last executing test programs:

15m54.645015611s ago: executing program 4 (id=653):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11)
syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3)

15m52.304254543s ago: executing program 4 (id=664):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001)
sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)='=', 0x1}], 0x1}, 0x11)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002)

15m50.623985914s ago: executing program 4 (id=669):
syz_emit_vhci(&(0x7f00000024c0)=ANY=[@ANYBLOB="05c9"], 0xe)
socket(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)

15m49.812499181s ago: executing program 4 (id=673):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

15m48.86306593s ago: executing program 4 (id=676):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)

15m47.97727479s ago: executing program 4 (id=679):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="789493c5030000008abdd68b61f23ce284"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)

15m45.140277634s ago: executing program 32 (id=679):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="789493c5030000008abdd68b61f23ce284"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)

6m49.047276997s ago: executing program 0 (id=2588):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000700000001010000000000030000050000ff0900020073797a3000000000050001000700df7ab8c860c9440000050005009f0a0000000c00078008000b400000000005000400"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca34880080000000000038064001d80050006000081000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a4000000000600007"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)

6m48.22393209s ago: executing program 0 (id=2592):
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd867, 0x40, 0xa, 0x1fc})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x3f, 0xff, "3eccd25569e20900"})

6m47.358201928s ago: executing program 0 (id=2597):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
read$FUSE(r0, &(0x7f0000005480)={0x2020}, 0x2020)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
read$msr(r0, &(0x7f0000000100)=""/207, 0xcf)

6m46.111617744s ago: executing program 0 (id=2602):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInllM1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmJuaDAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX8znd/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHG9+X3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//OwzmfQ==")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
creat(&(0x7f00000002c0)='./file0\x00', 0x1)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

6m45.047523498s ago: executing program 0 (id=2609):
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x7f, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0xb, 0x9, 0x7, 0x0, 0x0, 0x6, 0x10, 0xa, 0x4, 0x7f, 0x9f, '\x00', 0x6b})

6m43.589739455s ago: executing program 0 (id=2612):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)={0x2, 0x5, [{0x91, 0x0, 0x1}, {0x8, 0x0, 0xffffffffffffffff}, {0x10006, 0x0, 0x5}, {0x4, 0x0, 0x10000}, {0xffffffff, 0x0, 0x59fa}, {0xffffffff, 0x0, 0x2}, {0x4003}, {0x2e, 0x0, 0x7fffffff}, {0x5}, {0x0, 0x0, 0xfffffffffffff826}, {0x2, 0x0, 0x9}, {0x1, 0x0, 0x100000001}, {0x717, 0x0, 0xa}, {0x7, 0x0, 0xc}, {0x1ff, 0x0, 0x7}, {0x10001, 0x0, 0x10001}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f0000005380)=[{{&(0x7f0000000180)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0x0)

6m41.129991051s ago: executing program 33 (id=2612):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000000c0)={0x2, 0x5, [{0x91, 0x0, 0x1}, {0x8, 0x0, 0xffffffffffffffff}, {0x10006, 0x0, 0x5}, {0x4, 0x0, 0x10000}, {0xffffffff, 0x0, 0x59fa}, {0xffffffff, 0x0, 0x2}, {0x4003}, {0x2e, 0x0, 0x7fffffff}, {0x5}, {0x0, 0x0, 0xfffffffffffff826}, {0x2, 0x0, 0x9}, {0x1, 0x0, 0x100000001}, {0x717, 0x0, 0xa}, {0x7, 0x0, 0xc}, {0x1ff, 0x0, 0x7}, {0x10001, 0x0, 0x10001}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f0000005380)=[{{&(0x7f0000000180)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0x0)

6m2.530908431s ago: executing program 1 (id=2714):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x1a0, 0xfffffffffffffffd})

6m1.34923019s ago: executing program 1 (id=2717):
syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x211a, 0x80, 0x4, 0x9b}, 0x0, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)

6m0.117536804s ago: executing program 1 (id=2720):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r3}, 0x10)

5m58.389745761s ago: executing program 1 (id=2725):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = gettid()
fsmount(r0, 0x1, 0x8e)
tkill(r1, 0xb)

5m56.50049217s ago: executing program 1 (id=2729):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

5m55.6508984s ago: executing program 1 (id=2731):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1fe)
r1 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0)
splice(r1, 0x0, r0, 0x0, 0x59, 0x2)
read$rfkill(r0, &(0x7f00000000c0), 0x8)

5m40.15448241s ago: executing program 34 (id=2731):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1fe)
r1 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0)
splice(r1, 0x0, r0, 0x0, 0x59, 0x2)
read$rfkill(r0, &(0x7f00000000c0), 0x8)

4m52.843932251s ago: executing program 3 (id=2889):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x401}, @generic={0x5, 0x7, "97134cb6ce50e935f628"}, @eol, @exp_fastopen={0xfe, 0xf, 0xf989, "5d7d0438043979a6eef50c"}]}}}}}}}, 0x0)

4m52.102648872s ago: executing program 3 (id=2892):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
listen(r1, 0x0)
close(r1)

4m51.333919134s ago: executing program 3 (id=2893):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000)

4m50.591162978s ago: executing program 3 (id=2896):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc08, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
utimes(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fsync(r0)

4m49.008179319s ago: executing program 3 (id=2902):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x4}, {0xe, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

4m46.06336428s ago: executing program 3 (id=2911):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x4f, 0x3b00, 0x0, 0xfffffffffffffdfd)

4m41.664362037s ago: executing program 35 (id=2911):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x4f, 0x3b00, 0x0, 0xfffffffffffffdfd)

2m15.299879936s ago: executing program 7 (id=3404):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0xe1100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r3], 0x20, 0x6044}, 0x2004006)

2m13.893762122s ago: executing program 7 (id=3407):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x38, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x9}]})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m10.164613687s ago: executing program 7 (id=3419):
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)

2m9.411103196s ago: executing program 7 (id=3421):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$eJzs3AuYjtX6MPB1r7Uehia9TXIY1r3uhzcNlkmSHJLkkCRJkuSUJGmSJCEx5JQ0JCHHSZPDEJJTY9I4nw85J022NEkSklNY38Wubfe1/+39/3bf3//ac/+ua12z7vd57/Xez9xzzbue571mvus2vE6zujWbEJH4t8BfvyQLIWKEEIOFENcIIQIhRMW4inEXj+dTkPzvvQj7cz2UfqUrYFcS9z934/7nbtz/3I37n7tx/3M37n/uxv3P3bj/jOVmW2YUvZZH7h18/z834/f//yA55SZ8ta7c9d3/Gync/9yN+5+7cf9zkeD3D3H/czfuf+7G/f/Pd+cfHOP+/4eK+deexv1nLDf7273gc977/wX3o//skfd3n3H8egv6ytf2v2Fc4R8/xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGO5xGl/mRZC/Dq/0nUxxhhjjDHGGGPsz+PzXukKGGOMMcYYY4wx9v8fCCmU0CIQeUReESPyifziKhErrhYFxDUiIq4VceI6UVBcLwqJwqKIKCriRTFRXBiBwgoSoSghSoqouEGUEjeKBFFalBFlhRPlRKK4SZQXN4sK4hZRUdwqKonbRGVRRVQV1cTtorq4Q9QQd4qa4i5RS9QWdURdcbeoJ+4R9cW9ooG4TzQU94tG4gHRWDwomoiHRFPxsGgmHhHNxaOihWgpWonWos3/U/5Lopd4WfQWfUSy6Cv6iVdEfzFADBSDxGDxqhgiXhNDxesiRQwTw8UbYoR4U4wUb4lRYrQYI94WY8U4MV5MEBPFJJEq3hGTxbsiTbwnpoipYpqYLtLFDDFTvC9midlijvhAzBUfinlivlggFopF4iORIRaLTPGxWCI+EVliqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNost4lOxVWwT28UOsVPsErvFZ2KP+FzsFV+IbPHlfzP/1P+V3x0ECJAgQYOGPJAHYiAG8kN+iIVYKAAFIAIRiIM4KAgFoRAUgiJQBOIhHopDcUBAICAoASUgClEoBaUgARKgDJQBBw4SIRHKw81QASpARagIlaASVIYqUAWqQTWoDtWhBtSAmlATakEtqAN14G64G+6B+lAfGkADaAgNoRE0gsbQGJpAE2gKTaEZNIPm0BxaQAtoBa2gDbSBttAW2kE7aA/toQN0gI7QEZIgCTpBJ+gMnaELdIGu0BW6QTfoDj2gB7wEL8HL8DL0gVqyL/SDftAf+sNAGASD4FUYAq/Ba/A6pMAwGA5vwBvwJoyEkzAKRsMYGAPV5TgYDxOA5CRIhVSYDJMhDdJgCkyFqTAd0mEGzISZMAtmw2z4AObCh/AhzIf5sBAWwSLIgMWQCZmwBE5BFiyFZbAcVsBKWAGrYQ2shnWwHtbBRtgIm2EzfAqfwjbYBjtgB+yCXfAZfAafw+eQAtmQDftgH+yH/XAADkAO5MBBOAiH4BAchsNwBI7AUTgGx+EYnIATcBJOwWk4DWfhLJyDF+K/abqr9NoUIS/SUss8Mo+MkTEyv8wvY2WsLCALyIiMyDgZJwvKgrKQLCSLyCIyXsbL4rK4RImSZChLyBIyKqOylCwlE2SCLCPLSCedTJSJsrwsLyvICrKivFVWkrfJyrKKfMJVk9Vkddne1ZB3ypqypqwla8s6sq6sK+vJerK+rC8byAayoWwoG8kHZGPZFwbCQ/JiZ5rJYdBcDocWsqVsJVvLN+Ex2VaOhHbyCdlePilHwyjoKNu6JPmM7CTHQ2f5nJwAz8uuchJ0ky/K7rKH7Clfkr1kO9db9pFToK/sJ6dDfzlADpSD5CyoLS92rI58XabIYXK4fEMuhDflSPmWHCVHyzHybTlWjpPj5QQ5UU6SqfIdOVm+K9Pke3KKnCqnyekyXc6QM+X7cpacLefID+Rc+aGcJ+fLBXKhXCQ/khlyscyUH8sl8hOZJZfKZXK5XCFXylVytVwj18p1cr3cIDfKTXKz3CI/lVvlNrld7pA75S65W34m98jP5V75hcyWX8p98i9yv/xKHpBfyxz5jTwov5WH5HfysPxeHpE/yKPymDwuf5Qn5E/ypDwlT8sz8qz8WZ6T5+UF6aVQoKRSSqtA5VF5VYzKp/Krq1SsuloVUNeoiLpWxanrVEF1vSqkCqsiqqiKV8VUcWUUKqtIhaqEKqmi6gZVSt2oElRpVUaVVU6VU4nqJlVe3awqqFtURXWrqqRuU5VVFVVVVVO3q+rqDlVD3alqqrtULVVb1VF11d2qnrpH1Vf3qgbqPtVQ3a8aqQdUY/WgaqIeUk3Vw6qZekQ1V4+qFqqlaqVaqzbqMdVWPa7aBUII9aTqoJ5SHdXTKkk9ozqpZ1Vn9Zzqop5XXdULqpt6UXVXPVRPdV5dUF71Vn1Usuqr+qlXVH81QA1Ug9Rg9aoaol5TQ9XrKkUNU8PVG2qEelONVG+pUWq0GqPeVmPVODVeTVAT1SSVqt5Rk9W7Kk29p6aoqWqamq7S1Qw18JeV5vwL+e/+g/yhl159s9qiPlVb1Ta1Xe1QO9UutVvtVnvUHrVX7VXZKlvtU/vUfrVfHVAHVI7KUQfVQXVIHVKH1WF1RB1RR9UxdUb9qE6on9RJdUqdUmfUWXVWnfvleyA0aKmV1jrQeXReHaPz6fz6Kh2rr9YF9DU6oq/Vcfo6XVBfrwvpwrqILqrjdTFdXBuN2mrSoS6hS+qovkGX0jfqBF1al9FltdPldKK+6d/O/2f1tdFtdFvdVrfT7XR73V530B10R91RJ+kk3Ul30p11Z91Fd9FddVfdTXfT3XV33VP31L10L91b99bJOln306/o/nqAHqgH6cH6VT1ED9FD9VCdolP0cD1cj9Aj9Eg9Uo/So/QYPUaP1WP1eD1eT9QTdapO1ZP1ZJ2m0/QUPUVP09N0uk7XM/VMPUvP0nP0HD1Xz9Xz9Dy9QC/Qi/QinaEzdKbO1Ev0Ep2ll+qlerlerlfqlXq1Xq3X6rV6vV6vN+qNOktv0Vv0Vr1Vb9fb9U69U+/Wu/UevUfv1Xt1ts7W+/Q+vV/v1wf0AZ2jc/RBfVAf0of0YX1YH9FH9FF9VB/Xx/UJfUKf1Cf1aX1an9Vn9Tl9Tl/QFy5u+wIZyEAHOsgT5Aligpggf5A/iA1igwJBgSASRIK4IC4oGFwfFAoKB0WCokF8UCwoHpgAAxtQEAYlgpJBNLghKBXcGCQEpYMyQdnABeWCxOCmoHxwc1AhuCWoGNwaVApuCyoHVYKqQbXg9qB6cEdQI7gzqBncFdQKav/6OVRwT1A/uDdoENwXNAzuDxoFDwSNgweDJsFDQdPg4aBZ8EjQPHg0aBG0DFoFrYM2/+r6QZ2gbnB3UO8P1/f+ZOHHXW/TxySbvqafecX0NwPMQDPIDDavmiHmNTPUvG5SzDAz3LxhRpg3zUjzlhllRpsx5m0z1owz480EM9FMMqnmHTPZvGvSzHtmiplqppnpJt3MMDPN+2aWmW3mmA/MXPOhmWfmmwVmoVlkPjIZZrHJNB+bJeYTk2WWmmVmuVlhVppVZrVZY9aadWa92WA2mk1ms9liPjVbzTaz3ewwO80us9t8ZvaYz81e84XJNl+afeYvZr/5yhwwX5sc8405aL41h8x35rD53hwxP5ij5pg5bn40J8xP5qQ5ZU6bM+as+dmcM+fNBeMvbu4vvr2jRo15MA/GYAzmx/wYi7FYAAtgBCMYh3FYEAtiISyERbAIxmM8FsfieBEhYQksgVGMYikshQmYgGWwDDp0mIiJWB7LYwWsgBWxIlbCSlgZK2NVrIq34+14B96Bd+KdeBfehbWxNtbFulgP62F9rI8NsAE2xIbYCBthY2yMTbAJNsWm2AybYXNsji2wBbbCVtgG22BbbIvtsB22x/bYATtgR+yISZiEnbATdsbO2AW7YFfsit2wG3bH7tgTe2Iv7IW9z/TGZEzGftgP+2N/HIgDcTAOxiE4BIfiUEzBFByOw3EEjsCROBJH4Wgcg2/jWByH43ECTsRJmIqpOBknYxqm4RScgtNwGqZjOs7EmTgLZ+EcnINzcS7Ow3m4ABfgIlyEGZiBmZiJS3AJZmEWLsNluAJX4CpchWtwDa7DdbgBN+Am3IRbcAtuVVtxO27HnbgTd+Nu3IN7cC/uxWzMxn24D/fjfjyABzAHc/AgHsRDeAgP42E8gkfwKB7F43gcT+AJPIkn8TSexrP4M57D83gBPcZYKfLbq2ysvdoWsNfYGJvP/n1cxBa18baYLW6NLWQL/yZGa22CLW3L2LLW2XI20d70u7iyrWKr2mr2dlvd3mFr/C6uZ++x9e29toG9z9a1d/8mbmjvt43sI7axfdQ2sS1tU9vaNrOP2Ob2UdvCtrStbGvbwT5lO9qnbZJ9xnayz/4uzrCL7Rq71q6z6+0e+7k9bc/YQ/Y7e9b+bHvbPnawfdUOsa/ZofZ1m9Jg2G9jO8yOsW/bsXacHW8n2Il20u/iaXa6Tbcz7Ez7vp1lZ/8uXmQ/snNtpp1n59sFduGl+GJNmfZju8R+YrPsUrvMLrcr7Eq7yq7+W63L7Ua7yW62u+1ndqvdZrfbHXan3XUpvngee+0XNtt+aQ/ab+1++5U9YA/bHPvNpfji+R2239sj9gd71B6zx+2P9oT9yZ60py6d/8Vz/9Getxest4KAJCnSFFAeyksxlI/y01UUS1dTAbqGInQtxdF1VJCup0JUmIpQUYqnYlScDCFZIgqpBJWkKN1ApehGSqDSVIbKkqNylEg3UXm6mSrQLVSRbqVKdBtVpipUlarR7VSd7qAaWlBNuotqUW2qQ3XpbqpH91B9upca0H3UkO6nRvQANaYHqQk9RE3pYWpGj1BzepRaUEtqRa2pDT1GbelxakdPUHt6kjrQU9SRnqYkeoY60bPUmZ6jLvQ8daUXqBu9SN2pB/Wkl6gXvUy9qQ8lU1/qR69QfxpAA2kQDaZXaQi9RkPpdUqhYTSc3qAR9CaNpLdoFI2mMfQ2jaVxNJ4m0ESaRKn0Dk2mdymN3qMpNJWm0XRKpxk0k96nWTSb5tAHNJc+pHk0nxbQQlpEH1EGLaZM+piW0CeURUtpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCn9JW2kbbaQftpF20mz6jPfQ57aUvKJu+pH30F9pPX9EB+ppy6Bs6SN/SIfqODtP3dIR+oKN0jI7Tj3SCfqKTdIpO0xk6Sz/TOTpPF8iTCCGUoQp1GIR5wrxhTJgvzB9eFcaGV4cFwmvCSHhtGBdeFxYMrw8LhYXDImHRMD4sFhYPTYihDSkMwxJhyTAa3hCWCm8ME8LSYZmwbOjCcmFieFNYPrw5rBDeElYMbw0rhbeFlcMq4SP3VQtvD6uHd4Q1wjvDmuFdYa2wdlgnrBveHdYL7wnrh/eGDcL7wgrh/WGj8IGwcfhg2CR8KGwaPhw2Cx8Jm4ePhi3ClmGrsHXYJnwsbBs+HrYLnwjbh0+GHcKnwo7h02FS+EzYKXz2nx5PDvuG/cJXwldC7+9VC6ILo4uiH0UzooujmdGPo0uin0Szokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo97XzSscOOmU0y5weVxeF+PyufzuKhfrrnYF3DUu4q51ce46V9Bd7wq5wq6IK+riXTFX3BmHzjpyoSvhSrqou8GVcje6BFfalXFlnXPlXKJr7dq4Nq6te9y1c0+49u5J96R7yj3lnnZPu2dcJ/es6+yec13c866re8G94F503V0P19O95Hq5l11v18clu2TXz/Vz/V1/N9ANzPPLHswNdUNdiktxw91wN8KNcCPdSDfKjXJj3Bg31o114914N9FNdKku1U12k12aS3NT3BQ3zU1z6S7dzXQz3Sw3y81xc9zchLlunpvnFrgFbpFb5DJchst0mW6JW+KyXJZb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+q2uu1uu9vpdrrdbrfb4/a4vW6vy3bZbp/b5/a7/e6A+9rluG/cQfetO+S+c4fd9+6I+8EddcfccfejO+F+cifdKXfanXFn3c/unDvvLjjvUiPvRCZH3o2kRd6LTIlMjUyLTI+kR2ZEZkbej8yKzI7MiXwQmRv5MDIvMj+yIBIjhPgokhFZHMmMfBxZEvkkkhVZGlkWWR5ZEVkZ8b7Y1tCX8CV91N/gS/kbfYIv7cv4st75cj7R3+TL+5t9BX+Lr+hv9ZX8bb6yr+Kr+kd9C9/St/KtfRv/mG/rH/ft/BO+vX/Sd/BP+Y7+aZ/kn/Gd/LO+s3/Od/HP+67+Bd/Nv+i7+x6+p3/J9/Iv+96+j0/2fX0//4rv7wf4gX6QH+xf9UP8a36of92n+GF+uH/Dj/Bv+pH+LT/Kj/Zj/Nt+rB/nx/sJfqKf5FP9O35yvnd9mn/PT/FT/TQ/3af7GX6mf9/P8rP9HP+Bn+s/9PP8fL/AL/SL/Ec+wy/2mf5jv8R/4rP8Ur/ML/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Kd+q9/mt/sdfqff5Xf7z/we/7nf67/w2f5Lv8//xe/3X/kD/muf47/xB/23/pD/zh/23/sj/gd/1B/zx/2P/oT/yZ/0p/xpf8af9T/7c/68v8B/s8YYY4wx9i9JO/DHx/v+g8fkL+OifkKIq7cVzfn741oIsaHQX+cDZHyHiBDimT7dHvp11KqVnJz8y3OzlAhKzhdCRC7nX7oM+SVeKtqLp0SSeEKU/4f1DZA9ztIfrA9HvY/eKkT+v8u5uI//Nb68/s3/xfqPPTkmo1J4Ou6365/7Zb95sf7ofCESSl7OyScux5fXr/BfrF+47R/Vn6VEvq9ShWj3dzmx4nJ8ef1E8bh4ViT95pmMMcYYY4wxxthfDZBVu/yT689L1+fx+lJ46eG84m/xP70+Z4wxxhhjjDHG2JX3fI+eTz+WlPREF57whCc8+dvkSv9mYowxxhhjjP3ZLm/6r3QljDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY7vU/8e/ErvQ5MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1fa/wkAAP//jKQ7JQ==")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0)
chroot(&(0x7f0000000a40)='./file0\x00')
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0)

