last executing test programs:

7.443052013s ago: executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0)

6.955097846s ago: executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000e32f00320002030000000000000000000002000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)

5.890388834s ago: executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001c40)='batadv0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', '', [], 0xa, "6d18dccb2fc7b68dfee2459853e969589c244cdeb83b"}, 0x1a)

5.693858834s ago: executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x250, &(0x7f0000002680)="$eJzs3EFrI2UYB/DHbt1tu+ymBxEUxBe96GXY1g8gQXZBLCh1I+pBmLVTDR2TkgmViLh78+rnWDx6E9Qv0Is37956EbzsQYw0Sd1kjYiwcWrz+0H7PuHNH55hJuGZQHLy7lefHOxX2X7ej5W1FCsR9+JBxOZpNfHEZF0Z1Zdj2r14+eqvPz339nvvv9Hc2bm5m9Kt5u1XtlNK15//7tPPv37hh/7Vd765/u2VON784OSX7Z+Pnz5+5uT32x+3q9SuUqfbT3m60+328ztlkfba1UGW0ltlkVdFaneqojezv192Dw8HKe/sXds47BVVlfLOIB0Ug9Tvpn5vkPKP8nYnZVmWrm0E/6R1f3c3b9bdBQuzevqv12vmlyJi/S/brft1NAUA1Ot8z/+nU4v5f3HM/8vgdP7fmLx+Z5n/AQAAAAAAAAAAAADg/+DBcNgYDoeNs/Xs70pErEXE2eO6+2QxnP/lNvXFvbWI8suj1lFrvI73m/vRjjKKuBGN+G10PUyM61uv79y8kUY24/vy7iR/96h1aTa/FY3YnJ/fGufTbP7J2JjOb0cjnpqf356bvxwvvTiVz6IRP34Y3Shjb3RdP8x/sZXSa2/uPJJfHz0PAAAALoIs/Wnu/XuW/d3+OP8vPh945P56NZ5drffYAQAAYFlUg88O8rIseooLWLwaEeegDcV0sfa4T8p6LKLVut+ZAACAx+3h0F93JwAAAAAAAAAAAAAAAAAAALC8/osfPKv7GAEAAAAAAAAAAAAAAAAAAAAAAOC8+CMAAP//i7gqKA==")

5.691835388s ago: executing program 1:
close(0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffe6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f00000005c0), 0x12)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5})
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
write$cgroup_int(r2, &(0x7f0000000200), 0x42400)

5.489822105s ago: executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x400000, &(0x7f0000000180)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc178)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

5.086102247s ago: executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040))

4.361533758s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

4.153275925s ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000e32f00320002030000000000000000000002000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)

4.09944694s ago: executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/229, 0xe5, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48)

3.982855685s ago: executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0)

3.92071427s ago: executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001c40)='batadv0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', '', [], 0xa, "6d18dccb2fc7b68dfee2459853e969589c244cdeb83b"}, 0x1a)

3.881214506s ago: executing program 0:
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x5dbd, &(0x7f0000005dc0)="$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")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x107f41, 0x0)
fallocate(r0, 0x3, 0x0, 0x10000)

3.677125809s ago: executing program 2:
close(0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffe6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5})
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
write$cgroup_int(r2, &(0x7f0000000200), 0x42400)

