last executing test programs:

5.932261315s ago: executing program 1 (id=891):
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000180)={[{@attr2}, {@uquota}, {@grpquota}]}, 0x3, 0x9856, &(0x7f000001c900)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa1})
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.591857975s ago: executing program 0 (id=894):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1200001, &(0x7f0000000080)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}]}, 0x4, 0x32d, &(0x7f0000000540)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

4.460135136s ago: executing program 4 (id=895):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)={0x20, r2, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\v./-\xaaP\xe9'}]}, 0x20}}, 0x0)

4.317345437s ago: executing program 4 (id=896):
pipe(0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r1, 0x3)
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = socket$inet6(0xa, 0x5, 0x0)
listen(r3, 0x7f)
bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r2, 0x3)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r4, 0x0, 0xffffffff000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
pipe(&(0x7f0000000100))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000000000057557e7a8292878e1f74da030000", @ANYRES32=r6, @ANYBLOB="0000000000100000"], 0x20}}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0xa, 0x7fff}, 0x8)

4.253468212s ago: executing program 0 (id=897):
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, 0xe8)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00'})
bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
ioctl$EVIOCGBITKEY(r5, 0x80084502, 0x0)

3.491829295s ago: executing program 1 (id=899):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0xc, 0x8, 0x40, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), 0x0}, 0x20)

3.371730365s ago: executing program 0 (id=901):
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000a80)='./file0\x00', 0x808, &(0x7f0000000080)=ANY=[], 0x1, 0xa10, &(0x7f0000001540)="$eJzs3U1sXEcdAPB5a6/zWbIpCTVpaBM+2vJRu3FM+IigqZoLUVNxq1RxidK0RKQBkUrQqockJ260qsKVD3HqpQKERC8o6olLJRqJS0+FAweiIFXiAIXEKPbMev3Prt6uk3i93t9PGs/Om9mdeeu3b9++92YmAWOrsfh3fn66SunS228c/cdDf99yc8nj7RKtxb+THalmSqnK6cnweh9MLMXXP3z1ZLe4SnOLf0s6PX2t/dxtKaXzaV+6nFppz6Urr78799TxC8cu7n/vzcNX787aAwDAePn25cPzu//65/t3fvTWA0fSpvbycnzeyunt+bj/SD7wL8f/jbQyXXWETlOh3GQOjVBuoku5znqaodxkj/qnwus2e5TbVFP/RMeybusNo6xsx61UNWZWpBuNmZml3+Rp8Xf9VDVz9vSZ588NqaHAHfevB1NK+wRBGMewsGPYeyCAJfF64S3OxzMLt6f9apP91X/tiUb358MdsNbbv/pHq/5fX7DH4c7ZqFtTWa/yOdqe0/E6Qrx/adDPf3m9eD2i2Wc7e11HGJXrC73aObHG7VitXu2P28VG9Y0cl/fhmyG/8/MT/6ej8j8Guvv3mJ3/37cO2iAI6yUsDHsHBKxb8b65hazkx/v6Yv6mmvzNNflbavK31uRvq8mHcfa7l36aXquWf+fH3/SDng8r59nuyfHHBmxPPB85aP3xvt9B3W798X5iWM/+cOKZU1997tkrS/f/V+3t/0be3vfldCt/ti7nAuV8YTyv3r73v7WynkaPcveG9txzS/mFpRp3rSxX7Vp+ndSxn7mlHdMrn7ejV7m9K8u1QrktOWwO7Y3HJ1vD88rxR9mvlvdrMqxvM6zHVGhH2a/szHFsB6xG2R573f9fts/p1KyeP33m1GM5XbbTP000N91cfmCN2w3cvn77/0ynlf1/treXNxud+4Udy8urzv1CKyyf67H8YE6X77nvTmxZXD5z8vtnnrvTKw9j7tzLr3zvxJkzp37ogQceeNB+MOw9E3C3zb704g9mz738yqOnXzzxwqkXTp09eOjQwbm5Q187OD+7eFw/23l0D2wky1/6w24JAAAAAAAAAAAA0K8fHTt65S/vfOX9pf7/y/3/Sv//cudv6f//k9D/P/aTL/3gSz/AnV3yF8uEAVanQrlmDh8P7d0V6tkdnveJHLfn8cv9/0t1cVzX0p77wvI4fm8pF4YTuGW8lKkwBkmcL/DTOb6Y418lGKJqS/fFOa4b37ps62V8CuNSjKbyfytbQxnHpPT/7jWuU9n/71yDNnLnrUV3wmGvI9DdP8ds/G9BEJbDwoJZPID1Ydjzf5bzniU++8dvbb4ZSrFrT6zcX8bxS+F2rPf5J9W/seb/bM9/1/f+L8yY11pdvf/5+dX3O6pNe/qtP65/GQd612D1f5TrL2vzcOqv/oVfhvrjBaE+/TfUv7XP+m9Z/72rq/9/uf7ytj3ymX7rX2px1VjZjnjeuFz/i+eNi+th/cvYngOv/yonaryR64dxNirzzA5qVOb/7SXeh/HlnC47wnKfQ5zvZND2l/sryvfA7vD6Vc3326hvP+M+/+/Xc1z3eSjz/5btsdUl3ehIN7u8t6O+rcBG84Hrf4IwtmFhYeHuntCqMdTKGfr7P+yrz8Ouf9jvf504/288ho/z/8b8OP9vzI/z/8b8OL9ezI/z/8b3M87/G/PvC68b5weersn/ZE3+npr8+2vy99bkf6omf39N/gM1+Q/W5N9bkz9Rk//ZmvzP1eQ/VJP/SE3+52vyN7rSH2Vc1x/GWeyf5/MP46Nc/+n1+d9Vkw+Mrp+9deDJZ3/7ndZS//+p9u+1ch3vSE4382/nH+d0vO6dOtI3897J6b+F/PV+vgPGSRw/I36/P1yTD4yucp+XzzeMoar7iD39jlvV6zif0fKFHH8xx1/K8aM5nsnxbI4P5HhujdrH3fHkb35/+LVq+ff+jpDf7/3ksT9QHCfqYJ/tiecHBr2fPY7jN6jbrX+V3cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGprH4d35+ukrp0ttvHH3m+OnZm0seb5doLf6d7Eg1289L6bEcT+T4F/nB9Q9fPdkZ38hxleZSlar28vT0tXZN21JK59O+dDm10p5LV15/d+6p4xeOXdz/3puHr969dwAAAAA2vv8HAAD//1kFDpg=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100))
sendmmsg$inet(r1, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="76f4", 0x2}], 0x1}}], 0x1, 0x4000000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x0, 0x0, 0x30314742}})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', 0xffffffffffffffff})
openat(r0, &(0x7f00000002c0)='./file3\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
truncate(&(0x7f00000001c0)='./file2\x00', 0xbd)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000240), 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=")
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x258100, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r7, &(0x7f0000000080)='./bus\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="10002bbd0700e2ff000003045dfed5e6dfcbf9404beea5be88fda77010c8856e7d6d0abc27897f246bf8cecd3efbc9c89a017b61910d8faf6b7e4cfa20f6bd290ebf2c0b78c7e022bf4ac8381dbd29f817b480b6644f4ebe1160501d15388ecbfcc07c86ad0d420cb438159bd358f3bcfe5c8cba79657d0aa97a6d600e65baf123e783100ea80b62e5cc712e736e22cf9347b7f33d3583ef70e3e9f6bb1edfbf67736a8ad858f5da11024b95c3fc1ec53cd1f75b2ad6f04053b63f40934d4e6340d663a0522b629635356a6c9b50510bf20f6543c15f6d9958151285a15f53a007b4002db94233b7e5f3", @ANYRES32=r8, @ANYBLOB="080005000b000000"], 0x24}}, 0x0)

2.966781268s ago: executing program 4 (id=902):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfe, @time, {}, {}, @connect}], 0x1c)

2.69011346s ago: executing program 4 (id=903):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000004a40))

2.666965252s ago: executing program 4 (id=904):
syz_usb_connect(0x5, 0x2d, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x55, 0x82, 0xcf, 0x20, 0x108c, 0x159, 0xb55e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6c, 0x8, 0x10, 0x1, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0xfc, 0x25, 0x31, 0x1, [], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0xa, 0x40, 0x3}}]}}]}}]}}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0})

2.464508419s ago: executing program 3 (id=905):
setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff})
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5)
select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400})

1.983312718s ago: executing program 0 (id=908):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000004000226,adinicb,gid=forget,nostrict,unhide,nostrict,dmode=00000000000017777777777,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r4, &(0x7f0000000000), 0x248800)

1.361986489s ago: executing program 3 (id=909):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r2}, 0x8)

1.22917299s ago: executing program 1 (id=910):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x5}, {}]}]}}, &(0x7f0000001f80)=""/223, 0x3e, 0xdf, 0x1}, 0x20)

1.138052697s ago: executing program 2 (id=911):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}]}, 0x28}}, 0x0)

1.137783687s ago: executing program 3 (id=912):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="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", 0x581}], 0x1}}], 0x2, 0x8000)

717.499721ms ago: executing program 1 (id=913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x40, 0x6, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

707.507442ms ago: executing program 3 (id=914):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000e000000c500000001f0ffff9500000000009c000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0)
poll(&(0x7f00000000c0)=[{r2}, {r2}], 0x2, 0xfffffffffffffff8)
dup2(r2, r3)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1}, {@in=@local, 0x0, 0x32}, @in=@dev, {0xe416}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x1c, {0x0, 0x0, 0x0, @in6=@mcast1}}]}, 0x154}}, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x0, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53)

605.167351ms ago: executing program 2 (id=915):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r1, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004740)=""/76, 0x4c}], 0x1}, 0x0)

566.609104ms ago: executing program 0 (id=916):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x7)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000a80))
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x2c, 0x2d, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8}}, @NHA_OIF={0x8}]}, 0x2c}}, 0x0)

535.584106ms ago: executing program 1 (id=917):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)

489.71069ms ago: executing program 2 (id=918):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup3(r2, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0)

369.90709ms ago: executing program 4 (id=919):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4)
fallocate(r3, 0x0, 0x0, 0x2400001)
fallocate(r3, 0x0, 0x3, 0xffffffff)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=ANY=[], 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001540)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}], 0x5}, 0x0)
write$binfmt_elf64(r3, &(0x7f0000002640)=ANY=[@ANYBLOB], 0x8e2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
writev(r6, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b4", 0x9}, {&(0x7f00000005c0)="c2c180", 0x3}], 0x2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001500)={'syztnl2\x00', &(0x7f0000002fc0)={'ip6tnl0\x00', <r7=>0x0, 0x29, 0x2, 0x2, 0x0, 0x11, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x7, 0x1, 0x9}})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003040)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="00001db30af95ce6"], &(0x7f00000012c0)='GPL\x00', 0x401, 0x1000, &(0x7f0000004580)=""/4096, 0x41100, 0x21, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000003080)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000030c0)={0x2, 0x6, 0x7, 0xc107}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000003100)=[r1, r1, r1, 0xffffffffffffffff], &(0x7f00000033c0)=[{0x0, 0x5, 0x7}, {0x1, 0x3, 0xe}, {0x5, 0x1, 0xb, 0xc}, {0x0, 0x3, 0x7, 0xc}, {0x1, 0x4, 0x10, 0x8}, {0x4, 0x4, 0xc, 0x8}, {0x5, 0x5, 0xb, 0x5}, {0x4, 0x4, 0xb, 0x1}, {0x2, 0x2, 0x3, 0x9}], 0x10, 0x8}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)

322.433574ms ago: executing program 1 (id=920):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="80030006000002"], 0x28}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05040800d3fc030000004788031c09103a28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1a000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000006800000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000001a00c70000000000000000000000000000002d091be3f2f339790000"], 0x44}}, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000040)="0bbb268dd6f7a80400000000000000000000210d0000aaa8fa017242ba9380d4100000000000000001000000fe000008", 0x30)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r13, @ANYBLOB="050088000000000006004800"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080025bd7000fedbdf253000000008000300cfab20e9d1fa6561cba552b58414fb80ec2f4735d15863065d897c4f02fd57bfae5f21b95314e383436fdef49f7518892dbd202a8a", @ANYRES32=r13, @ANYBLOB="0c00990001800000400000000600360013000000060036003f0000000600360000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80004}, 0x24048810)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}}, 0x0)
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r15 = accept4(r14, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r15)

313.742155ms ago: executing program 2 (id=921):
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x2})
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x19, &(0x7f00000000c0)={r2}, 0x8)

158.640657ms ago: executing program 0 (id=922):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f00000000950000000000000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f, 0x2]}}, 0x0, 0x30}, 0x20)
socket$igmp(0x2, 0x3, 0x2)
socket$inet(0x2, 0x3, 0x2)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, "f6ff05000000ffff"}}}}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x0, 0x3, 0x5, 0x10, 0xffffffffffffffff}], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000440), 0x41000, 0x42, '\x00', 0x0, 0x2b, r5, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0xd1e, 0x80000001}, 0x10, 0xffffffffffffffff, r2, 0x9, &(0x7f0000000580)=[r0, r7, r0, r0, r0], &(0x7f00000005c0)=[{0x2, 0x3, 0x10}, {0x4, 0x5, 0x3, 0x2}, {0x3, 0x1, 0x10, 0x2}, {0x3, 0x2, 0xe, 0x7}, {0x5, 0x2, 0xe, 0xc}, {0x3, 0x2, 0x1, 0xc}, {0x4, 0x5, 0x4, 0x7}, {0x4, 0x4, 0x1, 0x9}, {0x5, 0x4, 0x2, 0x4}], 0x10, 0x5}, 0x90)
r8 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0xfffffffffffffce7, 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c000280140007000000000000000000000000000000010106000500000000000400060008000b"], 0x5c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x25}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRES32=r0, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

