7208] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  180.366539][ T5611] usb 7-1: USB disconnect, device number 3
[  180.388849][ T7208] F2FS-fs (loop2): invalid crc value
[  180.458135][ T7211] loop4: detected capacity change from 0 to 2048
[  180.505301][ T7208] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.523015][ T7211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.541752][ T7208] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  180.548929][ T7208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  180.736931][ T7223] loop6: detected capacity change from 0 to 2048
[  180.789457][ T7223] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  180.892287][ T7223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.114164][ T5611] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  181.222035][ T7227] loop4: detected capacity change from 0 to 2048
[  181.255567][ T7227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.294794][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.426'.
[  181.307685][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.338751][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.393741][ T5611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  181.438147][ T5611] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  181.469578][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.515787][ T5611] usb 2-1: config 0 descriptor??
[  181.600264][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.756523][ T7233] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.428'.
[  181.884836][ T7221] loop3: detected capacity change from 0 to 131072
[  181.900868][ T7221] F2FS-fs (loop3): invalid crc value
[  182.008072][ T7221] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.022424][ T7221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  182.074650][ T5611] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  182.531615][ T7248] loop4: detected capacity change from 0 to 1024
[  182.634949][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.777252][ T7248] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  182.846987][ T7248] hfsplus: xattr search failed
[  183.128073][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.675846][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.226290][ T7273] loop6: detected capacity change from 0 to 64
[  184.397452][   T29] usb 2-1: USB disconnect, device number 6
[  184.586024][ T7275] Bluetooth: MGMT ver 1.23
[  184.714429][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.807543][ T7277] tun0: tun_chr_ioctl cmd 1074025675
[  184.830834][ T7277] tun0: persist enabled
[  184.859168][ T7277] tun0: tun_chr_ioctl cmd 1074025675
[  184.888278][ T7277] tun0: persist enabled
[  185.755078][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.153919][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.243843][ T7300] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  186.470972][ T7286] loop4: detected capacity change from 0 to 40427
[  186.482639][ T7305] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size.
[  186.513100][ T7286] F2FS-fs (loop4): build fault injection rate: 174
[  186.546222][ T7286] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  186.564438][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.585712][ T7286] F2FS-fs (loop4): invalid crc value
[  186.717905][ T5631] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  186.728706][ T5631] Bluetooth: hci6: Injecting HCI hardware error event
[  186.738173][ T5631] Bluetooth: hci6: hardware error 0x00
[  186.795481][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.840598][ T7286] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  186.862820][ T7312] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  186.962331][ T7286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  187.201933][   T30] audit: type=1800 audit(1778441510.274:51): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.443" name="bus" dev="loop4" ino=10 res=0 errno=0
[  187.522140][ T5626] syz-executor: attempt to access beyond end of device
[  187.522140][ T5626] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.539920][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  187.539969][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  187.539993][ T5626] Call Trace:
[  187.540005][ T5626]  <TASK>
[  187.540019][ T5626]  dump_stack_lvl+0x100/0x190
[  187.540073][ T5626]  f2fs_stop_checkpoint+0x600/0x9b0
[  187.540161][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.540212][ T5626]  ? errseq_set+0xe3/0x150
[  187.540270][ T5626]  ? errseq_set+0xe3/0x150
[  187.540310][ T5626]  f2fs_write_end_io+0xf59/0x1340
[  187.540356][ T5626]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  187.540403][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.540461][ T5626]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  187.540500][ T5626]  bio_endio+0x78f/0x8f0
[  187.540560][ T5626]  submit_bio_noacct+0x64c/0x2000
[  187.540615][ T5626]  f2fs_submit_write_bio+0x135/0x340
[  187.540682][ T5626]  __submit_merged_bio+0x331/0x780
[  187.540738][ T5626]  __submit_merged_write_cond+0x3fe/0x510
[  187.540790][ T5626]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  187.540843][ T5626]  ? __pfx___might_resched+0x10/0x10
[  187.540900][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.540961][ T5626]  f2fs_write_cache_pages+0x20e9/0x2630
[  187.541033][ T5626]  ? __bfs+0x150/0x2a0
[  187.541069][ T5626]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  187.541131][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.541178][ T5626]  ? __kasan_check_byte+0x13/0x50
[  187.541237][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.541286][ T5626]  ? unwind_next_frame+0x3be/0x2090
[  187.541343][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.541389][ T5626]  ? rcu_is_watching+0x12/0xc0
[  187.541447][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.541510][ T5626]  ? bpf_ksym_find+0x124/0x1c0
[  187.541625][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.541676][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.541729][ T5626]  ? add_lock_to_list+0x99/0x110
[  187.541767][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.541814][ T5626]  ? rcu_is_watching+0x12/0xc0
[  187.541879][ T5626]  f2fs_write_data_pages+0x799/0x16d0
[  187.541943][ T5626]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.541992][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.542050][ T5626]  ? do_writepages+0x4b5/0x600
[  187.542111][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.542164][ T5626]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.542218][ T5626]  do_writepages+0x278/0x600
[  187.542286][ T5626]  ? __pfx_do_writepages+0x10/0x10
[  187.542350][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.542397][ T5626]  ? _raw_spin_unlock+0x3e/0x50
[  187.542456][ T5626]  filemap_writeback+0x22d/0x2e0
[  187.542524][ T5626]  ? __pfx_filemap_writeback+0x10/0x10
[  187.542641][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.542688][ T5626]  ? preempt_schedule_common+0x42/0xc0
[  187.542752][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.542798][ T5626]  ? preempt_schedule_thunk+0x16/0x30
[  187.542873][ T5626]  f2fs_sync_dirty_inodes+0x469/0x990
[  187.542944][ T5626]  block_operations+0x2a6/0xfc0
[  187.542991][ T5626]  ? __bfs+0x150/0x2a0
[  187.543036][ T5626]  ? __pfx_block_operations+0x10/0x10
[  187.543086][ T5626]  ? check_noncircular+0x97/0x160
[  187.543178][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.543231][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.543281][ T5626]  ? rcu_is_watching+0x12/0xc0
[  187.543337][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.543391][ T5626]  f2fs_write_checkpoint+0x582/0x5550
[  187.543450][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.543496][ T5626]  ? _raw_spin_unlock_irq+0x2e/0x50
[  187.543547][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.543592][ T5626]  ? __wait_for_common+0x1f3/0x4c0
[  187.543651][ T5626]  ? __pfx_schedule_timeout+0x10/0x10