2.801839144s ago: executing program 1:
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x5dbd, &(0x7f0000005dc0)="$eJzs3X2QHGeZGPDumVntSivJKyHwypLlNRYQ+WKQrdhB3BFtyEGAyFjIyBj5dJKwV6BDloQ+LFu6xF854xiSUpVdZ8cOKZ1NkavUVWJKlzjcKVXCGHPFVbksCH9wzte5AvkjnKM6JB+RKDa1u9270739Ts9Oz8qy+f2qdmff3nee93l63umv3ZmJAAAA+JXw4u/tf/0Tl334ew+MnL33o39y5/1Rf318eV/aYSC5vfuNypDZtOr75zOPbG9jcPw2Py8u/dMlrw88uP7GR9Z+5Pvb/mzR8IqVIzd84/hNDz34/Ad/8fzjT64vGyedT1dPteO/iqNoxY+PP/7Qd/780rFl8dj48cB90aJF8eJvLYpzIVafi6Lojsk8s788fnbNjrHb+7/cm1l+SS6I+f6rrS+ZZ0e2fvbpk18Y/s7xob1rfnrm+j33TXWJ+5rmUxQt3NZ8/54oiuYmX2PS2TaY3jm53RBF0bym+72/JK+r2sz/mkB7eXI7J7ntL4mT/v7KXLvRZh6N3G1vm/frVG2W4+fl119+YzRb0joXJrfPJbdXzzBOPf2Ko1ocNSbT3xVPzZGo6XGLo3h8bvdNtmvj7WiyHeXbca5dy7XrPbm6xsdNVmw9jrPL03655enmuJEsv7J5W11gY2D50uS2L3mi/jxtR/kfJvRP+2Gqjqgpr9MXamIE1ALPvVp03/jyyfSSB6M/WdYfL552n9EC6e9Of3f75td+dPi5gUAe8bNxEj+O4rgx4/jDI0+d/PqtJ5YOhuJvqyXxax3l/2L9pXNfOzM4Pxj/aBq/3lH8Tb/8ycMP3HxoSXD9nE7XT6Oj+Cu/Mv/I2UMbe4dC8Y+l8fua48ftxr9hy4q1l585eFcw/9Xp+pnbUf4/fHTV+S1Hv3kiGD9K48/rKP4rTz2zvL70sVPB+CfT9dPfUfxb1jyx7uPLHnwyuP5fTuMv6Cj+5lMPbdv79AurgvNzQ7p+BjqKf27dD149P7D+mdC2Mz52ofewAG8tb0uOsR5O2p2eZ1bVdL7wxFBj4kBgfvK1oJsD5cTj5y5XLJzFIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4FfDYuv/wxeb2u/7PXZtO/ccVOxtJu7cRRXEURa/VJ9rp8jlRFM+Nomj/ge37Duzc/bmh39lzcN/u7buGth8YGtl9YN89Q3/nbw/tG9m7a/s9Y79dfc2aifstHo8WRYvjy6flMjo6OhpF0VDzsnS8P/jYs/9v05N//ZkoWv32H6xoBOt533999cNLCr7nxMOjG/7V9Y8envO/LplYMJDkNRDKayC7LM2gf/jlv/jQcz8ay+sdrfJ6/KVP/99MQuMLpuIkar1RbfyH3nheYR6TWU/lM76+Gjt27hpZXb5+48D6fc8Lf3zm39+96Z9PrN++YB1trt+xtdoYfeRnD7znvg+NfOAiftzL1ndTCeP5peuvL1nfC5O6FgbqqgXqumvoldP/4t/956/dF61u/OyK6WOX1dWTTICeeGlb46YjzIsXZfr2Jf3TRzy93/sO3Ln3ffvvOXzNzju3f27kcyO716y5fu21a669bu2a942XPvG9a/Wn47+nzfrnJ5Hmx8sK11t+aTruFePf61GSdnrT9ENWT9Q/cZtbz2n3fNX9ye/648XTYo0WSH93+rvbN7/2o8PPhZ558bMTI86NFkzcxssDPXfl7lifTLho/AvzvNzz+3270u/tPS/L8iqbV2N5lc+r5oxabMdeuurhnz39pX95Wxvbi6au4/mlec4be7pcGzU9b6evq6K62nh8hovWw+3X7Pvje3ZuPlq2PW9+ZJq/58TDo/9zeXzjwf1/sW9iwQXZXzYn1OH+cjLrqXzG11df8nhcrOu3N6ondfUX5rUxfvqD77nzxK9N5jdnTnT39gMH9l078f3NWtdfzrlkyc77l10+ra7rJr6XbfevyLVLt/u14vrKtvv5cab6F8cbyrX7o3pH+4lNv/zJww/cfGhJcD9xut39xO9mWvWK+4la4Pn+yF9/dej12z71etl8umn/snuXFHzPlzc8+s0/+vVrP/Dpmz8yseCCbIeaE+pwOzSZdZJPur7Gt0PXXTx1vHGPc+aJGA+PXvGNd99y/uwXPzmxoGz9TvYuWr9ryrfz9UBdt/W8c9GjP132zu7N3/1b/+aq986bf5HN375k/fYF1u9k1kk+9eb1+97b9+y6Y6J98R63TegtOf9J9zv77zn8he27do3s299eXe3uT9Nx8mu50/1puvdYXFJX+nhN1TV7P7Szvtp9vqX535GL0enzDSA1tV+Yk1me336m1/1WLIw2vfdL334pHprYX3brems6zmW5HXOn11vLzpPemWtnz5MaUVPdE6afJ43fpew8KT9O2XnSVbl2+XnMw4WVhB6/nmTPW3TdNJdvYyxCaH4MJvEHk3Z6vLnivdH19efe9bF4uL350e7xdDrO38qtoE6Pp8vmx8qoOK9uz4935+5U/ngfLcysL/B4lD3eKzOBRkernpcPBLJOz8v7o7ij+MMjT538+q0nlgbjb6sl8WsdxX+x/tK5r50ZnB+MfzSN3+go/sqvzD9y9tDG3mD8Y+n66eso/g1bVqy9/MzBu4LxV6f5z+0o/g8fXXV+y9FvngjGj9L4/R3Fv2XNE+s+vuzBJ4PxX46Tccaeu1F0/OyaHRPtOOpJ5n+aR08mryjfjnPtWq5db27XJv7WOzlAPY6zy9N+ueVpHY1k+ZVNORbZFFiePmv7kif2z9N2lP+h9fJ085TmdTqw/7lQak3HHkXLy65PdstrPx78g+Z2+vf/dA70NiYeu+ty66ts/5HfeqfxgtdhA5cwyo4Xpv/9bV5Hz79XnnpmeX3pY6eC11VPtntddW+mNa/kumrVfIPbi5Pp9rTa9mgwFP/lNH61/UEwfrI/KJtn78q1S+dZT/F4ZfMsf5zSHy3oqO7Npx7atvfpF1YF59mGiSd8+Tx7LNNaUDrPKv1dOg5tLtO/S1ddH8F5vKE7xzXBeZYc15TNs6tz7erzLHs8emNye3euf39yhXimdZ9b94NXzw+sfyY4z461O8/+MNMaKJ1n1Y5vg4/T5PHtbB+fv7mPP9+w48Pkz7mzdXy4MbB8pseH/dN+mKojejMeHwa2MwDQyvceued/N7fT8/90352e/387d7+q55X5/4dKtXteGQ0Ux0/PK4Pxj3XnfCV4nDp5vlLt/4CDx3nPduc6cvlx9uyebzmOD8SfvI4829eFZve80nlI0o7yP0woPQ9pTBX6RnIeAgDw1nLlv/nqbza30/P/yf97S17//0Lazt3feW4g/gU7z6329/fy6yRdO4/OTJ23znn0bF8Hm+3rVK4DXNTXAZJbf48EAKAbtu7YNzKyf+/220e27ty988Dk8p7xM6fp/6f6d5PbDbk4Zf8/XdR/Xov+nwzGz+bz/kD/kMb4/7xG0Wdv//x1W+8YuWum9YfGK6u/qH+r+vPnF6H61wb6h1StPzReWf1F/VvVf3MwfjafDwT6h1StPzReWf1F/VvV/6lg/Gw+vx7oH1K1/tB4ZfUX9W9R/7RXA4Xq/43kNvT6saLAVeoPjVdWf1H/Vo//LcH42Xw+GOgfUrX+0Hhl9Rf1b1X/p4Pxs/n8vUD/kKr1h8Yrq7+of6v6bw3Gz+azLtA/JFT/6L2h/Nobr6z+ov6t6v9MMH42n+FA/5Cqj39ovLL6i/q3qn9zMH42n78f6B9Stf7QeGX1F/VvVf9twfjZfD4U6B9Stf7QeGX1F/VvVf9vBeNn8/kHgf4hVesPjVdWf1H/VvVvCcbP5vObgf4hVesPjVdWf1H/VvX/djB+Np8PB/qHVK0/NF5Z/UX9W9W/NRg/m89HAv1DqtYfGq+s/qL+rerfFoyfzecfBvqHVK0/NF5Z/UX9W9W/PRg/m89HA/1DqtYfGq+s/qL+rer/bDB+Np+PBfqHVK0/NF5Z/UX9W9V/ezB+Np+PB/qHVK0/NF5Z/UX9W9Wff7/DUP3/KNA/pGr9ofHK6i/q36r+kWD8bD7rA/1DqtafHW9uQX7t19Oq/h0F/aOCfG4M9A+pWn9ovLL6i/q3qv9zwfjZfD4R6B9Stf7QeGX1F/VvVf/ng/Gz+dwU6B9Stf7QeGX1F/VvVf/OYPxsPhsC/UOq1h8ar6z+ov6t6v+dYPxsPp8M9A+pWn9ovLL6i/q3qv8LwfjZfDYG+odUrT80Xln9Rf1b1b8rGD+bz82B/iFV6w+NV1Z/Uf9W9d8ZjJ/N51OB/iFV6w+NV1Z/Uf9W9e8Oxs/msynQP6Rq/aHxyuov6t+q/j3B+Nl8bgn0D6laf2i8JL849HrNov6t6t9bHH9aPp8O9A+pWn9ovLLHv6h/q/q/GIyfzefWQP+QTuofbmO8svqL+reqf18wfrb+zwT6h1R9/EPjldVf1L9V/fuD8bP5bA70b9b8f99V6w+NV1Z/Uf9W9R8Ixs/mc1ugf0jV+kPjldVf1L9V/QeD8bP5/Fagf0jV+kPjldVf1L9V/XcF42fz2RLoH1K1/tB4ZfUX9W9V/6Fg/Gw+vx3oH1K1/tB4ZfUX9W9Vf/59IEP1bw30D5ms/8C+kZGtB/fesf3AyNbde+4Y2b/10L6dBw6MJAdqVV9XFn5d0Bv8QhZayjw/JibJzt37R/ZN337PbTl/m+dENP6yp4lrpX3xO9rqn3/b605nzcUy33uiRsv1dVmufUnyL3CXBN6PNt8/Dbts/Ifp70ebH7ZR8j6uZdun/Pih7VPcon/R9jW0PSvb/814+1c6v/ta1p9f3Ju8sK83fntb/aMWn+/W3nyt9rrT4Hx9ub35mn/f9bL5mu8/0/naX3G+5scPzadai/6tjofana+bA/1T7c/POFhv0bya6ecMpmFn9DmDuW/TdPBZBu0/H6q9jjz4fEiSLns+5F/HXfZ8yPef6fNhbsXnQ378sudDUf/886G3xfwuu37V/ePXau9bEJwPq9ubD/nPsSqbD/n+M50PfRXnQ378svlQ1L/V9cJ258OnAv3b1f78qPa+IsH5sa29+ZH/PImy+ZHvP9P5EVecH/nxy+ZHUf9Wf09pd358MtA/ldl/7tg/flK/c/uunYdz/4AxkOw/3+j94QXZL//Nb/zlzye+JXnUpuVRdjwR5/JYlGSyKPS5h4G8b/8v/3bTt3/xpa9G0eq315eH855KeepbTjw8uvjelV+/9R2nPjSWf61l/pM9088tLvm843z/tJ7Grj37D/zajj0Hd7f7H1etpe+HUptsz9L7oSQL622+v0no9QQzfX+Tnmk/XJzafn8TgLeIS449u6C5nb7/X7o/Gky2fXOTDWC6vP3j7Grvrxc8zj7a3nH2qny9JcfZ+f5pve0eZ9cqHmfnxy87zi7q3+r/9to9zv5EoP9MZefJ2AQZnx8jWw/t2df8P3Gz/bm13c93dj/Ht3p+s/v5B51qP//ZfV/I2c9/dj8HePbzn93Pee7UBTtfSv5pqOz9I8vOo0KvS5/pedScaT9cnJxHAcDF75/t+/G/bm6n5//JWezk+f+Xk3a9y+PP9nnUbJ9XzvZx8pv/c+xm9zzI+UCLwS4CzgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiv3hf/9P32pu9zYGx29f/L39r3/isg9/74GRs/d+9E/uvP/SP13y+sCD6298ZO1Hvr/tzxYNr1g5csM3jt/00IPPf/AXzz/+5PrSgQYmbq5Omn1RFP9VHEUrfnz88Ye+8+eXji2Lx8aPB+6LFi2KF39rUZyLsPpcFEV3TOaZ/eXxs2t2jN3e/+XezPJLckHydUX99TSfTJ7R3aUV8SbUl8yzI1s/+/TJLwx/5/jQ3jU/PXP9nvumusR9TfMpihZua75/TxRFc5OvMelsG0zvnNxuiKJoXtP93l+S11Vt5n9NoL08uZ2T3PaXxEl/f2Wu3Wgzj0butrfN+3WqNsvx8/LrL78xmi1pnQuT2+eS26tnGKeefsVRLY4ak+nviqfmSNT0uMVRPD63+ybbtfF2NNmO8u04167l2vWeXF3j4yYrth7H2eVpv9zydHPcSJZf2bytLrAxsHxpctuXPFF/nraj/A8T+qf9MFVH1JTX6Qs1MQJqgedeunwyveTB6E+W9ceLp91ntED6u9Pf3b75tR8dfm4gkEf8bJzEjzuKPzzy1Mmv33pi6WAo/rZaEr/WUfwX6y+d+9qZwfnB+EfT+PWO4m/65U8efuDmQ0uC6+d0un4aHcVf+ZX5R84e2tg7FIp/LI3f11H8G7asWHv5mYN3BfNfna6fuR3F/+Gjq85vOfrNE8H4URp/XkfxX3nqmeX1pY+dCsY/ma6f/o7i37LmiXUfX/bgk8H1/3Iaf0FH8Tefemjb3qdfWBWcnxvS9TPQUfxz637w6vmB9c+Etp3xsQu9hwV4a3lbcoz1cNLu9DyzqqbzhSeGGhPHfPOTrwXdHCgnbjp3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAkD2j9YPN7VdPPHLT5//H1v/WiKMoDtxntED6u/qc4eGhDvJY+ZX5R84e2tibtsfGHuwgDgAAADDdsle+9MXmdnoeXkvacdQXDUaH4rnRssL7p9cIlqWtOLs8fw1h7lTPrsSpdSlOvUtxGl2K09OlOHO6FKe3S3H6SuL0Re3FmdsyTq3tfOZ1KU5/l+LM71KcBV2Ks7BLcS7pUpyBlnHan4eLuhRncZfivK1LcZZ0Kc7buxTnHV2Kc2mX4uSvKc90Hi5Iel4WijP+Q700TiOuT/6i6Hp6Os7lFcfpb3Oc/DX7mY4zt81xrqo4Tl+b47y74jhxm+Osyt2vNsNxaiXjpPP27lA9aavN+X9Pl+Ic7lKcI12K87tdivOPuxTnn3Qpzr0V4wCE/P7zV/9Rczs9/0/PP+NoIOptXBfNS7Y4+asA6fnuFePfp+/vQhukNN7y3PKesnj5E+xcvCtmml/+AkIu3jtbxmtMO18tiNdojreyS/EAAABgJv7puSOZP81NP/8fjHobSybPX9+Vu3/p+Xr+D9mJNN7VXYoHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9m119i46isB4P/rGc/MmkcMSsKEvKwkS0CIPIiyWthdGEVaJFYLDssmPCLkzYLBESaBOAGS3VVYWG0iS1S0oQ9eHxooqhAqICFFtK5EBS3qh0aNKBWPugYXwRdUKHkBoZ1q7HvtO+MZbKYlIe3vJ3TvnHvP+Z//vUhI5xoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy++XX//di+l4eKC/s2eoazBEofJPXeU6knuZXKnU0cQ+Pnhp/bW/fW373iSu9M5nm1gIAAAAmODpi2adnY6TOTwZvaNQCPns8pCPclV1xfg7QDGOW9pHz/OWhJWZvX97aVRqGYlPj06rqivEdYU4zsR1fdu237y+t7d78xf4o9Kn9jlq9xOFMPL5Yt6pYc2SnS/sizpGn6NtkudoieuWbrnl1qV927aft+GW9Td139S9ccWKlRcsX7H8/AtWLL1xQ2/3stFjyE+yXgihVP1eJvkXCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8COn+79v3Q8PNDf2TPUNdgWhRA1qCnXkdzL5Eqljib28cZDj87JzLp/fxJXeuezTSwEAAAATPCjp2ddnI6TOTwZvaNQCPlsLmTCrJF4wXhqNoRyObm+qOb6sdg7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwbB043PnrdDw80N/ZM9Q1eFIUQtSgplxHci+TK5U6mtjH2hXfuvhfZt/zYBJXehebWAcAAACY6JWzW+9Jx8kc3hLHUSiEYlgYWqNZVXXJt4Eza9arzUvWmTvFvNpvB43yFk4x76wp5p0zSd7l8fnOAAAAACeea9p/tjYdJ/N/axxHoT3ks8WQiePJ5vjku8D8mrykfrL5Pqlf0KB+srk/qa+d+wEAAOCv2XnvPvNpOp44/xdDPlsYm78n+3v6ZfHZ38kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEZ+fPjSH6Tj4YH+zp6hrsFMFELUoKZcR3IvkyuVOprYx5o/vLPr7ivvmJ7Eld75bBMLAQAAABM8mfv7O9JxMocno3cUCiGfbQut4aSRuf+t3LTpG/539twQQmkkIZcLd67fsmXz+aPHJO/foj3/tPiWgXMn5C0fPR77JwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5UK57YvS4dDw/0d/YMdQ3+TRRC1KCmXEdyL5MrlTqa2Mcru885et19zw0kcaV3sYl1AAAAgInm9D7/m3SczOHJ7B+FQiiGXMiFmSNxetavaKlZr9E3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAvR9+27Tev7+3t3uyHH34cox+5L8c2PvPH8f4vEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLx8f+PX3k/HwwP9nT1DXYOFKISoQU25juReJlcqdTSxj7+7bt4Fcw9uvT2JK72LTawDAAAATLTuva0H03EyhyezfxQKoRhaQ2uYEccTjcz/7cditwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPE0P0Sh/Dmdsfp47xoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Ihx6dc1D6Xh4oL+zZ6hr8JQohKhBTbmO5F4mVyp1NLGPa/f//3/cuufFc5K40jufbWIhAAAAYILWd1/9z3SczOHJ6B2FQshn54R8mBNf6a1eIMokiXW/C4zX/XdVWWbKdbtqdjy6s0L8HaIwts8w8tlhvO6+z6wrxldb2qf2ngAAAOBENmPX5f+TjpP5vzWOo9Ae8tkZqbn61qr6tinP8fdX1Z0y5brvVtW1T1L3Z3glAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECT7l390hnpeHigv7NnqGswikKIGtSU60juZXKlUkcT+yh1P/T841cPzEriSu9iE+sAAAAAE135TuGr6TiZw5PZPwqFUAxzw6lh7sjcH9qr65O8k0o/f33V3teuCWHZzJfnZRv2++a+q94PR/7xrY9GDyNhCC3VSS0hTIv7RQ36Xf+LJ9a88OnOR0JYNiMzp3G/8VbjhxpRqXz6jkWPXz1z/6qGywAAAMAJrfDooe+k42T+TybqKLSHfHZjw/k/yftc839n3+wd0+Nj/AWgpqKlPe7X0qBf/4ePdBxe9++HK/P/y/MKY/+vwNkLq/PTrdLHmm8OUak8/5mz1h49dNsVoxeS/pmq/uvG+q9rXXDa7vdmL0j6F+LrN4Sp9g81/fu6jixc0nbyJdX9Qwgd9Z7/25c+/fGaBz+8ZrR/4/e99FfD/zw9bPpGoTc5jl6Z2H/1wyt3b8+9Pa26f9Sg/+IXnz341J1r7q19/jOz9fpPPNaodM2W+w/cvfiuVd0Xpvq3NOh/e8cbH3zlez98rNL/wPy2sf6LP+P5J+2/b+GuA3t2PrCu+v2X6vW//rzNz27bcO19tc/fVrNw+s2njxPf/5tzosu29r2+ufYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAia3rqU+OpOPhgf7OnqGuwZYohKhBTbmO5F4mVyp1NLGPn2T2ffLYweLJSVzpXWxiHQAAAGCiK1a9eVM6TubwZPaPQiEUQy7kQtvI3H/6jkWPXz1z/6rQHt+Pz9neTX1bzr1x09aNNxzrRwAAAAAmseeij1el42T+z8ZxFNpDPrsotMbz/+qHV+7ennt7WjL/hxBG/tyfvXFDb/eyMPadoK/ryMIlbSdfkuRl4nOhkrfk+k298WeCZN3nnvyH5RdedeVYfks6//zxvPnPnLX26KHbrqibt2I878050WVb+17fnNpnaSxv+Xhe/4G7F9+1qvvC5Dmi+FyInyfJ27dw14E9Ox9Yl+S1xOe2eD0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIITTPvr9f6Xj4YH+zp6hrsGQCSFqUFOuI7mXyZVKHU3s45OLXx4+2v6vjyZxpXc+28RCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwR3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwVz+hcVRxHMDfm92abbfWTSmYaA0t9tKCUAgWe5Dm4h8kaqkoWihGMV5ULIhW7MG2wSDqoaBQaS+lFc9KDkXtIRZbRUGs4kE8KehJJYekSCoqSeZtdqcOiQMtpXw+sLz9vdn5zm/evp0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuao/9dE+9s+6p982P51574cIDN9315aHRmVfv/fi5gzd+su5Ca2z4/je23/3tyBe9QwObRrd9OPHg+NiZO/86c+To8JIXenlh2JKXjRDi7zGEgV8mjoyf/Sqbm4tz14+tA6G3N679tDcWErbOhhCeavfZfXBiZvDpufHgmz1d8zcUQor3FZq11M+CVne/XFsa+T7b//iTJyafGTo7sWHv4G/Ttz9/YPEjsdGxn0JYM9J5/ooQwsr8NSfttr50cj7uDCGs6jjvjiX6unWZ/d/WfStt6/PxunxsLpGTjm8s1PVl9lEvjD3LPK+q7DLnFxXXr/gwulzSfa7Jx1P5uOV/5tTSK4Yshnq7/Wfj4h4JHd9bDHF+bzfadTZfh3YdinUs1Fmhrq0o3Nf8dfOFrcXYPZ8+V5hPj+N6Pr+xuPELdpXM9+djI/+h/pnqUHyzoHnJm8X7CB19TV2pjVEiK/ntpfl2e/mX0cznmnHtJef88x/SsanPn9j9xw+vnGqV9BE/iHl+rJQ/NHps8v1HT/f3leWPZHl+Vin/XO3r2fem+1aX5h9O+bVK+Q///evrhx7at650fabS+tQr5W96a/X+mX27ejaU5R9P+Y1K+dv2DGy/ZfrFl0r735rWZ2Wl/O/f3nxxz+GPTpfmh5S/qlL+j8dOrq/1v3O+NH8yrU+zUv4jg+/uuO/msaOl6/9Nyr++Uv7u8+Mje098trl0f+5M69OqlD+747ufL7aGT5Y9O+PxK/0PC3Bt+Zf9OjYBGATCMEogZVJlgYzrCI5r4RViqSII74GF1bX/98XGSvEf7cxZTS/k/66b74n3rjzUubaVEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcpAQAA//+U/mIm")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r0, 0x3, 0xd1, 0x10000)

