last executing test programs:

14m21.894533434s ago: executing program 32 (id=134):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
listen(r0, 0xa)

13m56.650772826s ago: executing program 33 (id=330):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54)
unshare(0x22020600)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r0}, 0x10)

12m48.137312705s ago: executing program 34 (id=880):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbf, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9d, 0x0, @opaque="e9608fefc88e01fa0ad241a90c0091f52332d050e80b3e2e3c6d6da13b354fb4112050d35454d365feaf24bc84671bd3dddfc811099082a4d8a444418dc02ec6488c1e5e697eae8046d403aa41a74997602cd4694037b549c83c49686671629b3987b1c69a9b7cd6791083c829257b1f39c61a12069655b6537d42c75d82bd6f5dbb374609286c5e660258757f988eeef2d261966f"}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/130, 0x94}, {0x0, 0x4000}], 0x2}, 0xa1}], 0x1, 0x82, 0x0)

12m38.767994286s ago: executing program 35 (id=929):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000005c0)="99", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0xbfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000003c0)=')', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180), 0x4)

12m32.591992515s ago: executing program 36 (id=974):
r0 = socket$pppoe(0x18, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}, 0xf}, {{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0xc1100}], 0x2, 0x2, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

11m36.655184553s ago: executing program 37 (id=1392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8844}, 0x0)

11m16.661825243s ago: executing program 38 (id=1550):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000004a00)='./file1\x00', 0x4000, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0xff, 0x5e5c, &(0x7f0000005d80)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGwL+hzNxwDYnAwu76xM4xGCSkD8lPVAS0qYlNY69Nk58qnfNSahsCm2JglSk9oJeNCVRGkVqK1AVqalEI6RGau+aq0bcRK3EhS+gclBSNVVgq3fmeR7PzM7OrLHHnnmfzyfCP3vmfWeeeeed2f1u9J0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGq3/5MyfDBVFUf5X+2NNUVxY/n1VsbP85/y2871CAAAA4Ey9V/vzby9OF+xcxk4N2/zLNf/2vYWFhYXiS++eeP/PFhbSFeuKYmRlUdSui/71Fz9faNwmeK4YHxpu+Pdwl7sf6XL9aJfrx7pcv6LL9Su7XD/e5fpFB2CRVfWfx9Ru7PraX9fUD2lxaTFWu+76Nns9N7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68r/uLeF/DDfe1tiiKkz99Zk9cw1A4xtcXTXdW0/jcvXNvse7dnz6z5ztzb1/VbnY9DItWWhQbN5TrfL4oTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuXfW9d5cpnrjI97PKzzRx3WuTZc9uR1RVHMF0tu0+q5YrhY3XKv6XiP18+I8jbKp/LDxehpnSfrl3GelPu8dV3zedJ6Tsbjvz4ck9El1tD4dLzz1RWLjvsHPU/KR90P52p52w+Wdzo+3vij1aZztdzmmRuWPgfaPndtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1e7rxA2dz4HJuUNHJ2efevq2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1P0/vkA6Q1cVwOgc3hPeaeA7e1LJt4ym58M2z9zoY75PXQfnYP3djuaALh4slzvFym+c3nvnrIH3db3gdjDa8Dtq+p7Z5HYwu43VQbnNy4/K+Zo42/NduDb16L1zTcA6cz6+H5X0+cvPS74Vrw7peuOV0vx6OLDoH4sMaCq+98pL0/d74neG4LD4vri6vuGBFcXx25tjtT+6emzs2XYRxTlzS8Fy1ni+rGx5Tseh8GT7t82Xn3/zyxqvbXL4mHKvxWzs/V+U2WyY6P1e1d/f2x7Pp0k1FGGfZuT6e7b6alcczZYkOx7Pc5vnbzvx7wZRLGt7/xrq9/42Mjdbf/0bS0Rhrev9b/NSM1FZWFCdvW97731j471y//13aJ+9/5bF65PbO50C5zQuTp3sOjHZ8/7suzKGwnptDYhhvyP3v166fr5+mDc9l1/NmdHQsnDej8R6bz5vNi/Ypb628741TH+y82Xhd83PV9H1LBc+b8lj9+VTn86bc5o3pM3/vWBX/2vDesaLbOTA2sqJc71g6Cervdwur4jlwe7GnOFIcLPamfcpnubyviU3LOwdWhP/O9XvHlX1yDpTH6uVNnc+Bcpsfbj673zttDJekbRq+d2r9+cJSmf/q0VO313rYznbmL9f5qS2dfzZUbvP2ltPNGZ2P063hkgvaHKfW189S5/Te4twcpyvDOg9u7fyzqXKbS7ct83zaWRTFm9Nv1n7eFX6++/fH//17TT/3bfcz5Ten33xg8qEfn876AQD44N6v/Tm/ov69ZsP/Y72c//8fAAAAGAgx9w+Hmcj/AAAAUBkx94+Emcj/AAAAUBkx94+GmWSS/x+7c/ur7z1bpE8DXAji9fEwPHh3fbvY8Z4P/163cEp5+Se+Pfbq155d3n0PF0Xxywc+0nb7x+6O66o7Gtf5sebLF7ny2mXd/6MPn9qu8fMTTm6v3358PMs9DWJX+fXJTbXbXffUdG2+8UBRmw/Nv/Bc/fbr/47bn9hc3/4vw4eW7Nw31LT/xrCe68NcFz5T5sGdp45DOeN+r6695p8v+fyp+4v7DW24qPYwX/6D+u3Gz4h66ZL69vFxL7X+f/r6d18tt3/yhvbrf3a4/fpPhNt9K8xf7Khv33jMv9aw/j8K64/3F/e7/Vs/aLv+166ob/9aOC9eCbN1/ff+6Uffa/d8xfvZeVd9v3j/U/+9pbZfvL14+63rH392uul4tN7+G+/Wb2fH4z8badw+Xh7vJ3r0rubzeyg8v0098qIovvvHRdNxLj5e3+8fW9Yfb+/oXe3Xf2vLOo8OXVvb/9TjWdP0uL7x15vaPt64np1/t6bp8bx0Xzh+707+sLzdEw+F8zFc/78/qt9e62eZvnZf8/tN3P6VNfXXbby9yZb1v9Sy/vlry2PXff33v1tf/2v3rGxa/85Ph/Pp/vrstv79f3Vx0/7f/E79+Tj2xMThI7PHD+xtOKqNr+OV46tWX3Dhhy66OLyXtv5715G5x2aOrZtaN1UU6wbwIwN7vf5vhflf9TF/9u+h7sc/q593L36m/nXrpp/X//1SuPzR8HzGr4/f+IuxpvO19Xmfv6c+z3T9t4R1LNcVX//Pa5e14Ykvvn78H/7w7dbvC+LjOXrZeO3xvbz+8tp1Q2/Ur299v+rmPy5rfl3/ZHSqNr8fjutC+GTmDZfX76/19uNnk7z42frrN34nF/cvWj5PZM1I8+M40/X/JHwf84Mrm9//4vnx/WdbPs15TTFULmE+vD8U8/Xr41bxeL948vK29xc/h6eYv+p0lrmk2admJw8eOHz8ycm5mdm5ydmnnt516Mjxw3O7ap9duuvL3fY/9fpeXXt9753ZtqWovdqP1EePne/1H314z947pm7cO7Nv9/F9cw8fnTm2f8/s7J6ZvbM37t63b+aJbvsf2LtjetP2zXdsmth/YO+OO7dv37x94sDhI+Uy6ovqYtvUVyYOH9tV22V2x5bt01u3bpmaOHRk78yOO6amJo5327/2tWmi3PvxiWMzB3fPHTg0MzF74OmZHdPbt23b1PXTHw8d3Te7bvLY8cOTx2dnjk3WH8u6udrF5de+bvuTh9kj4f2uxVD47vwLt25Ln49b+vZXl7yp+ibN354W74TPgopf37r9O+b+sTCTTPI/AAAA5CDm/vDB/6eukP8BAACgMmLuXxlmIv8DAABAZcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAACoj5v4LwkzkfwAAAKiMmPsvDDPJI/+Ptf5V/1//X/+/sf8ft9X/L/T/9f8/IP1//f9O9P/1/wd5/X3Y/1+l/0+/6bf+f8z9HwozySP/AwAAQBZi7r8ozET+BwAAgMqIuf/iMBP5HwAAACoj5v41YSaZ5H+//1//X//f7//X/9f/P8uaDrH+v/5/J/r/+v+DvP4+7P/7/f/0nX7r/8fc///CTDLJ/wAAAJCDmPs/HGYi/wMAAEBlxNx/SZiJ/A8AAACVEXP/pWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5/7Iwk0zyPwAAAOQg5v7Lw0zkfwAAAKiMmPuvCDOR/wEAAKAyYu6/Mswkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3XxVmkkn+BwAAgBzE3H91mIn8DwAAAJURc/9HwkzkfwAAAKiMmPvXhplkkv/1//X/9f/1//X/9f97abD6/8NLXqP/X6f/30z/X/9f/1//n876rf8fc/9Hw0wyyf8AAACQg5j7rwkzkf8BAACgMmLuvzbMRP4HAACAyoi5f12YSSb5X/9f/1//X/9f/1//v5cGq/+/NP3/Ov3/Zvr/+v/6//r/dNZv/f+Y+9eHmWSS/wEAACAHMfdvCDOR/wEAAKAyYu6/LsxE/gcAAIDKiLn/+jCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/X17/f0W3G6LS+q3/H3P/DWEmmeR/AAAAyEHM/TeGmcj/AAAAUBkx998UZiL/AwAAQGXE3L8xzCST/K//r/+v/6//r/+v/99L+v+L+v9v/U+h/x/p/+v/D/L69f/9/n+667f+f8z9N4eZZJL/AQAAIAcx998SZiL/AwAAQGXE3H9rmIn8DwAAAJURc/9EmEkm+V//X/9f/1//X/9f/7+Xqtr/T++jfv+//r/+v/6//r/+P0vqt/5/zP23hZlkkv8BAAAgBzH33x5mIv8DAABAZcTcPxlmIv8DAABAZcTcPxVmkkn+1//X/9f/1//X/9f/76Wq9v/P4Pf/6/830P/X/x/k9ev/6//TXb/1/2Punw4zyST/AwAAQA5i7t8UZiL/AwAAQGXE3L85zET+BwAAgMqIuX9LmEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9NsuM1l/db/j7l/a5hJJvkfAAAAchBz/7YwE/kfAAAAKiPm/jvCTOR/AAAAqIyY++8MM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP3bw0wyyf8AAACQg5j7PxZmIv8DAABAZcTcf1eYifwPAAAAA6Xd7yGMYu7/eJhJJvlf/7/q/f+Flfr/+v/6/53Xr//fW/r/+v+d6P/r/w/y+vX/9f/prt/6/zH37wgzyST/AwAAQA5i7r87zET+BwAAgMqIuf+eMBP5HwAAACoj5v6dYSaZ5H/9/6r3//3+f/1//f9u69f/7y39f/3/TvT/B7P/H75t0f8/N/3/8aX2b+z/l+eQ/j/9qN/6/zH33xtmkkn+BwAAgBzE3P+JMBP5HwAAACoj5v5PhpnI/wAAAFAZMfd/Kswkk/yv/6//r/+v/6//r//fS/r/+v+d6P8PZv8/0v/3+//1/+mm3/r/MfffF2aSSf4HAACAHMTc/+kwE/kfAAAAKiPm/v8fZiL/AwAAQGXE3H9/mEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/lTCTTPI/AAAA5CDm/gfCTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P+rYSaZ5H/9/3PT/x9Ot6//r/+v/6//r/9/Nun/6/8X+v8f2Pnuzw/6+vX/9f/prt/6/zH3/1qYSSb5HwAAAHIQc/+vh5nI/wAAAFAZMff/RpiJ/A8AAACVEXP/g2EmmeR//X+//1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7v/NMJNM8j8AAADkIOb+h8JM5H8AAACojJj7PxtmIv8DAABAZcTc/7kwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3P9wmEkm+R8AAAByEHP/58NM5H8AAACojJj7fyvMRP4HAACAyoi5/7fDTDLJ//r/+v/6//r/+v/6/72k/7+4/1++h53P/v+K5Wyo/78s+v/6//r/+v901m/9/5j7vxBmkkn+BwAAgBzE3P87YSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/SJhJJvlf/1//X/9f/1//X/+/l/T//f7/TvT/9f8Hef36//r/dNdv/f+Y+78YZpJJ/gcAAIAcxNz/e2Em8j8AAABURsz9u8JM5H8AAACojJj7Hw0zyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/bvDTDLJ/wAAAJCDmPu/FGYi/wMAAEBlxNy/J8xE/gcAAIDKiLl/b5hJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2PunwkzyST/AwAAQA5i7t8XZiL/AwAAQGXE3L8/zET+BwAAgMqIuf+xMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9x/IMwkk/wPAAAAOYi5/8thJvI/AAAAVEbM/V8JM5H/AQAAoDJi7j8YZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPsPhZlkkv8BAAAgBzH3Hw4zkf8BAACgMmLuPxJmIv8DAABAZcTcfzTMJJP8r/+v/6//r/+v/6//30v6//r/nej/6/8P8vr1//X/6a7f+v8x9/9+mEkm+R8AAAByEHP/sTAT+R8AAAAqI+b+2TAT+R8AAAAqI+b+uTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfzzMJJP8DwAAADmIuf/xMBP5HwAAACoj5v4nwkzkfwAAAKiMmPufDDPJJP/r/+v/6/+f6v+/sr9++Xnq/9d7fv/H3l3vanZWcRx/y2SAhBCuhSvgErgGLgN3Ke7u7u7u7u7uUCiuSUmYtdaB6XTvc9529332sz6ff1bamUyfdpImv0y+2fp//b/+/0L0//r/g/7/aKfu5/f+fv2//p91o/X/ufvvHbc02f8AAADQQe7++8Qt9j8AAABMI3f/feMW+x8AAACmkbv/fnFLk/2v/9f/6/99/1//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7r9/3NJk/wMAAEAHufsfELfY/wAAADCN3P0PjFvsfwAAAJhG7v4HxS1N9r/+X/+v/9f/6//1/1vS/+v/l+j/9f97fr/+X//PutH6/9z9D45bmux/AAAA6CB3/0PiFvsfAAAAppG7/6Fxi/0PAAAA08jd/7C4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v1//r/1k3Wv+fu//hcUuT/Q8AAAAd5O5/RNxi/wMAAMA0cvc/Mm6x/wEAAGAaufsfFbc02f/6f/2//l//r//X/29J/6//X6L/1//v+f36f/0/6zbv/+95/X/vefv/3P3Xxy1N9j8AAAB0kLv/0XGL/Q8AAADTyN3/mLjF/gcAAIBp5O5/bNzSZP/r//X/Z/3/Tdfp//X/+v+zv6//v23o//X/S/T/o/b/5/svof/X/+v/WbN5/7/S+1/917n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7/4lxS5P9r//X//v+v/5f/6//35L+X/+/RP8/av/v+/+3tv+/xzner/+ng9H6/9z9T4pbmux/AAAA6CB3/5PjFvsfAAAAppG7/ylxi/0PAAAA08jd/9S4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v9/1//T/rRuv/c/c/LW5psv8BAACgg9z9T49b7H8AAACYRu7+Z8Qt9j8AAABMI3f/M+OWJvtf/6//1//r/29V/39J/6//X6b/1/8v0f/r//f8fv2//p91o/X/ufufFbc02f8AAADQQe7+Z8ct9j8AAABMI3f/c+IW+x8AAACmkbv/uXFLk/2v/9f/6//1/77/r//fkv5/uv7/Ov3/Gf2//l//r/9n2Wj9f+7+58UtTfY/AAAAdJC7//lxi/0PAAAA08jd/4K4xf4HAACAaeTuf2Hc0mT/6//1//p//b/+X/+/Jf3/dP2/7///D/2//l//r/9n2Wj9f+7+F8Uta8Pv8sqPAwAAAMPI3f/iuKXJn/8DAABAB7n7XxK32P8AAAAwjdz9L41bmux//b/+X/+v/9f/6/+3pP/X/y/R/1+7/7/zLfzz9P9jvV//r/9n3Wj9f+7+l8UtTfY/AAAAdJC7/+Vxi/0PAAAA08jd/4q4xf4HAACAaeTuf2Xc0mT/31L/f+Ndrvy4/v989P/Xfr/+X/+v/9f/6//1/0v0/77/v+f36//1/6wbrf/P3f+quKXJ/gcAAIAOcve/Om6x/wEAAGAauftfE7fY/wAAADCN3P2vjVua7H/f/9f/6//1//p//f+W9P/6/yX6f/3/nt+v/9f/s260/j93/+vilib7HwAAADrI3f/6uMX+BwAAgGnk7n9D3GL/AwAAwDRy978xbmmy//X/+v+T9/930P8n/X/8vur/9f8XoP/X/x/0/0c7dT+/9/fr//X/rBut/8/d/6a4pcn+BwAAgA5y9785brH/AQAAYBq5+98St9j/AAAAMI3c/W+NW5rsf/2//v/k/b/v/xf9f/y+6v/1/xeg/9f/H/T/Rzt1P7/39+v/9f+sG63/z93/trilyf4HAACADnL3vz1usf8BAABgGrn73xG32P8AAAAwjdz974xbmux//b/+X/+v/9f/6/+3pP/X/y/R/+v/9/x+/b/+n3Wj9f+5+98VtzTZ/wAAANBB7v53xy32PwAAAEwjd/974hb7HwAAAKaRu/+9cUuT/a//33v/f68b4gX6f/2//l//PyT9v/5/if5f/7/n9+v/9f+sG63/z93/vrilyf4HAACADnL3vz9usf8BAABgGrn7PxC32P8AAAAwjdz9H4xbmuz/Hv3/5Zv9tHn6f9//1//r//X/Y9P/6/+X6P/1/3t+v/5f/8+60fr/3P0filua7H8AAADoIHf/h+MW+x8AAACmkbv/I3GL/Q8AAADTyN3/0bilyf7v0f/fXIP+P/+1bt/+/6a76f/1/0X/r/8/6P/1/yv0//r/Pb9f/6//Z91o/X/u/o/FLU32PwAAAHSQu//jcYv9DwAAANPI3f+JuMX+BwAAgGnk7v9k3HD3u57uSbcr/f+0/b/v/+v/9f/6/yHo//X/S/T/+v89v1//r/9n3Wj9f+7+T8Ut/vwfAAAAppG7/9Nxi/0PAAAA08jd/5m4xf4HAACAaeTu/2zc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+5uKXJ/gcAAIAOcvd/Pm6x/wEAAGAaufu/ELfY/wAAADCN3P1fjFua7H/9v/5f/3+b9f+Xr/719f/6f/2//l//v0z/r//f8/v1//p/1o3W/+fu/1Lc0mT/AwAAQAe5+78ct9j/AAAAMI3c/V+JW+x/AAAAmEbu/q/GLU32v/5f/6//9/1//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/a3FLk/0PAAAAHeTu/3rcYv8DAADANHL3fyNusf8BAABgGrn7vxm3NNn/M/f/Sz9N/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/934hb7HwAAAKaRu/+7cUuT/T9z/79E/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+HcUuT/a//1//r//X/+n/9/5b0//r/Jfp//f+e36//1/+zbrT+P3f/j+KWJvsfAAAAOsjd/+O4xf4HAACAaeTu/0ncYv8DAADANHL3/zRuabL/9f/6f/3/UP3/Ha/+dfT/+n/9/zL9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v6fxS1N9j8AAAB0kLv/53GL/Q8AAADTyN3/i7jF/gcAAIBp5O7/ZdzSZP/r//X/+v+j+/9LB9///7/36P/1/9ei/9f/L9H/6//3/H79v/6fdaP1/7n7fxW3NNn/AAAA0EHu/l/HLfY/AAAATCN3/2/iFvsfAAAAppG7/7dxS5P9r//X/+v/h/r+v/5f/6//vyD9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v4b4pYm+x8AAAA6yN3/u7jF/gcAAIBp5O7/fdxi/wMAAMA0cvffGLc02f/6f/3/lP3/nfT/+n/9/yj0//r/Jfp//f+e36//1/+zbrT+P3f/H+KWJvsfAAAAOsjd/8e4xf4HAACAaeTu/1PcYv8DAADANHL3/zluabL/9f/6/yn7f9//1//vrf+/dPY/YP3/xej/9f8H/f/RTt3P7/39+n/9P+tG6/9z9/8lbmmy/wEAAKCD3P1/jVvsfwAAAJhG7v6/xS32PwAAAEwjd//f45Ym+1//r//X/+v/9f8D9P++/380/b/+/6D/P9qp+/m9v1//r/9n3Wj9f+7+f8QtTfY/AAAAdJC7/59xi/0PAAAA08jd/6+4xf4HAACAaeTu/3fc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+fAAAA//9nkS0F")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x24, 0x3)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)