[  187.543701][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.543753][ T5626]  ? try_to_wake_up+0x5f6/0x1900
[  187.543815][ T5626]  ? __pfx___wait_for_common+0x10/0x10
[  187.543876][ T5626]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  187.543939][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.543985][ T5626]  ? rcu_is_watching+0x12/0xc0
[  187.544041][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.544088][ T5626]  ? kthread_stop+0x280/0x640
[  187.544134][ T5626]  kill_f2fs_super+0x3f1/0x4a0
[  187.544185][ T5626]  ? __pfx_kill_f2fs_super+0x10/0x10
[  187.544255][ T5626]  ? lockdep_hardirqs_on+0x78/0x100
[  187.544314][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.544361][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.544421][ T5626]  deactivate_locked_super+0xc1/0x1b0
[  187.544479][ T5626]  deactivate_super+0xe7/0x110
[  187.544537][ T5626]  cleanup_mnt+0x21f/0x450
[  187.544577][ T5626]  task_work_run+0x150/0x240
[  187.544626][ T5626]  ? __pfx_task_work_run+0x10/0x10
[  187.544677][ T5626]  ? srso_alias_return_thunk+0x5/0xfbef5
[  187.544729][ T5626]  ? rcu_is_watching+0x12/0xc0
[  187.544793][ T5626]  exit_to_user_mode_loop+0x107/0x4f0
[  187.544843][ T5626]  ? rcu_is_watching+0x12/0xc0
[  187.544906][ T5626]  do_syscall_64+0x706/0xf80
[  187.544974][ T5626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.545013][ T5626] RIP: 0033:0x7f2a91d9e017
[  187.545043][ T5626] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  187.545081][ T5626] RSP: 002b:00007ffe51f52ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  187.545117][ T5626] RAX: 0000000000000000 RBX: 00007f2a91e32120 RCX: 00007f2a91d9e017
[  187.545142][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe51f52ba0
[  187.545166][ T5626] RBP: 00007ffe51f52ba0 R08: 00007ffe51f53ba0 R09: 00000000ffffffff
[  187.545191][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe51f53c30
[  187.545214][ T5626] R13: 00007f2a91e32120 R14: 000000000002db71 R15: 00007ffe51f53c70
[  187.545264][ T5626]  </TASK>
[  188.120130][ T5626] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  188.301868][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.337304][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.603448][ T5771] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  188.806550][ T5771] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  188.837711][ T5771] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  188.858709][ T7340] loop6: detected capacity change from 0 to 1024
[  188.875289][ T5631] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  188.884447][ T5771] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  188.893818][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.960002][ T7340] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  188.973425][ T7340] hfsplus: xattr search failed
[  188.993851][ T7332] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  189.035759][ T5771] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  189.361485][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.509604][ T5771] usb 4-1: USB disconnect, device number 7
[  189.624496][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.983379][ T5611] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  190.166104][ T5611] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  190.196708][ T5611] usb 3-1: config 0 has no interface number 0
[  190.229772][ T5611] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  190.269200][ T5611] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  190.307807][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.351800][ T5611] usb 3-1: Product: syz
[  190.373408][ T5611] usb 3-1: Manufacturer: syz
[  190.394762][ T5611] usb 3-1: SerialNumber: syz
[  190.403049][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.426633][ T5611] usb 3-1: config 0 descriptor??
[  190.483031][ T5611] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  190.704893][ T5768] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  190.786253][ T5771] usb 3-1: USB disconnect, device number 8
[  190.835225][ T5771] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  190.884325][ T5768] usb 4-1: Using ep0 maxpacket: 8
[  190.906904][ T5768] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  190.929557][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.951121][ T5768] usb 4-1: Product: syz
[  190.963451][ T5768] usb 4-1: Manufacturer: syz
[  190.970384][ T5768] usb 4-1: SerialNumber: syz
[  190.979926][ T5768] usb 4-1: config 0 descriptor??
[  190.995677][ T5768] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  191.123625][   T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  191.286324][   T29] usb 7-1: Using ep0 maxpacket: 16
[  191.294292][   T29] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  191.304840][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.333679][   T29] usb 7-1: config 0 descriptor??
[  191.351339][   T29] gspca_main: sonixj-2.14.0 probing 0471:0327
[  191.438210][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.913498][ T5747] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  192.035381][ T5768] usb 4-1: USB disconnect, device number 8
[  192.076600][ T5747] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  192.088294][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.099970][ T5747] usb 3-1: config 0 descriptor??
[  192.108817][ T5747] cp210x 3-1:0.0: cp210x converter detected
[  192.375110][   T29] gspca_sonixj: reg_w1 err -71
[  192.393850][   T29] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[  192.406583][   T29] usb 7-1: USB disconnect, device number 4
[  192.474496][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.516196][ T5747] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  192.647580][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.863873][ T5747] usb 3-1: cp210x converter now attached to ttyUSB0
[  193.121949][ T5747] usb 3-1: USB disconnect, device number 9
[  193.200433][ T5747] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  193.604915][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  193.613130][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  193.648465][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.705110][ T5747] cp210x 3-1:0.0: device disconnected
[  193.877525][ T7389] loop0: detected capacity change from 0 to 131072
[  193.926981][ T7389] F2FS-fs (loop0): Test dummy encryption mode enabled
[  193.940715][ T7389] F2FS-fs (loop0): invalid crc value
[  194.028229][ T7389] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.043679][ T7389] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  194.069578][ T5767] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  194.196927][ T7389] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  194.275330][ T5767] usb 7-1: Using ep0 maxpacket: 32
[  194.307200][ T5767] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  194.354304][ T5767] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.417805][ T5767] usb 7-1: config 0 descriptor??
[  194.473073][ T5767] gspca_main: nw80x-2.14.0 probing 055f:d001
[  194.714436][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.018799][ T7421] blkio.reset_stats is deprecated
[  195.164818][ T5771] IPVS: starting estimator thread 0...
[  195.293451][ T7426] IPVS: using max 24 ests per chain, 57600 per kthread
[  195.476329][ T5767] gspca_nw80x: reg_w err -71
[  195.482504][ T7435] FAT-fs (nullb0): bogus number of reserved sectors
[  195.498396][ T5767] nw80x 7-1:0.0: probe with driver nw80x failed with error -71
[  195.521376][ T7435] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  195.544876][ T5767] usb 7-1: USB disconnect, device number 5
[  195.673663][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.763735][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.122451][ T7452] geneve2: entered promiscuous mode
[  196.149663][ T7452] geneve2: entered allmulticast mode
[  196.359412][ T7456] loop6: detected capacity change from 0 to 1024
[  196.363679][ T7458] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.513'.