113.775541ms ago: executing program 2 (id=923):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
r2 = dup2(r1, r0)
sendmmsg$inet6(r2, &(0x7f00000088c0)=[{{&(0x7f0000004f40)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000072c0)=ANY=[], 0xb0}}, {{&(0x7f0000007380)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0)

59.862885ms ago: executing program 3 (id=924):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1d4, 0x4)
sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4)
write(r0, &(0x7f0000003000)='\t', 0x1)
recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2000, 0x0)

3.07709ms ago: executing program 2 (id=925):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "6652de90"}]}}, 0x0}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

0s ago: executing program 3 (id=926):
r0 = gettid()
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000180000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='fsi_master_gpio_out\x00', r2}, 0x10)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'})
mkdir(&(0x7f0000000000)='./file0\x00', 0x41)
r5 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x5)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000530429c334bb5d8da538301b79d7a1702226583e31298ccc624ff2d1448c0e0fe54a231162f69f7213fc2966d2600f77d30d91517ba2023e043b7dea5af26b286015c7c24ee99669043c524b98705888afb59847d63941581d47689fc67eaf8e95cec92df74d1ae2895e5be2e5deb0ec4e60f423037ba69dd087c51242b1e0f486dd2413a40873181487a95bf3aa38add3d5fd83491e3b258022f5efc006561d482282cd4dd8eb30098917d231dadac884f6422705f88dfc420234e837d5809be11c4d2e9f", @ANYRES8, @ANYRESHEX=r4], 0x14}}, 0xc040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
bind$unix(r5, &(0x7f0000000380)=@file={0x1, './file0/bus\x00'}, 0x6e)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0x8, 0x5, 0x80000001, 0x3f, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x110)
finit_module(r8, 0x0, 0x0)
fcntl$dupfd(r1, 0x0, r1)

kernel console output (not intermixed with test programs):