9m46.266811361s ago: executing program 39 (id=2335):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0)

9m6.178959276s ago: executing program 40 (id=2670):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x4, 0x7fff0000}]})
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200030001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7m27.183093104s ago: executing program 41 (id=3510):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000,\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

7m10.550917402s ago: executing program 42 (id=3644):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r2, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)

6m15.220025525s ago: executing program 43 (id=4111):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}])

4m57.559795823s ago: executing program 44 (id=4661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x9c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x80}, @device_a, @broadcast, @from_mac=@device_b, {0x2, 0x1}}, 0x3, @default, 0x0, @void, @val, @void, @void, @void, @val={0x5, 0x3, {0x8, 0xa7, 0x5}}, @val={0x25, 0x3, {0x1, 0x8, 0x6}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x4, 0x8, 0xd7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, 0x41}}, @val={0x76, 0x6, {0x6, 0xf8, 0x3c, 0xfff}}}}, @NL80211_ATTR_BEACON_TAIL={0x10, 0xf, [@peer_mgmt={0x75, 0x8, {0x1, 0x800, @val=0xfd, @val=0x5, @void}}, @supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0)

3m48.777811733s ago: executing program 3 (id=5126):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
close(0x3)

3m48.434018306s ago: executing program 3 (id=5127):
syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f00000002c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01", @ANYRESDEC=0x0, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11f0, &(0x7f0000001b00)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000010002400000024000000080200000000000000000002000000000c000000000000a91205000000000000000000000d000000000030305f2e2e"], 0x0, 0x44, 0x0, 0x1}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)

3m47.311420507s ago: executing program 3 (id=5136):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000002400)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom")
r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)

3m46.796420959s ago: executing program 3 (id=5143):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x38ad211, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0)

3m44.025096089s ago: executing program 3 (id=5157):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m42.674235213s ago: executing program 3 (id=5168):
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165)
getdents64(r0, &(0x7f0000000000)=""/49, 0x31)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x200, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

3m41.807128101s ago: executing program 45 (id=5168):
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165)
getdents64(r0, &(0x7f0000000000)=""/49, 0x31)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x200, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

2m29.290266296s ago: executing program 8 (id=5694):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

2m27.106893272s ago: executing program 8 (id=5712):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20008891}, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001bc0)=""/4069, 0xfe5}, {&(0x7f0000000700)=""/225, 0xe1}, {&(0x7f0000000c40)=""/198, 0xc6}, {&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000540)=""/152, 0x98}], 0x8}, 0x40022020)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

2m26.971788152s ago: executing program 8 (id=5714):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xfff, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1011, 0xffffffffffffffff, 0x0, 0x0})

2m26.194990407s ago: executing program 8 (id=5721):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000400)='./file0/file0\x00')
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00')

2m25.924737938s ago: executing program 8 (id=5723):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x1]}, 0x0, 0x0, 0x8)

2m25.344677508s ago: executing program 8 (id=5731):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x0, 0x4a}, 0x28)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000c00000/0x400000)=nil, 0x400000})

2m24.446608172s ago: executing program 46 (id=5731):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x0, 0x4a}, 0x28)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000c00000/0x400000)=nil, 0x400000})

2m21.319008019s ago: executing program 9 (id=5763):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000001040101000000000000000001000400050001000100"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a0000000500010002"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94)

2m21.114242771s ago: executing program 9 (id=5766):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x2)
sendto$inet6(r0, &(0x7f0000000000)="81", 0x1, 0x2, 0x0, 0x0)

2m20.89535329s ago: executing program 9 (id=5767):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendfile(r1, r0, 0x0, 0x20fffe82)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0xc469, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x9)

2m20.510624911s ago: executing program 9 (id=5770):
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000040)={[{@map_acorn}, {@showassoc}, {@session={'session', 0x3d, 0x8}}]}, 0x1, 0x584, &(0x7f0000000300)="$eJzs3E1vG8cZAOBZmZIVFXACBI0dxYeN04MLNAxJ1zKEAAXY1VLahOISu6vAPhVBLQdGpbRIUqDxzRe3Bfon0t76C3rqPwp67DEFd0nXH6I+EtsU2ucBpBnuvjvzzpKYASkNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQomSr0+lGYZiN9m7H8yVbRb57zPlZe/94qjim3xCiyU9YXQ0rzaErb/739I8nv66Fy82jy2F1UqyGBz96640P32wtza4/JqFXYHma7MH+F8cHRuG76FUl9XLsHHWrW/F2OsrKPNvtb6dxVubx5sZG54OdQRkPsmFa3imrdDdOWqFf5UV8Pflp3N3cvBGn7Tv53mh7qz9MZwdvvd/rdDbij9rjtF+U+eiDj9plspMNh9lou46ZnJ7E3Jq8ED/Oqvji43t/46Tc790/2O+eJqh3UlCv0+t1u71ed+Pm5s1bnU7ruQOdZ4TnIhb9omXRXtDMDT/cbP0HAAAA/ndF9Wfsk/f/y+FKXRtE3zUWnRoAAADwgtR/+b/8t2jy/j+EcCVEg2yYdhadFgAAAPAC/enEPXbl+GL0z3+FoliOHo5v/yQ67E/i+ocXmusuPNtiNWhFl6aN1MVGa/ooSa9GbzdBb8+iv50W907KIzpDAutzEgh/CetNzPrdprw7O9P0sjbIhmk7yYcfdkO/f2mpSm9Xv//8/h9CPfw/j3YvReHe/YP99q9/e3C3zuXhpJWHh9MNFM/tozgml6/q/7eoP3N5esTfNE0tT3KJpv2uNf12nhz/UnP50hn6fBTeaWLeWWvKtafHvzrps9ueM/rN10OdRfcHjvxRuNrEXL3+3qR47/oRWfSOymK6U7TOovdkFt/rXpwiixvz7kXzjFwMIZwqi9fmZQGwKPfmrUKP1/9n193W41lu5emmjplrZ6v7a9PQl7O6PwrvNjHvrtcTa2v9iBm9047CMTP6bI19uPJ9V7e/h2tNzLVZ8JFr7C9er/sNb8z6bVbVevH/Zm6/5bAXTZ6oC18d/i689eXXD96/f/jpZ/uf7X/e693Y6Py807nZC8v1MKbFMZkC8P8rLb6N1qo/RkWRjX/V3dzs9qudNC7y5OO4yLa20zgbVWmR7PRH22k8LvIqT/LhpPJJtpWWcbk3HudFFQ/yIh7nZXa7/uaXePrVL2UafjaqsqQcD9N+mcZJPqr6SRVvZWUSj/d+OczKnbSoLy7HaZINsqRfZfkobuV7f03SdhyXafpEYLaVjqpskE2qo3hcZLv94k78ST7c203jrbRMimxc5U2Ds76y0SAvdvtVdiG0F32zAeCc+PLrB7/59OBg/4tTVv493Rx4lque73VlEUMFAKYmq/TKnFUaAAAAAAAAAAAAAAA4H866/+8FVpanKSym95dUuTQd1Fkvn+2IPB+jeKISVs9FGoupLJ0qeCnMj2mdg1HMrcwmgSNjXv1cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn+U8AAAD//4n2lCg=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

2m19.709568484s ago: executing program 9 (id=5780):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
readahead(r0, 0x3, 0x6)

2m18.478352178s ago: executing program 9 (id=5788):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x5}, &(0x7f0000000140)=0x8)

2m17.827236384s ago: executing program 47 (id=5788):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x5}, &(0x7f0000000140)=0x8)

1m50.018039429s ago: executing program 2 (id=5954):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000300)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {}, {@nodiscard}, {@sysvgroups}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x479, &(0x7f0000000480)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xfffffe0d)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc0)

1m48.640826657s ago: executing program 2 (id=5958):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x900, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000018})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1})
epoll_pwait2(r1, &(0x7f0000001900)=[{}], 0x1, 0x0, 0x0, 0x0)

1m48.074020902s ago: executing program 2 (id=5961):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x87, 0xfffffffffffffe3a, 0x9ec}, 0x0})
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000500)=0x1d)

1m46.005655954s ago: executing program 2 (id=5977):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30040c6, &(0x7f0000000000), 0x1, 0x5b4, &(0x7f0000000840)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

1m45.304824209s ago: executing program 2 (id=5981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

1m43.546100367s ago: executing program 2 (id=5993):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}, 0x1b28}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/112, 0x70}], 0x1}, 0x7ff}], 0x2, 0x102, 0x0)
sendto$inet(r0, &(0x7f0000000380)="b8", 0x6e, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10)

1m42.658186757s ago: executing program 48 (id=5993):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}, 0x1b28}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/112, 0x70}], 0x1}, 0x7ff}], 0x2, 0x102, 0x0)
sendto$inet(r0, &(0x7f0000000380)="b8", 0x6e, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10)

11.613630936s ago: executing program 4 (id=6608):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4)
ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}})

10.426777217s ago: executing program 4 (id=6618):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xd, 0x80, 0x100000}, 0x20)

10.114301069s ago: executing program 4 (id=6622):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000343000/0x1000)=nil, 0x1000, 0x6)

9.184519004s ago: executing program 4 (id=6634):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@quota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@uid}]}, 0x1, 0x61fd, &(0x7f000000c900)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
creat(&(0x7f0000000040)='./bus\x00', 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
stat(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0))

7.710174912s ago: executing program 4 (id=6649):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000500)='./bus\x00', 0x84c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))

7.477450468s ago: executing program 1 (id=6651):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x2311}], 0x1, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000002200)="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", 0x1000)

6.974270108s ago: executing program 1 (id=6652):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40015b0b, 0x0)

6.391096644s ago: executing program 4 (id=6656):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000014)

5.615568203s ago: executing program 49 (id=6656):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000014)

5.164646067s ago: executing program 7 (id=6663):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000001c0)='./bus\x00', 0x810, &(0x7f0000000000)=ANY=[], 0xfd, 0x1067a, &(0x7f0000010ac0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8480, 0x85)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

5.147102081s ago: executing program 0 (id=6664):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)=""/169, 0xa9}], 0x2, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

3.565883944s ago: executing program 1 (id=6667):
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)

3.518761878s ago: executing program 7 (id=6668):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x397f, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0xb)

3.483693123s ago: executing program 5 (id=6669):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x40880)
close_range(r0, 0xffffffffffffffff, 0x0)

3.303426684s ago: executing program 1 (id=6671):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'gretap0\x00', <r2=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0)

3.136257229s ago: executing program 5 (id=6672):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

3.045285794s ago: executing program 1 (id=6674):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000003fc0)="$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")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

2.884316275s ago: executing program 5 (id=6675):
pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0xfffffffffffffffc, 0xfffffffff7fffff8}, 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x5ceb5a76dea77ea0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

2.871222743s ago: executing program 7 (id=6676):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0xa46, &(0x7f00000014c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0)
lseek(r0, 0xd488, 0x1)
getdents64(r0, 0x0, 0x22)

2.844388639s ago: executing program 6 (id=6677):
r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x387}, 0x0, 0x2161, 0x1, {0x3}})
io_uring_enter(r0, 0x3d0e, 0x4c1, 0x20, 0x0, 0x0)

2.520541776s ago: executing program 1 (id=6678):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f0000000200)="b700000000000000000000f1", 0xc}], 0x2)

2.36518349s ago: executing program 7 (id=6679):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x800)