[  196.469704][ T7456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.794951][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.830002][ T6311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.435268][ T5771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.835607][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.064926][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.103569][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.134908][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.202065][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.270389][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.300036][ T7494] loop4: detected capacity change from 0 to 512
[  198.391666][ T7498] loop2: detected capacity change from 0 to 128
[  198.399638][ T7494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.640731][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.714716][ T5782] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  198.915157][ T5782] usb 3-1: Using ep0 maxpacket: 32
[  198.935526][ T5782] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  198.970180][ T5782] usb 3-1: config 4 has no interface number 0
[  199.001043][ T5782] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.051765][ T5782] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.093182][ T5782] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  199.130033][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.220771][ T5782] hub 3-1:4.128: USB hub found
[  199.378704][ T7513] syzkaller1: entered promiscuous mode
[  199.405291][ T7513] syzkaller1: entered allmulticast mode
[  199.433625][ T5782] hub 3-1:4.128: 28 ports detected
[  199.454397][ T5782] hub 3-1:4.128: Using single TT (err -22)
[  199.477790][ T5782] hub 3-1:4.128: insufficient power available to use all downstream ports
[  199.641352][ T5782] hub 3-1:4.128: hub_hub_status failed (err = -71)
[  199.658888][ T5782] hub 3-1:4.128: config failed, can't get hub status (err -71)
[  199.727325][ T5782] usb 3-1: USB disconnect, device number 10
[  199.804750][ T5771] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  199.983492][ T5771] usb 5-1: Using ep0 maxpacket: 8
[  200.002826][ T5771] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  200.034779][ T7534] input: syz1 as /devices/virtual/input/input17
[  200.048968][ T5771] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  200.084638][ T5771] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  200.127279][ T5771] usb 5-1: config 250 has no interface number 0
[  200.140992][ T5771] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  200.170069][ T5771] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  200.212151][ T5771] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  200.247717][ T5771] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  200.297266][ T5771] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  200.358151][ T5771] usb 5-1: config 250 interface 228 has no altsetting 0
[  200.396457][ T5771] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  200.439693][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  200.484210][ T5771] usb 5-1: Product: syz
[  200.498035][ T5771] usb 5-1: SerialNumber: syz
[  200.558260][ T5771] hub 5-1:250.228: bad descriptor, ignoring hub
[  200.600818][ T5771] hub 5-1:250.228: probe with driver hub failed with error -5
[  200.668638][ T7544] loop2: detected capacity change from 0 to 512
[  200.731984][ T7544] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.540: inode has both inline data and extents flags
[  200.825765][ T5771] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  200.843041][ T7544] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  200.843332][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  200.859272][    C1] EXT4-fs (loop2): initial error at time 1778441523: ext4_orphan_get:1397: inode 15
[  200.868793][    C1] EXT4-fs (loop2): last error at time 1778441523: ext4_orphan_get:1397: inode 15
[  200.882043][ T7544] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.540: couldn't read orphan inode 15 (err -117)
[  200.924982][ T7544] loop2: lost filesystem error report for type 5 error -117
[  200.940265][ T7539] IPVS: Scheduler module ip_vs_sip not found
[  200.962620][ T5767] net_ratelimit: 3 callbacks suppressed
[  200.962648][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.980909][ T7544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.715820][ T7524] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  201.754641][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.772994][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.896264][ T7524] usb 5-1: device firmware changed
[  201.950097][ T5767] usb 5-1: USB disconnect, device number 10
[  202.007211][ T5767] usblp0: removed
[  202.073963][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.183563][ T5767] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  202.367899][ T5767] usb 5-1: Using ep0 maxpacket: 8
[  202.389377][ T5767] usb 5-1: unable to get BOS descriptor or descriptor too short
[  202.405866][ T5767] usb 5-1: unable to read config index 0 descriptor/start: -71
[  202.423464][ T5767] usb 5-1: can't read configurations, error -71
[  202.473572][   T29] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  202.533812][ T7581] input: syz1 as /devices/virtual/input/input18
[  202.567317][ T7579] loop0: detected capacity change from 0 to 2048
[  202.595792][ T7579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.644317][   T29] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  202.672138][   T29] usb 2-1: config 0 has no interface number 0
[  202.682278][   T29] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  202.727695][   T29] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  202.759543][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.770913][   T29] usb 2-1: Product: syz
[  202.776333][   T29] usb 2-1: Manufacturer: syz
[  202.781093][   T29] usb 2-1: SerialNumber: syz
[  202.818074][   T29] usb 2-1: config 0 descriptor??
[  202.819508][ T7587] loop6: detected capacity change from 0 to 764
[  202.863128][   T29] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  202.957098][ T7587] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  203.115514][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.188622][   T29] usb 2-1: USB disconnect, device number 7
[  203.225789][   T29] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  204.124654][  T803] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  204.148916][ T7619] loop0: detected capacity change from 0 to 512
[  204.193924][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.207195][ T7619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.315907][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 229, changing to 11
[  204.335548][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42493, setting to 1024
[  204.359381][  T803] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  204.384965][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.426277][  T803] usb 5-1: config 0 descriptor??
[  204.447231][ T7608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.566516][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.695096][ T7626] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.573'.
[  204.793902][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.926873][  T803] cm6533_jd 0003:0D8C:0022.000A: unknown global tag 0xd
[  204.960829][  T803] cm6533_jd 0003:0D8C:0022.000A: item 0 0 1 13 parsing failed
[  204.999809][  T803] cm6533_jd 0003:0D8C:0022.000A: parse failed
[  205.027918][  T803] cm6533_jd 0003:0D8C:0022.000A: probe with driver cm6533_jd failed with error -22
[  205.136577][  T803] usb 5-1: USB disconnect, device number 13
[  205.274278][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.610065][ T7651] loop0: detected capacity change from 0 to 512
[  205.679999][ T7651] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.583: inode has both inline data and extents flags
[  205.760392][ T7651] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  205.760832][ T7651] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.583: couldn't read orphan inode 15 (err -117)
[  205.770296][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  205.770331][    C1] EXT4-fs (loop0): initial error at time 1778441528: ext4_orphan_get:1397: inode 15
[  205.770386][    C1] EXT4-fs (loop0): last error at time 1778441528: ext4_orphan_get:1397: inode 15
[  205.814282][ T7651] loop0: lost filesystem error report for type 5 error -117
[  205.835628][ T7651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.176767][ T7651] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  206.316676][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.465243][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.800464][ T7675] 9pnet: p9_errstr2errno: server reported unknown error 
[  207.036175][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.355023][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.387582][ T5820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.558066][ T5820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.720500][ T7686] loop6: detected capacity change from 0 to 512
[  207.734598][ T7686] EXT4-fs: Ignoring removed bh option
[  207.757430][ T7684] netlink: 'syz.4.598': attribute type 1 has an invalid length.