2.602813424s ago: executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x400000, &(0x7f0000000180)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc178)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

2.225341598s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000c6000000000000009500000c000000008f39cb215da0d8f19147aa257ff41433a0b519c3fb8ec1cad914e19a4e01c2442415b20a3c70c5bc99e107e8e4c8904828b187218b9bc6d3912c48a40ed51ad3106c15caaadcdb940f96a816f25db1e86dd6290a396f89160b03d1102902f977e9131ac5664ac13809bcea4eb3c2f6d7236c96e507e11125eb65e2e9305b"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

1.909318046s ago: executing program 4:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1})

1.848568551s ago: executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0)

1.734643808s ago: executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001c40)='batadv0\x00', 0x10)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', '', [], 0xa, "6d18dccb2fc7b68dfee2459853e969589c244cdeb83b"}, 0x1a)

1.629099901s ago: executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

1.57806832s ago: executing program 3:
fanotify_init(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x8401)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
syz_emit_ethernet(0x189, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x153, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x21}, {}, {}]}}}}}}, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r5, r6, 0x0, 0xf2a)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

1.337103438s ago: executing program 0:
close(0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffe6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5})
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
write$cgroup_int(r2, &(0x7f0000000200), 0x42400)

1.298599259s ago: executing program 4:
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="3a8d75a267b001234a1e919d26dfdd0d8b316510e9c9cf606c6db6505304ee2649c88f03f9ef98bcebc5d721a7081b3509e543147eec5a0fa6d6eb57eed4197249efe6fa10323b6cf959897b3f1908c82c14974d31b0d080f8c86c196c0ee8eb707a73d201bbe15a02a37118aa1d4aaa4d2484b05dbb73e44387f620f46a3a2e06436e6296b05bd07717accf667e0331c0f323a7529f6b471ec30340347d3f405257c8bad57ddef290ea1d376a20", @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES64, @ANYRESDEC], 0x81, 0x151a, &(0x7f0000002a80)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=")
syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@nogrpid}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000880)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000007c0))

411.933626ms ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4)

267.901773ms ago: executing program 0:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x20, 0x2}, @cond})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778)

244.987253ms ago: executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0)

140.120249ms ago: executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x250, &(0x7f0000002680)="$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")

68.466865ms ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000e32f00320002030000000000000000000002000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)

0s ago: executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0)

kernel console output (not intermixed with test programs):