2.355076326s ago: executing program 0 (id=6680):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.112804909s ago: executing program 6 (id=6681):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00$\x00', 0x20, 0x6, 0x1, @remote, @local, {[], {{0x20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0xfffffffd, 0xfffffffa}]}}}}}}}}, 0x0)

2.057152381s ago: executing program 0 (id=6682):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
mount_setattr(r1, &(0x7f0000000180)='.\x00', 0x1000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

1.768373437s ago: executing program 5 (id=6683):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1)

1.751715252s ago: executing program 6 (id=6684):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.625958925s ago: executing program 5 (id=6685):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40)

1.432703082s ago: executing program 6 (id=6686):
r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1.1197456s ago: executing program 7 (id=6687):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)

984.449951ms ago: executing program 0 (id=6688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe)
close_range(r0, 0xffffffffffffffff, 0x0)

877.994526ms ago: executing program 7 (id=6689):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10)

776.771598ms ago: executing program 0 (id=6690):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20)

695.029483ms ago: executing program 6 (id=6691):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1c5042, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r1, r0, 0x0, 0x20fffe85)

593.588502ms ago: executing program 0 (id=6692):
r0 = socket$inet(0x2, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)

483.582073ms ago: executing program 6 (id=6693):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x7c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast}, 0x200000000000000, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x7c}}, 0x0)

0s ago: executing program 5 (id=6694):
unshare(0x2040400)
r0 = semget$private(0x0, 0x7, 0x191)
semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1)
semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000080)=0x4)

kernel console output (not intermixed with test programs):