3:044F:B653.0006 failed with error -22
[  158.994204][ T4843] XFS (loop2): Unmounting Filesystem
[  159.058073][ T3586] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3
[  159.067169][ T3586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.091327][ T3586] usb 5-1: Product: syz
[  159.095546][ T3586] usb 5-1: Manufacturer: syz
[  159.158040][ T3586] usb 5-1: SerialNumber: syz
[  159.165824][ T4760] usb 1-1: USB disconnect, device number 8
[  159.182487][ T3586] usb 5-1: config 0 descriptor??
[  159.304087][ T3586] msi2500 5-1:0.0: Registered as swradio16
[  159.318862][ T3586] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  159.410043][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'.
[  159.517478][ T3646] usb 5-1: USB disconnect, device number 4
[  159.598645][ T5314] device ipip0 entered promiscuous mode
[  159.955151][ T5323] loop0: detected capacity change from 0 to 4096
[  160.013210][ T5323] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  160.073690][ T5323] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  160.109177][ T5323] ntfs3: loop0: Failed to load $BadClus.
[  160.313223][ T5327] loop4: detected capacity change from 0 to 1024
[  160.403299][ T5321] loop2: detected capacity change from 0 to 32768
[  160.643809][ T5327] hfsplus: xattr searching failed
[  160.676648][ T5329] RDS: rds_bind could not find a transport for ::c001:20:0:0, load rds_tcp or rds_rdma?
[  160.677705][ T5321] XFS (loop2): Mounting V5 Filesystem
[  161.619619][ T4931] hfsplus: bad catalog entry type
[  161.807288][ T5321] XFS (loop2): Ending clean mount
[  162.016467][ T4843] XFS (loop2): Unmounting Filesystem
[  162.112640][ T5365] loop1: detected capacity change from 0 to 512
[  162.181411][ T5365] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  162.215115][ T5365] EXT4-fs (loop1): orphan cleanup on readonly fs
[  162.231149][ T5365] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.402: iget: immutable or append flags not allowed on symlinks
[  162.254984][ T5365] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.402: couldn't read orphan inode 16 (err -117)
[  162.272349][ T5365] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.318052][ T3586] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  162.613498][ T5352] loop0: detected capacity change from 0 to 32768
[  162.687423][ T5371] 9pnet: Insufficient options for proto=fd
[  162.758158][ T3586] usb 4-1: Using ep0 maxpacket: 8
[  162.869763][ T5352] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.394 (5352)
[  162.899163][ T3586] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55
[  163.208302][ T3586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.270539][ T3586] usb 4-1: config 0 descriptor??
[  163.321181][ T3586] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  163.364961][ T3586] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22
[  163.401214][ T5352] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  163.428293][ T5352] BTRFS info (device loop0): turning on flush-on-commit
[  163.435347][ T5352] BTRFS info (device loop0): setting nodatasum
[  163.463419][ T5352] BTRFS info (device loop0): enabling auto defrag
[  163.500328][ T5352] BTRFS info (device loop0): max_inline at 0
[  163.514851][ T5352] BTRFS info (device loop0): using free space tree
[  163.535922][ T5352] BTRFS info (device loop0): has skinny extents
[  163.612378][ T1078] usb 4-1: USB disconnect, device number 6
[  163.632538][ T5380] loop1: detected capacity change from 0 to 256
[  163.724442][ T5352] BTRFS info (device loop0): enabling ssd optimizations
[  164.534226][ T3808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (3808)
[  164.584889][ T5379] loop1: detected capacity change from 0 to 128
[  164.862013][ T5379] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  164.922961][ T5407] netlink: 288 bytes leftover after parsing attributes in process `syz.3.409'.
[  165.718566][ T5412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'.
[  165.727629][ T5412] netlink: 52 bytes leftover after parsing attributes in process `syz.2.408'.
[  165.736927][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'.
[  166.248622][ T5379] MTD: Attempt to mount non-MTD device "./file0"
[  166.458465][ T5379] ./file0: Can't open blockdev
[  166.510875][ T5420] loop2: detected capacity change from 0 to 512
[  166.803671][    T9] hfsplus: b-tree write err: -5, ino 4
[  167.233081][  T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.349411][ T5420] loop2: detected capacity change from 0 to 512
[  167.419877][ T5420] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  167.454083][ T5420] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  167.488503][  T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.547064][ T5420] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  167.605272][ T5420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  167.615029][ T5420] System zones: 0-2, 18-18, 34-34
[  167.666702][ T5420] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  167.686181][  T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.735434][ T5420] EXT4-fs (loop2): 1 truncate cleaned up
[  167.743771][ T5420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  167.780863][ T4030] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  167.838469][  T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.869573][ T5439] loop0: detected capacity change from 0 to 4096
[  167.933691][ T5439] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  167.981985][ T5439] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22.
[  167.992715][ T5439] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  168.052578][ T5439] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  168.208788][ T4030] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  168.227237][ T4030] usb 4-1: config 0 has no interface number 0
[  168.274414][ T4030] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  168.324461][ T4030] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  168.344736][ T5426] loop1: detected capacity change from 0 to 32768
[  168.528334][ T4030] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58
[  168.573195][ T5444] loop2: detected capacity change from 0 to 512
[  168.602261][ T5435] chnl_net:caif_netlink_parms(): no params data found
[  168.611111][ T4030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.630929][ T4030] usb 4-1: Product: syz
[  168.663118][ T5444] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  168.673606][ T5444] EXT4-fs (loop2): Ignoring removed nobh option
[  169.072129][ T5444] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,jqfmt=vfsv1,nojournal_checksum,nobarrier,nobh,nobarrier,,errors=continue. Quota mode: writeback.
[  169.386411][ T4030] usb 4-1: Manufacturer: syz
[  169.392124][ T4030] usb 4-1: SerialNumber: syz
[  169.399175][ T4030] usb 4-1: config 0 descriptor??
[  169.412160][ T5444] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff)
[  169.451400][ T4030] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input7
[  169.674571][ T4030] usb 4-1: USB disconnect, device number 7
[  169.798224][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[  169.985427][  T150] block nbd0: Attempted send on invalid socket
[  169.994015][  T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  170.006491][ T5479] hfsplus: unable to find HFS+ superblock
[  170.058880][ T5479] zonefs (nbd0) ERROR: Not a zoned block device
[  170.138030][ T1078] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  170.167406][ T5483] netlink: 10 bytes leftover after parsing attributes in process `syz.1.425'.
[  170.178845][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.209041][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.277202][ T5435] device bridge_slave_0 entered promiscuous mode
[  170.306856][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.308337][ T5485] loop3: detected capacity change from 0 to 256
[  170.341934][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.368182][ T5435] device bridge_slave_1 entered promiscuous mode
[  170.418115][ T1078] usb 3-1: Using ep0 maxpacket: 32
[  170.483224][ T5485] FAT-fs (loop3): Directory bread(block 64) failed
[  170.512677][ T5435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.533963][ T5485] FAT-fs (loop3): Directory bread(block 65) failed
[  170.541444][ T5435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.598154][ T5485] FAT-fs (loop3): Directory bread(block 66) failed
[  170.612701][ T5435] team0: Port device team_slave_0 added
[  170.634553][ T5485] FAT-fs (loop3): Directory bread(block 67) failed
[  170.659484][ T5435] team0: Port device team_slave_1 added
[  170.679138][ T5485] FAT-fs (loop3): Directory bread(block 68) failed
[  170.703945][ T5485] FAT-fs (loop3): Directory bread(block 69) failed
[  170.713543][ T5485] FAT-fs (loop3): Directory bread(block 70) failed
[  170.745601][ T5485] FAT-fs (loop3): Directory bread(block 71) failed
[  170.772594][ T1078] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=e2.de
[  170.784560][ T5485] FAT-fs (loop3): Directory bread(block 72) failed
[  170.801291][ T1078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.810861][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.818695][ T5485] FAT-fs (loop3): Directory bread(block 73) failed
[  170.828825][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.835264][ T1078] usb 3-1: Product: syz
[  170.854741][    C1] vkms_vblank_simulate: vblank timer overrun
[  170.944087][ T5499] loop1: detected capacity change from 0 to 4096
[  170.946710][ T1078] usb 3-1: Manufacturer: syz
[  170.955741][ T5435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.968068][ T1078] usb 3-1: SerialNumber: syz
[  170.988520][ T1078] usb 3-1: config 0 descriptor??
[  171.029566][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.036564][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.039260][ T1078] CoreChips: probe of 3-1:0.0 failed with error -22
[  171.155466][ T5435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.370920][ T5499] overlayfs: upper fs does not support tmpfile.
[  171.384032][ T5435] device hsr_slave_0 entered promiscuous mode
[  171.397117][ T5435] device hsr_slave_1 entered promiscuous mode
[  171.408978][ T5499] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  171.417142][ T5435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.431215][ T5499] overlayfs: failed to resolve './file0': -2
[  171.437463][ T5435] Cannot create hsr debugfs directory
[  171.472555][ T5475] loop2: detected capacity change from 0 to 16
[  171.534011][ T5475] erofs: (device loop2): mounted with root inode @ nid 36.
[  171.743528][  T154] device hsr_slave_0 left promiscuous mode
[  171.776658][ T4037] usb 3-1: USB disconnect, device number 4
[  171.848286][  T154] device hsr_slave_1 left promiscuous mode
[  171.878176][ T1078] Bluetooth: hci3: command 0x041b tx timeout
[  171.890723][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.928028][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.958959][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.976719][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.987541][  T154] device bridge_slave_1 left promiscuous mode
[  172.007809][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.040407][  T154] device bridge_slave_0 left promiscuous mode
[  172.061365][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.113631][  T154] device veth1_macvtap left promiscuous mode
[  172.130148][  T154] device veth0_macvtap left promiscuous mode
[  172.150076][  T154] device veth1_vlan left promiscuous mode
[  172.171779][  T154] device veth0_vlan left promiscuous mode
[  172.420187][ T5531] loop2: detected capacity change from 0 to 64
[  172.479404][ T5516] loop1: detected capacity change from 0 to 32768
[  172.508894][ T5516] XFS: noikeep mount option is deprecated.
[  172.526438][ T5516] XFS: ikeep mount option is deprecated.
[  172.630587][ T5516] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  172.724501][ T5516] XFS (loop1): Quotacheck needed: Please wait.
[  172.766169][ T5531] hfs: request for non-existent node 131072 in B*Tree
[  172.817505][ T5531] hfs: request for non-existent node 131072 in B*Tree
[  172.916612][ T5516] XFS (loop1): Quotacheck: Done.
[  172.951916][  T154] team0 (unregistering): Port device team_slave_1 removed
[  173.050041][  T154] team0 (unregistering): Port device team_slave_0 removed
[  173.085006][ T3569] XFS (loop1): Unmounting Filesystem
[  173.092516][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.126080][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.355217][  T154] bond0 (unregistering): Released all slaves
[  173.475169][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'.
[  173.662764][ T5555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'.
[  173.684373][ T5555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'.
[  174.041357][ T4037] Bluetooth: hci3: command 0x040f tx timeout
[  174.536192][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'.
[  175.715240][ T4037] Bluetooth: hci2: command 0x0406 tx timeout
[  175.839703][ T5593] loop2: detected capacity change from 0 to 4096
[  175.973717][ T5600] loop1: detected capacity change from 0 to 2048
[  176.188815][ T1078] Bluetooth: hci3: command 0x0419 tx timeout
[  176.216596][  T264] block nbd3: Attempted send on invalid socket
[  176.222883][  T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  176.515644][ T5600] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.531297][ T5600] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038 (0x7fffffff)
[  177.015838][ T5435] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  177.034863][ T5562] loop0: detected capacity change from 0 to 32768
[  177.071538][ T5597] fs-verity: sha256 using implementation "sha256-avx2"
[  177.117317][ T5435] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  177.139168][ T5562] XFS: attr2 mount option is deprecated.
[  177.144862][ T5562] XFS: ikeep mount option is deprecated.
[  177.156818][ T5597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.452: bg 0: block 288: padding at end of block bitmap is not set
[  177.158037][ T5562] XFS: noikeep mount option is deprecated.
[  177.180882][ T5435] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  177.215444][ T5597] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -117
[  177.265209][ T5435] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  177.628513][ T5634] vivid-000: disconnect
[  177.637053][ T5634] vivid-000: reconnect
[  178.337698][ T5638] loop2: detected capacity change from 0 to 2048
[  178.457629][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.478193][ T5638]  loop2: p1 p2 p3
[  178.516984][ T5638] loop2: p1 size 458752 extends beyond EOD, truncated
[  178.608172][ T5435] 8021q: adding VLAN 0 to HW filter on device team0
[  178.628334][ T5638] loop2: p2 start 4294902784 is beyond EOD, truncated
[  178.634338][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.635243][ T5638] loop2: p3 start 4278191616 is beyond EOD, truncated
[  178.684337][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.743237][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.763273][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.789171][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.796322][ T4030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.848403][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.878014][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.903104][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.910372][ T4030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.966435][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  179.008598][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  179.042405][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  179.068817][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.098774][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.134378][ T4030] kernel write not supported for file /dsp (pid: 4030 comm: kworker/0:8)
[  179.166582][ T5435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  179.224423][ T5657] loop2: detected capacity change from 0 to 4096
[  179.234645][ T5435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.292518][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.305580][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  179.339510][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  179.356224][ T5657] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  179.380138][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.428956][ T5663] trusted_key: encrypted_key: keyword 'ÿÿÿÿõ$]&@Ú' not recognized
[  179.445660][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.465099][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.484492][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.503312][ T5663] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.464'.
[  179.527036][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.569997][ T5663] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  179.613758][ T5663] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  180.005402][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.018136][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.052676][ T5435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.135111][ T5654] loop0: detected capacity change from 0 to 32768
[  180.314984][ T5654] XFS (loop0): Mounting V5 Filesystem
[  180.558420][ T3586] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  180.627617][ T5654] XFS (loop0): Ending clean mount
[  180.678688][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.688276][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.739591][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.750856][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.760524][ T4073] XFS (loop0): Unmounting Filesystem
[  180.774153][ T5435] device veth0_vlan entered promiscuous mode
[  180.788221][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.812434][ T3586] usb 4-1: Using ep0 maxpacket: 16
[  180.823714][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.846153][ T5435] device veth1_vlan entered promiscuous mode
[  180.908741][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.921543][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  180.930604][ T3586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  180.947684][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.972554][ T3586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  180.973505][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.037704][ T5435] device veth0_macvtap entered promiscuous mode
[  181.063178][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.098344][ T5435] device veth1_macvtap entered promiscuous mode
[  181.144580][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.174994][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.185315][ T3586] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9
[  181.189301][ T5688] loop2: detected capacity change from 0 to 32768
[  181.206010][ T3586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.222469][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.235094][ T3586] usb 4-1: Product: syz
[  181.243877][ T3586] usb 4-1: Manufacturer: syz