2m7.874187319s ago: executing program 7 (id=3426):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
sendfile(r0, r0, 0x0, 0x7f03)

2m6.752146951s ago: executing program 7 (id=3428):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0xfb5d}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0)

2m3.274952003s ago: executing program 36 (id=3428):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0xfb5d}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0)

21.524707308s ago: executing program 5 (id=3758):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xf, 0x2, 0x2}]}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

18.70108836s ago: executing program 5 (id=3764):
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000200)={[{@part={'part', 0x3d, 0x4}}, {@umask={'umask', 0x3d, 0x4ffff}}, {@codepage={'codepage', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x4, 0x343, &(0x7f0000000280)="$eJzs3U9r1EwcB/DvJLvb7LOlT562D4Xn9FAteCptPSgetEjx4hvwIMXabqE0VtAKWhCrZxFvguDRm2fRt6AX8Q0oHgqKJ70UD0ZmMvm3zmTT7bZp7fcD7mY38+c3yUwy01IDIjqyzs99eH5yS/4TdQAugDOAA8ADagD+xZh3a229a0FusiUQ5RS/pVlca5uyetA5NF9+qmEw+x3tjTAMw4/23Z/Oqrdv+xcQVUJkR3CGAwzAUSNR7ff2PbK9sSnbddRkzrDYxjZuY6jKcIiIqHr6/u/ou8Sgnr87DjCh5+GH/f6fm99sVxfHgZDc/53ocyjk8flb7ZLrvZX1oL0ULeHk2XfiVaKpLGOfCF009KZ6dwC3lZlyZWoxU7E4zeWVoD25qQp4gHNaJtmoel1C3BCZFLZodUTjhrVpgaK2F2upNtRlG2Ys8Y8U1WhcAL/+gifm6ubflohJvBHvxLzw8RRLyfyvFgp5cNTx8TuGShT/lL1E1Uo/SpVrZRr+P6qS/+Iz8OpF2sqm7bh6cGUsJrIU0Tl/9+M4HzfsuTCM/I8VotZN21unco0ANaE7V5prJkn0w5hrtLOu5nI9aE8uXg9snb6/jCs68UhcEuP4ipeYy8z/HZl6AvaRmRvlQqXUPaOwPTWV0nIec9QAvlZ+ZNZLp/zTXTCe6A6f8x8f4ipOY+jmnY3VhSBo36h+Ix4qPWb/v8/xRB1Rd0f5jXzPpIEnN2Qn7FulP8MwNO6qoWQ5cpD2HEY0oE49S5u8sbog9DVvdw2UV86OXbP2xABmAehv4itCL7XfS3INpAWWyv5dnm31jblDxlHtwwCJq8rtcjFQaqQ0e6j04t3VhaDnqxEdIulJx9jlqoOhKsh5l4jWf5n1ypS66sgXv2D9E3YrPFPitGUFNKxe/0pWcEqXNVfLvoJrxRtd1lzHTgDHG/kaHcQ13u8s1tdx4iD+VnLnv8oQc3iPK/z5PxERERERERERERERERERERERERHRYbPTv0bo5c8J8jVuHcH/eIOIiIiIiIiIiIiIiIiIiIiIiIiIiIiIaHfS5/8mz3dpmJ7/W/SkJsWNnhDj9eP5v26J5/+KzXINJCKrXwEAAP//HJ9f3A==")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

16.884873855s ago: executing program 5 (id=3770):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)

13.887132899s ago: executing program 5 (id=3777):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
eventfd(0xffffffff)
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/252, 0xfc}, {0x0}], 0x2})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

11.768814337s ago: executing program 2 (id=3782):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000400))

7.889889784s ago: executing program 2 (id=3794):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000029c0)={0x77359400}, 0x10)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)

7.385656306s ago: executing program 9 (id=3796):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb)
io_setup(0x1, &(0x7f0000000b80)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x4}])
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
splice(r0, 0x0, r3, 0x0, 0x8000, 0x0)

7.022444503s ago: executing program 6 (id=3797):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000500)="$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")
mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4)
madvise(&(0x7f0000026000/0x4000)=nil, 0x4000, 0x64)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0)
writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21)

6.314909413s ago: executing program 2 (id=3799):
mount$9p_virtio(&(0x7f0000000040), 0x0, 0x0, 0x4, 0x0)
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040))

6.244719938s ago: executing program 8 (id=3800):
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6})

5.994226303s ago: executing program 6 (id=3801):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0xfff}}, 0x6, 0x6}, 0x90)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0)

5.840560558s ago: executing program 9 (id=3802):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000280), 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x1d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
capset(0x0, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

5.389858531s ago: executing program 8 (id=3803):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="17", 0x1}, {&(0x7f0000000240)="5f734678b885934fa89c000011426d78", 0x10}], 0x2, 0x0, 0x0, 0x8008001}, 0x20048851)

4.749684458s ago: executing program 6 (id=3804):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x9}}, 0x26)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

4.292633545s ago: executing program 9 (id=3805):
r0 = syz_clone(0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x388, 0x4)
ptrace$pokeuser(0x6, r0, 0x358, 0xafe8)

4.292412736s ago: executing program 8 (id=3806):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
close(0x3)

3.941048186s ago: executing program 6 (id=3807):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

3.740577466s ago: executing program 5 (id=3808):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@uqnoenforce}]}, 0x1, 0x990f, &(0x7f0000013080)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x3)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)

3.530093613s ago: executing program 8 (id=3809):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.098830896s ago: executing program 6 (id=3810):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xa0)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb3)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xfffffffdffffffff)

2.273123286s ago: executing program 9 (id=3811):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8", 0x1}], 0x1}, 0x0)

2.163538461s ago: executing program 2 (id=3812):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x200, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

2.150631547s ago: executing program 8 (id=3813):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xaf5a, 0x800, 0x2, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1.912286334s ago: executing program 6 (id=3814):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)={[{@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpquota}, {@nouid32}, {@debug}, {@nojournal_checksum}, {@resuid}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbc1, &(0x7f0000000bc0)="$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")
mkdir(&(0x7f00000001c0)='./bus\x00', 0x40)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000200), &(0x7f00000002c0)="30573472b621739b91c336124406e8a5c812ca867e3bf9b8fa367b80ab", 0x1d, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

1.415752925s ago: executing program 2 (id=3815):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000)
read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0})
write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2)

1.16707757s ago: executing program 9 (id=3816):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x40000)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
gettid()
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000007000)={'ip6tnl0\x00', &(0x7f0000006f80)={'syztnl2\x00', 0x0, 0x4, 0xfa, 0x8, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x700, 0x8, 0xe2, 0x40}})

818.978253ms ago: executing program 5 (id=3817):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)

538.117891ms ago: executing program 8 (id=3818):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e00)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x1, 0x3, "c5aba8"}, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)={0x20, 0x14, 0x3, "66ef9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

514.024941ms ago: executing program 2 (id=3819):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x9, 0x401}, @generic={0x5, 0xc, "97134cb6ce50e935f628"}, @fastopen={0x22, 0xf, "9d3a9dde0400d9e4abc694aaf9"}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "2d81beae8e1b8eb60abcdc4551439c70"}]}}}}}}}, 0x0)

0s ago: executing program 9 (id=3820):
r0 = epoll_create(0x7)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1008})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)

kernel console output (not intermixed with test programs):