: interface not active
[  836.287290][   T10] usb 2-1: USB disconnect, device number 25
[  836.338984][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  836.364344][T24894] bridge0: port 2(bridge_slave_1) entered disabled state
[  836.372297][T24894] bridge0: port 1(bridge_slave_0) entered disabled state
[  836.615889][T24915] loop2: detected capacity change from 0 to 2048
[  836.636060][T24918] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  836.702633][T24894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  836.793649][T24894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  836.840375][T24918] NILFS (loop2): vblocknr = 22 has abnormal lifetime: start cno (= 1099511627778) > current cno (= 3)
[  836.865478][T24918] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=6)
[  836.905354][T24918] Remounting filesystem read-only
[  837.231531][T24690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  837.253811][T24690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  837.287428][T24690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  837.302216][   T85] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  837.311536][   T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  837.476193][   T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  837.672460][T24931] loop2: detected capacity change from 0 to 512
[  837.710863][T24931] EXT4-fs: inline encryption not supported
[  837.716761][T24931] EXT4-fs: Ignoring removed mblk_io_submit option
[  837.786530][   T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  837.839599][T24931] EXT4-fs (loop2): Test dummy encryption mode enabled
[  837.881981][T24931] EXT4-fs (loop2): orphan cleanup on readonly fs
[  837.905679][T24931] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.5854: inode #13: comm syz.2.5854: iget: illegal inode #
[  837.947757][   T13] hsr_slave_0: left promiscuous mode
[  837.966751][T24931] loop2: lost filesystem error report for type 5 error -117
[  837.968147][T24931] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5854: couldn't read orphan inode 13 (err -117)
[  837.975610][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  837.975634][    C1] EXT4-fs (loop2): initial error at time 1773064862: ext4_orphan_get:1391
[  837.975663][    C1] EXT4-fs (loop2): last error at time 1773064862: ext4_orphan_get:1391
[  837.977736][T24938] loop1: detected capacity change from 0 to 512
[  838.021920][T24931] loop2: lost filesystem error report for type 5 error -117
[  838.024006][   T13] hsr_slave_1: left promiscuous mode
[  838.049899][T24931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  838.075247][T24938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  838.081054][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  838.107073][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  838.114709][T24938] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  838.121285][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  838.137505][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  838.155151][T24931] EXT4-fs (loop2): shut down requested (0)
[  838.212014][T10952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  838.278813][T18980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  838.292584][   T13] veth1_vlan: left promiscuous mode
[  838.330823][   T13] veth0_vlan: left promiscuous mode
[  838.685033][   T13] team0 (unregistering): Port device team_slave_1 removed
[  838.714849][   T13] team0 (unregistering): Port device team_slave_0 removed
[  838.925417][T24690] hsr_slave_0: entered promiscuous mode
[  838.932696][T24690] hsr_slave_1: entered promiscuous mode
[  838.939389][T24690] debugfs: 'hsr0' already exists in 'hsr'
[  838.945361][T24690] Cannot create hsr debugfs directory
[  839.071655][T24956] loop4: detected capacity change from 0 to 64
[  839.982277][T24524] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  840.046053][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.046053][   T12] loop4: rw=8388609, sector=65, nr_sectors = 1 limit=64
[  840.090305][   T12] buffer_io_error: 70 callbacks suppressed
[  840.090329][   T12] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  840.091983][T24524] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  840.105506][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.105506][   T12] loop4: rw=8388609, sector=66, nr_sectors = 1 limit=64
[  840.181207][   T12] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  840.195225][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.195225][   T12] loop4: rw=8388609, sector=67, nr_sectors = 1 limit=64
[  840.209495][   T12] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  840.221939][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.221939][   T12] loop4: rw=8388609, sector=68, nr_sectors = 1 limit=64
[  840.244090][   T12] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  840.255808][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.255808][   T12] loop4: rw=8388609, sector=72, nr_sectors = 1 limit=64
[  840.276613][   T12] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  840.296449][T24524] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  840.317150][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.317150][   T12] loop4: rw=8388609, sector=73, nr_sectors = 1 limit=64
[  840.318590][T24524] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  840.364642][   T12] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  840.404094][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.404094][   T12] loop4: rw=8388609, sector=76, nr_sectors = 1 limit=64
[  840.438543][   T12] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  840.467510][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.467510][   T12] loop4: rw=8388609, sector=77, nr_sectors = 1 limit=64
[  840.550909][   T12] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  840.591025][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.591025][   T12] loop4: rw=1, sector=78, nr_sectors = 672 limit=64
[  840.680799][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.680799][   T12] loop4: rw=8388609, sector=750, nr_sectors = 1 limit=64
[  840.713759][   T12] Buffer I/O error on dev loop4, logical block 750, lost async page write
[  840.758171][   T12] Buffer I/O error on dev loop4, logical block 751, lost async page write
[  841.015594][T25004] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5874'.
[  841.580101][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  841.617349][T24999] loop2: detected capacity change from 0 to 32768
[  841.688741][T24524] 8021q: adding VLAN 0 to HW filter on device bond0
[  841.706031][T24999] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  841.740101][    T9] usb 5-1: Using ep0 maxpacket: 8
[  841.752022][    T9] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  841.800898][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  841.872340][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  841.907613][T24999] XFS (loop2): Ending clean mount
[  841.924888][T24999] XFS (loop2): Quotacheck needed: Please wait.
[  841.927686][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  842.029911][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  842.054892][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  842.102072][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  842.143780][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.171537][T24999] XFS (loop2): Quotacheck: Done.
[  842.250933][T24524] 8021q: adding VLAN 0 to HW filter on device team0
[  842.424541][    T9] usb 5-1: usb_control_msg returned -32
[  842.434557][T10952] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  842.460398][    T9] usbtmc 5-1:16.0: can't read capabilities
[  842.573661][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[  842.580909][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  842.642714][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.650058][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  843.426394][T24690] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  843.481194][T24690] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  843.509515][T24690] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  843.540705][T24690] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  843.839079][T24690] 8021q: adding VLAN 0 to HW filter on device bond0
[  843.895801][T24690] 8021q: adding VLAN 0 to HW filter on device team0
[  843.925621][T24524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  843.944839][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  843.952096][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  843.973883][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.981142][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  844.147592][T24690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  844.192745][T24524] veth0_vlan: entered promiscuous mode
[  844.257232][T24524] veth1_vlan: entered promiscuous mode
[  844.412143][ T5833] usb 5-1: USB disconnect, device number 13
[  844.441955][T24524] veth0_macvtap: entered promiscuous mode
[  844.483584][T24524] veth1_macvtap: entered promiscuous mode
[  844.537463][T25088] loop2: detected capacity change from 0 to 2048
[  844.596718][T25088] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  844.612394][T24524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  844.660787][T24524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  844.683037][T25088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  844.791949][  T172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  844.833719][  T172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  844.947425][  T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  844.972610][  T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  845.337621][T24690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  845.433494][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.479884][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  845.675292][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.722873][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.993703][T24690] veth0_vlan: entered promiscuous mode
[  847.060356][T24690] veth1_vlan: entered promiscuous mode
[  847.162521][T25165] input: syz1 as /devices/virtual/input/input37
[  847.218142][T24690] veth0_macvtap: entered promiscuous mode
[  847.299321][T24690] veth1_macvtap: entered promiscuous mode
[  847.369660][T24690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  847.422976][T25173] overlayfs: failed to clone upperpath
[  847.444839][T24690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  847.541700][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  847.560514][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  847.569437][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.625830][T25137] loop2: detected capacity change from 0 to 32768
[  847.657064][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.715387][T25137] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  847.810630][T25185] netlink: 'syz.0.5911': attribute type 9 has an invalid length.
[  847.818451][T25185] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5911'.
[  847.845353][T25180] loop1: detected capacity change from 0 to 4096
[  847.921905][T25137] XFS (loop2): Ending clean mount
[  847.943802][T25180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  848.056368][T10952] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  848.169619][ T5833] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  848.222161][T25197] EXT4-fs (loop1): shut down requested (2)
[  848.264686][  T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.302294][  T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.370278][ T5833] usb 5-1: Using ep0 maxpacket: 16
[  848.432283][ T5833] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  848.470059][ T5833] usb 5-1: config 0 has no interface number 0
[  848.476265][ T5833] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  848.493883][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.534603][T18980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.542315][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.544615][ T5833] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  848.576240][  T172] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  848.645652][  T172] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  848.648164][ T5833] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  848.763330][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  848.815264][ T5833] usb 5-1: Product: syz
[  848.819488][ T5833] usb 5-1: SerialNumber: syz
[  848.864271][ T5833] usb 5-1: config 0 descriptor??
[  848.903995][ T5833] cm109 5-1:0.8: invalid payload size 0, expected 4
[  848.953450][ T5833] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input38
[  849.350956][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  849.352067][    T9] usb 5-1: USB disconnect, device number 14
[  849.357966][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  849.388964][T25222] loop2: detected capacity change from 0 to 128
[  849.534995][    T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  849.727798][T25232] loop2: detected capacity change from 0 to 128
[  849.778057][T25232] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  849.834993][T25232] ext4 filesystem being mounted at /671/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  850.000373][ T5833] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  850.087000][T25245] loop1: detected capacity change from 0 to 16
[  850.103966][T25245] erofs (device loop1): mounted with root inode @ nid 36.
[  850.133556][T10952] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  850.151040][   T31] audit: type=1800 audit(1773064875.183:177): pid=25245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5930" name="file1" dev="loop1" ino=86 res=0 errno=0
[  850.235950][ T5833] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  850.321657][ T5833] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  850.362017][ T5833] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  850.373100][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  850.415313][ T5833] usb 8-1: SerialNumber: syz
[  850.597806][T25259] loop2: detected capacity change from 0 to 1024
[  850.667073][T25259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  850.705022][ T5833] usb 8-1: 0:2 : does not exist
[  850.847558][T25259] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  850.920434][ T5833] usb 8-1: USB disconnect, device number 24
[  850.987532][T25259] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  851.078393][T25259] EXT4-fs (loop2): This should not happen!! Data will be lost
[  851.078393][T25259] 
[  851.091646][T25273] loop4: detected capacity change from 0 to 64
[  851.134054][T25259] EXT4-fs (loop2): Total free blocks count 0
[  851.170013][T25259] EXT4-fs (loop2): Free/Dirty block details
[  851.175953][T25259] EXT4-fs (loop2): free_blocks=20480
[  851.224791][T25259] EXT4-fs (loop2): dirty_blocks=80
[  851.243776][T25259] EXT4-fs (loop2): Block reservation details
[  851.249818][T25259] EXT4-fs (loop2): i_reserved_data_blocks=5
[  851.275583][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  851.514986][  T172] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  851.616527][T25282] netlink: 'syz.7.5942': attribute type 1 has an invalid length.
[  851.650139][T25282] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5942'.
[  851.969485][T25295] loop2: detected capacity change from 0 to 2048
[  852.036275][T25295] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362
[  852.128647][T25295] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  852.224255][T25295] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  852.312042][T25295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  852.400843][T25301] loop4: detected capacity change from 0 to 32768
[  852.447510][T25301] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  852.455831][T25301] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  852.468963][   T31] audit: type=1800 audit(1773064877.483:178): pid=25295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5945" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  852.567224][T25301] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  852.577437][   T30] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  852.612822][   T30] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  852.938124][T25312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5953'.
[  852.990791][T25314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5953'.
[  853.010386][T25312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5953'.
[  853.060175][T25314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5953'.
[  853.096938][T25312] erspan0: entered promiscuous mode
[  853.116013][   T30] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 503ms
[  853.157341][T25312] gretap0: entered promiscuous mode
[  853.176253][   T30] gfs2: fsid=syz:syz.0: jid=0: Done
[  853.213351][T25312] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  853.223920][T25301] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  853.264613][T25312] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  853.288613][T25319] loop2: detected capacity change from 0 to 512
[  853.371478][T25319] EXT4-fs: Ignoring removed nobh option
[  853.402389][T25319] EXT4-fs (loop2): Test dummy encryption mode enabled
[  853.507106][T25319] EXT4-fs error (device loop2): __ext4_iget:5378: inode #11: block 1: comm syz.2.5954: invalid block
[  853.538165][T25298] loop7: detected capacity change from 0 to 32768
[  853.668111][T25319] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  853.669991][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  853.685877][    C1] EXT4-fs (loop2): initial error at time 1773064878: __ext4_iget:5378: inode 11: block 1
[  853.695762][    C1] EXT4-fs (loop2): last error at time 1773064878: __ext4_iget:5378: inode 11: block 1
[  853.734158][T25319] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5954: couldn't read orphan inode 11 (err -117)
[  853.805029][T25298] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  853.832454][T25319] loop2: lost filesystem error report for type 5 error -117
[  853.884545][T25301] gfs2: fsid=syz:syz.0: found 1 quota changes
[  853.891430][T25319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  854.038816][T25332] loop1: detected capacity change from 0 to 1024
[  854.068793][T25319] EXT4-fs error (device loop2): ext4_add_entry:2415: inode #2: comm syz.2.5954: Directory hole found for htree leaf block 0
[  854.203710][T25332] hfsplus: b-tree write err: -5, ino 2
[  854.249909][T25332] hfsplus: b-tree write err: -5, ino 26
[  854.336552][T10952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.610572][  T172] hfsplus: b-tree write err: -5, ino 25
[  854.616390][  T172] hfsplus: b-tree write err: -5, ino 4
[  854.670392][  T172] hfsplus: b-tree write err: -5, ino 2
[  854.676095][  T172] hfsplus: b-tree write err: -5, ino 26
[  854.694387][T24690] ocfs2: Unmounting device (7,7) on (node local)
[  854.763529][  T172] hfsplus: b-tree write err: -5, ino 27
[  855.311033][T25351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5963'.
[  855.540799][T25359] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  855.573539][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  855.582533][T25336] loop0: detected capacity change from 0 to 40427
[  855.611866][T25336] f2fs: Unexpected value for 'usrquota'
[  855.730065][   T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  855.770198][    T9] usb 3-1: Using ep0 maxpacket: 8
[  855.805254][    T9] usb 3-1: config 0 has no interfaces?
[  855.833182][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  855.882300][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.912674][    T9] usb 3-1: Product: syz
[  855.944228][    T9] usb 3-1: Manufacturer: syz
[  855.963098][    T9] usb 3-1: SerialNumber: syz
[  855.969452][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  855.991425][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  856.001862][    T9] usb 3-1: config 0 descriptor??
[  856.024729][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  856.076469][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.133150][   T10] usb 5-1: Product: syz
[  856.137377][   T10] usb 5-1: Manufacturer: syz
[  856.145806][T25378] overlayfs: failed to clone upperpath
[  856.175532][   T10] usb 5-1: SerialNumber: syz
[  856.194334][T25377] loop1: detected capacity change from 0 to 1024
[  856.251204][T25377] EXT4-fs: Ignoring removed mblk_io_submit option
[  856.293404][    T9] usb 3-1: USB disconnect, device number 31
[  856.299613][T25377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  856.340427][T25377] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  856.388274][T25377] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.5970: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  856.452812][   T10] usb 5-1: 0:2 : does not exist
[  856.458066][T25377] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  856.459987][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  856.462602][T25377] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.5970: couldn't read orphan inode 11 (err -117)
[  856.469120][    C0] EXT4-fs (loop1): initial error at time 1773064881: ext4_ext_check_inode:521: inode 11
[  856.469169][    C0] EXT4-fs (loop1): last error at time 1773064881: ext4_ext_check_inode:521: inode 11
[  856.522788][T25377] loop1: lost filesystem error report for type 5 error -117
[  856.523058][   T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  856.557836][T25384] loop0: detected capacity change from 0 to 4096
[  856.558875][T25377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  856.567122][T25384] ntfs3: Unknown parameter 'io'
[  856.755657][   T10] usb 5-1: USB disconnect, device number 15
[  856.819194][T25377] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  856.865309][T25377] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  856.887126][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  856.910046][T25377] EXT4-fs: Cannot change journaled quota options when quota turned on
[  857.020090][ T5908] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  857.084903][T18980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.187748][T25404] loop2: detected capacity change from 0 to 1024
[  857.201517][ T5908] usb 8-1: Using ep0 maxpacket: 32
[  857.236355][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  857.288338][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  857.296262][T25404] EXT4-fs (loop2): mounted filesystem 00000300-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  857.318419][ T5908] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  857.340317][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.353062][ T5908] usb 8-1: config 0 descriptor??
[  857.727624][T10952] EXT4-fs error (device loop2): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 150994944
[  857.788766][T10952] EXT4-fs error (device loop2): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 150994944
[  857.846828][ T5908] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0
[  858.200179][ T5908] usb 8-1: USB disconnect, device number 25
[  858.334080][T15846] EXT4-fs (loop2): unmounting filesystem 00000300-0000-0000-0000-000000000000.
[  858.953808][T25425] fido_id[25425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  859.063507][T25426] loop4: detected capacity change from 0 to 131072
[  859.169011][T25426] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  859.430044][   T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  859.474483][T25426] XFS (loop4): Starting recovery (logdev: internal)
[  859.569264][T25426] XFS (loop4): Ending recovery (logdev: internal)
[  859.664872][   T10] usb 8-1: Using ep0 maxpacket: 32
[  859.694137][T22678] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  859.715263][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  859.770989][   T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  859.837466][   T10] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  859.889334][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.933755][   T10] usb 8-1: Product: syz
[  859.960147][   T10] usb 8-1: Manufacturer: syz
[  859.968911][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  859.990058][   T10] usb 8-1: SerialNumber: syz
[  860.041567][   T10] usb 8-1: config 0 descriptor??
[  860.323181][   T10] usb 8-1: USB disconnect, device number 26
[  860.487353][T25477] loop4: detected capacity change from 0 to 128