[  181.253481][ T3586] usb 4-1: SerialNumber: syz
[  181.259396][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.278971][ T3586] usb 4-1: config 0 descriptor??
[  181.289577][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.312636][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.334191][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.345907][ T3586] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s)
[  181.382231][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.416502][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.439644][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.480934][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.508584][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.528815][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.541325][ T5688] XFS (loop2): Mounting V5 Filesystem
[  181.547297][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.559020][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.569408][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.580454][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.591073][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.602165][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.607435][ T3623] usb 4-1: USB disconnect, device number 8
[  181.616569][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.633460][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.644323][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.668513][ T5435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.739682][ T5435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.776492][ T5688] XFS (loop2): Ending clean mount
[  181.793952][ T5688] XFS (loop2): Quotacheck needed: Please wait.
[  181.802954][ T5435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.822378][ T5435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.984124][ T5688] XFS (loop2): Quotacheck: Done.
[  182.062526][ T4055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.074180][ T5688] overlayfs: unrecognized mount option "\" or missing value
[  182.104702][ T4055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.147035][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.178575][ T3710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.202531][ T3710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.267309][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.282317][ T1078] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  182.488590][ T4035] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  182.590180][ T1078] usb 1-1: Using ep0 maxpacket: 32
[  182.656738][ T5768] loop4: detected capacity change from 0 to 128
[  182.682698][ T5768] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  182.728206][ T1078] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  182.857980][ T3623] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  182.909543][ T1078] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=be.3a
[  182.938164][ T4035] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.953271][ T5780] loop4: detected capacity change from 0 to 256
[  182.957923][ T1078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.967568][ T1078] usb 1-1: Product: syz
[  182.971836][ T4035] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  182.981960][ T1078] usb 1-1: Manufacturer: syz
[  182.986590][ T1078] usb 1-1: SerialNumber: syz
[  183.015077][ T1078] usb 1-1: config 0 descriptor??
[  183.056161][ T5780] FAT-fs (loop4): Directory bread(block 64) failed
[  183.067340][ T5780] FAT-fs (loop4): Directory bread(block 65) failed
[  183.076183][ T4035] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  183.078718][ T5780] FAT-fs (loop4): Directory bread(block 66) failed
[  183.100237][ T5780] FAT-fs (loop4): Directory bread(block 67) failed
[  183.107174][ T5780] FAT-fs (loop4): Directory bread(block 68) failed
[  183.108012][ T4035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  183.117186][ T3623] usb 4-1: Using ep0 maxpacket: 32
[  183.134162][ T5780] FAT-fs (loop4): Directory bread(block 69) failed
[  183.134866][ T4035] usb 3-1: SerialNumber: syz
[  183.144479][ T5780] FAT-fs (loop4): Directory bread(block 70) failed
[  183.159234][ T5780] FAT-fs (loop4): Directory bread(block 71) failed
[  183.166121][ T5780] FAT-fs (loop4): Directory bread(block 72) failed
[  183.180000][ T5780] FAT-fs (loop4): Directory bread(block 73) failed
[  183.248261][ T3623] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  183.250364][ T4035] usb 3-1: can't set config #1, error -71
[  183.300690][ T3623] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  183.307171][ T4035] usb 3-1: USB disconnect, device number 5
[  183.325478][ T3623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.353448][ T3623] usb 4-1: config 0 descriptor??
[  183.361649][ T1075] usb 1-1: USB disconnect, device number 9
[  183.419648][ T3623] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  183.533438][ T4843] XFS (loop2): Unmounting Filesystem
[  183.786791][ T5797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.482'.
[  183.915861][ T5800] IPv6: addrconf: prefix option has invalid lifetime
[  183.982192][ T5801] device vlan2 entered promiscuous mode
[  183.987785][ T5801] device gretap0 entered promiscuous mode
[  184.037608][ T5801] device gretap0 left promiscuous mode
[  184.134380][ T5795] loop4: detected capacity change from 0 to 32768
[  184.221991][ T5795] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.481 (5795)
[  184.252573][ T5795] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  184.264424][ T5795] BTRFS info (device loop4): setting nodatacow, compression disabled
[  184.274127][ T5795] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  184.284823][ T5795] BTRFS info (device loop4): force lzo compression, level 0
[  184.292746][ T5795] BTRFS info (device loop4): metadata ratio 8
[  184.299438][ T5795] BTRFS info (device loop4): doing ref verification
[  184.309616][ T5795] BTRFS info (device loop4): metadata ratio 32769
[  184.326943][ T5795] BTRFS info (device loop4): turning off barriers
[  184.341541][ T5795] BTRFS info (device loop4): enabling ssd optimizations
[  184.359852][ T5795] BTRFS info (device loop4): using spread ssd allocation scheme
[  184.376576][ T5795] BTRFS info (device loop4): turning on barriers
[  184.397056][ T5795] BTRFS info (device loop4): using free space tree
[  184.417245][ T5795] BTRFS info (device loop4): has skinny extents
[  184.828969][ T5816] loop2: detected capacity change from 0 to 32768
[  184.926354][ T5816] XFS (loop2): invalid logbufsize: 8192 [not 16k,32k,64k,128k or 256k]
[  185.401755][ T5842] loop0: detected capacity change from 0 to 4096
[  185.464384][ T5848] device team0 entered promiscuous mode
[  185.482685][ T5848] device team_slave_0 entered promiscuous mode
[  185.490574][ T5848] device team_slave_1 entered promiscuous mode
[  185.498945][ T5848] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  185.514132][ T5848] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  185.634841][ T5853] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  185.658578][ T4041] usb 4-1: USB disconnect, device number 9
[  185.729017][ T5855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.496'.
[  185.841843][ T5864] loop4: detected capacity change from 0 to 256
[  185.985405][ T5864] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  186.495263][ T5884] loop0: detected capacity change from 0 to 1024
[  186.583327][ T5884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.591482][ T5873] loop3: detected capacity change from 0 to 32768
[  186.661677][ T5873] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.501 (5873)
[  186.754301][ T5873] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  186.786312][ T5873] BTRFS info (device loop3): setting nodatacow, compression disabled
[  186.825204][ T5873] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  186.857950][ T5873] BTRFS info (device loop3): force lzo compression, level 0
[  186.865561][ T5873] BTRFS info (device loop3): metadata ratio 8
[  186.895778][ T5873] BTRFS info (device loop3): doing ref verification
[  186.947973][ T5873] BTRFS info (device loop3): metadata ratio 32769
[  186.988565][ T5873] BTRFS info (device loop3): turning off barriers
[  186.995199][ T5890] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[  187.011936][ T5873] BTRFS info (device loop3): enabling ssd optimizations
[  187.012294][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[  187.028494][ T5873] BTRFS info (device loop3): using spread ssd allocation scheme
[  187.038682][ T5873] BTRFS info (device loop3): turning on barriers
[  187.072111][ T5873] BTRFS info (device loop3): using free space tree
[  187.092226][ T5873] BTRFS info (device loop3): has skinny extents
[  187.212302][ T5894] device syzkaller0 entered promiscuous mode
[  187.958113][ T4030] Bluetooth: hci0: command 0x17ff tx timeout
[  188.199504][ T5930] loop1: detected capacity change from 0 to 256
[  188.362709][ T5930] exFAT-fs (loop1): bogus data start sector
[  188.389361][ T5930] exFAT-fs (loop1): failed to read boot sector
[  188.423956][ T5930] exFAT-fs (loop1): failed to recognize exfat type
[  188.477007][ T5932] loop0: detected capacity change from 0 to 512
[  188.523249][ T5929] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  188.610034][ T5930] loop1: detected capacity change from 0 to 512
[  188.699732][ T5932] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  188.772088][ T5930] EXT4-fs (loop1): 1 orphan inode deleted
[  188.828574][ T5932] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038 (0x7fffffff)
[  188.849075][ T5930] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback.
[  188.969612][ T5930] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038 (0x7fffffff)
[  189.087525][ T5930] EXT4-fs (loop1): shut down requested (2)
[  189.097631][ T5924] loop2: detected capacity change from 0 to 32768
[  189.125464][   T26] audit: type=1800 audit(1723564674.297:85): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.516" name="file1" dev="loop1" ino=15 res=0 errno=0
[  189.283654][ T5924] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  189.293292][ T5924] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  189.504690][ T5924] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  189.554334][ T5933] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  189.585171][ T5933] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  190.318947][ T5933] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 733ms
[  190.385590][ T5933] gfs2: fsid=syz:syz.0: jid=0: Done
[  190.389820][ T5944] loop3: detected capacity change from 0 to 32768
[  190.408346][ T5924] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  190.526174][ T5961] binder: 5960:5961 ioctl c06864b8 20000280 returned -22
[  190.533431][ T5924] gfs2: fsid=syz:syz.0: can't start quotad thread: -4
[  190.968653][ T5971] loop1: detected capacity change from 0 to 4096
[  191.044807][ T5971] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match.  Run ntfsfix or chkdsk.
[  191.067005][ T5971] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  191.101804][ T5971] ntfs: volume version 3.1.
[  191.206811][ T5956] loop0: detected capacity change from 0 to 32768
[  191.406647][ T5979] loop2: detected capacity change from 0 to 2048
[  191.437280][ T5967] loop4: detected capacity change from 0 to 32768
[  191.485558][ T5987] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.524986][ T5956] XFS (loop0): Mounting V5 Filesystem
[  191.528009][ T5989] netlink: 'syz.1.535': attribute type 10 has an invalid length.
[  191.536640][ T5986] loop3: detected capacity change from 0 to 512
[  191.538390][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.535'.
[  191.555150][ T5989] bridge0: port 3(syz_tun) entered blocking state
[  191.563906][ T5989] bridge0: port 3(syz_tun) entered disabled state
[  191.572437][ T5989] device syz_tun entered promiscuous mode
[  191.580449][ T5989] bridge0: port 3(syz_tun) entered blocking state
[  191.587741][ T5989] bridge0: port 3(syz_tun) entered forwarding state
[  191.636380][ T5993] fuse: Bad value for 'fd'
[  191.647728][ T5986] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  191.788728][ T5956] XFS (loop0): Starting recovery (logdev: internal)
[  191.833767][ T5986] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  191.962934][ T5986] EXT4-fs (loop3): 1 truncate cleaned up
[  191.992689][ T5956] XFS (loop0): Ending recovery (logdev: internal)
[  192.017680][ T5986] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  192.224665][ T4073] XFS (loop0): Unmounting Filesystem
[  192.472028][  T150] block nbd2: Attempted send on invalid socket
[  192.479991][  T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  192.526173][ T6010] hfsplus: unable to find HFS+ superblock
[  192.623975][ T6012] loop4: detected capacity change from 0 to 512
[  192.692702][ T6012] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  192.721087][ T6012] UDF-fs: Scanning with blocksize 512 failed
[  192.751530][ T6012] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  192.781341][ T6012] UDF-fs: Scanning with blocksize 1024 failed
[  192.808279][ T6012] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  192.854821][ T6012] UDF-fs: Scanning with blocksize 2048 failed
[  192.866696][ T6018] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  193.015332][ T6012] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  193.043476][ T6012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.451044][ T6026] Invalid ELF header magic: != ELF
[  193.839040][ T3586] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  194.078100][ T3586] usb 1-1: Using ep0 maxpacket: 8
[  194.119273][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  194.125610][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  194.366015][ T6037] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.548'.
[  194.368390][ T3586] usb 1-1: New USB device found, idVendor=82fa, idProduct=a418, bcdDevice=15.0f
[  194.402665][ T3586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.415694][ T3586] usb 1-1: Product: syz
[  194.418028][ T6037] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  194.432774][ T3586] usb 1-1: Manufacturer: syz
[  194.442049][ T3586] usb 1-1: SerialNumber: syz
[  194.451909][ T3586] usb 1-1: config 0 descriptor??
[  194.493485][ T3586] usb-storage 1-1:0.0: USB Mass Storage device detected
[  194.581923][ T6041] loop2: detected capacity change from 0 to 2048
[  194.653987][ T6041] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext3
[  194.716783][ T3623] usb 1-1: USB disconnect, device number 10
[  195.157433][ T6035] loop4: detected capacity change from 0 to 32768
[  195.262790][ T6058] loop2: detected capacity change from 0 to 1024
[  195.280521][ T6035] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.547 (6035)
[  195.340878][ T6035] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  195.364019][ T6035] BTRFS info (device loop4): use zlib compression, level 3
[  195.370631][ T6058] hfsplus: failed to load root directory
[  195.391933][ T6035] BTRFS info (device loop4): turning on sync discard
[  195.419009][ T6035] BTRFS info (device loop4): max_inline at 0
[  195.441476][ T6035] BTRFS info (device loop4): enabling ssd optimizations
[  195.468179][ T6035] BTRFS info (device loop4): using spread ssd allocation scheme
[  195.511075][ T6035] BTRFS info (device loop4): using free space tree
[  195.543591][ T6035] BTRFS info (device loop4): has skinny extents
[  195.641341][ T6073] loop2: detected capacity change from 0 to 8
[  196.068213][ T5933] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  196.369901][ T5933] usb 2-1: Using ep0 maxpacket: 16
[  196.370152][ T6059] loop3: detected capacity change from 0 to 40427
[  196.501862][ T5933] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.515992][ T6059] F2FS-fs (loop3): Found nat_bits in checkpoint
[  196.534483][ T5933] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.607914][ T5933] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  196.644775][ T6059] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  196.658712][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.665367][ T5933] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  196.714049][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.762047][ T5933] usb 2-1: config 0 descriptor??
[  196.911702][ T6096] loop2: detected capacity change from 0 to 32768
[  197.044458][ T6107] dlm: no locking on control device
[  197.242458][ T6096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.563 (6096)
[  197.467628][ T6109] loop4: detected capacity change from 0 to 1764
[  197.477371][ T5933] hid (null): bogus close delimiter
[  197.490826][ T6096] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  197.508501][ T5933] hid-generic 0003:045E:05DA.0007: bogus close delimiter
[  197.509651][ T6097] loop0: detected capacity change from 0 to 32768
[  197.515801][ T6096] BTRFS info (device loop2): using free space tree
[  197.529276][ T5933] hid-generic 0003:045E:05DA.0007: item 0 4 2 10 parsing failed
[  197.529299][ T6096] BTRFS info (device loop2): has skinny extents
[  197.543829][ T5933] hid-generic: probe of 0003:045E:05DA.0007 failed with error -22
[  197.557234][ T6097] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.562 (6097)
[  197.578788][ T3978] attempt to access beyond end of device
[  197.578788][ T3978] loop3: rw=2049, want=45120, limit=40427
[  197.583696][ T6109] iso9660: Corrupted directory entry in block 2 of inode 1920
[  197.631780][ T6097] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  197.651517][ T6097] BTRFS info (device loop0): setting nodatasum
[  197.660364][ T6096] BTRFS info (device loop2): enabling ssd optimizations
[  197.667799][ T6097] BTRFS info (device loop0): setting datasum
[  197.674347][ T6097] BTRFS info (device loop0): using free space tree
[  197.693931][ T6097] BTRFS info (device loop0): has skinny extents
[  197.706868][ T3586] usb 2-1: USB disconnect, device number 10
[  197.897529][ T6097] BTRFS info (device loop0): enabling ssd optimizations
[  198.129461][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  198.207206][ T6097] ipt_REJECT: ECHOREPLY no longer supported.
[  198.796063][ T6167] loop2: detected capacity change from 0 to 4096
[  198.878367][   T23] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  198.889495][ T6167] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  198.899250][   T23] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  198.909885][   T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  198.919426][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.958462][ T6143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  199.606788][ T6186] loop3: detected capacity change from 0 to 2048
[  199.681838][ T6186]  loop3: p1 < > p2 p3 < p5 >
[  199.686707][ T6186] loop3: partition table partially beyond EOD, truncated
[  199.745836][ T6186] loop3: p1 start 4278190080 is beyond EOD, truncated
[  199.755815][ T6186] loop3: p2 start 16908800 is beyond EOD, truncated
[  199.868377][ T6186] loop3: p5 start 16908800 is beyond EOD, truncated
[  199.933454][ T6190] loop2: detected capacity change from 0 to 4096