[  207.800159][ T7686] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  207.844238][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.938066][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.952527][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.960755][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.973525][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.983829][ T7686] EXT4-fs (loop6): 1 truncate cleaned up
[  207.990754][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.002779][ T7686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.169142][ T7693] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.601: bg 0: block 465: padding at end of block bitmap is not set
[  208.212593][ T5820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.258490][ T7686] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 416 with error 28
[  208.299186][ T7693] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  208.339772][ T7686] EXT4-fs (loop6): This should not happen!! Data will be lost
[  208.339772][ T7686] 
[  208.352139][ T7686] EXT4-fs (loop6): Total free blocks count 0
[  208.358683][ T7693] EXT4-fs (loop6): This should not happen!! Data will be lost
[  208.358683][ T7693] 
[  208.373565][ T7686] EXT4-fs (loop6): Free/Dirty block details
[  208.385794][ T7686] EXT4-fs (loop6): free_blocks=0
[  208.391180][ T7693] EXT4-fs (loop6): Total free blocks count 0
[  208.394181][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.401485][ T7686] EXT4-fs (loop6): dirty_blocks=417
[  208.462832][ T5820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.612731][ T6311] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  209.001342][ T7709] netlink: 268 bytes leftover after parsing attributes in process `syz.6.607'.
[  209.013446][   T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  209.029064][ T7709] netlink: 164 bytes leftover after parsing attributes in process `syz.6.607'.
[  209.126339][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  209.140456][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  209.150867][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  209.161034][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  209.171246][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  209.204877][   T29] usb 3-1: Using ep0 maxpacket: 32
[  209.212192][   T29] usb 3-1: config 0 has no interfaces?
[  209.255154][   T29] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  209.299132][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.344056][   T29] usb 3-1: Product: syz
[  209.360763][   T29] usb 3-1: Manufacturer: syz
[  209.378353][   T29] usb 3-1: SerialNumber: syz
[  209.438560][  T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.453622][   T29] usb 3-1: config 0 descriptor??
[  209.623211][ T5820] bridge_slave_1: left allmulticast mode
[  209.632381][ T5820] bridge_slave_1: left promiscuous mode
[  209.645827][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.714098][   T12] tipc: Subscription rejected, illegal request
[  209.725575][ T5820] bridge_slave_0: left allmulticast mode
[  209.743789][ T5820] bridge_slave_0: left promiscuous mode
[  209.762251][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.789294][ T5782] usb 3-1: USB disconnect, device number 11
[  210.046447][ T7716] nbd0: detected capacity change from 0 to 63
[  210.083714][ T5645] Bluetooth: hci2: command tx timeout
[  210.091706][   T50] block nbd0: Receive control failed (result -32)
[  210.092131][ T5631] block nbd0: Receive control failed (result -32)
[  210.109281][ T6874] block nbd0: Dead connection, failed to find a fallback
[  210.141549][ T6874] block nbd0: shutting down sockets
[  210.155839][ T6874] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.193276][ T6874] Buffer I/O error on dev nbd0, logical block 0, async page read
[  210.273607][ T6874] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.304825][ T6874] Buffer I/O error on dev nbd0, logical block 1, async page read
[  210.313078][ T6874] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.327117][ T6874] Buffer I/O error on dev nbd0, logical block 2, async page read
[  210.335492][ T6874] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.346143][ T6874] Buffer I/O error on dev nbd0, logical block 3, async page read
[  210.378840][ T6874] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.390484][ T5820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.416917][ T6874] Buffer I/O error on dev nbd0, logical block 0, async page read
[  210.425779][ T6874] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.435542][ T6874] Buffer I/O error on dev nbd0, logical block 1, async page read
[  210.459057][ T6874] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.484719][ T5820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.501840][ T6874] Buffer I/O error on dev nbd0, logical block 2, async page read
[  210.526523][ T6874] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.548257][ T6874] Buffer I/O error on dev nbd0, logical block 3, async page read
[  210.548315][ T5820] bond0 (unregistering): Released all slaves
[  210.568922][ T6874] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.589247][ T6874] Buffer I/O error on dev nbd0, logical block 0, async page read
[  210.620503][ T6874] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.636773][ T6874] Buffer I/O error on dev nbd0, logical block 1, async page read
[  210.653905][ T5820] bond1 (unregistering): Released all slaves
[  210.662125][ T6874] ldm_validate_partition_table(): Disk read failed.
[  210.675193][ T6874] Dev nbd0: unable to read RDB block 0
[  210.699086][ T6874]  nbd0: unable to read partition table
[  210.783119][ T6874] ldm_validate_partition_table(): Disk read failed.
[  210.813202][ T6874] Dev nbd0: unable to read RDB block 0
[  210.838362][ T6874]  nbd0: unable to read partition table
[  211.273475][ T5631] Bluetooth: hci4: command tx timeout
[  212.055938][ T7750] input: syz1 as /devices/virtual/input/input19
[  212.155110][ T5631] Bluetooth: hci2: command tx timeout
[  212.259995][ T5820] hsr_slave_0: left promiscuous mode
[  212.283021][ T5820] hsr_slave_1: left promiscuous mode
[  212.300832][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.323673][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.346527][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.367120][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.439052][ T5820] veth1_macvtap: left promiscuous mode
[  212.455172][ T5820] veth0_macvtap: left promiscuous mode
[  212.469176][ T5820] veth1_vlan: left promiscuous mode
[  212.473141][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'.
[  212.489210][ T5820] veth0_vlan: left promiscuous mode
[  212.943656][  T803] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  212.992439][ T5820] team0 (unregistering): Port device team_slave_1 removed
[  213.023092][ T5820] team0 (unregistering): Port device team_slave_0 removed
[  213.107483][  T803] usb 3-1: Using ep0 maxpacket: 32
[  213.130695][  T803] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  213.143141][  T803] usb 3-1: config 0 has no interface number 0
[  213.152765][  T803] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  213.162880][  T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.178886][  T803] usb 3-1: Product: syz
[  213.183237][  T803] usb 3-1: Manufacturer: syz
[  213.188607][  T803] usb 3-1: SerialNumber: syz
[  213.219837][  T803] usb 3-1: config 0 descriptor??
[  213.248005][  T803] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  213.354154][ T5631] Bluetooth: hci4: command tx timeout
[  213.464464][  T803] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  213.492938][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5
[  213.509510][  T803] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  213.727439][ T7774] loop4: detected capacity change from 0 to 512
[  213.779360][ T7774] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.623: inode has both inline data and extents flags
[  213.827783][ T7774] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  213.829341][ T7774] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.623: couldn't read orphan inode 15 (err -117)
[  213.838798][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  213.838834][    C0] EXT4-fs (loop4): initial error at time 1778441536: ext4_orphan_get:1397: inode 15
[  213.838891][    C0] EXT4-fs (loop4): last error at time 1778441536: ext4_orphan_get:1397: inode 15
[  213.878572][ T7774] loop4: lost filesystem error report for type 5 error -117
[  213.906973][ T7774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.003681][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  214.018315][  T803] usb 3-1: USB disconnect, device number 12
[  214.094236][  T803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  214.212831][  T803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  214.233875][ T5631] Bluetooth: hci2: command tx timeout
[  214.247001][  T803] quatech2 3-1:0.51: device disconnected
[  214.428557][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.431542][ T5820] IPVS: stop unused estimator thread 0...