ask_work_run+0x208/0x2b0
[ 1081.893256][T13820]  exit_to_user_mode_loop+0x306/0x1b60
[ 1081.893465][T13820]  ? user_path_at+0x1fc/0x330
[ 1081.893653][T13820]  ? __x64_sys_umount+0x1dc/0x250
[ 1081.893865][T13820]  do_syscall_64+0x24d/0xf80
[ 1081.894036][T13820]  ? clear_bhb_loop+0x50/0xa0
[ 1081.894209][T13820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1081.894373][T13820] RIP: 0033:0x7f1617d9d9d7
[ 1081.894487][T13820] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1081.894621][T13820] RSP: 002b:00007ffc96599718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1081.894756][T13820] RAX: 0000000000000000 RBX: 00007f1617e32050 RCX: 00007f1617d9d9d7
[ 1081.894858][T13820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc965997d0
[ 1081.894957][T13820] RBP: 00007ffc965997d0 R08: 00007ffc9659a7d0 R09: 00000000ffffffff
[ 1081.895064][T13820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9659a860
[ 1081.895161][T13820] R13: 00007f1617e32050 R14: 0000000000108156 R15: 00007ffc9659a8a0
[ 1081.895307][T13820]  </TASK>
[ 1082.244417][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1082.255005][ T5831] em28xx 7-1:0.0: No AC97 audio processor
[ 1082.257479][ T1028] bridge_slave_1: left allmulticast mode
[ 1082.266800][ T1028] bridge_slave_1: left promiscuous mode
[ 1082.273548][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1082.291478][ T1028] bridge_slave_0: left allmulticast mode
[ 1082.327476][T13820] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1082.363622][ T5831] usb 7-1: USB disconnect, device number 3
[ 1082.371721][ T5831] em28xx 7-1:0.0: Disconnecting em28xx
[ 1082.414397][ T1028] bridge_slave_0: left promiscuous mode
[ 1082.420430][ T5831] em28xx 7-1:0.0: Freeing device
[ 1082.519977][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.247433][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1083.941129][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1084.038724][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1084.118268][ T1028] bond0 (unregistering): Released all slaves
[ 1084.287392][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1084.586391][ T1028] tipc: Disabling bearer <udp:s>
[ 1084.667697][ T1028] tipc: Left network mode
[ 1084.830057][ T1028] IPVS: stopping master sync thread 11632 ...
[ 1085.269357][T14347] loop9: detected capacity change from 0 to 7
[ 1085.304834][ T6058] Dev loop9: unable to read RDB block 7
[ 1085.317343][ T6058]  loop9: unable to read partition table
[ 1085.324182][ T6058] loop9: partition table beyond EOD, truncated
[ 1085.397889][T13821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1085.412586][T13821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1085.439998][T13821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1085.481312][T13821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1085.499218][T13821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1085.550393][T14347] Dev loop9: unable to read RDB block 7
[ 1085.621334][T14347]  loop9: unable to read partition table
[ 1085.628730][T14347] loop9: partition table beyond EOD, truncated
[ 1085.635293][T14347] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1085.688758][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1085.748675][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1085.815879][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1085.841954][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1086.024595][ T1028] veth1_macvtap: left promiscuous mode
[ 1086.067571][ T1028] veth0_macvtap: left promiscuous mode
[ 1087.079555][T14363] netlink: 'syz.7.2914': attribute type 1 has an invalid length.
[ 1087.122084][T14363] netlink: 'syz.7.2914': attribute type 6 has an invalid length.
[ 1087.202757][T14363] netlink: 'syz.7.2914': attribute type 3 has an invalid length.
[ 1087.289365][T14363] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2914'.
[ 1087.567811][T13821] Bluetooth: hci3: command tx timeout
[ 1087.611664][T14367] loop6: detected capacity change from 0 to 2048
[ 1087.775249][T14367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1088.103381][ T1028] team0 (unregistering): Port device team_slave_1 removed
[ 1088.451343][ T1028] team0 (unregistering): Port device team_slave_0 removed
[ 1088.762465][T14377] loop5: detected capacity change from 0 to 2048
[ 1088.890499][T14377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1088.995822][T14382] netlink: 'syz.6.2927': attribute type 1 has an invalid length.
[ 1089.048990][   T29] audit: type=1800 audit(1773577423.939:299): pid=14377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2925" name="file1" dev="loop5" ino=1346 res=0 errno=0
[ 1089.647552][T13821] Bluetooth: hci3: command tx timeout
[ 1091.123027][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1091.357221][   T10] usb 3-1: Using ep0 maxpacket: 8
[ 1091.407456][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1091.467310][   T10] usb 3-1: config 0 has no interfaces?
[ 1091.493995][   T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[ 1091.535912][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.599176][   T10] usb 3-1: config 0 descriptor??
[ 1091.748342][T13821] Bluetooth: hci3: command tx timeout
[ 1091.911195][   T10] usb 3-1: USB disconnect, device number 24
[ 1092.450236][T14410] loop7: detected capacity change from 0 to 32768
[ 1092.464726][T14410] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2936 (14410)
[ 1092.489926][T14410] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1092.500402][T14410] BTRFS info (device loop7): using sha256 checksum algorithm
[ 1092.830014][T14348] chnl_net:caif_netlink_parms(): no params data found
[ 1092.880707][T14410] BTRFS info (device loop7): rebuilding free space tree
[ 1092.911941][T14410] BTRFS info (device loop7): turning off barriers
[ 1092.923112][T14410] BTRFS info (device loop7): turning on sync discard
[ 1092.930376][T14410] BTRFS info (device loop7): enabling free space tree
[ 1092.937444][T14410] BTRFS info (device loop7): force clearing of disk cache
[ 1092.944869][T14410] BTRFS info (device loop7): max_inline set to 0
[ 1093.157582][T13820] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1093.607477][T12208] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1093.811877][T13821] Bluetooth: hci3: command tx timeout
[ 1093.845843][T12208] usb 6-1: Using ep0 maxpacket: 8
[ 1093.899101][T12208] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1093.962503][T12208] usb 6-1: string descriptor 0 read error: -22
[ 1093.977715][T12208] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40
[ 1094.057832][T12208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.719372][T12208] apple 0003:05AC:022B.0022: unexpected long global item
[ 1094.772011][T12208] apple 0003:05AC:022B.0022: parse failed
[ 1094.807550][T12208] apple 0003:05AC:022B.0022: probe with driver apple failed with error -22
[ 1094.902099][T12084] usb 6-1: USB disconnect, device number 16
[ 1095.641190][T14348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1095.666577][T14348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1095.688739][T14348] bridge_slave_0: entered allmulticast mode
[ 1095.719683][T14348] bridge_slave_0: entered promiscuous mode
[ 1095.809244][T14348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1095.859618][T14348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1095.929353][T14348] bridge_slave_1: entered allmulticast mode
[ 1095.970096][T14348] bridge_slave_1: entered promiscuous mode
[ 1096.414620][T14348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1096.589542][T14348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1097.208395][T14348] team0: Port device team_slave_0 added
[ 1097.320206][T14348] team0: Port device team_slave_1 added
[ 1097.789191][T14348] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1097.827584][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1097.960144][T14348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1098.088665][T14348] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1098.095880][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1098.284674][T14348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1099.142733][T14348] hsr_slave_0: entered promiscuous mode
[ 1099.222176][T14348] hsr_slave_1: entered promiscuous mode
[ 1099.280756][T14348] debugfs: 'hsr0' already exists in 'hsr'
[ 1099.286709][T14348] Cannot create hsr debugfs directory
[ 1100.647158][   T29] audit: type=1326 audit(1773577435.529:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.6.2959" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38ddf9c799 code=0x0
[ 1101.422900][T14521] loop7: detected capacity change from 0 to 128
[ 1101.969122][T14348] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1102.016524][T14521] syz.7.2963: attempt to access beyond end of device
[ 1102.016524][T14521] loop7: rw=1, sector=145, nr_sectors = 64 limit=128
[ 1102.088018][T14521] syz.7.2963: attempt to access beyond end of device
[ 1102.088018][T14521] loop7: rw=8388609, sector=209, nr_sectors = 1 limit=128
[ 1102.135160][T14348] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1102.144654][T12208] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1102.226131][T14521] Buffer I/O error on dev loop7, logical block 209, lost async page write
[ 1102.314943][T14348] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1102.363747][T12208] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1102.400415][T12208] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1102.448513][T12208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.488755][T14348] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1102.517623][T12208] usb 3-1: config 0 descriptor??
[ 1103.641010][T12208] radio-keene 3-1:0.0: V4L2 device registered as radio48
[ 1103.876146][   T10] usb 3-1: USB disconnect, device number 25
[ 1104.884640][T14348] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1105.175180][T14348] 8021q: adding VLAN 0 to HW filter on device team0
[ 1105.361370][  T194] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.369011][  T194] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1105.531795][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.539566][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1106.228289][T14573] bond_slave_0: entered promiscuous mode
[ 1106.326883][T14577] bond_slave_0: left promiscuous mode
[ 1106.454155][T14579] input: syz1 as /devices/virtual/input/input24
[ 1107.746631][T14591] loop6: detected capacity change from 0 to 1764
[ 1108.226458][T14591] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1108.458408][T14594] loop2: detected capacity change from 0 to 32768
[ 1108.468608][T14594] btrfs: Deprecated parameter 'usebackuproot'
[ 1108.474934][T14594] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1108.490118][T14594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2983 (14594)
[ 1108.531201][T14594] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1108.544170][T14594] BTRFS info (device loop2): using crc32c checksum algorithm
[ 1108.552403][T14594] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1108.808838][   T35] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0
[ 1108.882423][T14594] BTRFS warning (device loop2): couldn't read tree root
[ 1108.889909][T14594] BTRFS warning (device loop2): try to load backup roots slot 1
[ 1108.900877][   T35] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0
[ 1108.947443][T14594] BTRFS warning (device loop2): couldn't read tree root
[ 1108.954653][T14594] BTRFS warning (device loop2): try to load backup roots slot 2
[ 1109.027681][   T35] BTRFS warning (device loop2): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1
[ 1109.101766][T14594] BTRFS warning (device loop2): couldn't read tree root
[ 1109.110805][T14594] BTRFS warning (device loop2): try to load backup roots slot 3
[ 1109.250680][T14594] BTRFS info (device loop2): rebuilding free space tree
[ 1109.301179][T14594] BTRFS info (device loop2): disabling free space tree
[ 1109.308812][T14594] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1109.318924][T14594] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1109.391668][T14594] BTRFS info (device loop2): enabling ssd optimizations
[ 1109.399620][T14594] BTRFS info (device loop2): turning off barriers
[ 1109.406291][T14594] BTRFS info (device loop2): turning on sync discard
[ 1109.413528][T14594] BTRFS info (device loop2): enabling disk space caching
[ 1109.421063][T14594] BTRFS info (device loop2): force clearing of disk cache
[ 1109.428643][T14594] BTRFS info (device loop2): enabling auto defrag
[ 1109.435280][T14594] BTRFS info (device loop2): trying to use backup root at mount time
[ 1109.443730][T14594] BTRFS info (device loop2): max_inline set to 0
[ 1109.767510][T14348] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1110.279988][ T5771] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1111.148996][T14635] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1112.050101][T14646] input: syz0 as /devices/virtual/input/input25
[ 1113.496192][T14348] veth0_vlan: entered promiscuous mode
[ 1113.560676][T14664] netlink: 'syz.6.2996': attribute type 10 has an invalid length.
[ 1113.721562][T14664] 8021q: adding VLAN 0 to HW filter on device team0
[ 1113.792658][T14664] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1113.896605][T14348] veth1_vlan: entered promiscuous mode
[ 1114.495708][T14348] veth0_macvtap: entered promiscuous mode
[ 1114.599184][T14348] veth1_macvtap: entered promiscuous mode
[ 1115.580173][T14676] loop7: detected capacity change from 0 to 32768
[ 1115.654290][T14676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3000 (14676)
[ 1115.684488][T14676] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1115.695238][T14676] BTRFS info (device loop7): using crc32c checksum algorithm
[ 1115.745951][T14348] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1115.815599][T14348] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1115.907680][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'.
[ 1116.118592][T14676] BTRFS info (device loop7): enabling ssd optimizations
[ 1116.125915][T14676] BTRFS info (device loop7): turning on async discard
[ 1116.133540][T14676] BTRFS info (device loop7): enabling free space tree
[ 1116.310369][   T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.346377][   T56] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.400410][   T56] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.552428][T13820] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1116.619204][   T56] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.559194][T14712] loop2: detected capacity change from 0 to 16
[ 1117.622712][T14712] erofs (device loop2): mounted with root inode @ nid 36.
[ 1117.766218][   T29] audit: type=1800 audit(1773577452.649:301): pid=14712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3006" name="file1" dev="loop2" ino=86 res=0 errno=0
[ 1119.319997][T14731] loop5: detected capacity change from 0 to 64
[ 1119.629612][   T29] audit: type=1800 audit(1773577454.519:302): pid=14731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3011" name="file1" dev="loop5" ino=5 res=0 errno=0
[ 1119.754770][   T29] audit: type=1800 audit(1773577454.549:303): pid=14731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3011" name="file1" dev="loop5" ino=5 res=0 errno=0
[ 1121.695030][T14760] loop7: detected capacity change from 0 to 512
[ 1121.776514][T14760] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1122.029886][T14760] EXT4-fs (loop7): 1 truncate cleaned up
[ 1122.088664][T14760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1122.690080][T13820] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1125.197819][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1125.959507][T14813] overlayfs: refusing to follow metacopy origin for (/file1)
[ 1126.148451][T14815] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.475579][T14815] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.753251][T14815] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.918674][T12206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1126.926740][T12206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1127.025698][T14815] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1127.465036][T12206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1127.519640][T12206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1127.627390][T12206] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1127.848875][   T35] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1127.943220][   T57] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.210501][ T4131] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.247305][T14862] loop7: detected capacity change from 0 to 128
[ 1132.340023][T12084] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1132.715358][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3054'.
[ 1133.359640][T14888] loop6: detected capacity change from 0 to 40427
[ 1133.427359][T14888] F2FS-fs (loop6): Image doesn't support compression
[ 1133.434307][T14888] F2FS-fs (loop6): build fault injection rate: 690
[ 1133.467707][T12084] usb 8-1: Using ep0 maxpacket: 16
[ 1133.500428][T14888] F2FS-fs (loop6): invalid crc value
[ 1133.526792][T12084] usb 8-1: config 0 has an invalid interface number: 41 but max is 0
[ 1133.560382][T12084] usb 8-1: config 0 has no interface number 0
[ 1133.868199][T12084] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1133.896480][T14888] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1133.907695][T14888] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1133.917904][T12084] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1133.934122][T12084] usb 8-1: config 0 interface 41 has no altsetting 0
[ 1133.990679][   T29] audit: type=1800 audit(1773577468.879:304): pid=14888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3055" name="file1" dev="loop6" ino=10 res=0 errno=0
[ 1134.027707][T12084] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1134.091697][T12084] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.193723][T12084] usb 8-1: Product: syz
[ 1134.200803][T12084] usb 8-1: Manufacturer: syz
[ 1134.205624][T12084] usb 8-1: SerialNumber: syz
[ 1134.240317][T12084] usb 8-1: config 0 descriptor??
[ 1134.249885][T14885] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1134.266041][T13235] syz-executor: attempt to access beyond end of device
[ 1134.266041][T13235] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1134.271101][T14885] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1134.347979][T13235] CPU: 1 UID: 0 PID: 13235 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[ 1134.348191][T13235] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1134.348256][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1134.348343][T13235] Call Trace:
[ 1134.348402][T13235]  <TASK>
[ 1134.348459][T13235]  __dump_stack+0x26/0x30
[ 1134.348653][T13235]  dump_stack_lvl+0x14c/0x1c0
[ 1134.348832][T13235]  dump_stack+0x1e/0x25
[ 1134.348998][T13235]  f2fs_handle_critical_error+0xa6f/0xc20
[ 1134.349257][T13235]  f2fs_stop_checkpoint+0x65/0x80
[ 1134.349469][T13235]  f2fs_write_end_io+0x12e6/0x2560
[ 1134.349700][T13235]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1134.349853][T13235]  bio_endio+0x1006/0x1160
[ 1134.350020][T13235]  submit_bio_noacct+0x533/0x2960
[ 1134.350247][T13235]  submit_bio+0x57a/0x620
[ 1134.350421][T13235]  f2fs_submit_write_bio+0x115/0x350
[ 1134.350646][T13235]  __submit_merged_bio+0x16f/0x780
[ 1134.350855][T13235]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1134.351086][T13235]  __submit_merged_write_cond+0x4ba/0xae0