[  199.978798][ T3026]  loop3: p1 < > p2 p3 < p5 >
[  199.983970][ T3026] loop3: partition table partially beyond EOD, truncated
[  200.112873][ T3026] loop3: p1 start 4278190080 is beyond EOD, truncated
[  200.272629][ T3026] loop3: p2 start 16908800 is beyond EOD, truncated
[  200.719771][ T3026] loop3: p5 start 16908800 is beyond EOD, truncated
[  200.806588][ T6190] ntfs: volume version 3.1.
[  200.842989][ T6203] loop3: detected capacity change from 0 to 16
[  200.877601][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.583'.
[  200.895705][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.585'.
[  200.905613][ T4797] usb 5-1: USB disconnect, device number 5
[  200.909093][ T6203] cramfs: Unknown parameter ''
[  200.967283][ T6205] netlink: 'syz.1.585': attribute type 7 has an invalid length.
[  200.986203][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'.
[  201.241127][ T3808] udevd[3808]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  201.308059][   T23] Bluetooth: hci4: command 0x0406 tx timeout
[  201.632797][ T6226] loop2: detected capacity change from 0 to 256
[  201.658119][ T6226] FAT-fs (loop2): Directory bread(block 64) failed
[  201.664968][ T6226] FAT-fs (loop2): Directory bread(block 65) failed
[  201.671641][ T6226] FAT-fs (loop2): Directory bread(block 66) failed
[  201.678228][ T6226] FAT-fs (loop2): Directory bread(block 67) failed
[  201.685184][ T6226] FAT-fs (loop2): Directory bread(block 68) failed
[  201.691916][ T6226] FAT-fs (loop2): Directory bread(block 69) failed
[  201.698811][ T6226] FAT-fs (loop2): Directory bread(block 70) failed
[  201.705361][ T6226] FAT-fs (loop2): Directory bread(block 71) failed
[  201.712080][ T6226] FAT-fs (loop2): Directory bread(block 72) failed
[  201.718723][ T6226] FAT-fs (loop2): Directory bread(block 73) failed
[  201.978180][ T4797] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  202.025851][ T6228] netlink: 'syz.3.593': attribute type 2 has an invalid length.
[  202.111302][ T6232] loop1: detected capacity change from 0 to 8
[  202.138924][ T6234] netlink: 48 bytes leftover after parsing attributes in process `syz.3.597'.
[  202.237953][ T4797] usb 5-1: Using ep0 maxpacket: 16
[  202.251248][ T6232] SQUASHFS error: Unable to read inode 0x11f
[  202.378336][ T4797] usb 5-1: config index 0 descriptor too short (expected 2314, got 2031)
[  202.394290][ T4797] usb 5-1: config 0 has an invalid interface number: 220 but max is 1
[  202.414484][ T6232] loop1: detected capacity change from 0 to 1024
[  202.439062][ T4797] usb 5-1: config 0 has an invalid interface number: 2 but max is 1
[  202.473479][ T4797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.474312][ T6232] hfsplus: unable to parse mount options
[  202.524527][ T4797] usb 5-1: config 0 has no interface number 0
[  202.532066][ T4797] usb 5-1: config 0 has no interface number 1
[  202.554180][ T4797] usb 5-1: config 0 interface 220 altsetting 3 bulk endpoint 0xC has invalid maxpacket 16
[  202.570602][ T4797] usb 5-1: config 0 interface 220 has no altsetting 0
[  202.788278][ T4797] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice=56.8e
[  202.807074][ T4797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.825287][ T4797] usb 5-1: Product: syz
[  202.831180][ T4797] usb 5-1: Manufacturer: syz
[  202.835817][ T4797] usb 5-1: SerialNumber: syz
[  202.868665][ T4797] usb 5-1: config 0 descriptor??
[  202.898362][ T6220] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  202.914254][ T6254] loop0: detected capacity change from 0 to 4096
[  202.942807][ T6257] loop1: detected capacity change from 0 to 1024
[  202.984598][ T6254] ntfs: volume version 3.1.
[  203.136541][ T6257] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,stripe=0x0000000000000002,noblock_validity,errors=remount-ro,noblock_validity,jqfmt=vfsold,sysvgroups,nojournal_checksum,nodelalloc,. Quota mode: none.
[  203.253132][ T4797] usb 5-1: USB disconnect, device number 6
[  203.385766][ T6273] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  203.414884][ T6276] loop1: detected capacity change from 0 to 512
[  203.431902][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.612'.
[  203.477343][ T6276] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  203.506336][ T6276] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.611: casefold flag without casefold feature
[  203.514057][ T6281] loop0: detected capacity change from 0 to 256
[  203.526239][ T6276] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.611: missing EA_INODE flag
[  203.531845][ T4532] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  203.547002][ T6276] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.611: error while reading EA inode 12 err=-117
[  203.560370][ T6276] EXT4-fs (loop1): 1 orphan inode deleted
[  203.566241][ T6276] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback.
[  203.613161][ T3808] udevd[3808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.220/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.629485][ T6281] FAT-fs (loop0): Directory bread(block 64) failed
[  203.637581][ T6281] FAT-fs (loop0): Directory bread(block 65) failed
[  203.646014][ T6281] FAT-fs (loop0): Directory bread(block 66) failed
[  203.653245][ T6276] syz.1.611 (pid 6276) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  203.653733][ T6281] FAT-fs (loop0): Directory bread(block 67) failed
[  203.670418][ T6281] FAT-fs (loop0): Directory bread(block 68) failed
[  203.676988][ T6281] FAT-fs (loop0): Directory bread(block 69) failed
[  203.683832][ T6281] FAT-fs (loop0): Directory bread(block 70) failed
[  203.690522][ T6281] FAT-fs (loop0): Directory bread(block 71) failed
[  203.705635][ T6281] FAT-fs (loop0): Directory bread(block 72) failed
[  203.726732][ T6281] FAT-fs (loop0): Directory bread(block 73) failed
[  203.739198][ T4532] usb 3-1: device descriptor read/64, error -71
[  203.799543][ T6281] attempt to access beyond end of device
[  203.799543][ T6281] loop0: rw=2051, want=1256, limit=256
[  203.933134][ T6290] loop1: detected capacity change from 0 to 128
[  204.018180][ T4532] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  204.071974][ T6290] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none.
[  204.081791][ T6294] loop0: detected capacity change from 0 to 1764
[  204.086784][ T6290] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038 (0x7fffffff)
[  204.991047][ T4532] usb 3-1: device descriptor read/64, error -71
[  205.019434][ T6298] loop3: detected capacity change from 0 to 64
[  205.109509][ T4532] usb usb3-port1: attempt power cycle
[  205.500522][ T6320] loop0: detected capacity change from 0 to 512
[  205.517984][ T4532] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  205.611714][ T6320] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  205.636079][ T6325] loop4: detected capacity change from 0 to 4096
[  205.643111][ T4532] usb 3-1: device descriptor read/8, error -71
[  205.673458][ T6320] EXT4-fs (loop0): failed to initialize system zone (-117)
[  205.684427][ T6320] EXT4-fs (loop0): mount failed
[  205.705721][ T6325] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  205.892472][ T6325] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  205.928248][ T4532] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  206.031285][ T4532] usb 3-1: device descriptor read/8, error -71
[  206.148112][ T4532] usb usb3-port1: unable to enumerate USB device
[  206.338440][ T6332] sctp: failed to load transform for md5: -4
[  206.349301][ T6336] sctp: failed to load transform for md5: -4
[  206.478643][ T6353] loop4: detected capacity change from 0 to 256
[  206.548741][ T6353] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  206.590078][ T6358] loop3: detected capacity change from 0 to 8
[  206.675833][ T6320] loop0: detected capacity change from 0 to 32768
[  206.683770][ T4532] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  206.704863][ T6358] SQUASHFS error: zstd decompression failed, data probably corrupt
[  206.716977][ T6358] SQUASHFS error: Failed to read block 0x4ec: -5
[  206.732126][ T6358] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  206.739866][ T6358] SQUASHFS error: Unable to read inode 0x2011f
[  206.777165][ T6320] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  206.777165][ T6320] 
[  206.808347][ T6320] netlink: 124 bytes leftover after parsing attributes in process `syz.0.630'.
[  206.818314][ T6320] netlink: 124 bytes leftover after parsing attributes in process `syz.0.630'.
[  206.878099][   T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  207.068175][ T3612] Bluetooth: hci0: command 0x0406 tx timeout
[  207.195243][ T6365] loop3: detected capacity change from 0 to 16
[  207.238436][ T4532] usb 3-1: config 0 has an invalid interface number: 18 but max is 0
[  207.246749][ T4532] usb 3-1: config 0 has no interface number 0
[  207.267747][ T4532] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.316713][ T6365] erofs: (device loop3): mounted with root inode @ nid 36.
[  207.340590][ T6365] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  207.366429][ T6365] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851]
[  207.380301][ T6365] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  207.419775][ T6365] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  207.429895][ T6365] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851]
[  207.443701][ T6365] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  207.528314][   T23] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  207.693340][   T23] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  207.730043][ T4532] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.770762][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.818128][ T4797] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  207.839953][   T23] gspca_main: stv0680-2.14.0 probing 041e:4007
[  207.868358][ T4532] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  207.877464][ T4532] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  207.912896][ T4532] usb 3-1: Manufacturer: syz
[  207.933523][ T4532] usb 3-1: config 0 descriptor??
[  207.981062][ T6371] loop3: detected capacity change from 0 to 2048
[  208.034006][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.061197][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.079365][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.090181][ T6371] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  208.097833][ T6371] UDF-fs: Scanning with blocksize 512 failed
[  208.105563][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.108024][ T4797] usb 1-1: Using ep0 maxpacket: 32
[  208.124735][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.136274][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.161605][ T6371] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  208.175485][ T6371] UDF-fs: Scanning with blocksize 1024 failed
[  208.183092][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.210277][ T6371] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=519, location=519
[  208.226502][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.239042][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.250478][ T4797] usb 1-1: config 0 has an invalid interface number: 182 but max is 0
[  208.258770][ T6371] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  208.266623][ T4797] usb 1-1: config 0 has no interface number 0
[  208.272930][ T6371] UDF-fs: Scanning with blocksize 2048 failed
[  208.279260][ T4797] usb 1-1: config 0 interface 182 has no altsetting 0
[  208.288494][ T6371] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=263, location=263
[  208.298894][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.316517][ T6371] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=519, location=519
[  208.320252][ T6373] loop4: detected capacity change from 0 to 32768
[  208.327210][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.346002][ T6371] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.357201][ T6371] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  208.365248][ T6371] UDF-fs: Scanning with blocksize 4096 failed
[  208.372159][ T6371] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  208.372912][ T6373] XFS: noikeep mount option is deprecated.
[  208.420938][ T6373] XFS (loop4): Mounting V5 Filesystem
[  208.469594][ T4797] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa
[  208.475159][ T4532] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0008/input/input8
[  208.508227][ T4797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.553148][ T4797] usb 1-1: Product: syz
[  208.567793][ T4797] usb 1-1: Manufacturer: syz
[  208.572791][ T6373] XFS (loop4): Ending clean mount
[  208.593051][ T4797] usb 1-1: SerialNumber: syz
[  208.595523][ T4532] sony 0003:054C:03D5.0008: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18
[  208.624944][ T4797] usb 1-1: config 0 descriptor??
[  208.653872][ T6373] XFS (loop4): Quotacheck needed: Please wait.
[  208.689119][ T4797] usb-storage 1-1:0.182: USB Mass Storage device detected
[  208.764756][ T4797] usb-storage 1-1:0.182: Quirks match for vid 07cf pid 1001: a
[  208.800200][ T3618] usb 3-1: USB disconnect, device number 10
[  208.815191][ T6373] XFS (loop4): Quotacheck: Done.
[  208.849585][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'.
[  208.880391][ T6392] netlink: 'syz.3.651': attribute type 1 has an invalid length.
[  208.896881][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'.
[  208.937825][ T4797] usb 1-1: USB disconnect, device number 11
[  208.948357][   T23] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  208.961221][ T5435] XFS (loop4): Unmounting Filesystem
[  209.168263][   T23] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  209.184651][   T23] stv0680 2-1:4.0: last error: 81,  command = 0xcb
[  209.196234][   T23] usb 2-1: USB disconnect, device number 11
[  209.359478][ T6400] loop3: detected capacity change from 0 to 4096
[  209.430256][ T6400] ntfs3: loop3: Failed to load $MFT.
[  209.512798][ T6404] netlink: 'syz.2.657': attribute type 3 has an invalid length.
[  209.724767][ T6414] "syz.0.661" (6414) uses obsolete ecb(arc4) skcipher
[  209.757014][ T6416] loop2: detected capacity change from 0 to 512
[  209.931090][ T6416] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  210.045898][ T6416] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038 (0x7fffffff)
[  210.130368][ T6416] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz.2.662: corrupted inode contents
[  210.218664][ T6416] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #2: comm syz.2.662: mark_inode_dirty error
[  210.250790][ T6416] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3880: comm syz.2.662: Allocating blocks 18-19 which overlap fs metadata
[  210.393516][ T6433] loop0: detected capacity change from 0 to 2048
[  210.493671][ T6433] NILFS (loop0): invalid segment: Sequence number mismatch
[  210.550888][ T6433] NILFS (loop0): trying rollback from an earlier position
[  210.616137][ T6402] loop4: detected capacity change from 0 to 32768
[  210.638034][ T6433] NILFS (loop0): recovery complete
[  210.661888][ T6438] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  210.702213][ T6402] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.652 (6402)
[  210.725069][   T26] audit: type=1800 audit(1723564695.897:86): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.667" name="bus" dev="loop0" ino=12 res=0 errno=0
[  210.771314][ T6402] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  210.802489][ T6402] BTRFS info (device loop4): enabling auto defrag
[  210.830961][ T6440] loop2: detected capacity change from 0 to 256
[  210.845359][ T6402] BTRFS info (device loop4): doing ref verification
[  210.865808][   T26] audit: type=1804 audit(1723564696.037:87): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.667" name="/newroot/94/file0/bus" dev="loop0" ino=12 res=1 errno=0
[  210.891864][ T6440] exfat: Deprecated parameter 'namecase'
[  210.901824][ T6402] BTRFS info (device loop4): max_inline at 0
[  210.919248][ T6440] exfat: Deprecated parameter 'utf8'
[  210.940375][ T6402] BTRFS info (device loop4): max_inline at 1398
[  210.946770][ T6402] BTRFS info (device loop4): turning on sync discard
[  210.973656][ T6440] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  210.991028][ T6402] BTRFS info (device loop4): turning off barriers
[  210.998642][ T6402] BTRFS info (device loop4): using free space tree
[  211.012325][ T6402] BTRFS info (device loop4): has skinny extents
[  211.594449][ T4843] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x61616161)
[  211.611898][ T6453] loop0: detected capacity change from 0 to 40427
[  211.670469][ T4843] exFAT-fs (loop2): Filesystem has been set read-only
[  211.677653][ T4843] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x61616161)
[  211.729632][ T6453] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  211.759798][ T6453] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  211.813357][ T6453] F2FS-fs (loop0): invalid crc value
[  211.916769][ T6453] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  212.161130][ T6453] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  212.172292][ T6453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  212.253997][ T6427] loop1: detected capacity change from 0 to 65536
[  212.327433][ T6471] loop4: detected capacity change from 0 to 512
[  212.428849][ T6471] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  212.506065][ T6471] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff)
[  212.566388][ T6427] XFS (loop1): Mounting V5 Filesystem
[  212.628736][ T3929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.736635][ T3929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.904691][ T6427] XFS (loop1): Ending clean mount
[  212.963384][ T6427] XFS (loop1): Quotacheck needed: Please wait.
[  212.966338][ T3929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.105550][ T6427] XFS (loop1): Quotacheck: Done.
[  213.112332][ T6487] loop3: detected capacity change from 0 to 1024
[  213.121177][ T3929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.185024][ T6487] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  213.227137][ T6487] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  213.244482][ T6487] EXT4-fs (loop3): orphan cleanup on readonly fs
[  213.263248][ T3569] XFS (loop1): Unmounting Filesystem
[  213.352864][ T6487] EXT4-fs error (device loop3): ext4_free_blocks:6226: comm syz.3.679: Freeing blocks not in datazone - block = 0, count = 4096
[  213.458072][ T6487] EXT4-fs (loop3): Remounting filesystem read-only
[  213.488745][ T6487] EXT4-fs (loop3): 1 orphan inode deleted
[  213.494524][ T6487] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000004,lazytime,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback.
[  213.863411][ T6497] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  214.402049][ T6490] chnl_net:caif_netlink_parms(): no params data found
[  214.848887][ T6496] loop0: detected capacity change from 0 to 40427
[  214.909698][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.938997][   T26] audit: type=1326 audit(1723564700.107:88): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.3.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb93e3c9f9 code=0x0