 32
[  204.525540][ T5160] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  204.551288][ T5160] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  204.593415][ T5199] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  204.593414][ T5160] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  204.639442][ T5160] usb 2-1: config 1 has no interface number 0
[  204.646892][ T5160] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  204.665865][ T5160] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  204.690030][ T5160] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  204.707222][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.731966][ T5160] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  204.796800][ T5199] usb 3-1: Using ep0 maxpacket: 16
[  204.815989][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.838858][ T5199] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  204.863790][ T5199] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  204.872896][ T5199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.902793][ T5199] usb 3-1: config 0 descriptor??
[  204.960841][ T7920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.008694][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  205.029490][ T7920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.047918][ T5160] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  205.130959][ T7923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.188470][ T7926] loop3: detected capacity change from 0 to 256
[  205.215757][ T5199] usbhid 3-1:0.0: can't add hid device: -71
[  205.221962][ T5199] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  205.232614][ T7926] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  205.263856][ T5199] usb 3-1: USB disconnect, device number 10
[  205.744293][   T25] usb 2-1: USB disconnect, device number 5
[  205.782410][   T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  206.010873][ T7944] Cannot find set identified by id 0 to match
[  206.453595][ T7965] fuse: Bad value for 'fd'
[  206.468906][ T7965] trusted_key: encrypted_key: keyword 'n' not recognized
[  206.562467][ T7965] loop3: detected capacity change from 0 to 1024
[  206.583954][   T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  206.760441][ T7965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.967515][ T7965] EXT4-fs error (device loop3): ext4_xattr_ibody_get:653: inode #2: comm syz-executor.3: corrupted in-inode xattr: bad e_name length
[  206.992134][ T7965] EXT4-fs (loop3): Remounting filesystem read-only
[  207.333292][   T25] usb 3-1: Using ep0 maxpacket: 8
[  207.354396][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.413989][   T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=8f.8b
[  207.444011][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.468637][   T25] usb 3-1: config 0 descriptor??
[  207.568185][ T7919] loop4: detected capacity change from 0 to 32768
[  207.665823][ T7919] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  207.725804][ T7382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.743495][   T12] __quota_error: 67 callbacks suppressed
[  207.743515][   T12] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  207.784690][ T5160] usb 3-1: USB disconnect, device number 11
[  207.811143][   T12] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  208.057210][ T7919] XFS (loop4): Ending clean mount
[  208.134188][ T7320] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  208.206693][   T29] audit: type=1800 audit(1716887319.730:465): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1949 res=0 errno=0
[  208.453669][ T7963] loop1: detected capacity change from 0 to 32768
[  208.477282][   T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  208.487905][   T52] Bluetooth: hci2: Injecting HCI hardware error event
[  208.501222][   T52] Bluetooth: hci2: hardware error 0x00
[  208.631324][ T7986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.731225][ T7986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.864497][ T7987] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  208.967771][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.040927][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  209.056910][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  209.067682][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  209.082034][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  209.095646][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  209.103330][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  209.200667][ T7994] vxcan1 speed is unknown, defaulting to 1000
[  209.507578][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.535841][ T8005] loop1: detected capacity change from 0 to 2048
[  209.765386][ T8005] Cannot find set identified by id 0 to match
[  209.768492][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.907631][ T8007] loop2: detected capacity change from 0 to 8192
[  209.942419][ T8007] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  209.964302][ T8015] loop1: detected capacity change from 0 to 21
[  209.972325][ T8007] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  209.997461][ T8015] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  210.009102][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.026242][ T8007] REISERFS (device loop2): using ordered data mode
[  210.033453][ T5204] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  210.049901][ T8007] reiserfs: using flush barriers
[  210.070757][ T8007] REISERFS warning (device loop2): sh-458 journal_init_dev: cannot init journal device unknown-block(7,2): -16
[  210.143459][ T8007] REISERFS warning (device loop2): sh-462 journal_init: unable to initialize journal device
[  210.182974][ T8007] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  210.233303][ T5204] usb 5-1: Using ep0 maxpacket: 32
[  210.283760][ T5204] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  210.292197][ T5204] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  210.302020][ T5204] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  210.311362][ T5204] usb 5-1: config 1 has no interface number 0
[  210.332435][ T8022] loop1: detected capacity change from 0 to 1024
[  210.339197][ T5204] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  210.341538][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.351476][ T5204] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  210.414250][ T5204] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  210.435649][ T5204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.537346][ T5204] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  210.588088][ T7994] chnl_net:caif_netlink_parms(): no params data found
[  210.628689][ T8025] loop2: detected capacity change from 0 to 512
[  210.703378][   T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  210.710337][ T8025] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 4
[  210.730017][ T8025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.780031][ T8029] loop1: detected capacity change from 0 to 256
[  210.836393][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  210.856878][ T8029] FAT-fs (loop1): Unrecognized mount option "fmask=0177777777777777600000" or missing value
[  210.917856][ T5204] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  210.991927][ T8029] loop1: detected capacity change from 0 to 1024
[  210.998985][ T8025] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 3: invalid block bitmap
[  211.188384][   T52] Bluetooth: hci4: command tx timeout
[  211.202888][ T8035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.219156][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.274440][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.281801][ T7994] bridge_slave_0: entered allmulticast mode
[  211.357662][ T7994] bridge_slave_0: entered promiscuous mode
[  211.370523][   T12] bridge_slave_1: left allmulticast mode
[  211.407539][   T12] bridge_slave_1: left promiscuous mode
[  211.428035][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.470480][   T12] bridge_slave_0: left allmulticast mode
[  211.478947][   T12] bridge_slave_0: left promiscuous mode
[  211.498589][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.503775][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  211.754484][ T5160] usb 5-1: USB disconnect, device number 4
[  211.776259][ T7204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.790199][ T5160] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  212.799264][ T8053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.872772][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.902245][ T8053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.920253][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.948640][   T12] bond0 (unregistering): Released all slaves
[  213.013404][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.020643][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.033675][ T7994] bridge_slave_1: entered allmulticast mode
[  213.041094][ T7994] bridge_slave_1: entered promiscuous mode
[  213.078257][ T8053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.155009][ T8042] loop1: detected capacity change from 0 to 32768
[  213.245923][ T8042] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  213.265706][   T52] Bluetooth: hci4: command tx timeout
[  213.269003][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.287705][ T8042] dlm: no local IP address has been set
[  213.305063][ T8059] loop2: detected capacity change from 0 to 128
[  213.323998][ T8042] dlm: cannot start dlm midcomms -107
[  213.325199][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.329439][ T8042] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  213.353819][ T8059] VFS: unable to find oldfs superblock on device loop2
[  213.638966][ T7994] team0: Port device team_slave_0 added
[  213.757207][ T8065] fuse: Bad value for 'fd'
[  213.825193][ T8065] trusted_key: encrypted_key: keyword 'n' not recognized
[  214.223754][ T7994] team0: Port device team_slave_1 added
[  214.346899][ T8065] loop2: detected capacity change from 0 to 1024
[  214.676302][ T8065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.774615][ T8065] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #2: comm syz-executor.2: corrupted in-inode xattr: bad e_name length
[  214.830920][ T8065] EXT4-fs (loop2): Remounting filesystem read-only
[  214.890316][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  214.967814][ T8073] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  215.009857][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.036090][ T8072] loop1: detected capacity change from 0 to 128
[  215.036291][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.101056][ T8072] VFS: unable to find oldfs superblock on device loop1
[  215.135164][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.232539][   T12] hsr_slave_0: left promiscuous mode
[  215.264824][   T12] hsr_slave_1: left promiscuous mode
[  215.309690][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.336368][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.345019][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.354286][   T52] Bluetooth: hci4: command tx timeout
[  215.354523][ T8082] Zero length message leads to an empty skb
[  215.372309][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.420591][   T12] veth1_macvtap: left promiscuous mode
[  215.430008][   T12] veth0_macvtap: left promiscuous mode
[  215.436039][   T12] veth1_vlan: left promiscuous mode
[  215.458575][ T8085] loop1: detected capacity change from 0 to 512
[  215.465432][   T12] veth0_vlan: left promiscuous mode
[  215.489649][ T8085] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 4
[  215.528978][ T8085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.643581][ T8085] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 3: invalid block bitmap
[  215.794162][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  215.973277][    T8] usb 1-1: Using ep0 maxpacket: 32
[  216.000317][    T8] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  216.040924][    T8] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  216.076144][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  216.099379][    T8] usb 1-1: config 1 has no interface number 0
[  216.120225][    T8] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  216.157296][    T8] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  216.194899][    T8] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  216.229149][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.271044][    T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  216.524852][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  216.579413][    T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  216.693420][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  216.731609][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.960957][ T8077] loop4: detected capacity change from 0 to 32768
[  216.976251][ T8077] xfs: Unknown parameter 'uid>00000000000000000000'
[  217.208824][ T8095] loop1: detected capacity change from 0 to 4096
[  217.424881][   T52] Bluetooth: hci4: command tx timeout
[  217.430393][ T8095] ntfs3: loop1: failed to convert "0080" to cp437
[  217.463572][ T8095] ntfs3: loop1: failed to convert name for inode 1e.
[  217.547504][   T12] team0 (unregistering): Port device team_slave_1 removed
[  217.587762][    T8] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  217.752445][   T12] team0 (unregistering): Port device team_slave_0 removed
[  217.952912][   T29] audit: type=1800 audit(1716887329.480:466): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0
[  218.224178][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  218.246906][ T8074] loop4: detected capacity change from 0 to 4096