[ 1134.351324][T13235]  f2fs_write_data_pages+0x5073/0x5e10
[ 1134.351701][T13235]  ? kmsan_get_metadata+0xf1/0x160
[ 1134.351919][T13235]  ? folio_batch_move_lru+0x6a2/0x6d0
[ 1134.352137][T13235]  ? __msan_warning+0x1b/0x30
[ 1134.352322][T13235]  ? filter_irq_stacks+0x13f/0x190
[ 1134.352537][T13235]  ? stack_depot_save_flags+0x35/0x790
[ 1134.352711][T13235]  ? kmsan_get_metadata+0xf1/0x160
[ 1134.352935][T13235]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1134.353152][T13235]  ? kmsan_get_metadata+0xf1/0x160
[ 1134.353361][T13235]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1134.353585][T13235]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1134.353807][T13235]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1134.354051][T13235]  do_writepages+0x3f2/0x860
[ 1134.354217][T13235]  ? _raw_spin_unlock+0x30/0x50
[ 1134.354424][T13235]  ? wbc_attach_and_unlock_inode+0x131/0x660
[ 1134.354639][T13235]  filemap_fdatawrite+0x207/0x260
[ 1134.354910][T13235]  f2fs_sync_dirty_inodes+0x2aa/0xaa0
[ 1134.355115][T13235]  f2fs_write_checkpoint+0x10e1/0x3d20
[ 1134.355442][T13235]  kill_f2fs_super+0x320/0x990
[ 1134.355665][T13235]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1134.355828][T13235]  deactivate_locked_super+0xcb/0x3c0
[ 1134.356024][T13235]  deactivate_super+0x12f/0x140
[ 1134.356202][T13235]  cleanup_mnt+0x7eb/0x870
[ 1134.356383][T13235]  ? __pfx___cleanup_mnt+0x10/0x10
[ 1134.356559][T13235]  __cleanup_mnt+0x22/0x30
[ 1134.356715][T13235]  task_work_run+0x208/0x2b0
[ 1134.356940][T13235]  exit_to_user_mode_loop+0x306/0x1b60
[ 1134.357158][T13235]  ? user_path_at+0x1fc/0x330
[ 1134.357350][T13235]  ? __x64_sys_umount+0x1dc/0x250
[ 1134.357576][T13235]  do_syscall_64+0x24d/0xf80
[ 1134.357741][T13235]  ? clear_bhb_loop+0x50/0xa0
[ 1134.357910][T13235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1134.358074][T13235] RIP: 0033:0x7f38ddf9d9d7
[ 1134.358194][T13235] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1134.358326][T13235] RSP: 002b:00007ffd28431e78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1134.358469][T13235] RAX: 0000000000000000 RBX: 00007f38de032050 RCX: 00007f38ddf9d9d7
[ 1134.358577][T13235] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd28431f30
[ 1134.358674][T13235] RBP: 00007ffd28431f30 R08: 00007ffd28432f30 R09: 00000000ffffffff
[ 1134.358780][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd28432fc0
[ 1134.358876][T13235] R13: 00007f38de032050 R14: 0000000000114fc4 R15: 00007ffd28433000
[ 1134.359019][T13235]  </TASK>
[ 1135.140260][T14901] loop2: detected capacity change from 0 to 1024
[ 1135.480004][T13235] F2FS-fs (loop6): Remounting filesystem read-only
[ 1135.666663][T14901] hfsplus: xattr search failed
[ 1135.823161][T14911] input: syz0 as /devices/virtual/input/input26
[ 1136.289864][T12084] usb 8-1: can't set config #0, error -71
[ 1136.332571][T12084] usb 8-1: USB disconnect, device number 2
[ 1137.172141][T14916] netlink: 204 bytes leftover after parsing attributes in process `syz.8.3065'.
[ 1137.312298][T14916] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3065'.
[ 1137.518125][T14916] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3065'.
[ 1137.966393][T14924] vcan0: tx drop: invalid sa for name 0x0000000000004000
[ 1138.687641][T12208] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[ 1138.693978][T12208] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[ 1138.712554][T13821] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1141.533243][T14943] loop8: detected capacity change from 0 to 128
[ 1141.822265][T14943] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1142.018740][T14943] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1142.401314][T14948] team_slave_0: entered promiscuous mode
[ 1142.407556][T14948] team_slave_1: entered promiscuous mode
[ 1142.587686][T14948] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1142.745750][T14948] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[ 1143.221798][T14348] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1145.015452][T14979] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1146.876863][T15002] loop2: detected capacity change from 0 to 32768
[ 1146.955248][T15002] jfs_unlink: dtDelete returned -2
[ 1147.644906][T15007] loop8: detected capacity change from 0 to 4096
[ 1148.342055][T15007] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1148.428142][T15007] ntfs3(loop8): Failed to load $Extend (-22).
[ 1148.434507][T15007] ntfs3(loop8): Failed to initialize $Extend.
[ 1148.676595][   T29] audit: type=1800 audit(1773577483.559:305): pid=15007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3091" name="file1" dev="loop8" ino=35 res=0 errno=0
[ 1151.714468][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3108'.
[ 1153.397108][   T29] audit: type=1326 audit(1773577488.279:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15069 comm="syz.8.3112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17c319c799 code=0x0
[ 1154.654152][T15085] loop6: detected capacity change from 0 to 512
[ 1154.722416][T15085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1154.805032][T15085] EXT4-fs error (device loop6): ext4_quota_enable:7192: comm syz.6.3117: inode #50331648: comm syz.6.3117: iget: illegal inode #
[ 1154.837745][T15085] loop6: lost filesystem error report for type 5 error -117
[ 1154.847103][    C0] EXT4-fs (loop6): error count since last fsck: 1
[ 1154.861247][    C0] EXT4-fs (loop6): initial error at time 1773577489: ext4_quota_enable:7192
[ 1154.870394][    C0] EXT4-fs (loop6): last error at time 1773577489: ext4_quota_enable:7192
[ 1154.891332][T15085] EXT4-fs error (device loop6): ext4_quota_enable:7195: comm syz.6.3117: Bad quota inode: 50331648, type: 2
[ 1154.951278][T15085] loop6: lost filesystem error report for type 5 error -117
[ 1154.957610][T15085] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix.
[ 1154.996339][T15092] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1155.079523][T15085] EXT4-fs (loop6): mount failed
[ 1155.153103][T15092] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1155.434085][T15098] netlink: 'syz.2.3121': attribute type 4 has an invalid length.
[ 1155.486560][T15099] loop5: detected capacity change from 0 to 128
[ 1155.598069][T15099] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1155.672663][T15099] hpfs: filesystem error: improperly stopped
[ 1155.727189][T15099] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1155.735198][T15099] hpfs: You really don't want any checks? You are crazy...
[ 1155.874564][T15099] hpfs: hpfs_map_sector(): read error
[ 1155.927285][T15099] hpfs: code page support is disabled
[ 1155.952772][T15099] hpfs: hpfs_map_4sectors(): unaligned read
[ 1155.992822][T15099] hpfs: hpfs_map_4sectors(): unaligned read
[ 1156.006170][T15103] syz_tun: entered allmulticast mode
[ 1156.022801][T15099] hpfs: filesystem error: unable to find root dir
[ 1156.068680][T15103] syz_tun: left allmulticast mode
[ 1156.192100][T15099] hpfs: hpfs_map_4sectors(): unaligned read
[ 1156.941808][T15120] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3129'.
[ 1159.375496][T15146] loop7: detected capacity change from 0 to 2048
[ 1159.464658][T15146] EXT4-fs: Ignoring removed oldalloc option
[ 1159.681979][T15146] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[ 1159.728554][T15146] System zones: 0-7
[ 1159.754928][T15146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1159.870596][T15146] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.3139: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[ 1160.042737][T15146] EXT4-fs (loop7): Remounting filesystem read-only
[ 1160.090110][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3144'.
[ 1160.206296][T15166] loop6: detected capacity change from 0 to 128
[ 1160.350821][T15166] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1160.472260][T15166] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1160.826186][T13820] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1161.350813][T13235] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1161.498347][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1161.724884][   T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1161.769920][   T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1161.827341][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1161.883738][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1161.956469][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1162.028061][   T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1162.068351][   T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1162.103577][   T10] usb 6-1: Product: syz
[ 1162.117228][   T10] usb 6-1: Manufacturer: syz
[ 1162.188092][   T10] cdc_wdm 6-1:1.0: skipping garbage
[ 1162.217770][   T10] cdc_wdm 6-1:1.0: skipping garbage
[ 1162.256573][   T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1162.274540][   T10] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1162.377800][T15192] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3152'.
[ 1163.189524][    C1] cdc_wdm 6-1:1.0: Unexpected error -71
[ 1163.195524][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1163.198008][   T10] usb 6-1: USB disconnect, device number 17
[ 1163.202444][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1163.214594][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1163.235112][T15203] loop6: detected capacity change from 0 to 512
[ 1163.311850][T15203] EXT4-fs: inline encryption not supported
[ 1163.385520][T15204] loop8: detected capacity change from 0 to 512
[ 1163.393097][T15203] EXT4-fs: Ignoring removed i_version option
[ 1163.548544][T15203] EXT4-fs (loop6): 1 orphan inode deleted
[ 1163.611608][T15203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1163.746603][T15203] EXT4-fs (loop6): shut down requested (2)
[ 1163.770549][T15204] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1164.251842][T13235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1164.525862][T15217] syzkaller1: entered promiscuous mode
[ 1164.594545][T14348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1164.627785][T15217] syzkaller1: entered allmulticast mode
[ 1166.426750][T15247] loop6: detected capacity change from 0 to 512
[ 1166.544679][T15247] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1166.747675][T15247] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3165: bg 0: block 104: invalid block bitmap
[ 1166.817986][T15247] loop6: lost filesystem error report for type 5 error -117
[ 1166.823030][T15247] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem
[ 1166.830824][    C0] EXT4-fs (loop6): error count since last fsck: 1
[ 1166.830920][    C0] EXT4-fs (loop6): initial error at time 1773577501: ext4_validate_block_bitmap:432
[ 1166.831058][    C0] EXT4-fs (loop6): last error at time 1773577501: ext4_validate_block_bitmap:432
[ 1166.998070][T15247] loop6: lost filesystem error report for type 5 error -117
[ 1167.092230][T15247] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3165: invalid indirect mapped block 1 (level 1)
[ 1167.227380][T15247] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1167.261904][T15247] EXT4-fs (loop6): 1 truncate cleaned up
[ 1167.371397][T15247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1167.544290][T15247] EXT4-fs (loop6): shut down requested (0)
[ 1167.688731][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1167.878456][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 1167.966066][   T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[ 1168.020727][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.063091][   T10] usb 9-1: Product: syz
[ 1168.087429][   T10] usb 9-1: Manufacturer: syz
[ 1168.092295][   T10] usb 9-1: SerialNumber: syz
[ 1168.300826][T13235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1169.481702][   T10] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1169.563042][   T10] usb 9-1: USB disconnect, device number 2
[ 1169.655305][T15288] loop6: detected capacity change from 0 to 1024
[ 1169.754829][T15288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1170.454779][T13235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1171.057617][T15306] loop8: detected capacity change from 0 to 1024
[ 1171.227648][T15311] loop5: detected capacity change from 0 to 1024
[ 1171.451834][   T29] audit: type=1800 audit(1773577506.329:307): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3182" name="file1" dev="loop5" ino=20 res=0 errno=0
[ 1171.770756][T12206] hfsplus: b-tree write err: -5, ino 25
[ 1171.812325][T12206] hfsplus: b-tree write err: -5, ino 4
[ 1171.852332][T12206] hfsplus: b-tree write err: -5, ino 2
[ 1172.199557][T15322] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.3185'.
[ 1172.948957][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3187'.
[ 1173.098071][T15327] netlink: 'syz.7.3187': attribute type 26 has an invalid length.
[ 1173.106158][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3187'.
[ 1173.146072][T15324] loop8: detected capacity change from 0 to 32768
[ 1173.156223][T15324] btrfs: Deprecated parameter 'usebackuproot'
[ 1173.162748][T15324] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1173.176392][T15324] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3186 (15324)
[ 1173.218252][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3187'.
[ 1173.245408][T15324] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1173.255971][T15324] BTRFS info (device loop8): using crc32c checksum algorithm
[ 1173.263980][T15324] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1173.277866][T15327] netlink: 'syz.7.3187': attribute type 26 has an invalid length.
[ 1173.314275][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3187'.
[ 1173.481156][ T4131] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0
[ 1173.584005][T15324] BTRFS warning (device loop8): couldn't read tree root
[ 1173.592553][T15324] BTRFS warning (device loop8): try to load backup roots slot 1
[ 1173.612154][T12206] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0
[ 1173.757570][T15324] BTRFS warning (device loop8): couldn't read tree root
[ 1173.764805][T15324] BTRFS warning (device loop8): try to load backup roots slot 2
[ 1173.792470][   T35] BTRFS warning (device loop8): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1
[ 1173.903050][T15324] BTRFS warning (device loop8): couldn't read tree root
[ 1173.915146][T15324] BTRFS warning (device loop8): try to load backup roots slot 3
[ 1173.983057][T15324] BTRFS info (device loop8): rebuilding free space tree
[ 1174.063205][T15324] BTRFS info (device loop8): disabling free space tree
[ 1174.071380][T15324] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1174.081721][T15324] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1174.114227][T15324] BTRFS info (device loop8): enabling ssd optimizations
[ 1174.122153][T15324] BTRFS info (device loop8): turning off barriers
[ 1174.129099][T15324] BTRFS info (device loop8): turning on sync discard
[ 1174.136006][T15324] BTRFS info (device loop8): enabling disk space caching
[ 1174.143605][T15324] BTRFS info (device loop8): force clearing of disk cache
[ 1174.151181][T15324] BTRFS info (device loop8): enabling auto defrag
[ 1174.157943][T15324] BTRFS info (device loop8): trying to use backup root at mount time
[ 1174.166233][T15324] BTRFS info (device loop8): max_inline set to 0
[ 1175.027194][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1175.237467][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1175.288946][T14348] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1175.347326][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1175.417582][   T10] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1175.441957][T15369] loop7: detected capacity change from 0 to 128
[ 1175.457629][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.530692][   T10] usb 7-1: config 0 descriptor??
[ 1176.078912][   T10] hid-steam 0003:28DE:1142.0023: unknown main item tag 0x0
[ 1176.146379][   T10] hid-steam 0003:28DE:1142.0023: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[ 1176.257544][   T10] hid-steam 0003:28DE:1142.0023: Steam wireless receiver connected
[ 1176.399395][   T10] hid-steam 0003:28DE:1142.0024: unknown main item tag 0x0
[ 1176.510626][   T10] hid-steam 0003:28DE:1142.0024: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[ 1176.668667][   T10] usb 7-1: USB disconnect, device number 4
[ 1176.766253][   T10] hid-steam 0003:28DE:1142.0023: Steam wireless receiver disconnected
[ 1177.721403][T15384] fido_id[15384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1179.815729][T15419] netlink: 'syz.7.3210': attribute type 18 has an invalid length.
[ 1179.907710][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3210'.
[ 1180.030560][T12084] libceph: connect (1)[c::]:6789 error -101
[ 1180.082099][T12084] libceph: mon0 (1)[c::]:6789 connect error
[ 1180.157269][   T10] libceph: connect (1)[c::]:6789 error -101
[ 1180.163722][   T10] libceph: mon0 (1)[c::]:6789 connect error
[ 1180.229344][T15419] netlink: 'syz.7.3210': attribute type 18 has an invalid length.
[ 1180.288336][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3210'.
[ 1180.387364][T12206] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1180.403845][ T1028] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1180.424153][ T1028] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1180.438686][   T10] libceph: connect (1)[c::]:6789 error -101
[ 1180.445139][   T10] libceph: mon0 (1)[c::]:6789 connect error
[ 1180.458677][T12084] libceph: connect (1)[c::]:6789 error -101
[ 1180.467400][T12084] libceph: mon0 (1)[c::]:6789 connect error
[ 1180.510476][ T1028] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1180.737751][T15427] ceph: No mds server is up or the cluster is laggy
[ 1180.770498][T15432] ceph: No mds server is up or the cluster is laggy
[ 1181.081950][T15442] netlink: 'syz.8.3216': attribute type 3 has an invalid length.
[ 1182.142506][T15460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1182.323165][T15460] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1182.481762][T15462] loop7: detected capacity change from 0 to 512
[ 1182.546012][T15462] EXT4-fs: Ignoring removed bh option
[ 1182.598910][T15462] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1182.676287][T15462] EXT4-fs (loop7): 1 truncate cleaned up
[ 1182.690275][T15462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1182.873651][   T29] audit: type=1800 audit(1773577517.759:308): pid=15462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3223" name="file1" dev="loop7" ino=15 res=0 errno=0
[ 1183.838937][T11605] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1184.035076][T15477] overlayfs: failed to verify upper (111/file1, ino=630, err=-116)
[ 1184.124908][T11605] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1184.140361][T15477] overlayfs: failed to verify index dir 'upper' xattr
[ 1184.186023][T11605] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1184.218130][T15477] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[ 1184.233641][T11605] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1184.283435][T11605] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1184.351565][T11605] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.437582][T11605] usb 9-1: config 0 descriptor??
[ 1184.467752][T15483] loop2: detected capacity change from 0 to 1024
[ 1185.031260][T11605] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1185.157229][T15489] hfsplus: b-tree write err: -5, ino 3