[  214.969901][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.977570][ T6496] F2FS-fs (loop0): invalid crc value
[  214.979468][ T6490] device bridge_slave_0 entered promiscuous mode
[  215.037413][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.057236][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.066276][ T6496] F2FS-fs (loop0): Found nat_bits in checkpoint
[  215.066804][ T6490] device bridge_slave_1 entered promiscuous mode
[  215.176111][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.195630][ T3612] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  215.238095][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.238422][ T4797] Bluetooth: hci1: command 0x0409 tx timeout
[  215.265654][ T6496] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  215.313449][ T6496] attempt to access beyond end of device
[  215.313449][ T6496] loop0: rw=2049, want=53384, limit=40427
[  215.371859][ T6490] team0: Port device team_slave_0 added
[  215.393490][ T6541] attempt to access beyond end of device
[  215.393490][ T6541] loop0: rw=2049, want=53392, limit=40427
[  215.421045][ T6490] team0: Port device team_slave_1 added
[  215.430181][   T26] audit: type=1804 audit(1723564700.607:89): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.674" name="/newroot/96/bus/file1" dev="loop0" ino=10 res=1 errno=0
[  215.451412][    C0] vkms_vblank_simulate: vblank timer overrun
[  215.460466][ T3612] usb 5-1: Using ep0 maxpacket: 8
[  215.465346][ T6496] attempt to access beyond end of device
[  215.465346][ T6496] loop0: rw=2049, want=53504, limit=40427
[  215.495398][ T6542] loop1: detected capacity change from 0 to 4096
[  215.534825][ T4073] attempt to access beyond end of device
[  215.534825][ T4073] loop0: rw=2049, want=45104, limit=40427
[  215.563607][ T6542] ntfs3: loop1: Failed to load $MFT.
[  215.581512][ T3612] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  215.598795][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.605867][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.644864][ T3612] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  215.677576][ T3612] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  215.701316][ T3612] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  215.728103][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.739106][ T3612] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.756046][ T6553] loop1: detected capacity change from 0 to 16
[  215.785418][ T3612] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  215.820568][ T6553] erofs: (device loop1): mounted with root inode @ nid 36.
[  215.837964][ T3612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.902063][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.988341][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.110289][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.508545][ T6563] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 283 of nid 36
[  216.578162][ T3612] usb 5-1: GET_CAPABILITIES returned 0
[  216.583839][ T3612] usbtmc 5-1:16.0: can't read capabilities
[  217.008370][ T6527] usbtmc 5-1:16.0: usb_control_msg returned -32
[  217.008812][ T6568] loop0: detected capacity change from 0 to 256
[  217.074102][ T6527] udc-core: couldn't find an available UDC or it's busy
[  217.092427][ T6527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  217.117598][ T4532] usb 5-1: USB disconnect, device number 7
[  217.144216][ T6568] FAT-fs (loop0): Directory bread(block 64) failed
[  217.165606][ T3929] device hsr_slave_0 left promiscuous mode
[  217.178075][ T6568] FAT-fs (loop0): Directory bread(block 65) failed
[  217.190406][ T3929] device hsr_slave_1 left promiscuous mode
[  217.196182][ T6568] FAT-fs (loop0): Directory bread(block 66) failed
[  217.203540][ T3929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.204181][ T6568] FAT-fs (loop0): Directory bread(block 67) failed
[  217.218226][ T6568] FAT-fs (loop0): Directory bread(block 68) failed
[  217.224791][ T6568] FAT-fs (loop0): Directory bread(block 69) failed
[  217.228061][ T3929] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.252222][ T6568] FAT-fs (loop0): Directory bread(block 70) failed
[  217.259425][ T6568] FAT-fs (loop0): Directory bread(block 71) failed
[  217.266835][ T3929] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.273500][ T6568] FAT-fs (loop0): Directory bread(block 72) failed
[  217.283168][ T3929] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.283932][ T6568] FAT-fs (loop0): Directory bread(block 73) failed
[  217.309581][ T3618] Bluetooth: hci1: command 0x041b tx timeout
[  217.317012][ T3929] device bridge_slave_1 left promiscuous mode
[  217.326610][ T3929] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.348494][ T3929] device bridge_slave_0 left promiscuous mode
[  217.356434][ T3929] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.372586][ T3929] device team0 left promiscuous mode
[  217.378359][ T3929] device team_slave_0 left promiscuous mode
[  217.385354][ T3929] device team_slave_1 left promiscuous mode
[  217.395805][ T3929] device veth1_macvtap left promiscuous mode
[  217.402671][ T3929] device veth0_macvtap left promiscuous mode
[  217.409071][ T3929] device veth1_vlan left promiscuous mode
[  217.415047][ T3929] device veth0_vlan left promiscuous mode
[  217.535038][ T3929] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  217.628522][ T4797] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  217.961080][ T3929] team0 (unregistering): Port device team_slave_1 removed
[  217.978021][ T3929] team0 (unregistering): Port device team_slave_0 removed
[  217.998343][ T3929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.021164][ T3929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.040666][   T26] audit: type=1326 audit(1723564703.217:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.063978][   T26] audit: type=1326 audit(1723564703.237:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.086170][    C0] vkms_vblank_simulate: vblank timer overrun
[  218.129594][ T3929] bond0 (unregistering): Released all slaves
[  218.189271][ T4797] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  218.200728][ T4797] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  218.215170][ T6490] device hsr_slave_0 entered promiscuous mode
[  218.225434][ T6490] device hsr_slave_1 entered promiscuous mode
[  218.308332][ T4797] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  218.322851][ T4797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  218.343405][ T4797] usb 4-1: SerialNumber: syz
[  218.433184][ T4797] cdc_ether: probe of 4-1:1.0 failed with error -22
[  218.460922][ T4797] usb-storage 4-1:1.0: USB Mass Storage device detected
[  218.548993][ T4797] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  218.574352][   T26] audit: type=1326 audit(1723564703.737:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.602737][   T26] audit: type=1326 audit(1723564703.737:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.625302][   T26] audit: type=1326 audit(1723564703.737:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.647961][   T26] audit: type=1326 audit(1723564703.737:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.670044][    C0] vkms_vblank_simulate: vblank timer overrun
[  218.676931][   T26] audit: type=1326 audit(1723564703.737:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.699312][    C0] vkms_vblank_simulate: vblank timer overrun
[  218.714568][   T26] audit: type=1326 audit(1723564703.737:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.736844][    C0] vkms_vblank_simulate: vblank timer overrun
[  218.860326][   T26] audit: type=1326 audit(1723564703.737:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  218.882437][    C0] vkms_vblank_simulate: vblank timer overrun
[  218.892260][ T3612] usb 4-1: USB disconnect, device number 10
[  218.944819][ T6605] loop4: detected capacity change from 0 to 4096
[  218.957696][   T26] audit: type=1326 audit(1723564703.737:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe265ad59f9 code=0x7fc00000
[  219.169456][ T6605] ntfs: volume version 3.1.
[  219.398137][ T4797] Bluetooth: hci1: command 0x040f tx timeout
[  219.450189][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'.
[  220.942726][ T6639] x_tables: duplicate underflow at hook 2
[  220.979532][ T6639] overlayfs: missing 'lowerdir'
[  221.026644][ T6490] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  221.069632][ T6490] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  221.126170][ T6490] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  221.146366][ T6644] loop0: detected capacity change from 0 to 2048
[  221.158953][ T6490] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  221.353400][ T6638] kvm: emulating exchange as write
[  221.469258][ T4797] Bluetooth: hci1: command 0x0419 tx timeout
[  221.608843][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.714400][ T6490] 8021q: adding VLAN 0 to HW filter on device team0
[  221.749002][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  221.764747][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  221.854751][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  221.872671][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  221.918503][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.925760][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.986730][ T6676] loop0: detected capacity change from 0 to 512
[  221.997300][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  222.038875][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  222.078426][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.085545][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.134772][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  222.162791][ T6676] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  222.208298][ T6676] EXT4-fs (loop0): 1 truncate cleaned up
[  222.214004][ T6676] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  222.256625][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  222.269108][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  222.339144][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  222.381861][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  222.418882][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  222.448355][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  222.464535][ T6490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  222.516511][ T6490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  222.518957][ T6648] loop1: detected capacity change from 0 to 32768
[  222.609286][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  222.628519][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  222.657538][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  222.705332][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  222.748985][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  222.827514][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  222.851050][ T6675] loop4: detected capacity change from 0 to 40427
[  222.895648][ T6675] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  222.903850][ T6695] netlink: 'syz.0.720': attribute type 8 has an invalid length.
[  222.946246][ T6675] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  223.030029][ T6675] F2FS-fs (loop4): invalid crc value
[  223.070456][ T6660] loop3: detected capacity change from 0 to 40427
[  223.095556][ T6675] F2FS-fs (loop4): Found nat_bits in checkpoint
[  223.260499][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  223.278008][ T6675] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  223.288011][ T6660] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  223.295712][ T6660] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  223.318335][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  223.325903][ T6675] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  223.349764][ T6660] F2FS-fs (loop3): invalid crc value
[  223.370600][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.395069][   T26] kauditd_printk_skb: 60 callbacks suppressed
[  223.395087][   T26] audit: type=1800 audit(1723564708.567:158): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.717" name="bus" dev="loop4" ino=10 res=0 errno=0
[  223.412346][ T6675] attempt to access beyond end of device
[  223.412346][ T6675] loop4: rw=16812033, want=78672, limit=40427
[  223.449321][ T6660] F2FS-fs (loop3): Found nat_bits in checkpoint
[  223.481616][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  223.497264][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.506700][   T26] audit: type=1800 audit(1723564708.577:159): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.717" name="bus" dev="loop4" ino=10 res=0 errno=0
[  223.583425][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  223.600268][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  223.643655][   T26] audit: type=1800 audit(1723564708.777:160): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.717" name="bus" dev="loop4" ino=10 res=0 errno=0
[  223.647172][ T6490] device veth0_vlan entered promiscuous mode
[  223.704451][ T5435] attempt to access beyond end of device
[  223.704451][ T5435] loop4: rw=2049, want=45104, limit=40427
[  223.726974][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  223.738819][ T6660] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  223.746350][ T6660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  223.782137][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  223.818777][ T6490] device veth1_vlan entered promiscuous mode
[  223.857981][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  223.866202][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  223.970709][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  223.987637][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.013523][ T6490] device veth0_macvtap entered promiscuous mode
[  224.020357][ T3978] attempt to access beyond end of device
[  224.020357][ T3978] loop3: rw=2049, want=45104, limit=40427
[  224.226414][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.325332][ T6490] device veth1_macvtap entered promiscuous mode
[  224.350991][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  224.526096][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.578114][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.617956][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.657944][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.667817][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.727938][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.737808][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.798276][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.835758][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.868375][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  224.887598][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  224.947532][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.972566][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.995513][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.042251][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.084617][ T6766] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  225.095959][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.117476][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.134560][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.193783][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.224623][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.234720][ T6769] loop1: detected capacity change from 0 to 1024
[  225.263234][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.282698][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.327722][ T6490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.373847][ T6490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.384208][   T26] audit: type=1800 audit(1723564710.557:161): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.728" name="file1" dev="loop1" ino=20 res=0 errno=0
[  225.407292][ T6490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.452788][ T6490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.742006][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.807151][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.858122][   T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  225.893970][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  225.936875][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.955372][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.004326][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  226.148191][   T13] usb 5-1: Using ep0 maxpacket: 8
[  226.267148][ T6797] loop1: detected capacity change from 0 to 1024
[  226.274096][   T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.298821][   T13] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  226.375363][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.408340][ T6797] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  226.430895][   T13] usb 5-1: config 0 descriptor??
[  226.532480][ T6797] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noquota,barrier=0x0000000000000000,jqfmt=vfsv1,block_validity,mblk_io_submit,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback.
[  226.598129][ T4760] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  226.614402][ T6811] loop2: detected capacity change from 0 to 1024
[  226.757298][   T13] usb 5-1: USB disconnect, device number 8
[  226.838360][ T3929] hfsplus: b-tree write err: -5, ino 4
[  226.847948][ T4760] usb 1-1: Using ep0 maxpacket: 8
[  226.973923][ T4760] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  227.001687][ T4760] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  227.038102][ T4760] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  227.070229][ T4760] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  227.108129][ T4760] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.121798][ T4760] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  227.131501][ T4760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.325259][ T3569] bridge0: port 3(syz_tun) entered disabled state
[  227.342290][ T3569] device syz_tun left promiscuous mode
[  227.358933][ T3569] bridge0: port 3(syz_tun) entered disabled state
[  227.408071][ T4760] usb 1-1: usb_control_msg returned -32
[  227.413708][ T4760] usbtmc 1-1:16.0: can't read capabilities
[  227.592724][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.687719][ T6814] loop2: detected capacity change from 0 to 32768
[  227.730829][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.832905][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.976726][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.701239][ T6816] loop4: detected capacity change from 0 to 32768
[  228.765397][ T6816] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.743 (6816)
[  228.865981][ T6816] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  228.885246][ T6816] BTRFS info (device loop4): using free space tree
[  228.951759][ T6816] BTRFS info (device loop4): has skinny extents