[  860.613753][T25477] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  860.635614][T25482] loop1: detected capacity change from 0 to 1024
[  860.661768][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.703579][T25482] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  860.750518][T25477] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  860.780541][T25482] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  860.816760][T25482] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  860.872744][T25482] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #32: comm syz.1.5999: iget: special inode unallocated
[  860.898253][T25487] fuse: Bad value for 'fd'
[  860.930315][T25482] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  860.940006][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  860.955680][    C1] EXT4-fs (loop1): initial error at time 1773064885: ext4_get_journal_inode:5863: inode 32
[  860.965750][    C1] EXT4-fs (loop1): last error at time 1773064885: ext4_get_journal_inode:5863: inode 32
[  861.006641][T25482] EXT4-fs (loop1): no journal found
[  861.020976][T25482] EXT4-fs (loop1): can't get journal size
[  861.113559][T25482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  861.202392][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  861.221376][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  861.230549][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  861.245351][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  861.253984][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  861.311685][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.502961][T18980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  861.523537][T22678] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  861.729371][T25507] loop4: detected capacity change from 0 to 512
[  861.787882][T25507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  861.817453][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.881079][T25507] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.6008: bad orphan inode 131083
[  861.928839][T25507] loop4: lost filesystem error report for type 5 error -117
[  861.929996][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  861.943826][    C1] EXT4-fs (loop4): initial error at time 1773064886: ext4_orphan_get:1417
[  861.952408][    C1] EXT4-fs (loop4): last error at time 1773064886: ext4_orphan_get:1417
[  861.966510][T25507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  862.315310][T22678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.614017][   T31] audit: type=1326 audit(1773064887.643:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25534 comm="syz.4.6015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f4ab9c799 code=0x0
[  862.906941][T25527] loop0: detected capacity change from 0 to 32768
[  863.039902][T25527] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  863.071432][T25527] JBD2: Ignoring recovery information on journal
[  863.086136][   T13] bridge_slave_1: left allmulticast mode
[  863.113590][   T13] bridge_slave_1: left promiscuous mode
[  863.119438][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.155065][   T13] bridge_slave_0: left allmulticast mode
[  863.178320][   T13] bridge_slave_0: left promiscuous mode
[  863.190474][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.236355][T25527] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  863.294593][T24695] Bluetooth: hci3: command tx timeout
[  863.732441][T24524] ocfs2: Unmounting device (7,0) on (node local)
[  864.000295][ T5890] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  864.050325][T25546] loop7: detected capacity change from 0 to 32768
[  864.097399][T25546] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  864.166172][T25546] JBD2: Ignoring recovery information on journal
[  864.195282][ T5890] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  864.210151][ T5890] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  864.233212][ T5890] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  864.251540][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.259712][ T5890] usb 5-1: Product: syz
[  864.269855][ T5890] usb 5-1: Manufacturer: syz
[  864.287438][ T5890] usb 5-1: SerialNumber: syz
[  864.309569][ T5890] usb 5-1: config 0 descriptor??
[  864.339279][T25567] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  864.347429][T25567] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  864.415410][T25546] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  864.622500][T25567] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  864.633255][T25567] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  864.744906][T24690] ocfs2: Unmounting device (7,7) on (node local)
[  865.011107][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  865.045502][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  865.074122][   T13] bond0 (unregistering): Released all slaves
[  865.256583][   T13] tipc: Disabling bearer <udp:syz2>
[  865.292205][   T13] tipc: Left network mode
[  865.371022][T24695] Bluetooth: hci3: command tx timeout
[  865.397376][T25494] chnl_net:caif_netlink_parms(): no params data found
[  865.550362][ T5890] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  865.712861][T25578] loop0: detected capacity change from 0 to 32768
[  865.750908][ T5890] dm9601 5-1:0.0 eth7: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 08:8f:5e:ed:24:df
[  865.811184][ T5890] usb 5-1: USB disconnect, device number 16
[  865.816227][T25578] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  865.836511][ T5890] dm9601 5-1:0.0 eth7: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet
[  866.193113][T25578] XFS (loop0): Ending clean mount
[  866.237329][T25578] XFS (loop0): Quotacheck needed: Please wait.
[  866.357086][T25594] loop7: detected capacity change from 0 to 32768
[  866.381504][T25594] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6031 (25594)
[  866.495932][T25594] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  866.510033][T25594] BTRFS info (device loop7): using sha256 checksum algorithm
[  866.727093][T25578] XFS (loop0): Quotacheck: Done.
[  866.765888][T25494] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.844167][T25494] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.877797][T25594] BTRFS info (device loop7): rebuilding free space tree
[  866.920943][T25494] bridge_slave_0: entered allmulticast mode
[  866.971058][T25494] bridge_slave_0: entered promiscuous mode
[  866.984046][T25594] BTRFS info (device loop7): disabling free space tree
[  867.025277][T25594] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  867.046134][T25494] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.065116][T24524] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  867.073640][T25594] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  867.076429][T25494] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.098692][T25494] bridge_slave_1: entered allmulticast mode
[  867.105606][T25594] BTRFS info (device loop7): setting nodatasum
[  867.112443][T25594] BTRFS info (device loop7): setting nodatacow
[  867.123588][T25494] bridge_slave_1: entered promiscuous mode
[  867.129629][T25594] BTRFS info (device loop7): turning off barriers
[  867.150437][T25594] BTRFS info (device loop7): force clearing of disk cache
[  867.451284][T24695] Bluetooth: hci3: command tx timeout
[  867.911528][T24690] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  867.926957][   T13] hsr_slave_0: left promiscuous mode
[  868.039909][   T13] hsr_slave_1: left promiscuous mode
[  868.046357][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  868.120894][T25669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6042'.
[  868.136008][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  868.306149][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  868.352848][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  868.461655][   T13] veth1_macvtap: left promiscuous mode
[  868.530023][   T13] veth0_macvtap: left promiscuous mode
[  868.557485][   T13] veth1_vlan: left promiscuous mode
[  868.584241][   T13] veth0_vlan: left promiscuous mode
[  868.871504][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  868.919025][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  868.985101][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  869.070702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  869.080258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  869.399097][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  869.410286][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  869.426593][T25677] loop1: detected capacity change from 0 to 32768
[  869.510298][T25677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6051 (25677)
[  869.534551][ T5825] Bluetooth: hci3: command tx timeout
[  869.778263][T25700] loop4: detected capacity change from 0 to 2364
[  869.822220][T25700] iso9660: Bad value for 'sbsector'
[  869.845281][T25677] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  869.916335][T25677] BTRFS info (device loop1): using crc32c checksum algorithm
[  870.151062][   T50] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  870.344987][T25677] BTRFS warning (device loop1): couldn't read tree root
[  870.375472][T25724] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6059'.
[  870.379184][T25677] BTRFS warning (device loop1): try to load backup roots slot 1
[  870.439859][   T85] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  870.542570][T25677] BTRFS warning (device loop1): couldn't read tree root
[  870.549597][T25677] BTRFS warning (device loop1): try to load backup roots slot 2
[  870.553050][T25728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6062'.
[  870.588032][   T37] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  870.605410][T25677] BTRFS warning (device loop1): couldn't read tree root
[  870.637886][T25677] BTRFS warning (device loop1): try to load backup roots slot 3
[  870.763541][T25677] BTRFS info (device loop1): checking UUID tree
[  870.781964][T25677] BTRFS info (device loop1): setting nodatasum
[  870.806524][T25677] BTRFS info (device loop1): enabling ssd optimizations
[  870.833094][T25677] BTRFS info (device loop1): turning on flush-on-commit
[  870.840240][T25677] BTRFS info (device loop1): turning on async discard
[  870.857429][T25677] BTRFS info (device loop1): enabling free space tree
[  870.887869][T25677] BTRFS info (device loop1): trying to use backup root at mount time
[  870.912009][T25677] BTRFS info (device loop1): max_inline set to 0
[  871.073332][   T31] audit: type=1800 audit(1773064896.103:180): pid=25677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6051" name="file1" dev="loop1" ino=257 res=0 errno=0
[  871.245774][   T13] team0 (unregistering): Port device team_slave_1 removed
[  871.308156][   T13] team0 (unregistering): Port device team_slave_0 removed
[  871.426736][T18980] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  872.316763][T25494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  872.354703][T25762] loop1: detected capacity change from 0 to 256
[  872.365682][T25494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  872.381103][T25762] exfat: Deprecated parameter 'utf8'
[  872.386519][T25762] exfat: Deprecated parameter 'utf8'
[  872.422392][T25760] loop7: detected capacity change from 0 to 4096
[  872.512157][T25762] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22bddf5f, utbl_chksum : 0xe619d30d)
[  872.726062][T25494] team0: Port device team_slave_0 added
[  872.820327][T25494] team0: Port device team_slave_1 added
[  872.882065][T25768] dummy0: entered promiscuous mode
[  872.924738][T25768] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  872.984399][T25768] debugfs: 'hsr1' already exists in 'hsr'
[  873.010075][T25768] Cannot create hsr debugfs directory
[  873.051087][T25768] hsr1: entered allmulticast mode
[  873.068603][T25768] dummy0: entered allmulticast mode
[  873.101371][T25768] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  873.372442][T14766] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  873.428868][T25494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  873.439114][T25494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  873.503964][T25494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  873.536367][T25494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  873.575980][T25494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  873.593121][T14766] usb 5-1: Using ep0 maxpacket: 32
[  873.625148][T14766] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  873.651335][T14766] usb 5-1: config 0 has no interface number 0
[  873.752358][T25494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  873.770285][T14766] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  873.779396][T14766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.839998][T14766] usb 5-1: Product: syz
[  873.844232][T14766] usb 5-1: Manufacturer: syz
[  873.848846][T14766] usb 5-1: SerialNumber: syz
[  873.883852][T25799] loop0: detected capacity change from 0 to 64
[  873.921047][T14766] usb 5-1: config 0 descriptor??
[  874.015460][   T13] IPVS: stop unused estimator thread 0...
[  874.145798][T25494] hsr_slave_0: entered promiscuous mode
[  874.169227][T25494] hsr_slave_1: entered promiscuous mode
[  874.220252][T25494] debugfs: 'hsr0' already exists in 'hsr'
[  874.227472][T24524] Trying to free block not in datazone
[  874.234850][T25494] Cannot create hsr debugfs directory
[  874.539905][   T31] audit: type=1326 audit(1773064899.563:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25813 comm="syz.7.6090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f451c19c799 code=0x0
[  874.793645][T14766] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  875.013301][T14766] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  875.053392][T14766] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  875.081387][T25830] loop1: detected capacity change from 0 to 1024
[  875.128435][T14766] usb 5-1: USB disconnect, device number 17
[  875.168912][T25830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c01c, mo2=0003]
[  875.181461][T25830] System zones: 0-1, 3-8
[  875.263789][T25830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  875.307575][T25836] loop8: detected capacity change from 0 to 8
[  875.321545][T25830] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  875.343271][ T5897] Dev loop8: unable to read RDB block 8
[  875.345546][T25494] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.350526][ T5897]  loop8: unable to read partition table
[  875.393466][ T5897] loop8: partition table beyond EOD, truncated
[  875.400409][   T31] audit: type=1800 audit(1773064900.423:182): pid=25830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6094" name="file1" dev="loop1" ino=15 res=0 errno=0
[  875.464685][T25836] Dev loop8: unable to read RDB block 8
[  875.480074][   T31] audit: type=1800 audit(1773064900.453:183): pid=25830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6094" name="file2" dev="loop1" ino=16 res=0 errno=0
[  875.503882][T25836]  loop8: unable to read partition table
[  875.522294][T25836] loop8: partition table beyond EOD, truncated
[  875.568115][T25844] loop7: detected capacity change from 0 to 256
[  875.584746][T25836] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  875.604984][T18980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  875.623996][T25844] exfat: Deprecated parameter 'utf8'
[  875.673465][T25844] exfat: Deprecated parameter 'utf8'
[  875.739639][T25844] exfat: Deprecated parameter 'utf8'
[  875.805236][T25844] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  876.019218][T25494] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.392847][T25494] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.397307][T25862] loop4: detected capacity change from 0 to 4096
[  876.485483][   T10] kernel read not supported for file /audio (pid: 10 comm: kworker/0:1)
[  876.502377][T25872] loop1: detected capacity change from 0 to 128
[  876.547133][T25872] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  876.703403][T25494] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.774493][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6109'.
[  877.808064][T25494] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  877.867605][T25494] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  877.952846][T25494] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  878.055570][T25494] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  878.465423][T25931] loop7: detected capacity change from 0 to 2048
[  878.497286][T25931] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2362, location=2362
[  878.542802][T25494] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.555883][T25931] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  878.596841][T25931] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  878.648329][T25494] 8021q: adding VLAN 0 to HW filter on device team0
[  878.662988][T25931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  878.743649][   T31] audit: type=1800 audit(1773064903.773:184): pid=25931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6126" name="file1" dev="loop7" ino=1346 res=0 errno=0
[  878.782737][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.790031][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.874095][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.881362][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  879.319104][T25914] loop4: detected capacity change from 0 to 32768
[  879.405678][T25914] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  879.505260][T25914] XFS (loop4): Ending clean mount
[  879.539589][T25914] XFS (loop4): Quotacheck needed: Please wait.
[  879.632298][T14766] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  879.648845][T25914] XFS (loop4): Quotacheck: Done.
[  879.832050][T14766] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  879.868976][T14766] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  879.892682][T22678] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  879.934449][T25494] 8021q: adding VLAN 0 to HW filter on device batadv0
[  879.945244][T14766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  879.995230][T14766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  880.036301][T14766] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  880.063807][T25935] loop0: detected capacity change from 0 to 32768
[  880.107089][T14766] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  880.116562][T14766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.232988][T14766] usb 2-1: config 0 descriptor??
[  880.243411][T25935] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  880.311975][T25935] XFS (loop0): Ending clean mount
[  880.348135][   T31] audit: type=1800 audit(1773064905.373:185): pid=25935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6127" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  880.684641][T14766] plantronics 0003:047F:FFFF.002C: reserved main item tag 0xd
[  880.820621][T14766] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  880.969815][T14766] IPVS: starting estimator thread 0...
[  881.086801][T14766] usb 2-1: USB disconnect, device number 26
[  881.120079][T25982] IPVS: using max 26 ests per chain, 62400 per kthread
[  881.288665][T24524] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  881.459898][T25981] fido_id[25981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  882.344688][T25494] veth0_vlan: entered promiscuous mode
[  882.445859][T25494] veth1_vlan: entered promiscuous mode
[  882.636613][T26010] loop4: detected capacity change from 0 to 512
[  882.657214][T25494] veth0_macvtap: entered promiscuous mode
[  882.707643][T26010] EXT4-fs (loop4): Test dummy encryption mode enabled
[  882.738697][T25494] veth1_macvtap: entered promiscuous mode
[  882.748047][T26010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  882.846543][T26017] netlink: 4556 bytes leftover after parsing attributes in process `syz.7.6145'.
[  882.874057][T26010] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.6131: bad orphan inode 131083
[  882.895531][T25494] batman_adv: batadv0: Interface activated: batadv_slave_0
[  882.919190][T25494] batman_adv: batadv0: Interface activated: batadv_slave_1
[  882.982284][T26010] loop4: lost filesystem error report for type 5 error -117
[  882.990003][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  883.003879][    C1] EXT4-fs (loop4): initial error at time 1773064908: ext4_orphan_get:1417
[  883.005290][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  883.012503][    C1] EXT4-fs (loop4): last error at time 1773064908: ext4_orphan_get:1417
[  883.101828][T26010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  883.156542][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  883.208958][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  883.325267][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  883.455613][T22678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  883.520336][T14766] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  883.541848][  T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  883.556596][  T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  883.753850][T14766] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  883.779290][T14766] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.801967][T26044] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6153'.
[  883.818111][T14766] usb 8-1: Product: syz
[  883.825110][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  883.840761][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  883.851448][T14766] usb 8-1: Manufacturer: syz
[  883.856091][T14766] usb 8-1: SerialNumber: syz
[  883.906254][T14766] usb 8-1: config 0 descriptor??
[  883.956503][T14766] ch341 8-1:0.0: ch341-uart converter detected
[  884.260816][T26055] loop1: detected capacity change from 0 to 128
[  884.305307][T26055] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  884.361933][T26055] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  884.504995][T26055] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes
[  884.694038][T18980] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  884.738729][T26063] loop4: detected capacity change from 0 to 2048
[  884.842260][T26066] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  884.980223][T26063] NILFS error (device loop4): nilfs_readdir: zero-length directory entry
[  884.991420][T14766] ch341-uart ttyUSB0: failed to read break control: -71
[  885.021594][T14766] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  885.093449][T26063] Remounting filesystem read-only
[  885.115587][T14766] usb 8-1: USB disconnect, device number 27
[  885.164385][T14766] ch341 8-1:0.0: device disconnected
[  885.830983][T26094] sctp: [Deprecated]: syz.1.6167 (pid 26094) Use of struct sctp_assoc_value in delayed_ack socket option.
[  885.830983][T26094] Use struct sctp_sack_info instead
[  886.470224][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  886.572171][ T5941] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  886.674807][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  886.789103][ T5941] usb 1-1: Using ep0 maxpacket: 32
[  886.832917][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  886.874241][ T5941] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  886.951772][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.962042][ T5941] usb 1-1: config 0 has no interface number 0
[  887.036485][ T5941] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  887.049292][    T9] usb 5-1: Product: syz
[  887.113843][    T9] usb 5-1: Manufacturer: syz
[  887.129252][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.180273][    T9] usb 5-1: SerialNumber: syz
[  887.188517][T26131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  887.208291][ T5941] usb 1-1: Product: syz
[  887.260095][ T5941] usb 1-1: Manufacturer: syz
[  887.285726][    T9] cdc_ncm 5-1:1.0: skipping garbage
[  887.317363][ T5941] usb 1-1: SerialNumber: syz
[  887.400450][T26121] loop7: detected capacity change from 0 to 131072
[  887.430482][T26121] F2FS-fs (loop7): invalid crc value
[  887.435305][ T5941] usb 1-1: config 0 descriptor??
[  887.513689][ T5941] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  887.566338][T26121] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  887.584137][T26121] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  887.747423][ T5941] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  887.841955][ T5941] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  888.039230][T26120] loop0: detected capacity change from 0 to 512