[  214.743563][  T803] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  214.957107][  T803] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  214.985662][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  215.011458][  T803] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  215.034669][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  215.062181][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  215.086513][  T803] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  215.108947][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  215.132406][  T803] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  215.146589][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  215.159005][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  215.173561][ T5782] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  215.173958][  T803] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  215.207194][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  215.228090][  T803] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  215.251882][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  215.276867][  T803] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  215.301798][  T803] usb 7-1: string descriptor 0 read error: -22
[  215.313469][  T803] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  215.331915][  T803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.345479][ T5782] usb 3-1: Using ep0 maxpacket: 16
[  215.370267][  T803] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  215.381918][ T5782] usb 3-1: config 0 has no interfaces?
[  215.405931][ T5782] usb 3-1: New USB device found, idVendor=1c9e, idProduct=0a02, bcdDevice= 0.00
[  215.433401][ T5631] Bluetooth: hci4: command tx timeout
[  215.447280][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  215.490148][ T5782] usb 3-1: Product: syz
[  215.502578][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.511863][ T5782] usb 3-1: SerialNumber: syz
[  215.526077][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.539441][ T5782] usb 3-1: config 0 descriptor??
[  215.558916][ T7689] bridge_slave_0: entered allmulticast mode
[  215.621384][ T7689] bridge_slave_0: entered promiscuous mode
[  215.662786][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.680667][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.689966][ T7689] bridge_slave_1: entered allmulticast mode
[  215.701357][ T7689] bridge_slave_1: entered promiscuous mode
[  215.749096][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6
[  215.784539][ T5746] usb 7-1: USB disconnect, device number 6
[  215.832314][ T5767] usb 3-1: USB disconnect, device number 13
[  215.900889][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.935957][  T803] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  215.952088][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.019012][   T29] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  216.067109][ T7824] loop4: detected capacity change from 0 to 2048
[  216.067699][ T7689] team0: Port device team_slave_0 added
[  216.084113][ T7689] team0: Port device team_slave_1 added
[  216.092788][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.105411][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.113547][  T803] usb 2-1: Using ep0 maxpacket: 8
[  216.121681][ T7710] bridge_slave_0: entered allmulticast mode
[  216.126009][ T7824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.139262][ T7710] bridge_slave_0: entered promiscuous mode
[  216.147215][  T803] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  216.167729][   T29] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  216.179647][  T803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  216.211651][  T803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  216.257938][  T803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  216.288841][  T803] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  216.314001][ T5631] Bluetooth: hci2: command tx timeout
[  216.324396][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.332919][  T803] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  216.351421][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.352776][  T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.399873][ T7710] bridge_slave_1: entered allmulticast mode
[  216.421284][ T7826] fido_id[7826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  216.453021][ T7710] bridge_slave_1: entered promiscuous mode
[  216.592796][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.607283][  T803] usb 2-1: usb_control_msg returned -32
[  216.625834][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.627737][  T803] usbtmc 2-1:16.0: can't read capabilities
[  216.732099][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.877112][   T30] audit: type=1326 audit(1778441539.954:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.2.637" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa47d99cdd9 code=0x0
[  216.999140][ T7843] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  217.012234][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.033487][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.094383][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.159306][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.201185][   T29] usb 2-1: USB disconnect, device number 8
[  217.281183][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.506919][ T7689] hsr_slave_0: entered promiscuous mode
[  217.513398][ T5631] Bluetooth: hci4: command tx timeout
[  217.525532][ T7689] hsr_slave_1: entered promiscuous mode
[  217.532164][ T7689] debugfs: 'hsr0' already exists in 'hsr'
[  217.539220][ T7689] Cannot create hsr debugfs directory
[  217.557923][ T7710] team0: Port device team_slave_0 added
[  217.601685][ T7710] team0: Port device team_slave_1 added
[  217.870638][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.897561][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.982322][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.101061][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7
[  218.149048][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.164777][   T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  218.166960][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.209207][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.343433][   T29] usb 7-1: Using ep0 maxpacket: 8
[  218.355509][   T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  218.377119][   T29] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  218.392351][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.424016][   T29] usb 7-1: config 0 descriptor??
[  218.578953][ T7710] hsr_slave_0: entered promiscuous mode
[  218.591831][ T7710] hsr_slave_1: entered promiscuous mode
[  218.603974][ T7710] debugfs: 'hsr0' already exists in 'hsr'