[ 1185.429049][T13820] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1186.267903][    C1] plantronics 0003:047F:FFFF.0025: usb_submit_urb(ctrl) failed: -1
[ 1186.643310][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1187.061689][T12084] usb 9-1: USB disconnect, device number 3
[ 1187.081250][T15511] kernel read not supported for file /#>b@ (pid: 15511 comm: syz.7.3237)
[ 1187.225823][   T29] audit: type=1800 audit(1773577522.099:309): pid=15511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3237" name="#>b@" dev="mqueue" ino=45504 res=0 errno=0
[ 1187.339255][T11605] kernel read not supported for file /#>b@ (pid: 11605 comm: kworker/1:0)
[ 1189.275520][T15541] loop2: detected capacity change from 0 to 256
[ 1189.533349][T15541] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d)
[ 1190.982563][T15570] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[ 1191.356567][T15576] loop8: detected capacity change from 0 to 1024
[ 1191.376701][T15576] EXT4-fs: Ignoring removed orlov option
[ 1191.385028][T15576] EXT4-fs: Ignoring removed bh option
[ 1191.648093][T15576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1191.776349][   T29] audit: type=1800 audit(1773577526.659:310): pid=15576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3258" name="bus" dev="loop8" ino=18 res=0 errno=0
[ 1192.009792][T15586] loop2: detected capacity change from 0 to 1024
[ 1192.246484][T14348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1192.680174][T15597] xt_hashlimit: max too large, truncated to 1048576
[ 1192.710040][T15597] xt_hashlimit: Unknown mode mask 20000, kernel too old?
[ 1193.290577][  T194] hfsplus: b-tree write err: -5, ino 3
[ 1193.927822][T15612] netlink: 'syz.7.3269': attribute type 30 has an invalid length.
[ 1194.068741][T15613] netlink: 'syz.7.3269': attribute type 30 has an invalid length.
[ 1194.117401][T11605] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1194.382072][T11605] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1194.438862][T11605] usb 9-1: string descriptor 0 read error: -22
[ 1194.459983][T11605] usb 9-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40
[ 1194.474168][T11605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.041299][T11605] greenasia 0003:0E8F:0012.0026: invalid report_count 463869145
[ 1195.054609][T15618] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3271'.
[ 1195.090396][T11605] greenasia 0003:0E8F:0012.0026: item 0 4 1 9 parsing failed
[ 1195.133791][T11605] greenasia 0003:0E8F:0012.0026: parse failed
[ 1195.200488][T11605] greenasia 0003:0E8F:0012.0026: probe with driver greenasia failed with error -22
[ 1195.214006][T15619] loop6: detected capacity change from 0 to 512
[ 1195.311581][T11605] usb 9-1: USB disconnect, device number 4
[ 1195.462676][T15619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1195.527872][T15619] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1195.625134][T15623] ptrace attach of "./syz-executor exec"[15626] was attempted by "./syz-executor exec"[15623]
[ 1195.729843][T15628] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.085279][T13235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1196.871801][T15639] xt_hashlimit: size too large, truncated to 1048576
[ 1197.754545][T15641] loop5: detected capacity change from 0 to 4096
[ 1197.789737][T15641] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 1198.151283][T15641] ntfs3(loop5): ino=1a, mi_enum_attr
[ 1198.180525][T15641] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1198.234904][T15641] ntfs3(loop5): ino=1a, mi_enum_attr
[ 1198.280601][T15641] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[ 1199.330687][T15664] loop2: detected capacity change from 0 to 128
[ 1199.463145][T15664] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1199.508527][T15664] hpfs: filesystem error: improperly stopped
[ 1199.514805][T15664] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1199.602213][T15664] hpfs: You really don't want any checks? You are crazy...
[ 1199.616636][T15668] loop6: detected capacity change from 0 to 512
[ 1199.647486][T15664] hpfs: Code page index out of array
[ 1199.652978][T15664] hpfs: code page support is disabled
[ 1199.717646][T15664] hpfs: hpfs_map_4sectors(): unaligned read
[ 1199.755648][T15664] hpfs: hpfs_map_4sectors(): unaligned read
[ 1199.816227][T15674] loop5: detected capacity change from 0 to 128
[ 1199.840859][T15664] hpfs: filesystem error: unable to find root dir
[ 1199.915163][T15668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1199.982548][T15674] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1200.024123][T15668] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1200.174248][T15674] ext4 filesystem being mounted at /515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1200.935353][T13235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1201.032119][T15687] sg_read: process 119 (syz.8.3289) changed security contexts after opening file descriptor, this is not allowed.
[ 1201.228733][ T7817] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1201.869081][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'.
[ 1201.927780][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'.
[ 1202.542354][T15693] loop5: detected capacity change from 0 to 4096
[ 1203.675158][T15715] loop6: detected capacity change from 0 to 4096
[ 1204.037301][T15725] vivid-000: disconnect
[ 1204.864532][T15732] loop2: detected capacity change from 0 to 1024
[ 1205.256784][T15732] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1205.264668][T15732] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1205.345600][T15732] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1205.410926][T15732] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1205.630315][   T32] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1205.643189][   T32] hfsplus: request for non-existent node 16777216 in B*Tree
[ 1206.360027][T15789] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3307'.
[ 1209.476116][T15837] netlink: 'syz.7.3314': attribute type 4 has an invalid length.
[ 1209.921985][T15724] vivid-000: reconnect
[ 1210.522662][ T5831] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1210.719041][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1210.752579][ T5831] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 1210.797304][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1210.948512][ T5831] usb 3-1: config 0 descriptor??
[ 1211.111270][ T5831] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1213.708163][T15552] usb 3-1: USB disconnect, device number 26
[ 1214.152692][T15897] loop6: detected capacity change from 0 to 128
[ 1214.279647][T15897] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1214.356706][T15897] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1214.926114][T13235] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1216.039478][T15929] loop8: detected capacity change from 0 to 128
[ 1216.165128][T15929] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1216.246594][T15929] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1216.411164][T13868] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1216.593975][T13868] usb 6-1: Using ep0 maxpacket: 32
[ 1216.643638][T13868] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 1216.695754][T13868] usb 6-1: config 0 has no interface number 0
[ 1216.743821][T13868] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1216.847336][ T5837] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1216.849033][T13868] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1216.943226][T13868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.983778][T13868] usb 6-1: Product: syz
[ 1216.997064][T13868] usb 6-1: Manufacturer: syz
[ 1217.024878][T13868] usb 6-1: SerialNumber: syz
[ 1217.067534][ T5837] usb 8-1: Using ep0 maxpacket: 16
[ 1217.090740][T13868] usb 6-1: config 0 descriptor??
[ 1217.119978][ T5837] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1217.158654][T15933] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1217.189730][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1217.252290][T14348] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1217.302165][ T5837] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1217.340631][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.394731][ T5837] usb 8-1: Product: syz
[ 1217.417270][ T5837] usb 8-1: Manufacturer: syz
[ 1217.422128][ T5837] usb 8-1: SerialNumber: syz
[ 1217.470310][T15933] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1217.541904][ T5837] usb 8-1: config 0 descriptor??
[ 1217.641491][ T5837] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1217.717587][ T5837] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[ 1218.240429][ T5837] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[ 1218.289585][ T5837] em28xx 8-1:0.0: Config register raw data: 0xa6
[ 1218.300651][ T5837] em28xx 8-1:0.0: I2S Audio (1 sample rate(s))
[ 1218.347317][ T5837] em28xx 8-1:0.0: No AC97 audio processor
[ 1218.669151][T13868] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1218.729169][T13868] asix 6-1:0.188: probe with driver asix failed with error -71
[ 1218.747755][ T5837] usb 8-1: USB disconnect, device number 3
[ 1218.862406][T13868] usb 6-1: USB disconnect, device number 18
[ 1222.435589][T16007] vlan2: entered allmulticast mode
[ 1222.489024][T16007] bridge0: port 3(vlan2) entered blocking state
[ 1222.526542][T16007] bridge0: port 3(vlan2) entered disabled state
[ 1222.596447][T16007] vlan2: entered promiscuous mode
[ 1223.025721][T16015] netlink: 'syz.6.3374': attribute type 12 has an invalid length.
[ 1223.045054][T16015] netlink: 'syz.6.3374': attribute type 39 has an invalid length.
[ 1223.547564][T16021] loop8: detected capacity change from 0 to 256
[ 1224.162527][T16030] loop6: detected capacity change from 0 to 1764
[ 1225.315025][T11605] IPVS: starting estimator thread 0...
[ 1225.444503][T16052] IPVS: using max 192 ests per chain, 9600 per kthread
[ 1225.700488][T16051] loop6: detected capacity change from 0 to 2048
[ 1225.750349][T16051] EXT4-fs: Ignoring removed bh option
[ 1225.756357][T16051] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1226.010093][T16051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1226.106049][T16051] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1226.340257][   T29] audit: type=1800 audit(1773577561.229:311): pid=16051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3386" name="file0" dev="loop6" ino=13 res=0 errno=0
[ 1226.615984][T16067] loop5: detected capacity change from 0 to 1024
[ 1226.790737][T16067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1226.852107][T13235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1226.886832][T16067] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3392: Allocating blocks 449-513 which overlap fs metadata
[ 1227.074666][T16067] EXT4-fs (loop5): pa ffff888123bc7ee0: logic 304, phys. 417, len 6
[ 1227.083688][T16067] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 1, pa_free 5
[ 1227.466843][T16080] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3397'.
[ 1228.180399][ T7817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1228.798655][ T5837] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1228.987884][ T5837] usb 7-1: Using ep0 maxpacket: 8
[ 1229.018195][ T5837] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1229.026672][ T5837] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1229.107732][ T5837] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1229.148106][ T5837] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1229.213213][ T5837] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1229.285260][ T5837] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1229.337447][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1229.693699][ T5837] usb 7-1: usb_control_msg returned -32
[ 1229.701320][ T5837] usbtmc 7-1:16.0: can't read capabilities
[ 1230.469036][T16114] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 42
[ 1230.704533][ T5835] usb 7-1: USB disconnect, device number 5
[ 1232.201102][T16133] loop8: detected capacity change from 0 to 2048
[ 1232.342369][T16133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1234.543339][T16155] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[ 1235.788168][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3420'.
[ 1235.813295][T16161] loop6: detected capacity change from 0 to 4096
[ 1235.986336][T16160] loop8: detected capacity change from 0 to 32768
[ 1236.068362][T16160] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3417 (16160)
[ 1236.095744][T16160] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1236.106289][T16160] BTRFS info (device loop8): using crc32c checksum algorithm
[ 1236.114423][T16160] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1236.253157][T16175] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1236.351697][T16170] loop7: detected capacity change from 0 to 256
[ 1236.422899][T16160] BTRFS info (device loop8): rebuilding free space tree
[ 1236.472967][T16160] BTRFS info (device loop8): disabling free space tree
[ 1236.480610][T16160] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1236.491569][T16160] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1236.517781][T16160] BTRFS info (device loop8): enabling ssd optimizations
[ 1236.524972][T16160] BTRFS info (device loop8): turning on async discard
[ 1236.532179][T16160] BTRFS info (device loop8): enabling disk space caching
[ 1236.539518][T16160] BTRFS info (device loop8): force clearing of disk cache
[ 1236.546856][T16160] BTRFS info (device loop8): use zstd compression, level 3
[ 1236.671222][T16170] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[ 1237.355097][T14348] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1237.483332][T13820] exFAT-fs (loop7): error, data valid size is invalid(-9223372036854774758)
[ 1237.535008][T13820] exFAT-fs (loop7): error, data valid size is invalid(-9223372036854774758)
[ 1237.638745][T16191] KVM: debugfs: duplicate directory 16191-4
[ 1238.684806][T15781] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1238.788064][T15781] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.122523][T15781] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1239.190234][T15781] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.406742][T15781] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1239.427793][ T5835] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1239.467438][T15781] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.479110][ T5837] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1239.638931][ T5835] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[ 1239.667212][ T5837] usb 3-1: Using ep0 maxpacket: 8
[ 1239.675123][T15781] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1239.692300][ T5835] usb 6-1: config 0 has no interface number 0
[ 1239.709414][ T5835] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1239.721266][T15781] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.752119][ T5837] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1239.777240][ T5835] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1239.795765][ T5837] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1239.819625][ T5835] usb 6-1: config 0 interface 255 has no altsetting 0
[ 1239.838405][ T5835] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1239.853036][ T5837] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1239.864063][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1239.894024][ T5837] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1239.924578][ T5837] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1239.950464][ T5835] usb 6-1: config 0 descriptor??
[ 1239.979539][ T5837] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1240.018550][ T5835] ums-realtek 6-1:0.255: USB Mass Storage device detected
[ 1240.027457][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.291549][ T5835] usb 6-1: USB disconnect, device number 19
[ 1240.735832][T15781] bridge_slave_1: left allmulticast mode
[ 1240.746244][T15781] bridge_slave_1: left promiscuous mode
[ 1240.770225][T15781] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.819657][T15781] bridge_slave_0: left allmulticast mode
[ 1240.825559][T15781] bridge_slave_0: left promiscuous mode
[ 1240.834027][T15781] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1240.936286][T16215] usbtmc 3-1:16.0: simple usb_control_msg failed -32
[ 1240.959890][ T5837] usb 3-1: USB disconnect, device number 27
[ 1241.781641][T15781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1241.839381][T15781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1241.877876][T15781] bond0 (unregistering): Released all slaves
[ 1242.316265][T16222] loop5: detected capacity change from 0 to 256
[ 1242.544048][T16222] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d)
[ 1243.215446][T15781] hsr_slave_0: left promiscuous mode
[ 1243.252143][T15781] hsr_slave_1: left promiscuous mode
[ 1243.322543][T15781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1243.367078][T15781] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1243.403788][T15781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1243.478768][T15781] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1243.662550][T15781] veth1_macvtap: left promiscuous mode
[ 1243.690510][T10219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1243.697900][T15781] veth0_macvtap: left promiscuous mode
[ 1243.704344][T15781] veth1_vlan: left promiscuous mode
[ 1243.729078][T10219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1243.733353][T15781] veth0_vlan: left promiscuous mode
[ 1243.762001][T10219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1243.801691][T10219] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1243.822361][T10219] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1244.014969][T13821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1244.039020][T13821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1244.095180][T13821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1244.170598][T13821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1244.212461][T13821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1245.240859][T16243] loop8: detected capacity change from 0 to 32768
[ 1245.342101][T16243] JBD2: Ignoring recovery information on journal
[ 1245.352449][T16243] jbd2_journal_bmap: journal block not found at offset 32 on loop8-75
[ 1245.361106][T16243] JBD2: bad block at offset 32
[ 1245.416195][T16243] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1246.192085][T14348] ocfs2: Unmounting device (7,8) on (node local)
[ 1246.367861][T10219] Bluetooth: hci4: command tx timeout
[ 1247.854220][T15781] team0 (unregistering): Port device team_slave_1 removed
[ 1248.082718][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1248.131766][T15781] team0 (unregistering): Port device team_slave_0 removed
[ 1248.334534][T16279] loop6: detected capacity change from 0 to 512
[ 1248.412870][T16279] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1248.456425][T10219] Bluetooth: hci4: command tx timeout
[ 1248.541455][T16279] EXT4-fs (loop6): 1 truncate cleaned up
[ 1248.629317][T16279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1248.917380][T16283] loop5: detected capacity change from 0 to 1024
[ 1249.063444][T16283] hfsplus: invalid btree extent records (0 size)
[ 1249.137494][T16283] hfsplus: failed to load attributes file
[ 1249.371345][T13235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1249.756735][T16290] loop2: detected capacity change from 0 to 64