[  218.270558][ T8074] ntfs3: Bad value for 'uid'
[  218.914093][   T29] audit: type=1800 audit(1716887330.440:467): pid=8109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1958 res=0 errno=0
[  218.936010][    C1] vkms_vblank_simulate: vblank timer overrun
[  218.957941][ T8107] loop1: detected capacity change from 0 to 2048
[  218.979041][ T8107] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576
[  218.989683][   T29] audit: type=1804 audit(1716887330.450:468): pid=8109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir624436813/syzkaller.vrdxhZ/14/memory.events" dev="sda1" ino=1958 res=1 errno=0
[  219.054497][ T8107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.611462][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.643705][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.697776][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.878922][ T5162] usb 1-1: USB disconnect, device number 7
[  219.909921][ T5162] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  219.955226][ T7204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.965701][ T7994] hsr_slave_0: entered promiscuous mode
[  219.986046][   T11] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  220.002781][ T7994] hsr_slave_1: entered promiscuous mode
[  220.023492][   T11] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  220.036078][ T7994] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.062421][ T7994] Cannot create hsr debugfs directory
[  220.122936][ T8112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.275204][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.362345][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.589403][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.729341][ T5110] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  220.740426][ T5110] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  220.761635][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.014799][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.041729][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.056882][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.071406][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.079902][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.089536][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  221.097347][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.242423][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.279728][ T8117] vxcan1 speed is unknown, defaulting to 1000
[  222.540563][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  222.553346][   T12] bridge_slave_1: left allmulticast mode
[  222.559023][   T12] bridge_slave_1: left promiscuous mode
[  222.565871][ T8126] syz-executor.0 (pid 8126) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  222.584868][ T8126] mmap: syz-executor.0 (8126) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  222.623536][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.677809][   T12] bridge_slave_0: left allmulticast mode
[  222.683753][   T12] bridge_slave_0: left promiscuous mode
[  222.689546][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.942624][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  222.957272][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  222.974911][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  222.986759][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  222.994736][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  223.002090][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  223.188030][   T52] Bluetooth: hci1: command tx timeout
[  223.988715][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.011889][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.032855][   T12] bond0 (unregistering): Released all slaves
[  224.213289][ T5199] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  224.310558][ T7994] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  224.326738][ T8132] vxcan1 speed is unknown, defaulting to 1000
[  224.374681][ T7994] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  224.403365][ T5199] usb 1-1: Using ep0 maxpacket: 32
[  224.421852][ T7994] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  224.454987][ T5199] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  224.483441][ T5199] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  224.513357][ T5199] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  224.516239][ T7994] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  224.522502][ T5199] usb 1-1: config 1 has no interface number 0
[  224.522561][ T5199] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  224.583313][ T5199] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  224.631109][ T5199] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  224.669924][ T5199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.746076][ T5199] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  224.985840][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  225.102549][ T5199] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  225.110872][   T52] Bluetooth: hci3: command tx timeout
[  225.117300][ T8117] chnl_net:caif_netlink_parms(): no params data found
[  225.229264][   T12] hsr_slave_0: left promiscuous mode
[  225.236507][   T12] hsr_slave_1: left promiscuous mode
[  225.242714][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.250517][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.259000][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.278399][   T52] Bluetooth: hci1: command tx timeout
[  225.278421][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.339900][   T12] veth1_macvtap: left promiscuous mode
[  225.345935][   T12] veth0_macvtap: left promiscuous mode
[  225.369350][   T12] veth1_vlan: left promiscuous mode
[  225.389016][   T12] veth0_vlan: left promiscuous mode
[  226.143386][ T5204] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  226.981053][   T12] team0 (unregistering): Port device team_slave_1 removed
[  227.087980][   T12] team0 (unregistering): Port device team_slave_0 removed
[  227.183522][   T52] Bluetooth: hci3: command tx timeout
[  227.353029][   T52] Bluetooth: hci1: command tx timeout
[  227.533958][ T5199] usb 1-1: USB disconnect, device number 8
[  227.541109][ T5199] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  228.800240][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.835680][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.843383][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.850607][ T8117] bridge_slave_0: entered allmulticast mode
[  228.887456][ T8117] bridge_slave_0: entered promiscuous mode
[  228.915824][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.923149][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.946739][ T8117] bridge_slave_1: entered allmulticast mode
[  228.967334][ T8117] bridge_slave_1: entered promiscuous mode
[  229.180799][ T8132] chnl_net:caif_netlink_parms(): no params data found
[  229.216428][ T8117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.240951][ T8117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.265092][   T52] Bluetooth: hci3: command tx timeout
[  229.327894][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  229.377726][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.423565][   T52] Bluetooth: hci1: command tx timeout
[  229.443627][ T8117] team0: Port device team_slave_0 added
[  229.463934][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.484174][ T7994] 8021q: adding VLAN 0 to HW filter on device team0
[  229.525973][ T8117] team0: Port device team_slave_1 added
[  229.608204][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.615431][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.660671][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.683402][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.690637][ T8132] bridge_slave_0: entered allmulticast mode
[  229.706205][ T8132] bridge_slave_0: entered promiscuous mode
[  229.726952][ T8117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.742991][ T8117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.773656][ T8117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.906081][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.948913][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.956147][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.974769][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.981940][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.006460][ T8132] bridge_slave_1: entered allmulticast mode
[  230.018499][ T8132] bridge_slave_1: entered promiscuous mode
[  230.050548][ T8117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.058114][ T8117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.085673][ T8117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.169497][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.249291][ T8132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.277104][ T8132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.352811][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.542317][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.582135][ T8132] team0: Port device team_slave_0 added
[  230.614699][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.678369][ T8132] team0: Port device team_slave_1 added
[  230.727017][ T8117] hsr_slave_0: entered promiscuous mode
[  230.735124][ T8117] hsr_slave_1: entered promiscuous mode
[  230.741732][ T8117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  230.750605][ T8117] Cannot create hsr debugfs directory
[  230.852209][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.860057][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.887635][ T8132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.928680][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.943731][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.988209][ T8132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.190352][   T12] bridge_slave_1: left allmulticast mode
[  231.197661][   T12] bridge_slave_1: left promiscuous mode
[  231.203853][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.236018][   T12] bridge_slave_0: left allmulticast mode
[  231.241709][   T12] bridge_slave_0: left promiscuous mode
[  231.253576][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.346908][   T52] Bluetooth: hci3: command tx timeout
[  231.437162][ T8173] mmap: syz-executor.0 (8173): VmData 37380096 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  231.671710][ T8177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.792361][ T8178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.856300][ T8177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.988280][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.000326][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.011975][   T12] bond0 (unregistering): Released all slaves
[  232.052258][ T8132] hsr_slave_0: entered promiscuous mode
[  232.070045][ T8132] hsr_slave_1: entered promiscuous mode
[  232.096308][ T8132] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  232.123444][ T8132] Cannot create hsr debugfs directory
[  232.226886][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.757946][ T7994] veth0_vlan: entered promiscuous mode
[  232.931349][   T12] hsr_slave_0: left promiscuous mode
[  232.962288][   T12] hsr_slave_1: left promiscuous mode
[  232.974222][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.981763][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.005012][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.012564][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.069121][   T12] veth1_macvtap: left promiscuous mode
[  233.093411][   T12] veth0_macvtap: left promiscuous mode
[  233.100040][   T12] veth1_vlan: left promiscuous mode
[  233.113657][   T12] veth0_vlan: left promiscuous mode
[  233.302306][   T12] infiniband syz2: set down
[  234.419130][   T12] team0 (unregistering): Port device team_slave_1 removed
[  234.572889][   T12] team0 (unregistering): Port device team_slave_0 removed
[  235.229968][   T50] smc: removing ib device syz2
[  236.065165][ T8197] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  236.459706][ T7994] veth1_vlan: entered promiscuous mode
[  236.485469][   T29] audit: type=1326 audit(1716887347.990:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  236.514526][    T8] vxcan1 speed is unknown, defaulting to 1000
[  236.517970][   T29] audit: type=1326 audit(1716887347.990:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  236.545631][   T29] audit: type=1326 audit(1716887347.990:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  236.644799][   T29] audit: type=1326 audit(1716887348.000:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  236.723647][   T29] audit: type=1326 audit(1716887348.000:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  236.784028][   T29] audit: type=1326 audit(1716887348.000:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  236.801939][ T7994] veth0_macvtap: entered promiscuous mode
[  236.830733][   T29] audit: type=1326 audit(1716887348.000:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  236.867823][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  237.000972][ T7994] veth1_macvtap: entered promiscuous mode