[  218.610001][ T7710] Cannot create hsr debugfs directory
[  218.668483][   T29] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  219.100807][ T5766] usb 7-1: USB disconnect, device number 7
[  219.168618][ T5631] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  219.180773][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  219.180821][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.180848][ T5631] Workqueue: hci0 hci_rx_work
[  219.180906][ T5631] Call Trace:
[  219.180917][ T5631]  <TASK>
[  219.180930][ T5631]  dump_stack_lvl+0x100/0x190
[  219.180976][ T5631]  sysfs_warn_dup.cold+0x1c/0x28
[  219.181035][ T5631]  sysfs_create_dir_ns+0x24b/0x2b0
[  219.181108][ T5631]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  219.181171][ T5631]  ? find_held_lock+0x2b/0x80
[  219.181234][ T5631]  ? kobject_add_internal+0x25f/0x930
[  219.181276][ T5631]  ? kobject_add_internal+0x25f/0x930
[  219.181322][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.181371][ T5631]  ? do_raw_spin_unlock+0x145/0x1e0
[  219.181426][ T5631]  kobject_add_internal+0x2c8/0x930
[  219.181480][ T5631]  kobject_add+0x16a/0x1e0
[  219.181518][ T5631]  ? __pfx_kobject_add+0x10/0x10
[  219.181552][ T5631]  ? class_to_subsys+0x10f/0x150
[  219.181607][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.181655][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.181699][ T5631]  ? kobject_put+0xb9/0x640
[  219.181732][ T5631]  ? _raw_spin_unlock+0x28/0x50
[  219.181822][ T5631]  device_add+0x294/0x1950
[  219.181870][ T5631]  ? __pfx_dev_set_name+0x10/0x10
[  219.181926][ T5631]  ? __pfx_device_add+0x10/0x10
[  219.181973][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.182018][ T5631]  ? mgmt_send_event_skb+0x2fb/0x460
[  219.182089][ T5631]  hci_conn_add_sysfs+0x1a3/0x260
[  219.182154][ T5631]  le_conn_complete_evt+0x11eb/0x1f60
[  219.182223][ T5631]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  219.182283][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.182339][ T5631]  hci_le_conn_complete_evt+0x23c/0x3a0
[  219.182398][ T5631]  ? skb_pull_data+0x15f/0x1e0
[  219.182460][ T5631]  hci_le_meta_evt+0x34a/0x5f0
[  219.182521][ T5631]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  219.182585][ T5631]  hci_event_packet+0x51c/0xcd0
[  219.182645][ T5631]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  219.182707][ T5631]  ? __pfx_hci_event_packet+0x10/0x10
[  219.182776][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.182822][ T5631]  ? kcov_remote_start+0x374/0x660
[  219.182865][ T5631]  ? lockdep_hardirqs_on+0x78/0x100
[  219.182942][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.183001][ T5631]  hci_rx_work+0x451/0xfc0
[  219.183064][ T5631]  process_one_work+0xa0e/0x1980
[  219.183138][ T5631]  ? __pfx_process_one_work+0x10/0x10
[  219.183184][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.183248][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.183303][ T5631]  worker_thread+0x5ef/0xe50
[  219.183370][ T5631]  ? kthread+0x13a/0x450
[  219.183411][ T5631]  ? __pfx_worker_thread+0x10/0x10
[  219.183458][ T5631]  kthread+0x370/0x450
[  219.183499][ T5631]  ? __pfx_kthread+0x10/0x10
[  219.183546][ T5631]  ret_from_fork+0x72b/0xd50
[  219.183596][ T5631]  ? __pfx_ret_from_fork+0x10/0x10
[  219.183642][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.183690][ T5631]  ? rcu_is_watching+0x12/0xc0
[  219.183757][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.183804][ T5631]  ? __switch_to+0x800/0x1100
[  219.183860][ T5631]  ? __switch_to_asm+0x39/0x70
[  219.183914][ T5631]  ? __pfx_kthread+0x10/0x10
[  219.183961][ T5631]  ret_from_fork_asm+0x1a/0x30
[  219.184040][ T5631]  </TASK>
[  219.516439][ T5631] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  219.530684][ T5631] Bluetooth: hci0: failed to register connection device
[  219.580047][ T5631] ==================================================================
[  219.588153][ T5631] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xde7/0xf80
[  219.596178][ T5631] Read of size 8 at addr ffff888051161480 by task kworker/u9:2/5631
[  219.604176][ T5631] 
[  219.606517][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  219.606560][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.606590][ T5631] Workqueue: hci0 hci_rx_work
[  219.606643][ T5631] Call Trace:
[  219.606654][ T5631]  <TASK>
[  219.606668][ T5631]  dump_stack_lvl+0x100/0x190
[  219.606707][ T5631]  print_report+0x13d/0x4b0
[  219.606769][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.606817][ T5631]  ? __virt_addr_valid+0x239/0x430
[  219.606861][ T5631]  ? l2cap_connect_cfm+0xde7/0xf80
[  219.606915][ T5631]  kasan_report+0xdf/0x1d0
[  219.606974][ T5631]  ? l2cap_connect_cfm+0xde7/0xf80
[  219.607035][ T5631]  l2cap_connect_cfm+0xde7/0xf80
[  219.607093][ T5631]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  219.607151][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.607202][ T5631]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  219.607258][ T5631]  le_conn_complete_evt+0x197c/0x1f60
[  219.607321][ T5631]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  219.607378][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.607430][ T5631]  hci_le_conn_complete_evt+0x23c/0x3a0
[  219.607483][ T5631]  ? skb_pull_data+0x15f/0x1e0
[  219.607537][ T5631]  hci_le_meta_evt+0x34a/0x5f0
[  219.607593][ T5631]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  219.607648][ T5631]  hci_event_packet+0x51c/0xcd0
[  219.607698][ T5631]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  219.607759][ T5631]  ? __pfx_hci_event_packet+0x10/0x10
[  219.607810][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.607855][ T5631]  ? kcov_remote_start+0x374/0x660
[  219.607894][ T5631]  ? lockdep_hardirqs_on+0x78/0x100
[  219.607950][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.607999][ T5631]  hci_rx_work+0x451/0xfc0
[  219.608053][ T5631]  process_one_work+0xa0e/0x1980
[  219.608109][ T5631]  ? __pfx_process_one_work+0x10/0x10
[  219.608153][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.608204][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.608251][ T5631]  worker_thread+0x5ef/0xe50
[  219.608306][ T5631]  ? kthread+0x13a/0x450
[  219.608347][ T5631]  ? __pfx_worker_thread+0x10/0x10
[  219.608392][ T5631]  kthread+0x370/0x450
[  219.608429][ T5631]  ? __pfx_kthread+0x10/0x10
[  219.608470][ T5631]  ret_from_fork+0x72b/0xd50
[  219.608514][ T5631]  ? __pfx_ret_from_fork+0x10/0x10
[  219.608556][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.608599][ T5631]  ? rcu_is_watching+0x12/0xc0
[  219.608652][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.608696][ T5631]  ? __switch_to+0x800/0x1100
[  219.608754][ T5631]  ? __switch_to_asm+0x39/0x70
[  219.608805][ T5631]  ? __pfx_kthread+0x10/0x10
[  219.608845][ T5631]  ret_from_fork_asm+0x1a/0x30
[  219.608907][ T5631]  </TASK>