[ 1249.771954][T16290] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[ 1250.528376][T10219] Bluetooth: hci4: command tx timeout
[ 1250.578079][ T5837] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1250.791426][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1250.866402][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1250.909482][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1250.962909][ T5837] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1250.977274][T15552] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1251.006348][T16301] loop8: detected capacity change from 0 to 128
[ 1251.025792][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.080782][T16301] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1251.104956][ T5837] usb 6-1: config 0 descriptor??
[ 1251.164673][T16301] hpfs: filesystem error: improperly stopped
[ 1251.207037][T16301] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1251.208461][T15552] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1251.267686][T16301] hpfs: You really don't want any checks? You are crazy...
[ 1251.317184][T15552] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1251.353515][T16301] hpfs: hpfs_map_sector(): read error
[ 1251.402272][T16301] hpfs: code page support is disabled
[ 1251.411182][T15552] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1251.457401][T16301] hpfs: hpfs_map_4sectors(): unaligned read
[ 1251.476389][T15552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.503348][T16301] hpfs: hpfs_map_4sectors(): unaligned read
[ 1251.550222][T16301] hpfs: filesystem error: unable to find root dir
[ 1251.644972][T16301] openvswitch: netlink: IP tunnel attribute has 1620 unknown bytes.
[ 1251.662366][T15552] usb 7-1: config 0 descriptor??
[ 1251.921409][ T5837] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1252.255420][T15552] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0
[ 1252.494071][T15552] cp2112 0003:10C4:EA90.0028: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[ 1252.615571][T10219] Bluetooth: hci4: command tx timeout
[ 1252.716130][T15552] cp2112 0003:10C4:EA90.0028: Part Number: 0x82 Device Version: 0xFE
[ 1253.357922][T15552] cp2112 0003:10C4:EA90.0028: error reading lock byte: -71
[ 1253.484213][T15552] usb 7-1: USB disconnect, device number 6
[ 1253.513508][T16236] chnl_net:caif_netlink_parms(): no params data found
[ 1253.802574][ T5837] usb 6-1: USB disconnect, device number 20
[ 1253.992407][T16320] fido_id[16320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1254.829859][T16331] loop5: detected capacity change from 0 to 1024
[ 1255.098798][   T29] audit: type=1800 audit(1773577589.989:312): pid=16331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name="file1" dev="loop5" ino=20 res=0 errno=0
[ 1255.366675][T16339] vlan3: entered allmulticast mode
[ 1255.387823][T16339] dummy0: entered allmulticast mode
[ 1255.714536][T15781] hfsplus: b-tree write err: -5, ino 25
[ 1255.759120][T15781] hfsplus: b-tree write err: -5, ino 4
[ 1255.765066][T15781] hfsplus: b-tree write err: -5, ino 2
[ 1256.212876][T16236] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1256.248277][T16236] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1256.288596][T16236] bridge_slave_0: entered allmulticast mode
[ 1256.321636][T16236] bridge_slave_0: entered promiscuous mode
[ 1256.426579][T16236] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1256.469123][T16236] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1256.504051][T16236] bridge_slave_1: entered allmulticast mode
[ 1256.583117][T16236] bridge_slave_1: entered promiscuous mode
[ 1257.086420][T16236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1257.201735][T16236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1257.823105][T16236] team0: Port device team_slave_0 added
[ 1257.915702][T16236] team0: Port device team_slave_1 added
[ 1258.473037][T16236] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1258.506324][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1258.656109][T16236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1258.782494][T16236] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1258.810851][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1258.950693][T16236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1259.863405][T16236] hsr_slave_0: entered promiscuous mode
[ 1259.915001][T16236] hsr_slave_1: entered promiscuous mode
[ 1259.960519][T16236] debugfs: 'hsr0' already exists in 'hsr'
[ 1259.987824][T16236] Cannot create hsr debugfs directory
[ 1260.167355][ T5837] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1260.381312][ T5837] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1260.411861][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.456816][ T5837] usb 7-1: config 0 descriptor??
[ 1260.484541][ T5837] cp210x 7-1:0.0: cp210x converter detected
[ 1260.926083][ T5837] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1261.022327][ T5837] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1261.175609][ T5837] usb 7-1: USB disconnect, device number 7
[ 1261.276066][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1261.368620][ T5837] cp210x 7-1:0.0: device disconnected
[ 1262.109840][T16410] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1262.323122][ T5835] IPVS: starting estimator thread 0...
[ 1262.335708][T16236] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1262.432122][T16419] loop8: detected capacity change from 0 to 164
[ 1262.447517][T16418] IPVS: using max 192 ests per chain, 9600 per kthread
[ 1262.523501][T16236] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1262.673352][T16236] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1262.810168][T16236] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1263.101342][T16424] loop6: detected capacity change from 0 to 2048
[ 1263.231118][T16433] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1263.414683][   T29] audit: type=1800 audit(1773577598.280:313): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3493" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1263.784730][T16436] loop2: detected capacity change from 0 to 512
[ 1263.916108][T16436] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3497: inode has both inline data and extents flags
[ 1264.062169][T16436] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1264.067631][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1264.083578][    C1] EXT4-fs (loop2): initial error at time 1773577598: ext4_orphan_get:1391: inode 15
[ 1264.093431][    C1] EXT4-fs (loop2): last error at time 1773577598: ext4_orphan_get:1391: inode 15
[ 1264.119805][T16436] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3497: couldn't read orphan inode 15 (err -117)
[ 1264.196421][T16436] loop2: lost filesystem error report for type 5 error -117
[ 1264.244068][T16436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1264.600139][T16436] Invalid argument reading file caps for ./file0
[ 1264.836695][T16446] loop6: detected capacity change from 0 to 512
[ 1264.895931][T16446] EXT4-fs: Ignoring removed orlov option
[ 1265.003952][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1265.113627][T16236] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1265.238550][T16446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1265.350015][T16446] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1265.551521][T16236] 8021q: adding VLAN 0 to HW filter on device team0
[ 1265.596194][   T29] audit: type=1800 audit(1773577600.404:314): pid=16446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3500" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1265.732281][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1265.739914][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1265.789606][T16455] loop2: detected capacity change from 0 to 1024
[ 1266.004728][T15802] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1266.012377][T15802] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1266.106224][T12206] hfsplus: b-tree write err: -5, ino 3
[ 1266.237580][T16455] hfsplus: b-tree write err: -5, ino 3
[ 1266.282181][T16455] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1266.307595][T16455] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1266.406834][T13235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1266.947119][T15795] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1267.038052][T15795] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1267.093390][T15795] hfsplus: b-tree write err: -5, ino 3
[ 1267.451274][T16469] loop8: detected capacity change from 0 to 136
[ 1268.656502][T15795] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1269.262560][T16492] loop2: detected capacity change from 0 to 128
[ 1269.337650][T16492] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1269.388094][T16492] hpfs: filesystem error: improperly stopped
[ 1269.394377][T16492] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1269.492886][T16492] hpfs: You really don't want any checks? You are crazy...
[ 1269.507525][T16492] hpfs: Code page index out of array
[ 1269.526157][T16492] hpfs: code page support is disabled
[ 1269.548952][T16492] hpfs: hpfs_map_4sectors(): unaligned read
[ 1269.579565][T16492] hpfs: hpfs_map_4sectors(): unaligned read
[ 1269.617397][T16492] hpfs: filesystem error: unable to find root dir
[ 1269.785795][T16236] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1270.727378][T13821] Bluetooth: hci5: command 0x1003 tx timeout
[ 1270.735121][T10219] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1271.733399][T16524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3520'.
[ 1275.387836][T16236] veth0_vlan: entered promiscuous mode
[ 1275.642174][T16236] veth1_vlan: entered promiscuous mode
[ 1275.930525][T16601] raw_sendmsg: syz.5.3527 forgot to set AF_INET. Fix it!
[ 1276.410296][T16236] veth0_macvtap: entered promiscuous mode
[ 1276.662920][T16236] veth1_macvtap: entered promiscuous mode
[ 1277.083222][T16236] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1277.172871][T16612] loop8: detected capacity change from 0 to 1024
[ 1277.239000][T16612] EXT4-fs: Ignoring removed oldalloc option
[ 1277.291402][T16236] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1277.308185][T16612] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1277.536390][T15815] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1277.580303][T15815] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1277.599319][T15815] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1277.639687][T16612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1277.717036][T15781] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1278.377037][T14348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1278.532171][T16631] loop2: detected capacity change from 0 to 16
[ 1278.629286][T16631] erofs (device loop2): mounted with root inode @ nid 36.
[ 1279.569109][T16638] loop6: detected capacity change from 0 to 2048
[ 1279.645291][T16638] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1279.756892][T16648] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1279.889219][   T29] audit: type=1800 audit(1773577614.426:315): pid=16638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3539" name="file2" dev="loop6" ino=16 res=0 errno=0
[ 1280.105888][T14939] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1280.374477][T14939] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1280.425049][T14939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1280.493094][T14939] usb 9-1: Product: syz
[ 1280.524483][T14939] usb 9-1: Manufacturer: syz
[ 1280.552940][T14939] usb 9-1: SerialNumber: syz
[ 1280.619963][T14939] usb 9-1: config 0 descriptor??
[ 1281.070437][T14939] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1281.700533][T16658] loop5: detected capacity change from 0 to 40427
[ 1281.781596][T14939] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1281.796565][T16658] F2FS-fs (loop5): Image doesn't support compression
[ 1281.803808][T16658] F2FS-fs (loop5): build fault injection rate: 690
[ 1281.835886][T16658] F2FS-fs (loop5): invalid crc value
[ 1281.887464][T14939] usb 9-1: USB disconnect, device number 5
[ 1282.203683][T16658] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1282.223204][T16658] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1282.854154][ T7817] syz-executor: attempt to access beyond end of device
[ 1282.854154][ T7817] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1282.980823][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[ 1282.981031][ T7817] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1282.981088][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1282.981176][ T7817] Call Trace:
[ 1282.981236][ T7817]  <TASK>
[ 1282.981300][ T7817]  __dump_stack+0x26/0x30
[ 1282.981490][ T7817]  dump_stack_lvl+0x14c/0x1c0
[ 1282.981670][ T7817]  dump_stack+0x1e/0x25
[ 1282.981835][ T7817]  f2fs_handle_critical_error+0xa6f/0xc20
[ 1282.982081][ T7817]  f2fs_stop_checkpoint+0x65/0x80
[ 1282.982311][ T7817]  f2fs_write_end_io+0x12e6/0x2560
[ 1282.982533][ T7817]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1282.982683][ T7817]  bio_endio+0x1006/0x1160
[ 1282.982848][ T7817]  submit_bio_noacct+0x533/0x2960
[ 1282.983069][ T7817]  submit_bio+0x57a/0x620
[ 1282.983242][ T7817]  f2fs_submit_write_bio+0x115/0x350
[ 1282.983466][ T7817]  __submit_merged_bio+0x16f/0x780
[ 1282.983671][ T7817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1282.983907][ T7817]  __submit_merged_write_cond+0x4ba/0xae0
[ 1282.984145][ T7817]  f2fs_write_data_pages+0x5073/0x5e10
[ 1282.984487][ T7817]  ? kmsan_get_metadata+0xf1/0x160
[ 1282.984735][ T7817]  ? finish_task_switch+0x145/0x8b0
[ 1282.985080][ T7817]  ? __schedule+0x2607/0x8640
[ 1282.985326][ T7817]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1282.985545][ T7817]  ? kmsan_get_metadata+0xf1/0x160
[ 1282.985757][ T7817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1282.985977][ T7817]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1282.986197][ T7817]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1282.986427][ T7817]  do_writepages+0x3f2/0x860
[ 1282.986594][ T7817]  ? _raw_spin_unlock+0x30/0x50
[ 1282.986799][ T7817]  ? wbc_attach_and_unlock_inode+0x131/0x660
[ 1282.987005][ T7817]  filemap_fdatawrite+0x207/0x260
[ 1282.987286][ T7817]  f2fs_sync_dirty_inodes+0x2aa/0xaa0
[ 1282.987490][ T7817]  f2fs_write_checkpoint+0x10e1/0x3d20
[ 1282.987836][ T7817]  kill_f2fs_super+0x320/0x990
[ 1282.988068][ T7817]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1282.988224][ T7817]  deactivate_locked_super+0xcb/0x3c0
[ 1282.988424][ T7817]  deactivate_super+0x12f/0x140
[ 1282.988601][ T7817]  cleanup_mnt+0x7eb/0x870
[ 1282.988777][ T7817]  ? __pfx___cleanup_mnt+0x10/0x10
[ 1282.988943][ T7817]  __cleanup_mnt+0x22/0x30
[ 1282.989100][ T7817]  task_work_run+0x208/0x2b0
[ 1282.989321][ T7817]  exit_to_user_mode_loop+0x306/0x1b60
[ 1282.989537][ T7817]  ? user_path_at+0x1fc/0x330
[ 1282.989727][ T7817]  ? __x64_sys_umount+0x1dc/0x250
[ 1282.989950][ T7817]  do_syscall_64+0x24d/0xf80
[ 1282.990121][ T7817]  ? clear_bhb_loop+0x50/0xa0
[ 1282.990293][ T7817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1282.990454][ T7817] RIP: 0033:0x7f82fa19d9d7
[ 1282.990572][ T7817] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1282.990709][ T7817] RSP: 002b:00007ffc735a1298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1282.990856][ T7817] RAX: 0000000000000000 RBX: 00007f82fa232050 RCX: 00007f82fa19d9d7
[ 1282.990958][ T7817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc735a1350
[ 1282.991057][ T7817] RBP: 00007ffc735a1350 R08: 00007ffc735a2350 R09: 00000000ffffffff
[ 1282.991166][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc735a23e0
[ 1282.991273][ T7817] R13: 00007f82fa232050 R14: 0000000000139141 R15: 00007ffc735a2420
[ 1282.991421][ T7817]  </TASK>
[ 1283.451519][ T7817] F2FS-fs (loop5): Remounting filesystem read-only
[ 1285.155783][T16685] loop6: detected capacity change from 0 to 32768
[ 1285.305118][T16685] JBD2: Ignoring recovery information on journal
[ 1285.410194][T16685] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1285.633330][T16692] loop8: detected capacity change from 0 to 164
[ 1285.757972][T13235] ocfs2: Unmounting device (7,6) on (node local)
[ 1287.743901][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 1289.663387][T15797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1289.723310][T15797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1290.139581][T12206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1290.199652][T12206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1291.145404][ T5900] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1291.369861][ T5900] usb 9-1: Using ep0 maxpacket: 32
[ 1291.430014][ T5900] usb 9-1: config 0 has no interfaces?
[ 1291.518465][ T5900] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1291.593013][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1291.609399][ T5900] usb 9-1: Product: syz
[ 1291.615120][ T5900] usb 9-1: Manufacturer: syz
[ 1291.624661][ T5900] usb 9-1: SerialNumber: syz
[ 1291.694927][ T5900] usb 9-1: config 0 descriptor??
[ 1292.045445][T16731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1292.103286][T16731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1292.147535][T16746] loop9: detected capacity change from 0 to 512
[ 1292.185210][ T5900] usb 9-1: USB disconnect, device number 6
[ 1292.246162][T16746] EXT4-fs: inline encryption not supported
[ 1292.542249][T16746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1292.644380][T16746] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1292.668242][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3571'.
[ 1292.698289][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3571'.
[ 1292.711324][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3571'.
[ 1292.721227][ T5900] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1292.735353][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3571'.
[ 1292.779460][   T29] audit: type=1800 audit(1773577627.221:316): pid=16746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3570" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1292.897647][   T29] audit: type=1800 audit(1773577627.291:317): pid=16746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3570" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1292.947901][ T5900] usb 9-1: config 0 has an invalid interface number: 39 but max is 0
[ 1292.999134][ T5900] usb 9-1: config 0 has no interface number 0
[ 1293.087011][ T5900] usb 9-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da
[ 1293.146545][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1293.190302][ T5900] usb 9-1: Product: syz
[ 1293.194722][ T5900] usb 9-1: Manufacturer: syz
[ 1293.235308][ T5900] usb 9-1: SerialNumber: syz
[ 1293.294806][ T5900] usb 9-1: config 0 descriptor??
[ 1293.375927][ T5900] flexcop_usb: set interface failed.
[ 1293.425923][ T5900] b2c2_flexcop_usb 9-1:0.39: probe with driver b2c2_flexcop_usb failed with error -22
[ 1293.464152][T16236] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1293.488573][T16759] loop2: detected capacity change from 0 to 256
[ 1293.597050][ T5900] usb 9-1: USB disconnect, device number 7
[ 1293.661558][T16759] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1293.991681][T16769] sctp: [Deprecated]: syz.9.3575 (pid 16769) Use of int in max_burst socket option.
[ 1293.991681][T16769] Use struct sctp_assoc_value instead
[ 1295.694509][T16787] loop7: detected capacity change from 256 to 255
[ 1295.845530][T16793] pim6reg: entered allmulticast mode
[ 1295.906004][T16794] syz_tun: entered allmulticast mode