[  237.141699][ T8117] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  237.327070][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  237.487842][ T8117] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  237.559005][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.584708][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.600891][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.612812][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.622983][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.636149][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.648041][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.656785][ T8117] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  237.695655][ T8117] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  237.717537][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.748673][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.765097][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.783515][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.800517][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.812343][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.825577][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.863798][ T7994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.878929][ T7994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.889839][ T7994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.898992][ T7994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.136303][   T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.173242][   T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.268543][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.288026][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.301490][ T8117] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.312955][ T8132] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  238.335922][ T8132] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  238.381031][ T8132] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  238.418639][ T8117] 8021q: adding VLAN 0 to HW filter on device team0
[  238.442790][ T8132] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  238.466562][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.470663][ T8212] loop3: detected capacity change from 0 to 16
[  238.473763][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.481287][ T8212] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  238.533757][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.541022][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.573642][ T8212] vivid-006: disconnect
[  238.591862][ T8211] vivid-006: reconnect
[  238.787765][ T8132] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.841379][ T8132] 8021q: adding VLAN 0 to HW filter on device team0
[  238.869087][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.876346][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.919828][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.927057][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.173759][ T8117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.289071][ T8117] veth0_vlan: entered promiscuous mode
[  239.331029][ T8117] veth1_vlan: entered promiscuous mode
[  239.488985][ T8117] veth0_macvtap: entered promiscuous mode
[  239.524072][ T8117] veth1_macvtap: entered promiscuous mode
[  239.600632][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.631806][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.661684][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.685988][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.706635][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.728489][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.752516][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.783099][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.807161][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.866888][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.914688][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.936234][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.961621][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.981730][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.997536][ T8231] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  240.005116][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.023670][ T8219] loop3: detected capacity change from 0 to 32768
[  240.030325][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.043398][ T8219] (syz-executor.3,8219,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options
[  240.053830][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.073393][ T8219] (syz-executor.3,8219,0):ocfs2_fill_super:1176 ERROR: status = -22
[  240.095313][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.118404][ T8117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.131213][ T8117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.158898][ T8117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.180771][ T8117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.315992][ T8132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.419563][ T8231] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)"
[  240.463563][   T29] audit: type=1800 audit(1716887351.990:476): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1960 res=0 errno=0
[  240.596407][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.614960][ T8132] veth0_vlan: entered promiscuous mode
[  240.633740][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.704481][   T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.741379][   T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.973311][ T8132] veth1_vlan: entered promiscuous mode
[  241.547191][ T8132] veth0_macvtap: entered promiscuous mode
[  241.565746][ T8132] veth1_macvtap: entered promiscuous mode
[  241.589925][ T8252] xt_limit: Overflow, try lower: 0/0
[  241.643095][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.675988][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.688512][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.703588][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.714467][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.725756][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.740938][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.763074][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.781709][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.807743][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.828352][ T8132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.906694][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.943501][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.982458][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.001903][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.062066][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.108052][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.144141][ T8269] loop2: detected capacity change from 0 to 256
[  242.150078][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.182834][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.222678][ T8269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  242.223745][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.303651][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.317593][ T8132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.350097][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  242.385160][ T8132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.412780][ T8132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.433286][ T8132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.448875][ T8132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.559589][   T29] audit: type=1326 audit(1716887354.090:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  242.639571][   T29] audit: type=1326 audit(1716887354.090:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  242.747176][   T29] audit: type=1326 audit(1716887354.110:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  242.810259][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.829881][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.858416][   T29] audit: type=1326 audit(1716887354.120:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  242.932368][   T29] audit: type=1326 audit(1716887354.120:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  242.955185][    C1] vkms_vblank_simulate: vblank timer overrun
[  243.001496][ T5164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.022978][ T5164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.053281][   T29] audit: type=1326 audit(1716887354.120:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  243.076238][    C1] vkms_vblank_simulate: vblank timer overrun
[  243.083454][ T8258] loop3: detected capacity change from 0 to 32768
[  243.119825][ T8258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8258)
[  243.182298][ T8258] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  243.203697][   T29] audit: type=1326 audit(1716887354.120:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  243.227642][    C1] vkms_vblank_simulate: vblank timer overrun
[  243.253418][ T8258] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  243.283321][ T8258] BTRFS info (device loop3): using free-space-tree
[  243.318595][   T29] audit: type=1326 audit(1716887354.120:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  243.341685][    C1] vkms_vblank_simulate: vblank timer overrun
[  243.420782][   T29] audit: type=1326 audit(1716887354.120:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  243.443994][    C1] vkms_vblank_simulate: vblank timer overrun
[  243.519389][   T29] audit: type=1326 audit(1716887354.120:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875bc7cee9 code=0x7ffc0000
[  244.716395][ T7994] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.174106][ T8304] pim6reg1: entered promiscuous mode
[  245.184210][ T8304] pim6reg1: entered allmulticast mode
[  247.540759][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  248.900714][ T8328] loop3: detected capacity change from 0 to 256
[  248.955290][ T8328] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  250.266947][ T8345] loop3: detected capacity change from 0 to 1024
[  250.389344][ T8345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.427226][ T8345] EXT4-fs error (device loop3): ext4_lookup:1858: inode #2: comm syz-executor.3: deleted inode referenced: 12
[  250.457464][ T8345] EXT4-fs (loop3): Remounting filesystem read-only
[  250.533371][ T7994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.614540][ T5123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  250.629482][ T5123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  250.646282][ T5123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  250.655804][ T5123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  250.663689][ T5123] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  250.673661][ T5123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  250.987900][ T8355] chnl_net:caif_netlink_parms(): no params data found
[  251.032290][ T8374] loop3: detected capacity change from 0 to 256
[  251.118943][ T8374] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  251.325810][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.372104][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.414289][ T8355] bridge_slave_0: entered allmulticast mode
[  251.422144][ T8355] bridge_slave_0: entered promiscuous mode
[  251.464330][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.471524][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.516580][ T8355] bridge_slave_1: entered allmulticast mode
[  251.548177][ T8355] bridge_slave_1: entered promiscuous mode
[  251.621543][ T8392] loop1: detected capacity change from 0 to 1024
[  251.702956][ T8355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.728045][ T8355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.764652][ T8392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.884660][ T8392] EXT4-fs error (device loop1): ext4_lookup:1858: inode #2: comm syz-executor.1: deleted inode referenced: 12
[  251.916333][ T8392] EXT4-fs (loop1): Remounting filesystem read-only
[  252.024935][ T8132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.027703][ T8355] team0: Port device team_slave_0 added
[  252.514583][ T8355] team0: Port device team_slave_1 added
[  252.785277][   T52] Bluetooth: hci6: command tx timeout
[  252.855413][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.876118][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.933321][ T8355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.982916][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.005889][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.048676][ T8355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.075045][ T8419] loop2: detected capacity change from 0 to 256
[  253.127363][ T8355] hsr_slave_0: entered promiscuous mode
[  253.136933][ T8419] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  253.157612][ T5204] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  253.167273][ T8355] hsr_slave_1: entered promiscuous mode
[  253.193491][ T8355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.215707][ T8355] Cannot create hsr debugfs directory
[  253.393317][ T5204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.433422][ T5204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.448897][ T5204] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  253.471614][ T5204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.505899][ T5204] usb 2-1: config 0 descriptor??
[  253.952637][ T8355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.318522][ T5204] usbhid 2-1:0.0: can't add hid device: -71
[  254.480395][ T5204] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  254.667507][ T5204] usb 2-1: USB disconnect, device number 6
[  254.845942][ T8355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.873456][   T52] Bluetooth: hci6: command tx timeout
[  254.919896][ T8465] loop3: detected capacity change from 0 to 256