[  229.132249][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.748'.
[  229.285949][ T6816] BTRFS info (device loop4): enabling ssd optimizations
[  229.351904][ T6815] block nbd4: shutting down sockets
[  229.359756][ T6820] chnl_net:caif_netlink_parms(): no params data found
[  229.369580][ T4760] usb 1-1: USB disconnect, device number 12
[  229.497523][ T6830] loop2: detected capacity change from 0 to 32768
[  229.534126][ T6866] loop0: detected capacity change from 0 to 1024
[  229.740157][ T6866] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  230.106386][ T6830] XFS (loop2): Mounting V5 Filesystem
[  230.400887][ T6820] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.444734][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.460490][ T6830] XFS (loop2): Ending clean mount
[  230.513111][ T6820] device bridge_slave_0 entered promiscuous mode
[  230.609448][ T6820] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.635061][ T4042] Bluetooth: hci2: command 0x0409 tx timeout
[  230.659951][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.664754][   T26] audit: type=1800 audit(1723564715.837:162): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.746" name="bus" dev="loop2" ino=4427 res=0 errno=0
[  230.696092][ T6820] device bridge_slave_1 entered promiscuous mode
[  230.817608][ T6490] XFS (loop2): Unmounting Filesystem
[  230.863745][ T6820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.940739][ T6820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.035501][ T6906] loop4: detected capacity change from 0 to 4096
[  231.037775][ T6910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.052763][ T3616] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  231.131027][ T6906] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  231.145631][ T6820] team0: Port device team_slave_0 added
[  231.168744][ T6820] team0: Port device team_slave_1 added
[  231.263541][ T6820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.286102][ T6820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.312851][ T3616] usb 4-1: Using ep0 maxpacket: 8
[  231.320727][ T6820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.352577][ T6820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.372282][ T6820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.402306][ T6820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.405421][ T6912] loop2: detected capacity change from 0 to 256
[  231.458255][ T3616] usb 4-1: config 0 has an invalid interface number: 172 but max is 2
[  231.475946][ T6912] exFAT-fs (loop2): failed to read boot sector
[  231.487981][ T6912] exFAT-fs (loop2): failed to recognize exfat type
[  231.497135][ T3616] usb 4-1: config 0 has an invalid interface number: 234 but max is 2
[  231.518768][ T6820] device hsr_slave_0 entered promiscuous mode
[  231.522200][ T3616] usb 4-1: config 0 has no interface number 1
[  231.534429][ T6820] device hsr_slave_1 entered promiscuous mode
[  231.558946][ T6820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.562466][ T3616] usb 4-1: config 0 has no interface number 2
[  231.596362][ T6820] Cannot create hsr debugfs directory
[  231.603542][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'.
[  231.712263][    T9] device hsr_slave_0 left promiscuous mode
[  231.748550][ T3616] usb 4-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83
[  231.810750][ T3616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.854117][ T6924] loop0: detected capacity change from 0 to 128
[  232.075716][ T6924] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  232.086766][ T6924] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038 (0x7fffffff)
[  232.146700][ T3616] usb 4-1: Product: syz
[  232.221217][ T3616] usb 4-1: Manufacturer: syz
[  232.331602][ T3616] usb 4-1: SerialNumber: syz
[  232.521841][    T9] device hsr_slave_1 left promiscuous mode
[  232.625317][ T3616] usb 4-1: config 0 descriptor??
[  232.630398][ T6919] loop2: detected capacity change from 0 to 4096
[  232.672377][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.678251][ T4760] Bluetooth: hci2: command 0x041b tx timeout
[  232.682420][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.697303][ T6919] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  232.769985][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.786360][ T6919] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  232.803891][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.824915][    T9] device bridge_slave_1 left promiscuous mode
[  232.838158][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.862555][    T9] device bridge_slave_0 left promiscuous mode
[  232.878507][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.935976][ T6937] loop0: detected capacity change from 0 to 2048
[  232.982448][ T3616] usb 4-1: USB disconnect, device number 11
[  233.017427][    T9] device veth1_macvtap left promiscuous mode
[  233.026862][    T9] device veth0_macvtap left promiscuous mode
[  233.033652][    T9] device veth1_vlan left promiscuous mode
[  233.059244][    T9] device veth0_vlan left promiscuous mode
[  233.088092][ T6937] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  233.095899][ T6943] loop2: detected capacity change from 0 to 17
[  233.146978][ T6937] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038 (0x7fffffff)
[  233.170077][ T6943] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  233.177156][ T6943] BFS-fs: bfs_fill_super(): Impossible last inode number 229432 > 513 on loop2
[  233.242135][ T4073] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /121/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  233.402390][    T9] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  233.603088][ T6953] loop2: detected capacity change from 0 to 128
[  233.665220][ T6953] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  233.706735][ T6953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.729196][    T9] team0 (unregistering): Port device team_slave_1 removed
[  233.761393][    T9] team0 (unregistering): Port device team_slave_0 removed
[  233.782412][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.820600][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.833178][ T6959] loop0: detected capacity change from 0 to 1024
[  233.858074][ T4037] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  234.057806][    T9] bond0 (unregistering): Released all slaves
[  234.108157][ T4037] usb 4-1: Using ep0 maxpacket: 8
[  234.339451][ T6972] netlink: 'syz.4.771': attribute type 1 has an invalid length.
[  234.384209][ T6972] device bond1 entered promiscuous mode
[  234.398212][ T4037] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  234.412793][ T4037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.423529][ T4037] usb 4-1: Product: syz
[  234.429152][ T4037] usb 4-1: Manufacturer: syz
[  234.434072][ T4037] usb 4-1: SerialNumber: syz
[  234.460142][ T4037] usb 4-1: config 0 descriptor??
[  234.510691][ T6972] device lo entered promiscuous mode
[  234.530289][ T4037] gspca_main: se401-2.14.0 probing 047d:5003
[  234.532599][ T4760] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  235.433564][   T23] Bluetooth: hci2: command 0x040f tx timeout
[  235.578048][ T4760] usb 3-1: Using ep0 maxpacket: 8
[  235.726038][ T6989] loop4: detected capacity change from 0 to 512
[  235.746443][ T4760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.764316][ T4760] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  235.794932][ T4760] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  235.864252][ T6989] EXT4-fs (loop4): Ignoring removed oldalloc option
[  235.896399][ T6989] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  236.009044][ T6989] EXT4-fs (loop4): 1 truncate cleaned up
[  236.015162][ T6989] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  236.037632][ T4760] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  236.059789][ T4760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.067832][ T4760] usb 3-1: Product: syz
[  236.101832][ T4760] usb 3-1: Manufacturer: syz
[  236.106542][ T4760] usb 3-1: SerialNumber: syz
[  236.177893][ T4760] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  236.184745][ T4760] cdc_ncm 3-1:1.0: bind() failure
[  236.247304][ T7001] netlink: 'syz.4.776': attribute type 1 has an invalid length.
[  236.268037][ T7001] netlink: 'syz.4.776': attribute type 2 has an invalid length.
[  236.279715][ T3612] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  236.388896][ T4037] gspca_se401: read req failed req 0x06 error -19
[  236.427313][ T4037] usb 4-1: USB disconnect, device number 12
[  236.474029][ T6820] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  236.545364][ T6820] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  236.558967][ T7007] hugetlbfs: syz.4.777 (7007): Using mlock ulimits for SHM_HUGETLB is deprecated
[  236.664976][ T6820] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  236.928252][ T3612] usb 1-1: Using ep0 maxpacket: 8
[  237.108497][ T3612] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.119423][ T3612] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  237.135084][ T3612] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  237.148865][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.185561][ T3612] usb 1-1: config 0 descriptor??
[  237.206420][ T6820] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  237.431805][   T26] audit: type=1326 audit(1723564722.587:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce83cf9f9 code=0x7ffc0000
[  237.530293][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'.
[  237.573974][   T26] audit: type=1326 audit(1723564722.637:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce83cf9f9 code=0x7ffc0000
[  237.596176][    C0] vkms_vblank_simulate: vblank timer overrun
[  237.604744][ T7012] netlink: 88 bytes leftover after parsing attributes in process `syz.3.778'.
[  237.658840][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'.
[  237.721870][ T4532] Bluetooth: hci2: command 0x0419 tx timeout
[  237.743347][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'.
[  237.752596][ T7012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.778'.
[  237.883967][ T7019] binder: Unknown parameter 'loba'
[  238.590509][ T7021] loop4: detected capacity change from 0 to 128
[  238.617598][ T3623] usb 3-1: USB disconnect, device number 11
[  238.643378][ T7023] loop3: detected capacity change from 0 to 1024
[  238.655764][ T7021] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  238.684308][ T6820] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.699159][ T7023] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  238.699216][ T7021] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  238.733754][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  238.781218][ T7023] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  238.815769][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  238.881785][ T7023] EXT4-fs error (device loop3): ext4_get_journal_inode:5159: inode #5: comm syz.3.782: unexpected bad inode w/o EXT4_IGET_BAD
[  238.914955][ T7023] EXT4-fs (loop3): no journal found
[  238.920548][ T7023] EXT4-fs (loop3): can't get journal size
[  238.929986][ T7023] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,nolazytime,bsddf,,errors=continue. Quota mode: writeback.
[  238.956620][ T6820] 8021q: adding VLAN 0 to HW filter on device team0
[  239.242952][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  239.261920][ T7037] loop2: detected capacity change from 0 to 64
[  239.262205][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.331704][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.338884][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.388696][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.441711][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.668917][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.676017][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.684393][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  239.693444][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  239.702849][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  239.712116][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.721012][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  239.749667][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  239.824662][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.900141][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.920597][ T6820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  239.948293][ T3614] usb 1-1: USB disconnect, device number 13
[  240.014480][ T6820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  240.035316][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.075115][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  240.112153][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.117221][ T7057] loop2: detected capacity change from 0 to 256
[  240.144283][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  240.176655][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'.
[  240.298970][ T7055] loop0: detected capacity change from 0 to 1024
[  240.355230][ T7057] loop2: detected capacity change from 0 to 512
[  240.373764][ T7055] EXT4-fs (loop0): Ignoring removed orlov option
[  240.402557][ T7055] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  240.436745][ T7072] loop3: detected capacity change from 0 to 1024
[  240.438052][ T7055] EXT4-fs (loop0): filesystem too large to mount safely on this system
[  240.569871][ T7072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.627282][ T7077] loop4: detected capacity change from 0 to 512
[  240.670042][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.686567][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.724050][ T6820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.743895][ T7077] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  240.831521][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.873029][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.913390][ T7077] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noquota,dioread_nolock,,errors=continue. Quota mode: writeback.
[  240.938281][ T7077] ext4 filesystem being mounted at /64/control supports timestamps until 2038 (0x7fffffff)
[  240.980099][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.994080][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.057724][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.082172][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.779285][ T7102] syz.4.795[7102] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  241.779399][ T7102] syz.4.795[7102] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  241.989322][ T6820] device veth0_vlan entered promiscuous mode
[  242.044984][ T6820] device veth1_vlan entered promiscuous mode
[  242.411870][ T6820] device veth0_macvtap entered promiscuous mode
[  242.452350][ T6820] device veth1_macvtap entered promiscuous mode
[  242.473256][ T7110] loop3: detected capacity change from 0 to 256
[  242.503784][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  242.522621][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  242.619031][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  242.636477][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.327157][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.368181][ T7116] loop4: detected capacity change from 0 to 1024
[  243.391975][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.420590][ T7107] loop2: detected capacity change from 0 to 8192
[  243.482650][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.492767][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.516350][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.535022][ T7116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  243.545874][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.583054][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.597356][ T6820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.609905][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  243.641958][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  243.656335][ T7107] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  243.672101][ T7107] REISERFS (device loop2): using ordered data mode
[  243.682059][ T7116] VFS: Lookup of 'file0' in ext4 loop4 would have caused loop
[  243.690593][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  243.710385][ T7107] reiserfs: using flush barriers
[  243.729993][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.773381][ T7107] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  243.824114][    T7] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  243.838434][ T7107] REISERFS (device loop2): checking transaction log (loop2)
[  243.852410][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.863974][    T7] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  243.874595][ T7107] REISERFS (device loop2): Using r5 hash to sort names
[  243.888125][ T7107] REISERFS (device loop2): using 3.5.x disk format
[  243.905086][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.921708][ T7107] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  243.943229][    T7] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  243.956027][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.986575][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.039458][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.056051][ T6820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.068069][ T6820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.110856][ T6820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.128889][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  244.148370][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  244.210718][ T6820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.244103][ T6820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.285855][ T7137] openvswitch: netlink: EtherType 0 is less than min 600
[  244.320441][ T6820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.343872][ T6820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.789598][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.853615][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.915136][ T7163] loop4: detected capacity change from 0 to 16
[  244.947754][ T7163] erofs: (device loop4): mounted with root inode @ nid 36.
[  244.981966][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  245.002692][ T7163] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 46
[  245.068424][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.077140][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.238529][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  245.726413][ T7189] loop0: detected capacity change from 0 to 256
[  245.797006][ T7193] loop3: detected capacity change from 0 to 512
[  245.844595][ T7193] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  245.853263][ T7189] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  245.910354][ T7199] loop2: detected capacity change from 0 to 22
[  245.931092][ T7193] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.820: iget: bad i_size value: -6917529027641081756