[ 1295.936994][T16795] pim6reg: left allmulticast mode
[ 1295.962056][T16795] syz_tun: left allmulticast mode
[ 1296.477476][T16805] netlink: 'syz.8.3588': attribute type 3 has an invalid length.
[ 1296.889692][ T5900] libceph: connect (1)[c::]:6789 error -101
[ 1296.920237][ T5900] libceph: mon0 (1)[c::]:6789 connect error
[ 1297.022228][T16807] ceph: No mds server is up or the cluster is laggy
[ 1298.804629][T16838] loop8: detected capacity change from 0 to 256
[ 1298.854416][T16838] exfat: Deprecated parameter 'utf8'
[ 1298.859992][T16838] exfat: Deprecated parameter 'utf8'
[ 1298.911139][T16838] exfat: Deprecated parameter 'utf8'
[ 1298.960704][ T5900] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 1299.065648][T16838] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[ 1299.184657][ T5900] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.231546][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1299.279586][ T5900] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1299.340541][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1299.377520][ T5900] usb 7-1: config 0 descriptor??
[ 1299.438343][ T5900] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1299.500698][ T5900] dvb-usb: bulk message failed: -22 (3/0)
[ 1299.559118][ T5900] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1299.628944][ T5900] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1299.681733][ T5900] usb 7-1: media controller created
[ 1299.715554][T16837] dibusb: i2c wr: len=79 is too big!
[ 1299.715554][T16837] 
[ 1299.788673][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1299.909305][ T5900] dvb-usb: bulk message failed: -22 (6/0)
[ 1299.915562][ T5900] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1299.991463][ T5900] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27
[ 1300.070019][ T5900] dvb-usb: schedule remote query interval to 150 msecs.
[ 1300.086749][ T5900] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1300.143090][ T5900] usb 7-1: USB disconnect, device number 8
[ 1300.562248][ T5900] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1302.737242][T15552] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1302.980556][T15552] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1303.056796][T15552] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1303.106764][T15552] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1303.148837][T15552] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1303.218035][T15552] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1303.274281][T15552] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.343910][T15552] usb 10-1: config 0 descriptor??
[ 1304.087658][T15552] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1304.425272][T16897] netlink: 'syz.2.3623': attribute type 7 has an invalid length.
[ 1304.481210][T16897] netlink: 'syz.2.3623': attribute type 8 has an invalid length.
[ 1304.683621][T15552] usb 10-1: USB disconnect, device number 2
[ 1305.513760][T16912] loop8: detected capacity change from 0 to 256
[ 1305.681443][T16905] fido_id[16905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1305.739550][T16912] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[ 1306.760475][T16926] vivid-000: disconnect
[ 1306.812746][T16924] vivid-000: reconnect
[ 1308.319735][T16940] loop5: detected capacity change from 0 to 2048
[ 1308.586809][T16940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1308.791223][T16940] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1309.080851][T16940] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3634: bg 0: block 288: padding at end of block bitmap is not set
[ 1309.153777][T16956] netlink: 'syz.8.3639': attribute type 8 has an invalid length.
[ 1309.161869][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3639'.
[ 1309.261244][T16940] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -117
[ 1309.331977][T16956] bond0: entered promiscuous mode
[ 1309.361096][T16956] bond_slave_0: entered promiscuous mode
[ 1309.422243][T16956] bond_slave_1: entered promiscuous mode
[ 1309.540942][T16956] gretap0: entered promiscuous mode
[ 1309.616545][T16956] hsr1: entered promiscuous mode
[ 1309.978736][ T7817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1310.029163][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1310.836140][T15552] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1311.081016][T15552] usb 3-1: Using ep0 maxpacket: 16
[ 1311.147048][T15552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1311.193903][T15552] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[ 1311.249431][T15552] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[ 1311.261859][T16981] loop6: detected capacity change from 0 to 64
[ 1311.289618][T15552] usb 3-1: Manufacturer: syz
[ 1311.347452][T15552] usb 3-1: config 0 descriptor??
[ 1311.975747][T15552] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.002A/input/input29
[ 1312.238357][T15552] creative-sb0540 0003:041E:3100.002A: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1313.142606][T15552] usb 3-1: USB disconnect, device number 28
[ 1313.388998][T16997] loop6: detected capacity change from 0 to 1024
[ 1313.800088][   T29] audit: type=1800 audit(1773577648.174:318): pid=16997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3651" name="file1" dev="loop6" ino=20 res=0 errno=0
[ 1314.359864][T15797] hfsplus: b-tree write err: -5, ino 25
[ 1314.377559][T15797] hfsplus: b-tree write err: -5, ino 4
[ 1314.438635][T15797] hfsplus: b-tree write err: -5, ino 2
[ 1314.483070][T15797] hfsplus: b-tree write err: -5, ino 20
[ 1314.918804][T17004] fido_id[17004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1315.897201][T17017] loop5: detected capacity change from 0 to 4096
[ 1317.047617][   T29] audit: type=1326 audit(1773577651.399:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1317.167652][T17030] netlink: 'syz.5.3660': attribute type 4 has an invalid length.
[ 1317.233660][   T29] audit: type=1326 audit(1773577651.399:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1317.235775][T17034] netlink: 'syz.5.3660': attribute type 4 has an invalid length.
[ 1317.411828][   T29] audit: type=1326 audit(1773577651.439:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1317.558045][   T29] audit: type=1326 audit(1773577651.449:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1317.698308][   T29] audit: type=1326 audit(1773577651.459:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1317.858268][   T29] audit: type=1326 audit(1773577651.459:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1318.024653][   T29] audit: type=1326 audit(1773577651.469:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1318.205976][   T29] audit: type=1326 audit(1773577651.469:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1318.379589][   T29] audit: type=1326 audit(1773577651.469:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.9.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f586699c799 code=0x7ffc0000
[ 1319.188739][T17056] loop8: detected capacity change from 0 to 512
[ 1319.265669][T17057] loop5: detected capacity change from 0 to 256
[ 1319.460967][T17056] ------------[ cut here ]------------
[ 1319.466667][T17056] EA inode 11 i_nlink=2
[ 1319.466761][T17056] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x7a2/0x880, CPU#1: syz.8.3671/17056
[ 1319.482543][T17056] Modules linked in:
[ 1319.486735][T17056] CPU: 1 UID: 0 PID: 17056 Comm: syz.8.3671 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[ 1319.501591][T17056] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1319.506985][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1319.517597][T17056] RIP: 0010:ext4_xattr_inode_update_ref+0x81c/0x880
[ 1319.524721][T17056] Code: 06 00 00 44 89 ab 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 f6 75 46 45 85 ff 75 55 48 8b 7d c0 48 8b 75 d0 8b 55 b8 <67> 48 0f b9 3a e9 d3 fc ff ff 44 89 e7 e8 52 16 52 ff 89 c7 e8 6b
[ 1319.544977][T17056] RSP: 0018:ffff8880459b7160 EFLAGS: 00010246
[ 1319.551486][T17056] RAX: 0000000000000000 RBX: ffff888053dc8bb8 RCX: 00000000001a5950
[ 1319.559765][T17056] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff92f4e3e0
[ 1319.568194][T17056] RBP: ffff8880459b71e8 R08: ffffea000000000f R09: 0000000000000000
[ 1319.576528][T17056] R10: ffff8880451b70a8 R11: ffffffff82ab3ccc R12: 0000000000000000
[ 1319.584911][T17056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1319.595769][T17056] FS:  00007f17c40c76c0(0000) GS:ffff8881aa4cd000(0000) knlGS:0000000000000000
[ 1319.605877][T17056] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1319.612889][T17056] CR2: 00007f647468de9c CR3: 0000000047ff8000 CR4: 00000000003526f0
[ 1319.621433][T17056] Call Trace:
[ 1319.624966][T17056]  <TASK>
[ 1319.628104][T17056]  ext4_xattr_inode_dec_ref_all+0xffb/0x1730
[ 1319.634501][T17056]  ? __ext4_journal_get_write_access+0x46b/0x900
[ 1319.641377][T17056]  ext4_xattr_delete_inode+0xd14/0x14c0
[ 1319.647338][T17056]  ext4_evict_inode+0x1d7d/0x24e0
[ 1319.652929][T17056]  ? __pfx_ext4_evict_inode+0x10/0x10
[ 1319.658691][T17056]  evict+0x69b/0xc90
[ 1319.663070][T17056]  ? kmsan_get_metadata+0xf1/0x160
[ 1319.668522][T17056]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1319.675346][T17056]  iput+0xafb/0xf00
[ 1319.679449][T17056]  ext4_process_orphan+0x49a/0x520
[ 1319.685253][T17056]  ext4_orphan_cleanup+0x1093/0x1e20
[ 1319.691015][T17056]  ext4_fill_super+0xa67c/0xaf80
[ 1319.699146][T17056]  ? sb_set_blocksize+0x24e/0x390
[ 1319.705353][T17056]  get_tree_bdev_flags+0x6e6/0x920
[ 1319.711018][T17056]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1319.716639][T17056]  ? __pfx_ext4_fill_super+0x10/0x10
[ 1319.722360][T17056]  ? __pfx_ext4_get_tree+0x10/0x10
[ 1319.727830][T17056]  get_tree_bdev+0x38/0x50
[ 1319.732683][T17056]  ext4_get_tree+0x35/0x40
[ 1319.737367][T17056]  vfs_get_tree+0xb3/0x5d0
[ 1319.742279][T17056]  do_new_mount+0x885/0x1dd0
[ 1319.747196][T17056]  ? apparmor_capable+0x2a2/0x380
[ 1319.752642][T17056]  ? kmsan_get_metadata+0xf1/0x160
[ 1319.758168][T17056]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1319.764548][T17056]  path_mount+0x7a2/0x20b0
[ 1319.769316][T17056]  ? user_path_at+0x1fc/0x330
[ 1319.774498][T17056]  __se_sys_mount+0x704/0x7f0
[ 1319.779597][T17056]  ? kmsan_get_metadata+0xf1/0x160
[ 1319.785184][T17056]  __x64_sys_mount+0xe4/0x150
[ 1319.790147][T17056]  x64_sys_call+0x39f0/0x3ea0
[ 1319.797741][T17056]  do_syscall_64+0x134/0xf80
[ 1319.803467][T17056]  ? clear_bhb_loop+0x50/0xa0
[ 1319.808516][T17056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1319.814816][T17056] RIP: 0033:0x7f17c319da0a
[ 1319.819462][T17056] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1319.840369][T17056] RSP: 002b:00007f17c40c6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1319.849220][T17056] RAX: ffffffffffffffda RBX: 00007f17c40c6ee0 RCX: 00007f17c319da0a
[ 1319.857563][T17056] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f17c40c6ea0
[ 1319.865970][T17056] RBP: 00002000000009c0 R08: 00007f17c40c6ee0 R09: 0000000000800718
[ 1319.874273][T17056] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[ 1319.882667][T17056] R13: 00007f17c40c6ea0 R14: 000000000000048d R15: 0000200000000200
[ 1319.891028][T17056]  </TASK>
[ 1319.894273][T17056] ---[ end trace 0000000000000000 ]---
[ 1320.149933][T17057] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1320.198987][T17056] EXT4-fs (loop8): 1 orphan inode deleted
[ 1320.211439][T17056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1321.286964][T14348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1322.075161][T17090] loop8: detected capacity change from 0 to 256
[ 1322.738885][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3685'.
[ 1324.768935][T17127] loop9: detected capacity change from 0 to 512
[ 1324.838456][T17127] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities
[ 1325.444649][T17137] loop5: detected capacity change from 0 to 256
[ 1325.840139][T17131] loop6: detected capacity change from 0 to 4096
[ 1325.855439][T17137] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1325.933009][   T29] kauditd_printk_skb: 14 callbacks suppressed
[ 1325.933120][   T29] audit: type=1326 audit(1773577660.258:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1326.086274][   T29] audit: type=1326 audit(1773577660.288:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1326.157170][T17137] exFAT-fs (loop5): valid_size(150994954) is greater than size(10)
[ 1326.217727][   T29] audit: type=1326 audit(1773577660.328:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1326.355618][   T29] audit: type=1326 audit(1773577660.328:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1326.506841][   T29] audit: type=1326 audit(1773577660.338:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1326.519646][T17131] ntfs3(loop6): ino=5, "/" mi_enum_attr
[ 1326.585627][T17146] ntfs3(loop6): ino=5, "/" mi_enum_attr
[ 1326.619036][T17146] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1326.720346][   T29] audit: type=1326 audit(1773577660.338:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1326.946132][   T29] audit: type=1326 audit(1773577660.338:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1327.149821][   T29] audit: type=1326 audit(1773577660.348:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1327.316567][   T29] audit: type=1326 audit(1773577660.348:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1327.469227][   T29] audit: type=1326 audit(1773577660.348:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.2.3699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3919c799 code=0x7ffc0000
[ 1329.963603][T17166] loop9: detected capacity change from 0 to 4096
[ 1330.022599][T17166] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[ 1331.287950][T17177] loop8: detected capacity change from 0 to 4096
[ 1331.399836][T17177] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[ 1332.450955][T17194] loop6: detected capacity change from 0 to 128
[ 1332.559309][T17194] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1332.736197][T17194] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1333.344032][T13235] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1333.987363][T17217] loop6: detected capacity change from 0 to 128
[ 1334.114857][T17217] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1334.136732][T17217] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1334.688730][T13235] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1335.535414][T16982] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1335.631450][T17233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3734'.
[ 1335.765690][T16982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1335.845454][T16982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1335.887184][T16982] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1335.957048][T16982] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1336.035260][T16982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.101571][T16982] usb 7-1: config 0 descriptor??
[ 1336.500852][T17236] binder: 17234:17236 ioctl c0306201 200000000640 returned -22
[ 1336.624404][T17237] loop2: detected capacity change from 0 to 512
[ 1336.742725][T16982] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1337.042165][T14939] usb 7-1: USB disconnect, device number 9
[ 1338.285662][T17239] fido_id[17239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1338.698625][T17252] binder: 17251:17252 ioctl c0306201 200000000140 returned -14
[ 1340.508397][T17256] loop9: detected capacity change from 0 to 65536
[ 1340.657671][T17256] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1341.092180][T17256] XFS (loop9): Ending clean mount
[ 1341.199409][   T29] kauditd_printk_skb: 25 callbacks suppressed
[ 1341.199501][   T29] audit: type=1800 audit(1773577675.534:377): pid=17256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3743" name="file1" dev="loop9" ino=38 res=0 errno=0
[ 1341.692739][T16236] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1342.312482][T14939] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 1342.547847][T14939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1342.617092][T14939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1342.704164][T14939] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1342.778439][T14939] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[ 1342.862749][T14939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1342.943531][T17290] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3753'.
[ 1342.991320][T14939] usb 9-1: config 0 descriptor??
[ 1343.043587][T16982] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1343.263145][T16982] usb 10-1: Using ep0 maxpacket: 8
[ 1343.336622][T16982] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1343.399099][T16982] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1343.464296][T16982] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1343.530017][T16982] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1343.570809][T14939] hid-multitouch 0003:0457:07DA.002C: unknown main item tag 0x0
[ 1343.599819][T16982] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1343.614621][T14939] hid-multitouch 0003:0457:07DA.002C: unknown main item tag 0x0
[ 1343.614826][T14939] hid-multitouch 0003:0457:07DA.002C: unknown main item tag 0x0
[ 1343.615533][T14939] hid-multitouch 0003:0457:07DA.002C: unknown main item tag 0x0
[ 1343.615716][T14939] hid-multitouch 0003:0457:07DA.002C: unknown main item tag 0x0
[ 1343.698095][T14939] hid-multitouch 0003:0457:07DA.002C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0
[ 1343.839813][T14939] usb 9-1: USB disconnect, device number 8
[ 1344.563148][T17296] loop2: detected capacity change from 0 to 32768
[ 1344.575068][T16982] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1344.584693][T16982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1344.593347][T17296] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3757 (17296)
[ 1344.619679][T17296] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1344.630247][T17296] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1344.887775][T16982] usb 10-1: usb_control_msg returned -32
[ 1344.904321][T16982] usbtmc 10-1:16.0: can't read capabilities
[ 1345.044751][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3759'.
[ 1345.086990][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3759'.
[ 1345.130768][T17296] BTRFS info (device loop2): enabling ssd optimizations
[ 1345.138126][T17296] BTRFS info (device loop2): turning on async discard
[ 1345.145351][T17296] BTRFS info (device loop2): enabling free space tree
[ 1345.153414][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3759'.
[ 1345.327435][   T29] audit: type=1800 audit(1773577679.672:378): pid=17296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3757" name="file2" dev="loop2" ino=261 res=0 errno=0
[ 1345.883917][T17320] usbtmc 10-1:16.0: usb_clear_halt returned -32
[ 1346.101374][T16982] usb 10-1: USB disconnect, device number 3
[ 1346.134098][T17297] fido_id[17297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1346.339679][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1346.805874][T13868] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1347.078679][T13868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1347.174331][T13868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1347.242455][T17329] loop5: detected capacity change from 0 to 64
[ 1347.267562][T13868] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[ 1347.325751][T13868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.362932][T13868] usb 7-1: config 0 descriptor??