[  219.608918][ T5631] 
[  219.868282][ T5631] Allocated by task 5631:
[  219.872617][ T5631]  kasan_save_stack+0x30/0x50
[  219.877327][ T5631]  kasan_save_track+0x14/0x30
[  219.882045][ T5631]  __kasan_kmalloc+0xaa/0xb0
[  219.886662][ T5631]  l2cap_chan_create+0x44/0x940
[  219.891573][ T5631]  l2cap_sock_alloc.constprop.0+0xf5/0x1e0
[  219.897418][ T5631]  l2cap_sock_new_connection_cb+0x10f/0x260
[  219.903352][ T5631]  l2cap_connect_cfm+0x4e2/0xf80
[  219.908312][ T5631]  le_conn_complete_evt+0x197c/0x1f60
[  219.913754][ T5631]  hci_le_conn_complete_evt+0x23c/0x3a0
[  219.919348][ T5631]  hci_le_meta_evt+0x34a/0x5f0
[  219.924144][ T5631]  hci_event_packet+0x51c/0xcd0
[  219.929014][ T5631]  hci_rx_work+0x451/0xfc0
[  219.933452][ T5631]  process_one_work+0xa0e/0x1980
[  219.938406][ T5631]  worker_thread+0x5ef/0xe50
[  219.943006][ T5631]  kthread+0x370/0x450
[  219.947091][ T5631]  ret_from_fork+0x72b/0xd50
[  219.951707][ T5631]  ret_from_fork_asm+0x1a/0x30
[  219.956498][ T5631] 
[  219.958813][ T5631] Freed by task 7881:
[  219.962782][ T5631]  kasan_save_stack+0x30/0x50
[  219.967478][ T5631]  kasan_save_track+0x14/0x30
[  219.972176][ T5631]  kasan_save_free_info+0x3b/0x70
[  219.977213][ T5631]  __kasan_slab_free+0x5f/0x80
[  219.982006][ T5631]  kfree+0x223/0x6c0
[  219.985913][ T5631]  l2cap_chan_put+0x235/0x300
[  219.990610][ T5631]  l2cap_sock_cleanup_listen+0x4d/0x2d0
[  219.996176][ T5631]  l2cap_sock_release+0x69/0x280
[  220.001131][ T5631]  __sock_release+0xb3/0x260
[  220.005742][ T5631]  sock_close+0x1c/0x30
[  220.009917][ T5631]  __fput+0x3ff/0xb50
[  220.013917][ T5631]  task_work_run+0x150/0x240
[  220.018527][ T5631]  exit_to_user_mode_loop+0x107/0x4f0
[  220.023918][ T5631]  do_syscall_64+0x706/0xf80
[  220.028538][ T5631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.034445][ T5631] 
[  220.036764][ T5631] The buggy address belongs to the object at ffff888051161000
[  220.036764][ T5631]  which belongs to the cache kmalloc-2k of size 2048
[  220.050824][ T5631] The buggy address is located 1152 bytes inside of
[  220.050824][ T5631]  freed 2048-byte region [ffff888051161000, ffff888051161800)
[  220.064803][ T5631] 
[  220.067117][ T5631] The buggy address belongs to the physical page:
[  220.073518][ T5631] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888051162000 pfn:0x51160
[  220.083585][ T5631] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  220.092204][ T5631] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  220.100718][ T5631] page_type: f5(slab)
[  220.104878][ T5631] raw: 00fff00000000240 ffff88813fe34000 ffff88813fe2e948 ffff88813fe2e948
[  220.113641][ T5631] raw: ffff888051162000 0000000800080002 00000000f5000000 0000000000000000
[  220.122233][ T5631] head: 00fff00000000240 ffff88813fe34000 ffff88813fe2e948 ffff88813fe2e948
[  220.130964][ T5631] head: ffff888051162000 0000000800080002 00000000f5000000 0000000000000000
[  220.139651][ T5631] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  220.148348][ T5631] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  220.157021][ T5631] page dumped because: kasan: bad access detected
[  220.163443][ T5631] page_owner tracks the page as allocated
[  220.169172][ T5631] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5631, tgid 5631 (kworker/u9:2), ts 219538619016, free_ts 216286689757
[  220.190344][ T5631]  post_alloc_hook+0x153/0x170
[  220.195178][ T5631]  get_page_from_freelist+0x11a6/0x33b0
[  220.200839][ T5631]  __alloc_frozen_pages_noprof+0x27c/0x2bc0
[  220.206763][ T5631]  new_slab+0xa6/0x6c0
[  220.210895][ T5631]  refill_objects+0x277/0x420
[  220.215598][ T5631]  __pcs_replace_empty_main+0x375/0x650
[  220.221167][ T5631]  __kmalloc_cache_noprof+0x493/0x6f0
[  220.226586][ T5631]  l2cap_chan_create+0x44/0x940
[  220.231453][ T5631]  l2cap_sock_alloc.constprop.0+0xf5/0x1e0
[  220.237300][ T5631]  l2cap_sock_new_connection_cb+0x10f/0x260
[  220.243244][ T5631]  l2cap_connect_cfm+0x4e2/0xf80
[  220.248219][ T5631]  le_conn_complete_evt+0x197c/0x1f60
[  220.253623][ T5631]  hci_le_conn_complete_evt+0x23c/0x3a0
[  220.259196][ T5631]  hci_le_meta_evt+0x34a/0x5f0
[  220.263998][ T5631]  hci_event_packet+0x51c/0xcd0
[  220.268880][ T5631]  hci_rx_work+0x451/0xfc0
[  220.273330][ T5631] page last free pid 6874 tgid 6874 stack trace:
[  220.279705][ T5631]  __free_frozen_pages+0x747/0x1040
[  220.284941][ T5631]  qlist_free_all+0x47/0xf0
[  220.289558][ T5631]  kasan_quarantine_reduce+0x1a0/0x1f0
[  220.295074][ T5631]  __kasan_slab_alloc+0x69/0x90
[  220.299971][ T5631]  kmem_cache_alloc_noprof+0x241/0x6e0
[  220.305586][ T5631]  do_getname+0x35/0x390
[  220.309846][ T5631]  do_sys_openat2+0xc5/0x1e0
[  220.314456][ T5631]  __x64_sys_openat+0x12d/0x210
[  220.319333][ T5631]  do_syscall_64+0x10b/0xf80
[  220.323951][ T5631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.329856][ T5631] 
[  220.332172][ T5631] Memory state around the buggy address:
[  220.337799][ T5631]  ffff888051161380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  220.345964][ T5631]  ffff888051161400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  220.354062][ T5631] >ffff888051161480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  220.362130][ T5631]                    ^
[  220.366207][ T5631]  ffff888051161500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  220.374277][ T5631]  ffff888051161580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  220.382340][ T5631] ==================================================================
[  220.402384][ T5631] Disabling lock debugging due to kernel taint
[  220.408623][ T5631] ==================================================================
[  220.416688][ T5631] BUG: KASAN: wild-memory-access in l2cap_connect_cfm+0x7c0/0xf80
[  220.424539][ T5631] Read of size 4 at addr deacfffffffffc8c by task kworker/u9:2/5631
[  220.432530][ T5631] 
[  220.434886][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: kworker/u9:2 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  220.434946][ T5631] Tainted: [B]=BAD_PAGE
[  220.434960][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  220.434987][ T5631] Workqueue: hci0 hci_rx_work
[  220.435044][ T5631] Call Trace:
[  220.435056][ T5631]  <TASK>
[  220.435069][ T5631]  dump_stack_lvl+0x100/0x190
[  220.435114][ T5631]  kasan_report+0xdf/0x1d0
[  220.435173][ T5631]  ? l2cap_connect_cfm+0x7c0/0xf80
[  220.435235][ T5631]  kasan_check_range+0x10f/0x1e0
[  220.435276][ T5631]  l2cap_connect_cfm+0x7c0/0xf80
[  220.435335][ T5631]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  220.435391][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.435442][ T5631]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  220.435503][ T5631]  le_conn_complete_evt+0x197c/0x1f60
[  220.435564][ T5631]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  220.435621][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.435672][ T5631]  hci_le_conn_complete_evt+0x23c/0x3a0