[  245.952634][ T7193] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.820: couldn't read orphan inode 17 (err -117)
[  245.979017][ T7199] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  245.989624][ T7193] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  246.085074][ T7199] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  246.165067][ T7189] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  246.316153][ T7209] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.820: deleted inode referenced: 15
[  246.684417][ T7171] loop4: detected capacity change from 0 to 32768
[  246.801934][ T7214] device syzkaller1 entered promiscuous mode
[  246.856932][ T7221] capability: warning: `syz.2.824' uses 32-bit capabilities (legacy support in use)
[  247.027049][ T7229] loop3: detected capacity change from 0 to 4096
[  247.058798][ T7171] XFS (loop4): Mounting V5 Filesystem
[  247.100974][ T7229] NILFS (loop3): invalid segment: Checksum error in segment payload
[  247.123925][ T7233] block nbd0: shutting down sockets
[  247.149660][ T7171] XFS (loop4): Ending clean mount
[  247.156394][ T7229] NILFS (loop3): trying rollback from an earlier position
[  247.183059][ T7229] NILFS (loop3): recovery complete
[  247.212230][ T7240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  247.292324][ T5435] XFS (loop4): Unmounting Filesystem
[  247.298498][ T7242] loop0: detected capacity change from 0 to 512
[  247.420784][ T7242] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  247.438467][ T7242] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038 (0x7fffffff)
[  247.485172][ T7229] overlayfs: upper fs does not support tmpfile.
[  247.508598][ T7229] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  247.520133][ T7229] overlayfs: failed to set xattr on upper
[  247.529034][ T7229] overlayfs: ...falling back to index=off,metacopy=off.
[  247.560189][ T7242] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  247.575987][ T7229] overlayfs: failed to resolve './file0': -2
[  247.670413][ T7242] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  247.717706][ T7242] EXT4-fs (loop0): This should not happen!! Data will be lost
[  247.717706][ T7242] 
[  247.761685][ T7242] EXT4-fs (loop0): Total free blocks count 0
[  247.865089][ T7242] EXT4-fs (loop0): Free/Dirty block details
[  247.911866][ T7242] EXT4-fs (loop0): free_blocks=65281
[  247.942266][ T7242] EXT4-fs (loop0): dirty_blocks=3
[  247.973263][ T7242] EXT4-fs (loop0): Block reservation details
[  247.985501][ T7242] EXT4-fs (loop0): i_reserved_data_blocks=3
[  248.017359][ T7274] loop1: detected capacity change from 0 to 128
[  248.785262][ T7274] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  248.935732][ T7279] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring
[  249.073160][ T7287] loop0: detected capacity change from 0 to 8
[  249.171467][ T7287] SQUASHFS error: zstd decompression failed, data probably corrupt
[  249.219461][ T7287] SQUASHFS error: Failed to read block 0x4ec: -5
[  249.225924][ T7287] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  249.250223][ T7287] SQUASHFS error: Unable to read inode 0x2011f
[  249.741047][ T7302] syz.0.835 (7302): /proc/7285/oom_adj is deprecated, please use /proc/7285/oom_score_adj instead.
[  249.771112][ T7302] loop0: detected capacity change from 0 to 16
[  250.429412][ T7302] erofs: Unknown parameter '00000000000000000000000 00000000000000000000000 0000000000000000erofs'
[  250.505463][ T7304] loop1: detected capacity change from 0 to 256
[  250.574384][ T7304] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  250.618434][ T7308] netlink: 'syz.2.841': attribute type 1 has an invalid length.
[  251.054125][ T7324] binder: 7312:7324 ioctl 400c620e 20000380 returned -22
[  251.765313][ T7316] loop4: detected capacity change from 0 to 8192
[  251.906410][ T7316] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  252.066871][ T7291] loop3: detected capacity change from 0 to 32768
[  253.279629][ T7335] loop1: detected capacity change from 0 to 32768
[  253.417889][ T7335] XFS (loop1): invalid logbufsize: 8192 [not 16k,32k,64k,128k or 256k]
[  253.785661][ T7358] loop3: detected capacity change from 0 to 65536
[  254.016237][ T7358] XFS (loop3): Mounting V5 Filesystem
[  254.103567][ T7358] XFS (loop3): Ending clean mount
[  254.114565][ T7358] XFS (loop3): Quotacheck needed: Please wait.
[  254.323328][ T7358] XFS (loop3): Quotacheck: Done.
[  254.637723][ T7377] sd 0:0:1:0: device reset
[  255.147444][ T3978] XFS (loop3): Unmounting Filesystem
[  255.198336][ T7382] loop1: detected capacity change from 0 to 256
[  255.208422][ T7356] loop0: detected capacity change from 0 to 32768
[  255.316335][ T7356] ERROR: (device loop0): diAllocBit: iag inconsistent
[  255.316335][ T7356] 
[  255.387420][ T7356] ialloc: diAlloc returned -5!
[  255.445363][ T7356] find_entry called with index = 0
[  255.486448][ T7356] read_mapping_page failed!
[  255.550060][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  255.556447][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  255.561724][ T7356] ERROR: (device loop0): txCommit: 
[  255.561724][ T7356] 
[  255.609881][ T7388] loop4: detected capacity change from 0 to 2048
[  255.729198][ T7391] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  256.110403][ T7383] loop2: detected capacity change from 0 to 32768
[  256.307111][ T7383] XFS (loop2): Mounting V5 Filesystem
[  256.463581][ T7383] XFS (loop2): Ending clean mount
[  256.505577][ T7383] XFS (loop2): Quotacheck needed: Please wait.
[  256.673413][ T7383] XFS (loop2): Quotacheck: Done.
[  256.787041][ T6490] XFS (loop2): Unmounting Filesystem
[  256.979936][ T7427] loop3: detected capacity change from 0 to 16
[  257.052190][ T7427] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  257.179425][ T3618] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  258.096597][ T7440] loop3: detected capacity change from 0 to 1024
[  258.338450][ T3618] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  258.619616][ T3311] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  259.161641][ T3311] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  259.176097][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.189961][ T3618] usb 5-1: config 0 descriptor??
[  259.224378][ T3311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.263443][ T3311] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  259.289172][    T9] hfsplus: b-tree write err: -5, ino 4
[  259.327639][ T7452] loop2: detected capacity change from 0 to 2048
[  259.447970][ T7452] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  259.461159][ T3311] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  259.461269][ T3311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.461400][ T3311] usb 1-1: Product: syz
[  259.461466][ T3311] usb 1-1: Manufacturer: syz
[  259.461532][ T3311] usb 1-1: SerialNumber: syz
[  259.519920][ T7458] vivid-003: disconnect
[  259.522033][ T7458] vivid-003: reconnect
[  259.538414][ T3311] usb 1-1: config 0 descriptor??
[  259.619385][ T3311] usb-storage 1-1:0.0: USB Mass Storage device detected
[  259.743491][ T3311] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  259.825747][ T7443] udc-core: couldn't find an available UDC or it's busy
[  259.825823][ T7443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  260.120874][ T3623] usb 1-1: USB disconnect, device number 14
[  260.269457][ T3618] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  260.518382][ T3623] usb 5-1: USB disconnect, device number 9
[  261.661180][ T7465] loop1: detected capacity change from 0 to 32768
[  261.710122][ T7477] loop0: detected capacity change from 0 to 64
[  261.758791][ T7481] netlink: 'syz.4.895': attribute type 1 has an invalid length.
[  261.779039][ T7465] XFS: attr2 mount option is deprecated.
[  262.005865][ T7465] XFS (loop1): Mounting V5 Filesystem
[  262.208635][ T7465] XFS (loop1): Ending clean mount
[  262.288453][ T7465] XFS (loop1): Quotacheck needed: Please wait.
[  262.474175][ T7465] XFS (loop1): Quotacheck: Done.
[  262.716503][ T6820] XFS (loop1): Unmounting Filesystem
[  262.742826][ T7474] loop3: detected capacity change from 0 to 32768
[  262.881935][ T7474] XFS: ikeep mount option is deprecated.
[  262.887637][ T7474] XFS: noikeep mount option is deprecated.
[  263.008829][ T7474] XFS (loop3): Mounting V5 Filesystem
[  263.063476][ T7517] loop0: detected capacity change from 0 to 2048
[  263.163558][ T7533] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.233112][ T7474] XFS (loop3): Ending clean mount
[  263.244618][ T7474] XFS (loop3): Quotacheck needed: Please wait.
[  263.352563][ T7474] XFS (loop3): Quotacheck: Done.
[  263.827942][ T3616] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  263.913386][ T7545] usb usb9: usbfs: process 7545 (syz.2.907) did not claim interface 4 before use
[  264.007077][ T3978] XFS (loop3): Unmounting Filesystem
[  264.101436][ T3616] usb 5-1: Using ep0 maxpacket: 32
[  264.281554][ T3616] usb 5-1: unable to get BOS descriptor or descriptor too short
[  264.368127][ T3616] usb 5-1: config 108 has an invalid interface number: 200 but max is 0
[  264.411521][ T3616] usb 5-1: config 108 has no interface number 0
[  264.437335][ T3616] usb 5-1: config 108 interface 200 has no altsetting 0
[  264.497717][ T7551] loop0: detected capacity change from 0 to 2048
[  264.607775][ T7551] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  264.628080][ T3616] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=b5.5e
[  264.663698][ T3616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.672750][ T7551] UDF-fs: Scanning with blocksize 512 failed
[  264.693733][ T3616] usb 5-1: Product: syz
[  264.701351][ T7551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  264.710323][ T3616] usb 5-1: Manufacturer: syz
[  264.714942][ T3616] usb 5-1: SerialNumber: syz
[  265.358977][ T3616] etas_es58x 5-1:108.200: Starting syz syz (Serial Number syz) driver version 1.00
[  265.432036][ T3616] usb 5-1: USB disconnect, device number 10
[  265.834096][ T7580] sp0: Synchronizing with TNC
[  265.965233][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'.
[  266.103441][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'.
[  266.338284][   T26] audit: type=1107 audit(1723564751.427:165): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='yס'
[  266.390314][ T7604] syz.3.926[7604] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  266.390426][ T7604] syz.3.926[7604] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  316.995851][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  317.013457][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  372.457864][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  372.464859][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P4055/1:b..l
[  372.473813][    C0] 	(detected by 0, t=10502 jiffies, g=33341, q=422)
[  372.480424][    C0] task:kworker/u4:10   state:R  running task     stack:19680 pid: 4055 ppid:     2 flags:0x00004000
[  372.493540][    C0] Workqueue: bat_events batadv_nc_worker
[  372.499218][    C0] Call Trace:
[  372.502509][    C0]  <TASK>
[  372.505454][    C0]  __schedule+0x12c4/0x45b0
[  372.509979][    C0]  ? validate_chain+0x112/0x5930
[  372.514946][    C0]  ? mark_lock+0x98/0x340
[  372.519300][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  372.525387][    C0]  ? release_firmware_map_entry+0x190/0x190
[  372.531298][    C0]  ? reacquire_held_locks+0x660/0x660
[  372.536693][    C0]  ? preempt_schedule_irq+0xec/0x1c0
[  372.541997][    C0]  preempt_schedule_irq+0xf7/0x1c0
[  372.547172][    C0]  ? __cond_resched+0x20/0x20
[  372.551877][    C0]  irqentry_exit+0x53/0x80
[  372.556319][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  372.562348][    C0] RIP: 0010:lock_acquire+0x252/0x4f0
[  372.567663][    C0] Code: 2b 00 74 08 4c 89 f7 e8 cc 86 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
[  372.587286][    C0] RSP: 0018:ffffc90003147a80 EFLAGS: 00000206
[  372.593371][    C0] RAX: 0000000000000001 RBX: 1ffff92000628f5c RCX: 1ffff92000628efc
[  372.601354][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8b3ca0 RDI: ffffffff8ad8f800
[  372.609338][    C0] RBP: ffffc90003147bd8 R08: dffffc0000000000 R09: fffffbfff1f8e019
[  372.617332][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000628f58
[  372.625338][    C0] R13: dffffc0000000000 R14: ffffc90003147ae0 R15: 0000000000000246
[  372.633365][    C0]  ? read_lock_is_recursive+0x10/0x10
[  372.638850][    C0]  ? rcu_lock_release+0x5/0x20
[  372.643635][    C0]  ? __lock_acquire+0x1ff0/0x1ff0
[  372.648677][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  372.654679][    C0]  rcu_lock_acquire+0x2a/0x30
[  372.659374][    C0]  ? rcu_lock_acquire+0x5/0x30
[  372.664151][    C0]  batadv_nc_worker+0xc1/0x5b0
[  372.668935][    C0]  process_one_work+0x8a1/0x10c0
[  372.673916][    C0]  ? worker_detach_from_pool+0x260/0x260
[  372.679691][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  372.685272][    C0]  ? kthread_data+0x4e/0xc0
[  372.689800][    C0]  ? wq_worker_running+0x97/0x170
[  372.694849][    C0]  worker_thread+0xaca/0x1280
[  372.699581][    C0]  kthread+0x3f6/0x4f0
[  372.703665][    C0]  ? rcu_lock_release+0x20/0x20
[  372.708529][    C0]  ? kthread_blkcg+0xd0/0xd0
[  372.713135][    C0]  ret_from_fork+0x1f/0x30
[  372.717583][    C0]  </TASK>
[  372.720613][    C0] rcu: rcu_preempt kthread starved for 9703 jiffies! g33341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  372.731731][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  372.741708][    C0] rcu: RCU grace-period kthread stack dump:
[  372.747637][    C0] task:rcu_preempt     state:R  running task     stack:27064 pid:   15 ppid:     2 flags:0x00004000
[  372.758433][    C0] Call Trace:
[  372.761716][    C0]  <TASK>
[  372.764659][    C0]  __schedule+0x12c4/0x45b0
[  372.769176][    C0]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  372.775111][    C0]  ? release_firmware_map_entry+0x190/0x190
[  372.781022][    C0]  ? mod_timer_pending+0x20/0x20
[  372.785984][    C0]  ? lockdep_softirqs_off+0x420/0x420
[  372.791378][    C0]  schedule+0x11b/0x1f0
[  372.795547][    C0]  schedule_timeout+0x1b9/0x300
[  372.800412][    C0]  ? console_conditional_schedule+0x40/0x40
[  372.806323][    C0]  ? update_process_times+0x200/0x200
[  372.811715][    C0]  ? prepare_to_swait_event+0x321/0x340
[  372.817280][    C0]  rcu_gp_fqs_loop+0x2bf/0x1080
[  372.822150][    C0]  ? dyntick_save_progress_counter+0x230/0x230
[  372.828326][    C0]  ? rcu_gp_init+0x1140/0x1140
[  372.833111][    C0]  ? finish_swait+0xc5/0x1d0
[  372.837719][    C0]  rcu_gp_kthread+0xa4/0x360
[  372.842323][    C0]  ? _raw_spin_unlock+0x40/0x40
[  372.847200][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  372.852322][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  372.858243][    C0]  ? __kthread_parkme+0x15c/0x1c0
[  372.863290][    C0]  kthread+0x3f6/0x4f0
[  372.867371][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  372.872496][    C0]  ? kthread_blkcg+0xd0/0xd0
[  372.877100][    C0]  ret_from_fork+0x1f/0x30
[  372.881544][    C0]  </TASK>
[  372.884830][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  372.891163][    C0] NMI backtrace for cpu 0
[  372.895493][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.164-syzkaller #0
[  372.903393][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  372.913456][    C0] Call Trace:
[  372.916742][    C0]  <IRQ>
[  372.919593][    C0]  dump_stack_lvl+0x1e3/0x2d0
[  372.924290][    C0]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  372.929938][    C0]  ? panic+0x860/0x860
[  372.934046][    C0]  nmi_cpu_backtrace+0x46a/0x4a0
[  372.938998][    C0]  ? __wake_up_klogd+0xd5/0x100
[  372.943874][    C0]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  372.950047][    C0]  ? _printk+0xd1/0x120
[  372.954223][    C0]  ? cpu_online+0x1f/0x40
[  372.958568][    C0]  ? panic+0x860/0x860
[  372.962655][    C0]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  372.968734][    C0]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  372.974734][    C0]  rcu_check_gp_kthread_starvation+0x1d2/0x240
[  372.980912][    C0]  print_other_cpu_stall+0x137a/0x14d0
[  372.986402][    C0]  ? print_cpu_stall+0x600/0x600
[  372.991358][    C0]  ? __lock_acquire+0x1ff0/0x1ff0
[  372.996408][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  373.001630][    C0]  rcu_sched_clock_irq+0xa38/0x1150
[  373.006849][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  373.011715][    C0]  ? hrtimer_run_queues+0x163/0x450
[  373.016948][    C0]  ? account_process_tick+0x232/0x3a0
[  373.022336][    C0]  update_process_times+0x196/0x200
[  373.027562][    C0]  tick_sched_timer+0x386/0x550
[  373.032429][    C0]  ? tick_setup_sched_timer+0x2d0/0x2d0
[  373.038020][    C0]  __hrtimer_run_queues+0x55b/0xcf0
[  373.043254][    C0]  ? hrtimer_interrupt+0x980/0x980
[  373.048380][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  373.054471][    C0]  hrtimer_interrupt+0x392/0x980
[  373.059443][    C0]  __sysvec_apic_timer_interrupt+0x139/0x470
[  373.065440][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[  373.071092][    C0]  </IRQ>
[  373.074040][    C0]  <TASK>
[  373.076991][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  373.082995][    C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340
[  373.088824][    C0] Code: ca 43 f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 c4 46 4a f7 0f 1f 44 00 00 e8 4a c6 43 f7 0f 00 2d c3 90 a6 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 8b 9a 8d f7
[  373.108440][    C0] RSP: 0018:ffffffff8c607b80 EFLAGS: 000002d3
[  373.114532][    C0] RAX: ffffffff8a3c9b16 RBX: 0000000000000000 RCX: ffffffff8c6bd5c0
[  373.122516][    C0] RDX: 0000000000000000 RSI: ffffffff8a8b2a00 RDI: ffffffff8ad8f800
[  373.130498][    C0] RBP: ffffffff8c607c10 R08: ffffffff8186e200 R09: fffffbfff18d7ab9
[  373.138482][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff18c0f70
[  373.146461][    C0] R13: ffff888018516804 R14: ffffffff8c607ba0 R15: dffffc0000000000
[  373.154451][    C0]  ? trace_hardirqs_on+0x30/0x80
[  373.159411][    C0]  ? acpi_idle_do_entry+0x106/0x340
[  373.164632][    C0]  ? acpi_idle_enter_bm+0x5c0/0x5c0
[  373.169842][    C0]  ? rcu_preempt_deferred_qs+0x6b/0x190
[  373.175403][    C0]  ? rcu_qs+0x190/0x190
[  373.179583][    C0]  acpi_idle_enter+0x352/0x4f0
[  373.184363][    C0]  cpuidle_enter_state+0x521/0xef0
[  373.189500][    C0]  ? cpuidle_enter_s2idle+0x6b0/0x6b0
[  373.194982][    C0]  ? tick_nohz_idle_stop_tick+0x246/0xa70
[  373.200725][    C0]  cpuidle_enter+0x59/0x90
[  373.205158][    C0]  do_idle+0x3e4/0x670
[  373.209255][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  373.214469][    C0]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  373.220133][    C0]  ? schedule_idle+0x57/0x90
[  373.224736][    C0]  cpu_startup_entry+0x14/0x20
[  373.229516][    C0]  ? time_init+0x40/0x40
[  373.233771][    C0]  start_kernel+0x48c/0x540
[  373.238293][    C0]  secondary_startup_64_no_verify+0xb1/0xbb
[  373.244214][    C0]  </TASK>
[  378.430897][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  378.437369][ T1388] ieee802154 phy1 wpan1: encryption failed: -22