[  888.180567][T26120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  888.335724][    T9] cdc_ncm 5-1:1.0: bind() failure
[  888.430167][    T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  888.457182][    T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  888.467026][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  888.467901][T14766] usb 1-1: USB disconnect, device number 15
[  888.523778][    T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  888.572473][T14766] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  888.596716][    T9] usb 5-1: USB disconnect, device number 18
[  888.680341][T14766] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  888.726485][T26163] loop1: detected capacity change from 0 to 1764
[  888.751008][T14766] quatech2 1-1:0.51: device disconnected
[  888.892286][T26133] loop5: detected capacity change from 0 to 32768
[  889.523571][T26172] loop4: detected capacity change from 0 to 1024
[  889.614162][T26172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  889.918644][T24524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  890.005753][T26168] loop7: detected capacity change from 0 to 131072
[  890.047143][T22678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  890.160868][T26168] XFS (loop7): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  890.602936][T26168] XFS (loop7): Starting recovery (logdev: internal)
[  890.721471][T26168] XFS (loop7): Ending recovery (logdev: internal)
[  890.802637][T26168] XFS (loop7): EXPERIMENTAL online shrink feature enabled.  Use at your own risk!
[  891.072727][T24690] XFS (loop7): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  891.361041][T26187] loop5: detected capacity change from 0 to 131072
[  891.422363][T26187] F2FS-fs (loop5): Test dummy encryption mode enabled
[  891.433611][T26187] F2FS-fs (loop5): invalid crc value
[  891.663218][T26187] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  891.700088][T26187] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  892.153276][T26222] loop0: detected capacity change from 0 to 128
[  892.187365][T26224] loop1: detected capacity change from 0 to 64
[  892.204235][T26222] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  892.327456][T26222] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  892.694173][T26232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6210'.
[  892.871180][   T50] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  894.233426][T26281] vivid-000: disconnect
[  894.252455][T26281] vivid-000: reconnect
[  895.110838][T26305] loop0: detected capacity change from 0 to 512
[  895.156469][T26305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  895.291655][T26305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  895.342897][T26305] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  895.441803][T26305] EXT4-fs (loop0): shut down requested (1)
[  895.673898][T24524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  896.319324][T26295] loop7: detected capacity change from 0 to 32768
[  896.430538][T26295] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  896.537653][T26295] XFS (loop7): Ending clean mount
[  896.644307][T26295] XFS (loop7): Quotacheck needed: Please wait.
[  896.756378][T26352] loop0: detected capacity change from 0 to 256
[  896.876023][T26352] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  896.881645][T26295] XFS (loop7): Quotacheck: Done.
[  896.926883][   T31] audit: type=1800 audit(1773064921.953:186): pid=26352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6246" name="file1" dev="loop0" ino=1048888 res=0 errno=0
[  896.998843][T26295] XFS (loop7): User initiated shutdown received.
[  897.019034][T26295] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  897.027424][   T31] audit: type=1800 audit(1773064921.993:187): pid=26352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6246" name="file1" dev="loop0" ino=1048888 res=0 errno=0
[  897.064683][T26295] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  897.159397][T26321] loop5: detected capacity change from 0 to 32768
[  897.202090][T24690] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  897.232522][T26321] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  897.383302][T26321] XFS (loop5): Ending clean mount
[  897.465370][T26321] XFS (loop5): Quotacheck needed: Please wait.
[  897.657815][T26321] XFS (loop5): Quotacheck: Done.
[  897.725665][T26321] XFS (loop5): User initiated shutdown received.
[  897.733999][T26321] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462).  Shutting down filesystem.
[  897.739876][T26352] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  897.767402][T26321] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  897.848657][T26352] FAT-fs (loop0): Filesystem has been set read-only
[  897.880437][T26352] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  897.882539][T25494] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  898.704162][T26400] loop1: detected capacity change from 0 to 1024
[  900.140076][ T5941] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  900.363258][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  900.385360][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  900.415283][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  900.480097][ T5941] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  900.514986][T26456] loop0: detected capacity change from 0 to 512
[  900.523009][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.553551][T26456] EXT4-fs: Ignoring removed oldalloc option
[  900.599751][T26456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  900.617302][ T5941] usb 2-1: config 0 descriptor??
[  900.712317][T26456] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.6275: iget: bad i_size value: 38620345925642
[  900.761532][T26456] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  900.762107][T26456] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.6275: couldn't read orphan inode 15 (err -117)
[  900.771307][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  900.771332][    C1] EXT4-fs (loop0): initial error at time 1773064925: ext4_orphan_get:1391: inode 15
[  900.771372][    C1] EXT4-fs (loop0): last error at time 1773064925: ext4_orphan_get:1391: inode 15
[  900.984461][T26456] loop0: lost filesystem error report for type 5 error -117
[  900.987857][T26456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  901.098267][ T5941] hid_parser_main: 240 callbacks suppressed
[  901.098294][ T5941] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x2
[  901.143199][ T5941] plantronics 0003:047F:FFFF.002D: reserved main item tag 0xd
[  901.235433][ T5941] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  901.421301][ T5941] usb 2-1: USB disconnect, device number 27
[  901.558958][  T178] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap
[  901.663364][T26473] fido_id[26473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  901.696075][  T178] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 616 with error 28
[  901.752757][  T178] EXT4-fs (loop0): This should not happen!! Data will be lost
[  901.752757][  T178] 
[  901.784163][T26482] loop5: detected capacity change from 0 to 256
[  901.800087][  T178] EXT4-fs (loop0): Total free blocks count 0
[  901.806137][  T178] EXT4-fs (loop0): Free/Dirty block details
[  901.846435][T26482] FAT-fs (loop5): Directory bread(block 64) failed
[  901.850596][  T178] EXT4-fs (loop0): free_blocks=0
[  901.857968][  T178] EXT4-fs (loop0): dirty_blocks=616
[  901.873559][T26482] FAT-fs (loop5): Directory bread(block 65) failed
[  901.892949][T26482] FAT-fs (loop5): Directory bread(block 66) failed
[  901.914324][  T178] EXT4-fs (loop0): Block reservation details
[  901.918821][T26482] FAT-fs (loop5): Directory bread(block 67) failed
[  901.938428][T26482] FAT-fs (loop5): Directory bread(block 68) failed
[  901.940938][  T178] EXT4-fs (loop0): i_reserved_data_blocks=616
[  901.958648][T26482] FAT-fs (loop5): Directory bread(block 69) failed
[  901.979035][T26482] FAT-fs (loop5): Directory bread(block 70) failed
[  901.988822][T26482] FAT-fs (loop5): Directory bread(block 71) failed
[  901.998185][T26482] FAT-fs (loop5): Directory bread(block 72) failed
[  902.024639][T26482] FAT-fs (loop5): Directory bread(block 73) failed
[  902.052147][T24524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  902.926570][T26503] loop7: detected capacity change from 0 to 4096
[  903.023360][T26511] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  903.110764][T26503] NILFS error (device loop7): nilfs_lookup: deleted inode referenced: 12
[  903.170038][T26503] Remounting filesystem read-only
[  903.292058][T24690] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[  903.315145][T26518] loop0: detected capacity change from 0 to 128
[  903.376292][T26518] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  903.406714][T26518] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  903.570069][T14766] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  903.698179][T26529] loop5: detected capacity change from 0 to 4095
[  903.740093][T14766] usb 2-1: Using ep0 maxpacket: 16
[  903.748912][T26534] overlayfs: failed to clone upperpath
[  903.772754][T14766] usb 2-1: config 141 has an invalid descriptor of length 0, skipping remainder of the config
[  903.790614][T14766] usb 2-1: config 141 has 0 interfaces, different from the descriptor's value: 1
[  903.843462][T14766] usb 2-1: string descriptor 0 read error: -22
[  903.862439][T14766] usb 2-1: New USB device found, idVendor=05e3, idProduct=1bf0, bcdDevice=ca.00
[  903.866927][T24524] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  903.907806][T14766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.080065][    T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  904.088187][T26539] fuse: Bad value for 'fd'
[  904.195671][T14766] usb 2-1: USB disconnect, device number 28
[  904.418616][ T5825] Bluetooth: hci3: command tx timeout
[  904.607181][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  904.657558][    T9] usb 8-1: config 0 has no interfaces?
[  904.678348][T26552] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6306'.
[  904.680072][    T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  904.707517][T26552] tipc: Invalid UDP bearer configuration
[  904.707585][T26552] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  904.713711][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.757250][    T9] usb 8-1: config 0 descriptor??
[  904.893204][T26559] loop5: detected capacity change from 0 to 512
[  904.914325][T26559] EXT4-fs: Ignoring removed orlov option
[  904.943905][T26559] EXT4-fs: Ignoring removed mblk_io_submit option
[  905.161067][T14766] usb 8-1: USB disconnect, device number 28
[  905.330572][ T5908] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  905.490162][ T5908] usb 5-1: Using ep0 maxpacket: 16
[  905.506319][ T5908] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  905.520281][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.542592][ T5908] usb 5-1: Product: syz
[  905.556074][ T5908] usb 5-1: Manufacturer: syz
[  905.570222][ T5908] usb 5-1: SerialNumber: syz
[  905.923175][T26559] EXT4-fs: Ignoring removed mblk_io_submit option
[  906.050476][ T5908] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  906.074874][T26559] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.6308: corrupted in-inode xattr: e_value size too large
[  906.087809][T26580] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6311'.
[  906.429661][ T5908] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2
[  906.468092][T26565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  906.510038][T26559] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  906.519987][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  906.535623][    C0] EXT4-fs (loop5): initial error at time 1773064931: ext4_iget_extra_inode:5025: inode 15
[  906.537846][T26565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.545682][    C0] EXT4-fs (loop5): last error at time 1773064931: ext4_iget_extra_inode:5025: inode 15
[  906.553986][T26559] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.6308: couldn't read orphan inode 15 (err -117)
[  906.653810][T26559] loop5: lost filesystem error report for type 5 error -117
[  906.678519][ T5908] usb 5-1: USB disconnect, device number 19
[  906.736984][T26559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  906.760611][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  906.974809][T26559] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6308: bg 0: block 464: padding at end of block bitmap is not set
[  907.175066][T25494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  907.459031][T26604] loop7: detected capacity change from 0 to 64
[  907.870048][    T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  907.997868][T26620] dlm: non-version read from control device 122
[  908.100755][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  908.136698][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  908.197253][    T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  908.211358][T26623] loop7: detected capacity change from 0 to 128
[  908.217785][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.227198][T26623] EXT4-fs: Ignoring removed nomblk_io_submit option
[  908.251398][    T9] usb 5-1: config 0 descriptor??
[  908.261146][T26623] EXT4-fs: Ignoring removed nomblk_io_submit option
[  908.298276][T26623] EXT4-fs: Ignoring removed nobh option
[  908.334080][T26595] loop1: detected capacity change from 0 to 32768
[  908.373525][T26623] EXT4-fs (loop7): Test dummy encryption mode enabled
[  908.457699][T26623] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  908.513780][T26623] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  908.611264][T26595] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  908.765610][    T9] isku 0003:1E7D:319C.002E: unknown main item tag 0x0
[  908.774032][T26595] JBD2: Ignoring recovery information on journal
[  908.813962][    T9] isku 0003:1E7D:319C.002E: unknown main item tag 0x0
[  908.839025][    T9] isku 0003:1E7D:319C.002E: unknown main item tag 0x0
[  908.884061][    T9] isku 0003:1E7D:319C.002E: unknown main item tag 0x0
[  908.944765][    T9] isku 0003:1E7D:319C.002E: unknown main item tag 0x0
[  908.998053][    T9] isku 0003:1E7D:319C.002E: unknown main item tag 0x0
[  909.022793][    T9] isku 0003:1E7D:319C.002E: unknown main item tag 0x0
[  909.176622][T26595] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  909.227123][T24690] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  909.260560][    T9] isku 0003:1E7D:319C.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[  909.578173][    T9] usb 5-1: USB disconnect, device number 20
[  909.584385][T26658] (syz.1.6315,26658,1):ocfs2_check_dir_entry:314 ERROR: directory entry (#65: offset=512) too close to end or out-of-bounds
[  909.584476][T26658] (syz.1.6315,26658,1):ocfs2_find_dir_space_el:3539 ERROR: status = -2
[  909.610162][   T31] audit: type=1800 audit(1773064934.613:188): pid=26654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6315" name="file1" dev="loop1" ino=17059 res=0 errno=0
[  909.717616][T26658] (syz.1.6315,26658,1):ocfs2_prepare_dir_for_insert:4335 ERROR: status = -2
[  909.735930][T26651] fido_id[26651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  909.772851][T26658] (syz.1.6315,26658,1):ocfs2_mknod:302 ERROR: status = -2
[  909.790720][T26658] (syz.1.6315,26658,1):ocfs2_mknod:506 ERROR: status = -2
[  909.842753][T26658] (syz.1.6315,26658,1):ocfs2_create:679 ERROR: status = -2
[  909.916566][T26661] loop7: detected capacity change from 0 to 32768
[  909.925013][T26661] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6331 (26661)
[  909.942582][T26661] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  909.952844][T26661] BTRFS info (device loop7): using crc32c checksum algorithm
[  909.960346][T26661] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  910.101858][T26661] BTRFS info (device loop7): rebuilding free space tree
[  910.123329][T26661] BTRFS info (device loop7): disabling free space tree
[  910.130459][T26661] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  910.140256][T26661] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  910.158632][T26661] BTRFS info (device loop7): enabling ssd optimizations
[  910.165752][T26661] BTRFS info (device loop7): turning on async discard
[  910.173076][T26661] BTRFS info (device loop7): enabling disk space caching
[  910.180199][T26661] BTRFS info (device loop7): force clearing of disk cache
[  910.188603][T26661] BTRFS info (device loop7): use zstd compression, level 3
[  910.269257][T18980] ocfs2: Unmounting device (7,1) on (node local)
[  910.390521][ T5833] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  910.409082][T26661] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8)
[  910.570118][ T5833] usb 1-1: Using ep0 maxpacket: 16
[  910.635834][ T5833] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  910.658782][T24690] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  910.659999][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.770067][ T5833] usb 1-1: Product: syz
[  910.800521][ T5833] usb 1-1: Manufacturer: syz
[  910.807522][ T5833] usb 1-1: SerialNumber: syz
[  910.852706][ T5833] usb 1-1: config 0 descriptor??
[  911.321378][ T5833] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  911.391218][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  911.453466][ T5833] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  911.500076][ T5833] usb 1-1: media controller created
[  911.511794][T26713] loop1: detected capacity change from 0 to 256
[  911.630827][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  911.685798][T26709] loop7: detected capacity change from 0 to 4096
[  911.752561][T26709] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  912.232103][ T5833] zl10353_read_register: readreg error (reg=127, ret==0)
[  912.280171][ T5833] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  912.367968][ T5833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  912.428852][ T5825] Bluetooth: hci1: command 0x0406 tx timeout
[  912.441086][ T5833] usb 1-1: USB disconnect, device number 16
[  912.610994][ T5833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  913.206981][T26746] loop0: detected capacity change from 0 to 512
[  913.310858][T26746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  913.474649][T26746] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  913.755185][T24524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  914.153108][T26759] loop4: detected capacity change from 0 to 8192
[  914.580807][T26744] loop7: detected capacity change from 0 to 32768
[  914.656849][T26744] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  914.716469][T26744] XFS (loop7): Ending clean mount
[  914.737914][T26785] netlink: 'syz.6.6367': attribute type 1 has an invalid length.
[  914.781572][T26785] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6367'.
[  914.830271][   T30] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  915.014815][T26768] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  915.040877][   T30] usb 5-1: Using ep0 maxpacket: 16
[  915.051645][T24690] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  915.072737][   T30] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  915.096310][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.114713][   T30] usb 5-1: Product: syz
[  915.119336][   T30] usb 5-1: Manufacturer: syz
[  915.130942][   T30] usb 5-1: SerialNumber: syz
[  915.214364][   T30] r8152-cfgselector 5-1: Unknown version 0x0000
[  915.240365][   T30] r8152-cfgselector 5-1: config 0 descriptor??
[  915.375356][T26799] loop0: detected capacity change from 0 to 64
[  915.482499][T26764] loop5: detected capacity change from 0 to 40427
[  915.551218][T26764] F2FS-fs (loop5): build fault injection rate: 771
[  915.634638][T26764] F2FS-fs (loop5): invalid crc value
[  915.771164][   T30] r8152-cfgselector 5-1: USB disconnect, device number 21
[  916.015865][T26764] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  916.120187][T26764] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  916.301395][T26764] F2FS-fs (loop5): Unexpected flush for atomic writes: ino=10, npages=2
[  916.344829][T26764] bio_check_eod: 107 callbacks suppressed
[  916.344852][T26764] syz.5.6364: attempt to access beyond end of device
[  916.344852][T26764] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  916.605524][T25494] syz-executor: attempt to access beyond end of device
[  916.605524][T25494] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  916.677910][T25494] CPU: 0 UID: 0 PID: 25494 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  916.677954][T25494] Tainted: [L]=SOFTLOCKUP
[  916.677964][T25494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  916.677980][T25494] Call Trace:
[  916.677991][T25494]  <TASK>
[  916.678003][T25494]  dump_stack_lvl+0xe8/0x150
[  916.678048][T25494]  f2fs_handle_critical_error+0x37c/0x540
[  916.678089][T25494]  f2fs_write_end_io+0xcdb/0xff0
[  916.678149][T25494]  __submit_merged_bio+0x256/0x700
[  916.678189][T25494]  __submit_merged_write_cond+0x3c9/0x4e0
[  916.678229][T25494]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  916.678276][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.678319][T25494]  f2fs_write_data_pages+0x2975/0x35e0
[  916.678397][T25494]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  916.678448][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.678485][T25494]  ? css_rstat_updated+0x23a/0x530
[  916.678545][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.678577][T25494]  ? rcu_is_watching+0x15/0xb0
[  916.678615][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.678645][T25494]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  916.678703][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.678739][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.678770][T25494]  ? __lock_acquire+0x6b5/0x2cf0
[  916.678810][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.678856][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.678891][T25494]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  916.678928][T25494]  do_writepages+0x32e/0x550
[  916.678969][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.679002][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.679037][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.679067][T25494]  ? do_raw_spin_unlock+0xf5/0x210
[  916.679101][T25494]  filemap_fdatawrite+0x1e9/0x2f0
[  916.679144][T25494]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  916.679226][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.679261][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.679301][T25494]  ? do_raw_spin_unlock+0xf5/0x210
[  916.679333][T25494]  f2fs_sync_dirty_inodes+0x30e/0x860
[  916.679388][T25494]  f2fs_write_checkpoint+0x9df/0x26a0
[  916.679464][T25494]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  916.679551][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.679581][T25494]  ? kfree+0x1c1/0x630
[  916.679605][T25494]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  916.679655][T25494]  kill_f2fs_super+0x314/0x720
[  916.679698][T25494]  ? __pfx_kill_f2fs_super+0x10/0x10
[  916.679746][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.679776][T25494]  ? lockdep_hardirqs_on+0x7a/0x110
[  916.679816][T25494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  916.679862][T25494]  deactivate_locked_super+0xbc/0x130
[  916.679912][T25494]  cleanup_mnt+0x437/0x4d0
[  916.679939][T25494]  ? _raw_spin_unlock_irq+0x23/0x50
[  916.679982][T25494]  task_work_run+0x1d9/0x270
[  916.680016][T25494]  ? __pfx_task_work_run+0x10/0x10
[  916.680057][T25494]  exit_to_user_mode_loop+0xed/0x480
[  916.680087][T25494]  ? rcu_is_watching+0x15/0xb0
[  916.680128][T25494]  do_syscall_64+0x32d/0xf80
[  916.680152][T25494]  ? trace_irq_disable+0x3b/0x150
[  916.680191][T25494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.680224][T25494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.680255][T25494] RIP: 0033:0x7fc357d9d9d7
[  916.680279][T25494] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  916.680302][T25494] RSP: 002b:00007fffc01ba778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  916.680330][T25494] RAX: 0000000000000000 RBX: 00007fc357e31f90 RCX: 00007fc357d9d9d7
[  916.680349][T25494] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc01ba830
[  916.680366][T25494] RBP: 00007fffc01ba830 R08: 00007fffc01bb830 R09: 00000000ffffffff
[  916.680386][T25494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc01bb8c0
[  916.680403][T25494] R13: 00007fc357e31f90 R14: 00000000000dfbdd R15: 00007fffc01bb900