[  220.435728][ T5631]  ? skb_pull_data+0x15f/0x1e0
[  220.435785][ T5631]  hci_le_meta_evt+0x34a/0x5f0
[  220.435843][ T5631]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  220.435902][ T5631]  hci_event_packet+0x51c/0xcd0
[  220.435955][ T5631]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  220.436015][ T5631]  ? __pfx_hci_event_packet+0x10/0x10
[  220.436068][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.436117][ T5631]  ? kcov_remote_start+0x374/0x660
[  220.436159][ T5631]  ? lockdep_hardirqs_on+0x78/0x100
[  220.436218][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.436270][ T5631]  hci_rx_work+0x451/0xfc0
[  220.436327][ T5631]  process_one_work+0xa0e/0x1980
[  220.436386][ T5631]  ? __pfx_process_one_work+0x10/0x10
[  220.436433][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.436495][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.436546][ T5631]  worker_thread+0x5ef/0xe50
[  220.436603][ T5631]  ? kthread+0x13a/0x450
[  220.436645][ T5631]  ? __pfx_worker_thread+0x10/0x10
[  220.436695][ T5631]  kthread+0x370/0x450
[  220.436735][ T5631]  ? __pfx_kthread+0x10/0x10
[  220.436777][ T5631]  ret_from_fork+0x72b/0xd50
[  220.436824][ T5631]  ? __pfx_ret_from_fork+0x10/0x10
[  220.436868][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.436914][ T5631]  ? rcu_is_watching+0x12/0xc0
[  220.436970][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.437016][ T5631]  ? __switch_to+0x800/0x1100
[  220.437070][ T5631]  ? __switch_to_asm+0x39/0x70
[  220.437122][ T5631]  ? __pfx_kthread+0x10/0x10
[  220.437165][ T5631]  ret_from_fork_asm+0x1a/0x30
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  220.437229][ T5631]  </TASK>
[  220.437242][ T5631] ==================================================================
[  220.716815][ T5631] Oops: general protection fault, probably for non-canonical address 0xfbd59bffffffff91: 0000 [#1] SMP KASAN NOPTI
[  220.728954][ T5631] KASAN: maybe wild-memory-access in range [0xdeacfffffffffc88-0xdeacfffffffffc8f]
[  220.738275][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: kworker/u9:2 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  220.749382][ T5631] Tainted: [B]=BAD_PAGE
[  220.753549][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  220.763631][ T5631] Workqueue: hci0 hci_rx_work
[  220.768366][ T5631] RIP: 0010:l2cap_connect_cfm+0x7c7/0xf80
[  220.774129][ T5631] Code: 80 fb ff ff 49 39 c7 0f 84 29 01 00 00 e8 b1 65 7b f7 49 8d 6e 0c be 04 00 00 00 48 89 ef e8 50 36 e8 f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5
[  220.793768][ T5631] RSP: 0018:ffffc90003a1f830 EFLAGS: 00010213
[  220.799904][ T5631] RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001f497000
[  220.807913][ T5631] RDX: 0000000000000000 RSI: ffffffff81c64dfd RDI: ffff888035bdbd80
[  220.815899][ T5631] RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000
[  220.823875][ T5631] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff88807711803d
[  220.831856][ T5631] R13: 0000000000000080 R14: deacfffffffffc80 R15: ffff88807bd53a88
[  220.839842][ T5631] FS:  0000000000000000(0000) GS:ffff888124471000(0000) knlGS:0000000000000000
[  220.848873][ T5631] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.855556][ T5631] CR2: 00007ffe32848f9c CR3: 000000002a742000 CR4: 0000000000350ef0
[  220.863568][ T5631] Call Trace:
[  220.866844][ T5631]  <TASK>
[  220.869779][ T5631]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  220.875455][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.881119][ T5631]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  220.886609][ T5631]  le_conn_complete_evt+0x197c/0x1f60
[  220.892021][ T5631]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  220.897778][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.903446][ T5631]  hci_le_conn_complete_evt+0x23c/0x3a0
[  220.909036][ T5631]  ? skb_pull_data+0x15f/0x1e0
[  220.913835][ T5631]  hci_le_meta_evt+0x34a/0x5f0
[  220.918800][ T5631]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  220.924916][ T5631]  hci_event_packet+0x51c/0xcd0
[  220.929794][ T5631]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  220.935112][ T5631]  ? __pfx_hci_event_packet+0x10/0x10
[  220.940526][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.946194][ T5631]  ? kcov_remote_start+0x374/0x660
[  220.951318][ T5631]  ? lockdep_hardirqs_on+0x78/0x100
[  220.956552][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.962214][ T5631]  hci_rx_work+0x451/0xfc0
[  220.966668][ T5631]  process_one_work+0xa0e/0x1980
[  220.971667][ T5631]  ? __pfx_process_one_work+0x10/0x10
[  220.977086][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.982765][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  220.988422][ T5631]  worker_thread+0x5ef/0xe50
[  220.993055][ T5631]  ? kthread+0x13a/0x450
[  220.997311][ T5631]  ? __pfx_worker_thread+0x10/0x10
[  221.002446][ T5631]  kthread+0x370/0x450
[  221.006540][ T5631]  ? __pfx_kthread+0x10/0x10
[  221.011152][ T5631]  ret_from_fork+0x72b/0xd50
[  221.015771][ T5631]  ? __pfx_ret_from_fork+0x10/0x10
[  221.020923][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.026579][ T5631]  ? rcu_is_watching+0x12/0xc0
[  221.031436][ T5631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  221.037107][ T5631]  ? __switch_to+0x800/0x1100
[  221.041823][ T5631]  ? __switch_to_asm+0x39/0x70
[  221.046618][ T5631]  ? __pfx_kthread+0x10/0x10
[  221.051267][ T5631]  ret_from_fork_asm+0x1a/0x30
[  221.056073][ T5631]  </TASK>
[  221.059091][ T5631] Modules linked in:
[  221.063718][ T5631] ---[ end trace 0000000000000000 ]---
[  221.070960][ T5631] RIP: 0010:l2cap_connect_cfm+0x7c7/0xf80
[  221.078546][ T5631] Code: 80 fb ff ff 49 39 c7 0f 84 29 01 00 00 e8 b1 65 7b f7 49 8d 6e 0c be 04 00 00 00 48 89 ef e8 50 36 e8 f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5
[  221.098356][ T5631] RSP: 0018:ffffc90003a1f830 EFLAGS: 00010213
[  221.105357][ T5631] RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001f497000
[  221.113938][ T5631] RDX: 0000000000000000 RSI: ffffffff81c64dfd RDI: ffff888035bdbd80
[  221.122011][ T5631] RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000
[  221.130157][ T5631] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff88807711803d
[  221.138238][ T5631] R13: 0000000000000080 R14: deacfffffffffc80 R15: ffff88807bd53a88
[  221.146389][ T5631] FS:  0000000000000000(0000) GS:ffff888124471000(0000) knlGS:0000000000000000
[  221.155580][ T5631] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  221.162322][ T5631] CR2: 00007ffe32848f9c CR3: 00000000779ea000 CR4: 0000000000350ef0
[  221.178928][ T5631] Kernel panic - not syncing: Fatal exception
[  221.185612][ T5631] Kernel Offset: disabled
[  221.189939][ T5631] Rebooting in 86400 seconds..