[ 1347.932009][T13868] arvo 0003:1E7D:30D4.002D: unknown main item tag 0x0
[ 1348.011947][T13868] arvo 0003:1E7D:30D4.002D: unknown main item tag 0x0
[ 1348.106365][T13868] arvo 0003:1E7D:30D4.002D: unknown main item tag 0x0
[ 1348.176238][T13868] arvo 0003:1E7D:30D4.002D: unknown main item tag 0x0
[ 1348.183364][T13868] arvo 0003:1E7D:30D4.002D: unknown main item tag 0x0
[ 1348.350740][T13868] arvo 0003:1E7D:30D4.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0
[ 1348.713293][T13868] usb 7-1: USB disconnect, device number 10
[ 1350.361609][T17345] loop5: detected capacity change from 0 to 40427
[ 1350.371657][T17345] F2FS-fs: heap/no_heap options were deprecated
[ 1350.469132][T17345] F2FS-fs (loop5): build fault injection rate: 19
[ 1350.475782][T17345] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[ 1350.540288][T17345] F2FS-fs (loop5): invalid crc value
[ 1350.545852][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 1350.746126][T17345] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80
[ 1351.002799][T17345] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0
[ 1351.060911][T17342] fido_id[17342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1351.090224][T17345] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1351.129853][T17345] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1351.230809][T17345] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0xe65/0x15d0
[ 1351.243661][T17345] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[ 1351.291630][T17345] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x702/0x19b0
[ 1351.444469][ T7817] syz-executor: attempt to access beyond end of device
[ 1351.444469][ T7817] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1351.584185][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz-executor Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[ 1351.584394][ T7817] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1351.584460][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1351.584548][ T7817] Call Trace:
[ 1351.584604][ T7817]  <TASK>
[ 1351.584664][ T7817]  __dump_stack+0x26/0x30
[ 1351.584848][ T7817]  dump_stack_lvl+0x14c/0x1c0
[ 1351.585043][ T7817]  dump_stack+0x1e/0x25
[ 1351.585208][ T7817]  f2fs_handle_critical_error+0xa6f/0xc20
[ 1351.585459][ T7817]  f2fs_stop_checkpoint+0x65/0x80
[ 1351.585683][ T7817]  f2fs_write_end_io+0x12e6/0x2560
[ 1351.585902][ T7817]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1351.586068][ T7817]  bio_endio+0x1006/0x1160
[ 1351.586231][ T7817]  submit_bio_noacct+0x533/0x2960
[ 1351.586452][ T7817]  submit_bio+0x57a/0x620
[ 1351.586622][ T7817]  f2fs_submit_write_bio+0x115/0x350
[ 1351.586832][ T7817]  __submit_merged_bio+0x16f/0x780
[ 1351.587033][ T7817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1351.587248][ T7817]  __submit_merged_write_cond+0x4ba/0xae0
[ 1351.587460][ T7817]  f2fs_write_data_pages+0x5073/0x5e10
[ 1351.587797][ T7817]  ? kmsan_get_metadata+0xf1/0x160
[ 1351.587992][ T7817]  ? folio_batch_move_lru+0x6a2/0x6d0
[ 1351.588200][ T7817]  ? __msan_warning+0x1b/0x30
[ 1351.588378][ T7817]  ? filter_irq_stacks+0x13f/0x190
[ 1351.588567][ T7817]  ? stack_depot_save_flags+0x35/0x790
[ 1351.588729][ T7817]  ? kmsan_get_metadata+0xf1/0x160
[ 1351.588929][ T7817]  ? kmsan_get_metadata+0xf1/0x160
[ 1351.589169][ T7817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1351.589369][ T7817]  ? kmsan_get_metadata+0xf1/0x160
[ 1351.589643][ T7817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1351.589863][ T7817]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1351.590078][ T7817]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1351.590280][ T7817]  do_writepages+0x3f2/0x860
[ 1351.590432][ T7817]  ? _raw_spin_unlock+0x30/0x50
[ 1351.590622][ T7817]  ? wbc_attach_and_unlock_inode+0x131/0x660
[ 1351.590834][ T7817]  filemap_fdatawrite+0x207/0x260
[ 1351.591080][ T7817]  f2fs_sync_dirty_inodes+0x2aa/0xaa0
[ 1351.591270][ T7817]  f2fs_write_checkpoint+0x10e1/0x3d20
[ 1351.591567][ T7817]  kill_f2fs_super+0x320/0x990
[ 1351.591765][ T7817]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1351.591920][ T7817]  deactivate_locked_super+0xcb/0x3c0
[ 1351.592099][ T7817]  deactivate_super+0x12f/0x140
[ 1351.592271][ T7817]  cleanup_mnt+0x7eb/0x870
[ 1351.592437][ T7817]  ? __pfx___cleanup_mnt+0x10/0x10
[ 1351.592595][ T7817]  __cleanup_mnt+0x22/0x30
[ 1351.592749][ T7817]  task_work_run+0x208/0x2b0
[ 1351.592953][ T7817]  exit_to_user_mode_loop+0x306/0x1b60
[ 1351.593154][ T7817]  ? user_path_at+0x1fc/0x330
[ 1351.593331][ T7817]  ? __x64_sys_umount+0x1dc/0x250
[ 1351.593535][ T7817]  do_syscall_64+0x24d/0xf80
[ 1351.593693][ T7817]  ? clear_bhb_loop+0x50/0xa0
[ 1351.593851][ T7817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1351.594000][ T7817] RIP: 0033:0x7f82fa19d9d7
[ 1351.594108][ T7817] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1351.594229][ T7817] RSP: 002b:00007ffc735a1298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1351.594361][ T7817] RAX: 0000000000000000 RBX: 00007f82fa232050 RCX: 00007f82fa19d9d7
[ 1351.594453][ T7817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc735a1350
[ 1351.594543][ T7817] RBP: 00007ffc735a1350 R08: 00007ffc735a2350 R09: 00000000ffffffff
[ 1351.594640][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc735a23e0
[ 1351.594738][ T7817] R13: 00007f82fa232050 R14: 0000000000149df9 R15: 00007ffc735a2420
[ 1351.594872][ T7817]  </TASK>
[ 1352.401774][ T7817] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1353.658912][T17376] netlink: 'syz.6.3781': attribute type 14 has an invalid length.
[ 1353.731757][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3781'.
[ 1353.990369][T15791] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1354.021195][T17376] netlink: 'syz.6.3781': attribute type 14 has an invalid length.
[ 1354.029251][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3781'.
[ 1354.072531][T15791] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1354.107225][T15791] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1354.169578][T15781] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1354.200456][T13868] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1354.459688][T13868] usb 3-1: Using ep0 maxpacket: 8
[ 1354.508920][T13868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1354.610304][T13868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1354.660286][T13868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1354.750238][T13868] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1354.857886][T13868] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1354.930487][T13868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1355.433859][T13868] usb 3-1: usb_control_msg returned -32
[ 1355.472231][T13868] usbtmc 3-1:16.0: can't read capabilities
[ 1356.451814][T17396] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1357.314574][T13868] usb 3-1: USB disconnect, device number 29
[ 1358.579939][T17417] loop6: detected capacity change from 0 to 128
[ 1358.723425][   T29] audit: type=1800 audit(1773577693.053:379): pid=17417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3797" name="file1" dev="loop6" ino=1048734 res=0 errno=0
[ 1358.794286][T17417] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[ 1358.835427][T17417] FAT-fs (loop6): Filesystem has been set read-only
[ 1359.527536][T13868] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[ 1359.771922][T13868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1359.824157][T13868] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1359.933256][T13868] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1359.987519][T13868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1359.992290][T17426] loop9: detected capacity change from 0 to 1024
[ 1360.155494][T17426] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1360.342572][T13868] usb 3-1: usb_control_msg returned -32
[ 1360.364238][T17426] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1360.391993][T13868] usbtmc 3-1:16.0: can't read capabilities
[ 1360.964732][T16236] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1362.880488][T17449] loop5: detected capacity change from 0 to 32768
[ 1362.892088][T16982] usb 3-1: USB disconnect, device number 30
[ 1363.119423][T17449] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1363.594758][T17449] XFS (loop5): Ending clean mount
[ 1363.604798][T17449] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0xb2/0x330, xfs_finobt block 0x10 
[ 1363.616701][T17449] XFS (loop5): Unmount and run xfs_repair
[ 1363.622655][T17449] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1363.636423][T17449] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[ 1363.645804][T17449] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[ 1363.654878][T17449] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[ 1363.666808][T17449] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[ 1363.676811][T17449] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[ 1363.685986][T17449] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1363.695174][T17449] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[ 1363.704247][T17449] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1363.713486][T17449] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x10 len 4 error 74
[ 1363.725345][T17449] loop5: lost filesystem error report for type 5 error -117
[ 1363.725946][T17449] XFS (loop5): Failed to initialize disk quotas, err -117.
[ 1364.445010][ T7817] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1364.495159][T17470] loop6: detected capacity change from 0 to 4096
[ 1364.554190][ T7817] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[ 1364.666074][T17470] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled
[ 1364.808343][T17470] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856e018, mo2=0002]
[ 1364.837436][T17470] System zones: 0-5
[ 1364.987232][T17470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1365.377887][T13868] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 1365.490808][ T6901] =====================================================
[ 1365.498443][ T6901] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400
[ 1365.508015][ T6901]  _copy_to_iter+0xef3/0x3400
[ 1365.512921][ T6901]  copy_page_to_iter+0x482/0x900
[ 1365.518912][ T6901]  filemap_read+0x1cd6/0x2300
[ 1365.523843][ T6901]  blkdev_read_iter+0x89f/0xb00
[ 1365.529080][ T6901]  vfs_read+0x8ec/0xf90
[ 1365.533459][ T6901]  ksys_read+0x1d9/0x470
[ 1365.538091][ T6901]  __x64_sys_read+0x97/0xf0
[ 1365.542812][ T6901]  x64_sys_call+0x311c/0x3ea0
[ 1365.547945][ T6901]  do_syscall_64+0x134/0xf80
[ 1365.552733][ T6901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.558953][ T6901] 
[ 1365.561386][ T6901] Uninit was stored to memory at:
[ 1365.566939][ T6901]  _copy_to_iter+0x130f/0x3400
[ 1365.571902][ T6901]  copy_page_to_iter+0x482/0x900
[ 1365.577508][ T6901]  shmem_file_read_iter+0x904/0x1140
[ 1365.583018][ T6901]  lo_rw_aio+0x1164/0x14a0
[ 1365.587916][ T6901]  loop_process_work+0xf05/0x1ff0
[ 1365.593180][ T6901]  loop_rootcg_workfn+0x2b/0x40
[ 1365.598448][ T6901]  process_scheduled_works+0xb82/0x1e80
[ 1365.606207][ T6901]  worker_thread+0xee4/0x1590
[ 1365.611116][ T6901]  kthread+0x53f/0x600
[ 1365.615387][ T6901]  ret_from_fork+0x20f/0x910
[ 1365.621428][ T6901]  ret_from_fork_asm+0x1a/0x30
[ 1365.626548][ T6901] 
[ 1365.628969][ T6901] Uninit was stored to memory at:
[ 1365.634331][ T6901]  copy_folio_from_iter_atomic+0xea0/0x38b0
[ 1365.640574][ T6901]  generic_perform_write+0x8b7/0x1050
[ 1365.646449][ T6901]  shmem_file_write_iter+0x2b7/0x2f0
[ 1365.651951][ T6901]  lo_rw_aio+0x1164/0x14a0
[ 1365.656699][ T6901]  loop_process_work+0xf05/0x1ff0
[ 1365.661961][ T6901]  loop_workfn+0x3e/0x60
[ 1365.666511][ T6901]  process_scheduled_works+0xb82/0x1e80
[ 1365.672255][ T6901]  worker_thread+0xee4/0x1590
[ 1365.677219][ T6901]  kthread+0x53f/0x600
[ 1365.681542][ T6901]  ret_from_fork+0x20f/0x910
[ 1365.686428][ T6901]  ret_from_fork_asm+0x1a/0x30
[ 1365.691426][ T6901] 
[ 1365.693855][ T6901] Uninit was stored to memory at:
[ 1365.699447][ T6901]  xlog_write+0x1a75/0x20f0
[ 1365.704148][ T6901]  xlog_cil_push_work+0x359c/0x50c0
[ 1365.711717][ T6901]  process_scheduled_works+0xb82/0x1e80
[ 1365.718224][ T6901]  worker_thread+0xee4/0x1590
[ 1365.723117][ T6901]  kthread+0x53f/0x600
[ 1365.727742][ T6901]  ret_from_fork+0x20f/0x910
[ 1365.732551][ T6901]  ret_from_fork_asm+0x1a/0x30
[ 1365.737632][ T6901] 
[ 1365.740053][ T6901] Uninit was stored to memory at:
[ 1365.745546][ T6901]  xfs_inode_item_format_attr_fork+0x6f1/0xa80
[ 1365.752085][ T6901]  xfs_inode_item_format+0x2024/0x2280
[ 1365.757977][ T6901]  xlog_cil_commit+0x184e/0x4890
[ 1365.763132][ T6901]  __xfs_trans_commit+0x55a/0xf90
[ 1365.768649][ T6901]  xfs_trans_roll+0xfd/0x670
[ 1365.773472][ T6901]  xfs_defer_trans_roll+0x109/0x610
[ 1365.779090][ T6901]  xfs_defer_finish_noroll+0xd35/0x1ed0
[ 1365.784875][ T6901]  xfs_trans_commit+0x165/0x270
[ 1365.790082][ T6901]  xfs_attr_set+0x1da1/0x2030
[ 1365.795100][ T6901]  xfs_attr_change+0x408/0x5b0
[ 1365.800185][ T6901]  xfs_xattr_set+0x1d4/0x2f0
[ 1365.804958][ T6901]  __vfs_setxattr+0x742/0x840
[ 1365.814065][ T6901]  __vfs_setxattr_noperm+0x224/0xad0
[ 1365.820849][ T6901]  __vfs_setxattr_locked+0x1f8/0x510
[ 1365.826507][ T6901]  vfs_setxattr+0x276/0x690
[ 1365.831195][ T6901]  filename_setxattr+0x396/0xcb0
[ 1365.836424][ T6901]  path_setxattrat+0x702/0x800
[ 1365.841395][ T6901]  __x64_sys_lsetxattr+0x103/0x1c0
[ 1365.846828][ T6901]  x64_sys_call+0x168d/0x3ea0
[ 1365.851735][ T6901]  do_syscall_64+0x134/0xf80
[ 1365.856618][ T6901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.862704][ T6901] 
[ 1365.865121][ T6901] Uninit was created at:
[ 1365.869782][ T6901]  __kmalloc_node_track_caller_noprof+0x4f6/0x1750
[ 1365.876603][ T6901]  krealloc_node_align_noprof+0x463/0xf10
[ 1365.882543][ T6901]  xfs_broot_realloc+0x361/0x480
[ 1365.887846][ T6901]  xfs_bmap_broot_realloc+0x243/0x650
[ 1365.893413][ T6901]  xfs_bmap_extents_to_btree+0x1f8/0x1430
[ 1365.899488][ T6901]  xfs_bmap_add_extent_hole_real+0x2267/0x3040
[ 1365.905890][ T6901]  xfs_bmapi_allocate+0x48d2/0x4f50
[ 1365.913379][ T6901]  xfs_bmapi_write+0x10a9/0x26f0
[ 1365.919349][ T6901]  xfs_attr_rmtval_set_blk+0x171/0x390
[ 1365.925031][ T6901]  xfs_attr_set_iter+0x380/0x7be0
[ 1365.930430][ T6901]  xfs_attr_finish_item+0x16c/0x540
[ 1365.935848][ T6901]  xfs_defer_finish_one+0x54e/0x14c0
[ 1365.941471][ T6901]  xfs_defer_finish_noroll+0x10c5/0x1ed0
[ 1365.947501][ T6901]  xfs_trans_commit+0x165/0x270
[ 1365.952588][ T6901]  xfs_attr_set+0x1da1/0x2030
[ 1365.957611][ T6901]  xfs_attr_change+0x408/0x5b0
[ 1365.962545][ T6901]  xfs_xattr_set+0x1d4/0x2f0
[ 1365.967405][ T6901]  __vfs_setxattr+0x742/0x840
[ 1365.972323][ T6901]  __vfs_setxattr_noperm+0x224/0xad0
[ 1365.977909][ T6901]  __vfs_setxattr_locked+0x1f8/0x510
[ 1365.983367][ T6901]  vfs_setxattr+0x276/0x690
[ 1365.988164][ T6901]  filename_setxattr+0x396/0xcb0
[ 1365.993300][ T6901]  path_setxattrat+0x702/0x800
[ 1365.998349][ T6901]  __x64_sys_lsetxattr+0x103/0x1c0
[ 1366.003650][ T6901]  x64_sys_call+0x168d/0x3ea0
[ 1366.008706][ T6901]  do_syscall_64+0x134/0xf80
[ 1366.015473][ T6901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1366.022290][ T6901] 
[ 1366.024722][ T6901] Bytes 1588-1591 of 4096 are uninitialized
[ 1366.030841][ T6901] Memory access of size 4096 starts at ffff8880a89d8000
[ 1366.038053][ T6901] Data copied to user address 00007fce6cc14000
[ 1366.044330][ T6901] 
[ 1366.047009][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: udevd Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[ 1366.057774][ T6901] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1366.063101][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1366.073567][ T6901] =====================================================
[ 1366.080729][ T6901] Disabling lock debugging due to kernel taint
[ 1366.089990][ T6901] Kernel panic - not syncing: kmsan.panic set ...
[ 1366.096597][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: udevd Tainted: G    B   W    L      syzkaller #0 PREEMPT(full) 
[ 1366.107269][ T6901] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP
[ 1366.113815][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1366.124034][ T6901] Call Trace:
[ 1366.127437][ T6901]  <TASK>
[ 1366.130579][ T6901]  __dump_stack+0x26/0x30
[ 1366.135119][ T6901]  dump_stack_lvl+0x50/0x1c0
[ 1366.139927][ T6901]  ? dump_stack+0x12/0x25
[ 1366.144492][ T6901]  dump_stack+0x1e/0x25
[ 1366.148859][ T6901]  vpanic+0x7b4/0x1430
[ 1366.153195][ T6901]  panic+0x15d/0x160
[ 1366.157443][ T6901]  kmsan_report+0x31a/0x320
[ 1366.162187][ T6901]  ? kmsan_internal_check_memory+0x166/0x240
[ 1366.168478][ T6901]  ? kmsan_copy_to_user+0xef/0x190
[ 1366.173800][ T6901]  ? _copy_to_iter+0xef3/0x3400
[ 1366.178827][ T6901]  ? copy_page_to_iter+0x482/0x900
[ 1366.184118][ T6901]  ? filemap_read+0x1cd6/0x2300
[ 1366.189179][ T6901]  ? blkdev_read_iter+0x89f/0xb00
[ 1366.194398][ T6901]  ? vfs_read+0x8ec/0xf90
[ 1366.198919][ T6901]  ? ksys_read+0x1d9/0x470
[ 1366.203531][ T6901]  ? __x64_sys_read+0x97/0xf0
[ 1366.208416][ T6901]  ? x64_sys_call+0x311c/0x3ea0
[ 1366.213474][ T6901]  ? do_syscall_64+0x134/0xf80
[ 1366.218422][ T6901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1366.224683][ T6901]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1366.230975][ T6901]  ? up_read+0x6a/0xf0
[ 1366.235283][ T6901]  ? kmsan_get_metadata+0xf1/0x160
[ 1366.240614][ T6901]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1366.246669][ T6901]  ? raw_irqentry_exit_cond_resched+0x3f/0x80
[ 1366.252974][ T6901]  ? irqentry_exit+0x8f/0x6c0
[ 1366.257838][ T6901]  ? kmsan_get_metadata+0xf1/0x160
[ 1366.263184][ T6901]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1366.269238][ T6901]  kmsan_internal_check_memory+0x166/0x240
[ 1366.275292][ T6901]  kmsan_copy_to_user+0xef/0x190
[ 1366.280450][ T6901]  _copy_to_iter+0xef3/0x3400
[ 1366.285306][ T6901]  ? kmsan_get_shadow_origin_ptr+0x35/0xb0
[ 1366.291347][ T6901]  ? filemap_get_pages+0x398d/0x3d30
[ 1366.296907][ T6901]  copy_page_to_iter+0x482/0x900
[ 1366.302036][ T6901]  ? kmsan_get_metadata+0xf1/0x160
[ 1366.307421][ T6901]  filemap_read+0x1cd6/0x2300
[ 1366.312511][ T6901]  blkdev_read_iter+0x89f/0xb00
[ 1366.317628][ T6901]  vfs_read+0x8ec/0xf90
[ 1366.322013][ T6901]  ? __pfx_blkdev_read_iter+0x10/0x10
[ 1366.327616][ T6901]  ksys_read+0x1d9/0x470
[ 1366.332163][ T6901]  __x64_sys_read+0x97/0xf0
[ 1366.336883][ T6901]  x64_sys_call+0x311c/0x3ea0
[ 1366.341775][ T6901]  do_syscall_64+0x134/0xf80
[ 1366.346597][ T6901]  ? clear_bhb_loop+0x50/0xa0
[ 1366.351467][ T6901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1366.357537][ T6901] RIP: 0033:0x7fce6c4a7407
[ 1366.362083][ T6901] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1366.381892][ T6901] RSP: 002b:00007ffda9c72f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 1366.390532][ T6901] RAX: ffffffffffffffda RBX: 00007fce6cc81880 RCX: 00007fce6c4a7407
[ 1366.398674][ T6901] RDX: 0000000000040000 RSI: 00007fce6cc06000 RDI: 0000000000000009
[ 1366.406801][ T6901] RBP: 00005576825eaba0 R08: 0000000000000000 R09: 0000000000000000
[ 1366.414912][ T6901] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1366.423016][ T6901] R13: 0000000000000000 R14: 00005576825e5c98 R15: 00007fce6cda839c
[ 1366.431247][ T6901]  </TASK>
[ 1366.435016][ T6901] Kernel Offset: disabled
[ 1366.439416][ T6901] Rebooting in 86400 seconds..