[  916.680444][T25494]  </TASK>
[  917.313829][T25494] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  917.455243][T26846] loop4: detected capacity change from 0 to 512
[  917.496696][T26846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  917.622108][T26846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  917.776592][T26846] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  917.961868][   T31] audit: type=1800 audit(1773064942.993:189): pid=26846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6389" name="file2" dev="loop4" ino=16 res=0 errno=0
[  918.042814][T26863] loop1: detected capacity change from 0 to 128
[  918.179074][T26868] loop0: detected capacity change from 0 to 64
[  918.263583][T26863] syz.1.6393: attempt to access beyond end of device
[  918.263583][T26863] loop1: rw=2049, sector=138, nr_sectors = 98 limit=128
[  918.277945][T22678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  918.503248][T26869] syz.1.6393: attempt to access beyond end of device
[  918.503248][T26869] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128
[  918.860764][   T30] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  919.062402][   T30] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  919.101933][T26890] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  919.109779][   T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  919.172576][   T30] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  919.207951][   T30] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  919.227816][   T30] usb 6-1: Manufacturer: syz
[  919.269722][   T30] usb 6-1: config 0 descriptor??
[  919.440688][T26899] input: syz1 as /devices/virtual/input/input41
[  919.590086][   T30] rc_core: IR keymap rc-hauppauge not found
[  919.596051][   T30] Registered IR keymap rc-empty
[  919.654628][   T30] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  919.712383][   T30] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40
[  919.807341][    C1] igorplugusb 6-1:0.0: Error: urb status = -32
[  919.983530][   T30] usb 6-1: USB disconnect, device number 12
[  920.009651][T26916] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  920.064104][T26922] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  920.189878][T26924] netdevsim netdevsim6 : renamed from netdevsim0 (while UP)
[  920.398643][T26928] loop7: detected capacity change from 0 to 512
[  920.418366][T26928] EXT4-fs: Ignoring removed i_version option
[  920.477540][T26928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  920.670053][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  920.881868][    T9] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  920.928915][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204
[  920.932985][T24690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  920.989817][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  921.056913][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  921.099502][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  921.165994][    T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  921.208563][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.250472][   T30] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  921.281095][    T9] usb 2-1: config 0 descriptor??
[  921.420341][   T30] usb 1-1: Using ep0 maxpacket: 16
[  921.443622][   T30] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  921.500168][   T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  921.549795][   T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  921.613190][   T30] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  921.660292][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.714267][   T30] usb 1-1: Product: syz
[  921.718712][   T30] usb 1-1: Manufacturer: syz
[  921.750194][   T30] usb 1-1: SerialNumber: syz
[  921.804763][    T9] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.002F/input/input42
[  922.047169][    T9] uclogic 0003:28BD:0909.002F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0
[  922.259085][    T9] usb 2-1: USB disconnect, device number 29
[  922.293559][   T30] usb 1-1: 0:2 : does not exist
[  922.485340][T26990] loop4: detected capacity change from 0 to 4096
[  922.491495][T26996] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6435'.
[  922.526125][T26997] binder: 26994:26997 ioctl c018620c 200000000000 returned -22
[  922.533918][T26990] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  922.558641][T26988] fido_id[26988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  922.586246][T26990] NILFS (loop4): mounting unchecked fs
[  922.747899][T26990] NILFS (loop4): recovery complete
[  922.765455][ T5897] udevd[5897]: incorrect nilfs2 checksum on /dev/loop4
[  922.790773][T27001] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  922.893200][T27004] loop5: detected capacity change from 0 to 512
[  922.903022][T27008] loop1: detected capacity change from 0 to 64
[  923.051982][T27004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  923.099644][T27004] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  923.198473][T27019] loop1: detected capacity change from 0 to 256
[  923.206798][   T30] usb 1-1: USB disconnect, device number 17
[  923.316218][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  923.434580][T25494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.682564][T27029] tap0: tun_chr_ioctl cmd 1074025675
[  923.703950][T27029] tap0: persist enabled
[  923.717438][T27029] tap0: tun_chr_ioctl cmd 1074025675
[  923.731597][T27029] tap0: persist enabled
[  923.989045][T27046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6452'.
[  924.402313][   T30] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  924.600400][   T30] usb 6-1: Using ep0 maxpacket: 8
[  924.653906][   T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  924.699041][   T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  924.750656][   T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  924.804119][   T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  924.877088][   T30] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  924.965020][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.013317][   T30] hub 6-1:1.0: bad descriptor, ignoring hub
[  925.019814][   T30] hub 6-1:1.0: probe with driver hub failed with error -5
[  925.064191][   T30] cdc_wdm 6-1:1.0: skipping garbage
[  925.086663][   T30] cdc_wdm 6-1:1.0: skipping garbage
[  925.111378][   T30] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  925.130177][   T30] cdc_wdm 6-1:1.0: Unknown control protocol
[  925.203921][T27085] loop7: detected capacity change from 0 to 164
[  925.304197][T27085] iso9660: Corrupted directory entry in block 2 of inode 1920
[  925.835447][ T5941] usb 6-1: USB disconnect, device number 13
[  925.850583][T27051] cdc_wdm 6-1:1.0: Error autopm - -16
[  926.023974][ T5941] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  926.225178][ T5941] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  926.272833][ T5941] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  926.305506][ T5941] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  926.351913][ T5941] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  926.412968][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.437398][T27090] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  926.452653][ T5941] hub 6-1:1.0: bad descriptor, ignoring hub
[  926.474815][ T5941] hub 6-1:1.0: probe with driver hub failed with error -5
[  926.534448][ T5941] cdc_wdm 6-1:1.0: skipping garbage
[  926.553341][ T5941] cdc_wdm 6-1:1.0: skipping garbage
[  926.583840][ T5941] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  926.604431][ T5941] cdc_wdm 6-1:1.0: Unknown control protocol
[  926.674847][ T5941] usb 6-1: USB disconnect, device number 14
[  926.857132][T27123] loop1: detected capacity change from 0 to 128
[  926.928031][T27123] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  927.030826][T27123] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  927.215855][T27111] loop0: detected capacity change from 0 to 32768
[  927.223756][T27131] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[  927.282015][T18980] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  927.301460][T27111] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  927.466230][T27111] XFS (loop0): Ending clean mount
[  927.550493][T27111] XFS (loop0): Quotacheck needed: Please wait.
[  927.824866][T27111] XFS (loop0): Quotacheck: Done.
[  927.913140][T27154] loop5: detected capacity change from 0 to 1024
[  927.980420][T27154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  928.005242][T24524] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  928.072632][T27154] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  928.093318][T27154] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  928.107607][T27154] EXT4-fs (loop5): This should not happen!! Data will be lost
[  928.107607][T27154] 
[  928.139510][T27154] EXT4-fs (loop5): Total free blocks count 0
[  928.146221][T27154] EXT4-fs (loop5): Free/Dirty block details
[  928.152820][T27154] EXT4-fs (loop5): free_blocks=68451041280
[  928.158991][T27154] EXT4-fs (loop5): dirty_blocks=80
[  928.164946][T27154] EXT4-fs (loop5): Block reservation details
[  928.171685][T27154] EXT4-fs (loop5): i_reserved_data_blocks=5
[  928.331154][ T1131] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  928.450021][ T5890] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  928.617668][T27166] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  928.634209][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short
[  928.656693][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  928.680503][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  928.700420][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.711903][ T5890] usb 5-1: Product: syz
[  928.748987][T27147] loop1: detected capacity change from 0 to 32768
[  928.750102][ T5890] usb 5-1: Manufacturer: syz
[  928.782569][ T5890] usb 5-1: SerialNumber: syz
[  928.830147][T27067] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  928.846347][ T5890] usb 5-1: bad CDC descriptors
[  928.920507][T27147] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  928.951328][T27171] loop0: detected capacity change from 0 to 2048
[  928.977993][T27173] loop7: detected capacity change from 0 to 1024
[  929.002303][T27171] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  929.055026][T27067] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  929.055214][ T5890] usb 5-1: USB disconnect, device number 22
[  929.093781][T27171] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  929.103651][T27067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.116355][T27173] hfsplus: invalid file type 0177777 for inode 2
[  929.124608][T27171] UDF-fs: Scanning with blocksize 512 failed
[  929.167168][T27173] hfsplus: failed to load root directory
[  929.200383][T27067] usb 6-1: config 0 descriptor??
[  929.239414][T27147] XFS (loop1): Ending clean mount
[  929.255762][T27171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  929.276808][T27067] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  929.711168][T18980] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  929.812110][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6499'.
[  929.947341][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  929.958626][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  929.966356][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  930.033228][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  930.060851][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  930.071855][T27067] gspca_stv06xx: I2C: Read error writing address: -71
[  930.077833][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  930.122495][T27067] usb 6-1: USB disconnect, device number 15
[  930.152735][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  930.167311][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  930.193080][ T5941] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  930.230135][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  930.280322][ T5890] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0
[  930.318976][ T5890] hid-generic 00A0:0006:0003.0030: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  930.411268][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  930.427968][ T5941] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  930.472184][ T5941] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6
[  930.492074][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.504499][ T5941] usb 5-1: Product: syz
[  930.508691][ T5941] usb 5-1: Manufacturer: syz
[  930.535709][T27208] loop0: detected capacity change from 0 to 512
[  930.546232][ T5941] usb 5-1: SerialNumber: syz
[  930.565163][ T5941] usb 5-1: config 0 descriptor??
[  930.662219][T27208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  930.740559][T27067] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  930.817272][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  930.823955][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  930.839300][ T5941] usb 5-1: USB disconnect, device number 23
[  930.929898][T27067] usb 8-1: Using ep0 maxpacket: 16
[  930.958891][T27067] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  930.987680][T27067] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  931.005291][T24524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.016674][T27067] usb 8-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  931.048402][T27067] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.092108][T27067] usb 8-1: config 0 descriptor??
[  931.417382][T27226] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  931.527696][T27067] pantherlord 0003:0810:0002.0031: item fetching failed at offset 13/41
[  931.583954][T27067] pantherlord 0003:0810:0002.0031: parse failed
[  931.620118][T27067] pantherlord 0003:0810:0002.0031: probe with driver pantherlord failed with error -22
[  931.676454][T27229] loop0: detected capacity change from 0 to 128
[  931.735015][T27067] usb 8-1: USB disconnect, device number 29
[  931.756574][T27229] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  931.808624][T27229] hpfs: filesystem error: improperly stopped
[  931.831181][T27229] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  931.878413][T27236] loop5: detected capacity change from 0 to 4096
[  931.886843][T27229] hpfs: You really don't want any checks? You are crazy...
[  931.948308][T27236] EXT4-fs: Ignoring removed mblk_io_submit option
[  931.986937][T27236] EXT4-fs (loop5): Test dummy encryption mode enabled
[  932.000639][T27229] hpfs: hpfs_map_sector(): read error
[  932.006388][T27229] hpfs: code page support is disabled
[  932.057334][T27229] hpfs: hpfs_map_4sectors(): unaligned read
[  932.075141][T27229] hpfs: hpfs_map_4sectors(): unaligned read
[  932.078416][T27236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  932.097742][T27229] hpfs: filesystem error: unable to find root dir
[  932.197597][T27229] hpfs: hpfs_map_4sectors(): unaligned read
[  932.234426][T27229] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  932.598779][T25494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.960489][T27259] loop0: detected capacity change from 0 to 32768
[  934.993215][T27259] xfs: Deprecated parameter 'attr2'
[  935.002865][T27267] loop1: detected capacity change from 0 to 32768
[  935.029884][T27259] XFS: attr2 mount option is deprecated.
[  935.139675][T27267] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  935.249316][T27259] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  935.256972][T27267] XFS (loop1): Ending clean mount
[  935.303633][T27267] XFS (loop1): Quotacheck needed: Please wait.
[  935.548031][T27267] XFS (loop1): Quotacheck: Done.
[  935.587203][T27259] XFS (loop0): Ending clean mount
[  935.604597][T27259] XFS (loop0): Quotacheck needed: Please wait.
[  935.791310][T27259] XFS (loop0): Quotacheck: Done.
[  935.993850][T27322] loop5: detected capacity change from 0 to 2048
[  936.081969][T18980] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  936.136784][T24524] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  936.256647][T27322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  936.440083][ T5908] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  936.696572][T25494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  936.712147][ T5908] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  936.760401][ T5908] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  936.870497][ T5908] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  936.940024][ T5908] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  937.064082][ T5908] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  938.000158][T27348] loop1: detected capacity change from 0 to 131072
[  938.041908][ T5908] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  938.091128][T27348] F2FS-fs (loop1): invalid crc value
[  938.130534][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  938.219841][ T5908] usb 8-1: Product: syz
[  938.233973][ T5908] usb 8-1: Manufacturer: syz
[  938.350017][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  938.440891][T27348] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  938.491831][ T5908] cdc_wdm 8-1:1.0: skipping garbage
[  938.497129][ T5908] cdc_wdm 8-1:1.0: skipping garbage
[  938.525869][T27348] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  938.567049][   T10] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  938.590820][ T5908] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  938.596882][ T5908] cdc_wdm 8-1:1.0: Unknown control protocol
[  938.618336][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  938.740660][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  938.786276][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  938.845436][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  938.854604][T27348] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  938.928760][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  938.970065][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  939.022066][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  939.084842][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  939.143788][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  939.244547][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  939.290550][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  939.342616][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  939.384921][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  939.451511][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  939.524359][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  939.576382][ T5908] usb 8-1: USB disconnect, device number 30
[  939.612824][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  939.656851][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  939.717175][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  939.762145][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  939.795349][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  939.865124][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  939.889158][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  939.949101][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  940.020056][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  940.069316][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  940.110124][   T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  940.118547][   T10] usb 1-1: Product: syz
[  940.199988][   T10] usb 1-1: Manufacturer: syz
[  940.217567][   T10] usb 1-1: SerialNumber: syz
[  940.247339][   T10] usb 1-1: config 0 descriptor??
[  940.295829][T27375] 9pnet: p9_errstr2errno: server reported unknown error 
[  940.319692][   T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  941.090961][T27389] loop5: detected capacity change from 0 to 32768
[  941.109116][T27389] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6554 (27389)
[  941.149418][T27389] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  941.160055][T27389] BTRFS info (device loop5): using crc32c checksum algorithm
[  941.167636][T27389] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  941.312552][    C0] usb 1-1: yurex_control_callback - control failed: -71
[  941.313050][   T30] usb 1-1: USB disconnect, device number 18
[  941.432275][T27389] BTRFS info (device loop5): rebuilding free space tree
[  941.434120][   T30] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  941.518009][T27389] BTRFS info (device loop5): disabling free space tree
[  941.526631][T27389] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  941.536544][T27389] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  941.561093][T27392] loop7: detected capacity change from 0 to 4096
[  941.678131][T27389] BTRFS info (device loop5): enabling ssd optimizations
[  941.686937][T27389] BTRFS info (device loop5): turning on async discard
[  941.694030][T27389] BTRFS info (device loop5): enabling disk space caching
[  941.701363][T27389] BTRFS info (device loop5): force clearing of disk cache
[  941.708611][T27389] BTRFS info (device loop5): use zstd compression, level 3
[  942.218466][T25494] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  942.311104][   T30] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  942.615870][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  942.660018][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  942.719664][   T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  942.844361][   T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  942.889418][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.981590][   T30] usb 5-1: config 0 descriptor??
[  943.156540][T24695] Bluetooth: hci4: command 0x0406 tx timeout
[  943.659258][   T30] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  944.847283][T27468] loop0: detected capacity change from 0 to 32768
[  944.856727][    C0] plantronics 0003:047F:FFFF.0032: usb_submit_urb(ctrl) failed: -1
[  944.884423][T27067] usb 5-1: USB disconnect, device number 24
[  945.006667][T27467] loop5: detected capacity change from 0 to 2048
[  945.687670][T27469] loop1: detected capacity change from 0 to 131072
[  945.765901][T27469] F2FS-fs (loop1): invalid crc value
[  945.792771][T27468] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  945.924482][T27469] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  945.949562][T27469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  945.978833][T27467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  945.979752][T27468] XFS (loop0): Starting recovery (logdev: internal)
[  946.039565][T27468] XFS (loop0): Ending recovery (logdev: internal)
[  946.206515][T27468] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  946.230065][T27468] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  946.247771][T27468] XFS (loop0): Unmount and run xfs_repair
[  946.253609][T27468] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  946.261067][T27468] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[  946.270127][T27468] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[  946.278998][T27468] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[  946.288058][T27468] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[  946.297005][T27468] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[  946.305939][T27468] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  946.314852][T27468] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  946.323923][T27468] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  946.335230][T27468] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74
[  946.366887][T27468] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x950 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  946.382286][T27468] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  946.516416][T25494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  946.550667][T24524] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  946.630157][T27493] loop7: detected capacity change from 0 to 1024
[  946.939499][T27493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  947.300647][ T5890] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  947.351203][T24690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  947.422858][T27511] loop5: detected capacity change from 0 to 65
[  947.530683][T27511] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  947.552425][ T5890] usb 5-1: Using ep0 maxpacket: 8
[  947.614103][ T5890] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  947.641457][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  947.671880][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  947.740409][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  947.783474][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  947.797791][T27514] loop7: detected capacity change from 0 to 2048
[  947.856575][ T5890] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  947.890035][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.920384][T27514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  948.260110][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  948.988979][T20176] usb 5-1: USB disconnect, device number 25
[  949.050360][ T5890] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  949.196933][T27546] vxcan1: entered allmulticast mode
[  949.232109][T27547] netem: incorrect ge model size
[  949.248682][ T5890] usb 2-1: Using ep0 maxpacket: 8
[  949.260784][T27547] netem: change failed
[  949.286823][ T5890] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  949.305469][T27549] vxcan1: left allmulticast mode
[  949.313870][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  949.322908][ T5890] usb 2-1: Product: syz
[  949.327378][ T5890] usb 2-1: Manufacturer: syz
[  949.337600][ T5890] usb 2-1: SerialNumber: syz
[  949.368576][ T5890] usb 2-1: config 0 descriptor??
[  949.402418][ T5890] gspca_main: sq905-2.14.0 probing 2770:9120
[  950.413494][ T5890] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  950.439872][ T5890] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[  950.455546][ T5890] usb 2-1: USB disconnect, device number 30
[  951.032545][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  951.199754][T27596] loop5: detected capacity change from 0 to 1024
[  951.202061][   T10] usb 1-1: Using ep0 maxpacket: 8
[  951.298435][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  951.340778][   T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  951.373383][T27596] hfsplus: b-tree write err: -5, ino 2
[  951.387311][T27596] hfsplus: bad catalog entry type
[  951.439989][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.504538][   T10] usb 1-1: config 0 descriptor??
[  951.603285][   T12] hfsplus: b-tree write err: -5, ino 25
[  951.643793][   T12] hfsplus: b-tree write err: -5, ino 4
[  951.681155][   T12] hfsplus: b-tree write err: -5, ino 2
[  951.692003][   T12] hfsplus: b-tree write err: -5, ino 26
[  951.777627][   T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  951.926230][T27610] loop5: detected capacity change from 0 to 512
[  951.963697][T27610] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  952.038488][T27610] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6610: invalid indirect mapped block 6684672 (level 2)
[  952.142312][T27610] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  952.149955][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  952.165623][    C0] EXT4-fs (loop5): initial error at time 1773064977: ext4_free_branches:1023: inode 11
[  952.175398][    C0] EXT4-fs (loop5): last error at time 1773064977: ext4_free_branches:1023: inode 11
[  952.234135][T27610] EXT4-fs (loop5): 1 truncate cleaned up
[  952.257745][T27610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  952.315917][ T5941] usb 1-1: USB disconnect, device number 19
[  952.368634][T27621] fuse: Bad value for 'fd'
[  952.485053][T25494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  953.477235][T27659] loop7: detected capacity change from 0 to 512
[  953.692638][T27659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  953.725118][T27670] netlink: 'syz.5.6633': attribute type 34 has an invalid length.
[  953.860328][T27659] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  953.991555][   T31] audit: type=1800 audit(1773064979.009:190): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6626" name="file2" dev="loop7" ino=16 res=0 errno=0
[  954.099672][T27680] loop5: detected capacity change from 0 to 1024
[  954.145685][T27680] EXT4-fs: Ignoring removed orlov option
[  954.165081][T24690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.229794][T27680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  954.514586][T25494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.869809][T27700] loop5: detected capacity change from 0 to 164
[  954.894513][T27698] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526
[  954.939810][T27673] loop4: detected capacity change from 0 to 32768
[  954.996959][T27700] iso9660: Corrupted directory entry in block 2 of inode 1920
[  955.311036][T22678] ERROR: (device loop4): diFree: numfree > numinos
[  955.311036][T22678] 
[  955.407436][T22678] read_mapping_page failed!
[  955.430838][T22678] ERROR: (device loop4): txCommit: 
[  955.430838][T22678] 
[  955.494658][T22678] read_mapping_page failed!
[  955.499217][T22678] ERROR: (device loop4): txCommit: 
[  955.499217][T22678] 
[  955.928079][T22678] ERROR: (device loop4): diFree: numfree > numinos
[  955.928079][T22678] 
[  955.949737][T27690] loop7: detected capacity change from 0 to 32768
[  956.005661][  T110] ERROR: (device loop4): diFree: numfree > numinos
[  956.005661][  T110] 
[  956.370057][T20176] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  956.560806][T20176] usb 2-1: Using ep0 maxpacket: 8
[  956.584387][T20176] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  956.606439][T20176] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  956.676425][T20176] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  956.741281][T20176] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  956.799170][T20176] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  956.840004][T20176] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  956.914189][T20176] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  956.967523][T20176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.222196][T20176] usb 2-1: usb_control_msg returned -32
[  957.227869][T20176] usbtmc 2-1:16.0: can't read capabilities
[  957.682477][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  957.705127][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  957.716376][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  957.730122][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  957.738437][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  957.767895][   T13] bridge_slave_1: left allmulticast mode
[  957.794414][   T13] bridge_slave_1: left promiscuous mode
[  957.800596][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.818648][   T13] bridge_slave_0: left allmulticast mode
[  957.824665][   T13] bridge_slave_0: left promiscuous mode
[  957.834983][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.109673][T27770] loop7: detected capacity change from 0 to 131072
[  959.150224][T27770] F2FS-fs (loop7): Invalid log sectorsize (67108873)
[  959.157132][T27770] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  959.167179][T27770] F2FS-fs (loop7): invalid crc value
[  959.250318][T27770] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  959.270530][T27770] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  959.277749][T27770] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  959.391472][ T5908] usb 2-1: USB disconnect, device number 31
[  959.855020][T24695] Bluetooth: hci1: command tx timeout
[  959.965348][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  960.004515][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  960.040471][   T13] bond0 (unregistering): Released all slaves
[  960.075453][T27802] loop1: detected capacity change from 0 to 256
[  960.148225][T27802] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  960.268551][T27807] loop7: detected capacity change from 0 to 2048
[  960.399423][T27810] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  961.033826][T27827] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  961.264276][   T13] hsr_slave_0: left promiscuous mode
[  961.305925][   T13] hsr_slave_1: left promiscuous mode
[  961.339795][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  961.382933][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  961.934437][T24695] Bluetooth: hci1: command tx timeout
[  962.297664][   T13] team0 (unregistering): Port device team_slave_1 removed
[  962.339673][   T13] team0 (unregistering): Port device team_slave_0 removed
[  962.772267][T27816] syzkaller1: entered promiscuous mode
[  962.778098][T27816] syzkaller1: entered allmulticast mode
[  963.028854][    C1] ------------[ cut here ]------------
[  963.034424][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  963.044322][    C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: syz-executor/27760
[  963.055319][    C1] Modules linked in:
[  963.059265][    C1] CPU: 1 UID: 0 PID: 27760 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  963.070497][    C1] Tainted: [L]=SOFTLOCKUP
[  963.074845][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  963.084986][    C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  963.091330][    C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  963.111036][    C1] RSP: 0018:ffffc90000a08618 EFLAGS: 00010246
[  963.117140][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  963.125183][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022d220
[  963.133224][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  963.141269][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888035b5a7a8
[  963.149295][    C1] R13: 0000000000000000 R14: ffffffff9022d220 R15: ffff888035ac3138
[  963.157340][    C1] FS:  0000555580e34500(0000) GS:ffff888125563000(0000) knlGS:0000000000000000
[  963.166357][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  963.173013][    C1] CR2: 00007fc357e4eaeb CR3: 0000000038ea6000 CR4: 0000000000350ef0
[  963.181057][    C1] Call Trace:
[  963.184358][    C1]  <IRQ>
[  963.187240][    C1]  rate_control_send_low+0x1a7/0x7b0
[  963.192619][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.198294][    C1]  ? trace_csd_function_exit+0x81/0x210
[  963.203917][    C1]  rate_control_get_rate+0x20b/0x5d0
[  963.209278][    C1]  ieee80211_beacon_get_finish+0x3af/0x6f0
[  963.215166][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.220888][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  963.227261][    C1]  ? __ieee80211_beacon_add_tim+0x1180/0x15a0
[  963.233420][    C1]  ? ieee80211_beacon_get_ap+0x8cb/0x2040
[  963.239209][    C1]  ieee80211_beacon_get_ap+0x196a/0x2040
[  963.244967][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  963.251096][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.256780][    C1]  ? lock_acquire+0xf0/0x2e0
[  963.260414][T27873] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6695'.
[  963.261444][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.276398][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  963.282038][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  963.287621][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  963.293297][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  963.298806][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  963.304956][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.310939][    C1]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  963.316546][    C1]  ? lock_acquire+0xf0/0x2e0
[  963.321213][    C1]  __iterate_interfaces+0x2ab/0x590
[  963.326460][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  963.332617][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  963.339940][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  963.346077][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  963.353196][    C1]  mac80211_hwsim_beacon+0xbb/0x180
[  963.358442][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  963.364351][    C1]  __hrtimer_run_queues+0x53a/0xcc0
[  963.369712][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  963.375533][    C1]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  963.381771][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.387468][    C1]  hrtimer_run_softirq+0x182/0x5a0
[  963.392741][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.398420][    C1]  handle_softirqs+0x22a/0x870
[  963.403296][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  963.408128][    C1]  __irq_exit_rcu+0x5f/0x150
[  963.412848][    C1]  irq_exit_rcu+0x9/0x30
[  963.417232][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  963.422974][    C1]  </IRQ>
[  963.425926][    C1]  <TASK>
[  963.428874][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  963.434956][    C1] RIP: 0010:finish_task_switch+0x245/0x920
[  963.440864][    C1] Code: 00 00 48 85 db 0f 85 e8 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 85 89 1b 0a e8 b0 8e 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 70 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  963.460565][    C1] RSP: 0018:ffffc9000dd37698 EFLAGS: 00000206
[  963.466679][    C1] RAX: 000000000000257b RBX: 0000000000000000 RCX: 0000000080000001
[  963.474743][    C1] RDX: 0000000000000006 RSI: ffffffff8def4b2d RDI: ffffffff8c27b380
[  963.482785][    C1] RBP: ffffc9000dd376f0 R08: ffffffff90118bb7 R09: 1ffffffff2023176
[  963.490921][    C1] R10: dffffc0000000000 R11: fffffbfff2023177 R12: ffff888032753d00
[  963.498939][    C1] R13: dffffc0000000000 R14: ffff88802eefbd00 R15: ffff8880b873b918
[  963.507060][    C1]  ? finish_task_switch+0x240/0x920
[  963.512350][    C1]  __schedule+0x15e5/0x52d0
[  963.516920][    C1]  ? kasan_save_track+0x4f/0x80
[  963.521946][    C1]  ? ops_init+0x35c/0x5c0
[  963.526339][    C1]  ? setup_net+0x118/0x340
[  963.530897][    C1]  ? copy_net_ns+0x50e/0x730
[  963.535535][    C1]  ? create_new_namespaces+0x3e7/0x6a0
[  963.541093][    C1]  ? unshare_nsproxy_namespaces+0x11a/0x160
[  963.547040][    C1]  ? __pfx___schedule+0x10/0x10
[  963.552016][    C1]  ? schedule+0x90/0x360
[  963.556303][    C1]  schedule+0x164/0x360
[  963.560571][    C1]  schedule_preempt_disabled+0x13/0x30
[  963.566078][    C1]  __mutex_lock+0x7fe/0x1300
[  963.570779][    C1]  ? __mutex_lock+0x5ac/0x1300
[  963.575578][    C1]  ? register_netdev+0x18/0x60
[  963.580399][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  963.585451][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.591215][    C1]  ? alloc_netdev_mqs+0xe2a/0x11b0
[  963.596396][    C1]  register_netdev+0x18/0x60
[  963.601053][    C1]  ip6gre_init_net+0x291/0x3c0
[  963.605867][    C1]  ops_init+0x35c/0x5c0
[  963.610103][    C1]  setup_net+0x118/0x340
[  963.614378][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.620094][    C1]  ? __pfx_setup_net+0x10/0x10
[  963.624888][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.630598][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.636281][    C1]  ? preinit_net+0x47d/0x780
[  963.640936][    C1]  copy_net_ns+0x50e/0x730
[  963.645468][    C1]  create_new_namespaces+0x3e7/0x6a0
[  963.650853][    C1]  ? security_capable+0x7e/0x2c0
[  963.655856][    C1]  unshare_nsproxy_namespaces+0x11a/0x160
[  963.661653][    C1]  ksys_unshare+0x51d/0x930
[  963.666206][    C1]  ? fput_close_sync+0x11f/0x240
[  963.671240][    C1]  ? __pfx_ksys_unshare+0x10/0x10
[  963.676314][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.679795][T27879] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  963.682047][    C1]  __x64_sys_unshare+0x38/0x50
[  963.682097][    C1]  do_syscall_64+0x14d/0xf80
[  963.682125][    C1]  ? trace_irq_disable+0x3b/0x150
[  963.682168][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.682206][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.682237][    C1] RIP: 0033:0x7f8f0059da67
[  963.682266][    C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  963.682292][    C1] RSP: 002b:00007ffd3fc0b708 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  963.682323][    C1] RAX: ffffffffffffffda RBX: 00007f8f00815f40 RCX: 00007f8f0059da67
[  963.755901][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  963.763952][    C1] RBP: 00007f8f008167b8 R08: 0000000000000000 R09: 0000000000000000
[  963.771991][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  963.780058][    C1] R13: 0000000000000003 R14: 00007ffd3fc0b948 R15: 0000000000000000
[  963.788083][    C1]  </TASK>
[  963.791155][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  963.798452][    C1] CPU: 1 UID: 0 PID: 27760 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  963.809591][    C1] Tainted: [L]=SOFTLOCKUP
[  963.813921][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  963.823985][    C1] Call Trace:
[  963.827271][    C1]  <IRQ>
[  963.830111][    C1]  vpanic+0x56c/0xa60
[  963.834110][    C1]  ? __pfx__printk+0x10/0x10
[  963.838695][    C1]  ? __pfx_vpanic+0x10/0x10
[  963.843208][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  963.848535][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  963.853765][    C1]  panic+0xc5/0xd0
[  963.857500][    C1]  ? __pfx_panic+0x10/0x10
[  963.861944][    C1]  __warn+0x315/0x4f0
[  963.865934][    C1]  ? __rate_control_send_low+0x524/0x800
[  963.871584][    C1]  ? __rate_control_send_low+0x524/0x800
[  963.877244][    C1]  __report_bug+0x29a/0x540
[  963.881778][    C1]  ? __rate_control_send_low+0x524/0x800
[  963.887434][    C1]  ? __pfx___report_bug+0x10/0x10
[  963.892471][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.898121][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  963.903765][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  963.909063][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  963.914283][    C1]  report_bug_entry+0x19a/0x290
[  963.919168][    C1]  ? __rate_control_send_low+0x5bb/0x800
[  963.924919][    C1]  ? __rate_control_send_low+0x5c0/0x800
[  963.930583][    C1]  handle_bug+0xce/0x200
[  963.934836][    C1]  exc_invalid_op+0x1a/0x50
[  963.939341][    C1]  asm_exc_invalid_op+0x1a/0x20
[  963.944193][    C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  963.950464][    C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  963.970199][    C1] RSP: 0018:ffffc90000a08618 EFLAGS: 00010246
[  963.976286][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  963.984258][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022d220
[  963.992236][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  964.000209][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888035b5a7a8
[  964.008182][    C1] R13: 0000000000000000 R14: ffffffff9022d220 R15: ffff888035ac3138
[  964.016191][    C1]  ? __rate_control_send_low+0x58d/0x800
[  964.021869][    C1]  rate_control_send_low+0x1a7/0x7b0
[  964.027178][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.032822][    C1]  ? trace_csd_function_exit+0x81/0x210
[  964.038381][    C1]  rate_control_get_rate+0x20b/0x5d0
[  964.043703][    C1]  ieee80211_beacon_get_finish+0x3af/0x6f0
[  964.049526][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.055185][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  964.061535][    C1]  ? __ieee80211_beacon_add_tim+0x1180/0x15a0
[  964.067626][    C1]  ? ieee80211_beacon_get_ap+0x8cb/0x2040
[  964.073409][    C1]  ieee80211_beacon_get_ap+0x196a/0x2040
[  964.079086][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  964.085106][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.090750][    C1]  ? lock_acquire+0xf0/0x2e0
[  964.095377][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.101047][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  964.106606][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  964.112163][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  964.117729][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  964.123196][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  964.129306][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.134955][    C1]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  964.140528][    C1]  ? lock_acquire+0xf0/0x2e0
[  964.145128][    C1]  __iterate_interfaces+0x2ab/0x590
[  964.150341][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  964.156432][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  964.163662][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  964.169756][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  964.176813][    C1]  mac80211_hwsim_beacon+0xbb/0x180
[  964.182055][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  964.187874][    C1]  __hrtimer_run_queues+0x53a/0xcc0
[  964.193107][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  964.198836][    C1]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  964.204915][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.210573][    C1]  hrtimer_run_softirq+0x182/0x5a0
[  964.215710][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.221358][    C1]  handle_softirqs+0x22a/0x870
[  964.226143][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  964.230929][    C1]  __irq_exit_rcu+0x5f/0x150
[  964.235619][    C1]  irq_exit_rcu+0x9/0x30
[  964.239865][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  964.245519][    C1]  </IRQ>
[  964.248444][    C1]  <TASK>
[  964.251375][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  964.257364][    C1] RIP: 0010:finish_task_switch+0x245/0x920
[  964.263190][    C1] Code: 00 00 48 85 db 0f 85 e8 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 85 89 1b 0a e8 b0 8e 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 70 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  964.282810][    C1] RSP: 0018:ffffc9000dd37698 EFLAGS: 00000206
[  964.288892][    C1] RAX: 000000000000257b RBX: 0000000000000000 RCX: 0000000080000001
[  964.296861][    C1] RDX: 0000000000000006 RSI: ffffffff8def4b2d RDI: ffffffff8c27b380
[  964.304834][    C1] RBP: ffffc9000dd376f0 R08: ffffffff90118bb7 R09: 1ffffffff2023176
[  964.312808][    C1] R10: dffffc0000000000 R11: fffffbfff2023177 R12: ffff888032753d00
[  964.320782][    C1] R13: dffffc0000000000 R14: ffff88802eefbd00 R15: ffff8880b873b918
[  964.328775][    C1]  ? finish_task_switch+0x240/0x920
[  964.334002][    C1]  __schedule+0x15e5/0x52d0
[  964.338538][    C1]  ? kasan_save_track+0x4f/0x80
[  964.343396][    C1]  ? ops_init+0x35c/0x5c0
[  964.347745][    C1]  ? setup_net+0x118/0x340
[  964.352173][    C1]  ? copy_net_ns+0x50e/0x730
[  964.356773][    C1]  ? create_new_namespaces+0x3e7/0x6a0
[  964.362244][    C1]  ? unshare_nsproxy_namespaces+0x11a/0x160
[  964.368157][    C1]  ? __pfx___schedule+0x10/0x10
[  964.373040][    C1]  ? schedule+0x90/0x360
[  964.377317][    C1]  schedule+0x164/0x360
[  964.381491][    C1]  schedule_preempt_disabled+0x13/0x30
[  964.386965][    C1]  __mutex_lock+0x7fe/0x1300
[  964.391569][    C1]  ? __mutex_lock+0x5ac/0x1300
[  964.396336][    C1]  ? register_netdev+0x18/0x60
[  964.401103][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  964.406137][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.411772][    C1]  ? alloc_netdev_mqs+0xe2a/0x11b0
[  964.416890][    C1]  register_netdev+0x18/0x60
[  964.421484][    C1]  ip6gre_init_net+0x291/0x3c0
[  964.426264][    C1]  ops_init+0x35c/0x5c0
[  964.430438][    C1]  setup_net+0x118/0x340
[  964.434686][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.440331][    C1]  ? __pfx_setup_net+0x10/0x10
[  964.445113][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.450764][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.456401][    C1]  ? preinit_net+0x47d/0x780
[  964.461011][    C1]  copy_net_ns+0x50e/0x730
[  964.465445][    C1]  create_new_namespaces+0x3e7/0x6a0
[  964.470747][    C1]  ? security_capable+0x7e/0x2c0
[  964.475701][    C1]  unshare_nsproxy_namespaces+0x11a/0x160
[  964.481434][    C1]  ksys_unshare+0x51d/0x930
[  964.485951][    C1]  ? fput_close_sync+0x11f/0x240
[  964.490911][    C1]  ? __pfx_ksys_unshare+0x10/0x10
[  964.495951][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.501606][    C1]  __x64_sys_unshare+0x38/0x50
[  964.506385][    C1]  do_syscall_64+0x14d/0xf80
[  964.510973][    C1]  ? trace_irq_disable+0x3b/0x150
[  964.516012][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.522093][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.527996][    C1] RIP: 0033:0x7f8f0059da67
[  964.532507][    C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.552123][    C1] RSP: 002b:00007ffd3fc0b708 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  964.560566][    C1] RAX: ffffffffffffffda RBX: 00007f8f00815f40 RCX: 00007f8f0059da67
[  964.568557][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  964.576536][    C1] RBP: 00007f8f008167b8 R08: 0000000000000000 R09: 0000000000000000
[  964.584515][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  964.592491][    C1] R13: 0000000000000003 R14: 00007ffd3fc0b948 R15: 0000000000000000
[  964.600490][    C1]  </TASK>
[  964.603793][    C1] Kernel Offset: disabled
[  964.608117][    C1] Rebooting in 86400 seconds..