[  254.973902][ T8465] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  255.036996][ T8355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.235954][ T8355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.328224][ T8474] overlayfs: missing 'lowerdir'
[  255.533330][ T5160] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  255.568859][ T8355] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  255.598871][ T8355] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  255.618717][ T8355] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  255.715920][ T8355] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  255.733973][ T5204] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  255.763379][ T5160] usb 2-1: Using ep0 maxpacket: 32
[  255.788413][ T5160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  255.832780][ T5160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  255.866453][ T5160] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  255.903864][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.920089][ T5160] usb 2-1: config 0 descriptor??
[  255.950127][ T8472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  255.964485][ T5204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.004728][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  256.012129][ T5204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.012741][ T5160] hub 2-1:0.0: USB hub found
[  256.026907][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  256.029857][ T5204] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  256.094667][ T5204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.111677][ T8355] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.134313][ T5204] usb 4-1: config 0 descriptor??
[  256.210041][ T8355] 8021q: adding VLAN 0 to HW filter on device team0
[  256.217983][ T5160] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  256.277463][ T5160] usbhid 2-1:0.0: can't add hid device: -71
[  256.280885][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.290843][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.293427][ T5160] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  256.377544][ T5160] usb 2-1: USB disconnect, device number 7
[  256.406395][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.413622][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.559914][ T5204] hid (null): bogus close delimiter
[  256.649477][ T8496] loop2: detected capacity change from 0 to 8192
[  256.697644][ T8355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  256.764632][ T5204] usb 4-1: language id specifier not provided by device, defaulting to English
[  256.806742][ T8355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  256.945260][   T52] Bluetooth: hci6: command tx timeout
[  256.978952][ T8502] loop1: detected capacity change from 0 to 256
[  257.009058][ T8502] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  257.292022][ T8505] overlayfs: missing 'lowerdir'
[  257.333798][ T8508] Bluetooth: MGMT ver 1.23
[  257.377831][ T5204] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71
[  257.402374][ T5204] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71
[  257.433375][ T5204] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71
[  257.465845][ T5204] uclogic 0003:256C:006D.0008: failed probing parameters: -71
[  257.502847][ T5204] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71
[  257.549585][ T5204] usb 4-1: USB disconnect, device number 4
[  257.620451][ T8518] loop1: detected capacity change from 0 to 128
[  257.673063][ T8518] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  257.689425][ T8355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.709288][ T8518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.996422][ T8531] loop1: detected capacity change from 0 to 256
[  258.111516][ T8531] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d)
[  258.542016][ T8355] veth0_vlan: entered promiscuous mode
[  258.587435][ T8355] veth1_vlan: entered promiscuous mode
[  258.717318][ T8355] veth0_macvtap: entered promiscuous mode
[  258.756130][ T8355] veth1_macvtap: entered promiscuous mode
[  258.841579][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.879122][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.914216][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.947650][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.976754][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.007939][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.023432][   T52] Bluetooth: hci6: command tx timeout
[  259.052296][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.075720][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.091824][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.104998][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.117554][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.128118][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.140979][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.169404][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.223617][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.239363][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.243398][ T5204] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  259.253134][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.278547][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.292101][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.316081][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.330030][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.344484][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.359581][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.372996][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.388370][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.404833][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.436461][ T8355] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.466463][ T5204] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  259.479213][ T5204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.493512][ T8355] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.502294][ T8355] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.522011][ T5204] usb 1-1: config 0 descriptor??
[  259.528395][ T8355] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.539331][ T8564] loop2: detected capacity change from 0 to 512
[  259.550322][ T5204] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7
[  259.565477][ T8564] EXT4-fs: Ignoring removed mblk_io_submit option
[  259.595379][ T8564] EXT4-fs (loop2): Test dummy encryption mode enabled
[  259.657717][ T8564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0102]
[  259.703481][ T8564] System zones: 1-12
[  259.746083][ T5204] usb 1-1: USB disconnect, device number 9
[  259.767691][ T8564] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature
[  259.824013][ T8564] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  259.849608][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.871853][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.874212][ T8564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.964255][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.972138][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.046878][ T8117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.451824][ T8580] loop3: detected capacity change from 0 to 256
[  260.495281][ T8580] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  260.998969][ T8596] loop4: detected capacity change from 0 to 256
[  261.049385][ T8598] loop3: detected capacity change from 0 to 256
[  261.070442][ T8596] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  261.089990][ T8598] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value
[  261.202644][ T8598] loop3: detected capacity change from 0 to 1024
[  261.219574][ T8598] EXT4-fs: Ignoring removed orlov option
[  261.254757][ T8598] EXT4-fs (loop3): Test dummy encryption mode enabled
[  261.277130][ T8598] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  261.318388][ T8598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.513907][ T8603] syz-executor.4: attempt to access beyond end of device
[  261.513907][ T8603] loop4: rw=524288, sector=280, nr_sectors = 128 limit=256
[  261.650008][ T8603] syz-executor.4: attempt to access beyond end of device
[  261.650008][ T8603] loop4: rw=524288, sector=408, nr_sectors = 256 limit=256
[  261.784690][ T8603] syz-executor.4: attempt to access beyond end of device
[  261.784690][ T8603] loop4: rw=0, sector=280, nr_sectors = 8 limit=256
[  261.831322][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  261.831340][   T29] audit: type=1800 audit(1716887373.360:488): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=1048741 res=0 errno=0
[  262.463868][   T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  262.505270][ T8615] loop4: detected capacity change from 0 to 256
[  262.594800][ T8615] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  262.705053][   T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  262.727712][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.765555][   T25] usb 3-1: config 0 descriptor??
[  262.800212][   T25] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  263.049817][   T25] usb 3-1: USB disconnect, device number 12
[  263.433866][ T5204] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  263.565872][ T7994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.643288][ T5204] usb 5-1: Using ep0 maxpacket: 32
[  263.670035][ T5204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  263.737932][ T5204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  263.794321][ T5204] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  263.822870][ T5204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.862114][ T5204] usb 5-1: config 0 descriptor??
[  263.886019][ T8617] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  263.931238][ T5204] hub 5-1:0.0: USB hub found
[  264.050531][ T8632] loop3: detected capacity change from 0 to 256
[  264.119382][ T8632] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  264.219394][ T5204] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  264.334734][ T8632] syz-executor.3: attempt to access beyond end of device
[  264.334734][ T8632] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256
[  264.375353][ T8632] syz-executor.3: attempt to access beyond end of device
[  264.375353][ T8632] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256
[  264.458137][ T8632] syz-executor.3: attempt to access beyond end of device
[  264.458137][ T8632] loop3: rw=0, sector=280, nr_sectors = 8 limit=256
[  264.458414][ T5204] usbhid 5-1:0.0: can't add hid device: -71
[  264.513826][ T5204] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  264.533362][   T29] audit: type=1800 audit(1716887376.050:489): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=1048743 res=0 errno=0
[  264.564850][ T5204] usb 5-1: USB disconnect, device number 5
[  265.159741][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  265.207155][ T8649] vlan2: entered promiscuous mode
[  265.230151][ T8649] team0: entered promiscuous mode
[  265.249291][ T8649] team_slave_0: entered promiscuous mode
[  265.261798][ T8652] loop1: detected capacity change from 0 to 256
[  265.282136][ T8649] team_slave_1: entered promiscuous mode
[  265.298353][ T8652] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  265.319995][ T8649] team0: left promiscuous mode
[  265.342750][ T8649] team_slave_0: left promiscuous mode
[  265.363799][ T8649] team_slave_1: left promiscuous mode
[  265.434293][ T8654] loop4: detected capacity change from 0 to 256
[  265.508277][ T8652] loop1: detected capacity change from 0 to 1024
[  265.527017][ T8654] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  265.548773][ T8652] EXT4-fs: Ignoring removed orlov option
[  265.576477][ T8652] EXT4-fs (loop1): Test dummy encryption mode enabled
[  265.592545][ T8652] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  265.640039][ T8652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.915839][ T8654] VFS: Lookup of 'file0' in exfat loop4 would have caused loop
[  266.331350][ T8669] loop2: detected capacity change from 0 to 256
[  266.423316][ T8669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  267.253445][    T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  267.473395][    T8] usb 5-1: Using ep0 maxpacket: 32
[  267.508534][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  267.531209][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  267.563904][    T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  267.594120][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.627440][    T8] usb 5-1: config 0 descriptor??
[  267.644486][ T8683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  267.661345][    T8] hub 5-1:0.0: USB hub found
[  267.717989][ T8692] input: syz0 as /devices/virtual/input/input9
[  267.759970][ T8132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.894818][    T8] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  268.009812][ T8699] loop2: detected capacity change from 0 to 128
[  268.055870][ T8699] VFS: Found a Xenix FS (block size = 512) on device loop2
[  268.081885][ T8699] sysv_free_block: trying to free block not in datazone
[  268.124321][ T8699] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  268.154773][    T8] usbhid 5-1:0.0: can't add hid device: -71
[  268.162880][ T8702] loop3: detected capacity change from 0 to 256
[  268.181945][    T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  268.225290][ T8704] loop1: detected capacity change from 0 to 256
[  268.229470][    T8] usb 5-1: USB disconnect, device number 6
[  268.246781][ T8704] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  268.269351][ T8702] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  268.375201][ T8704] loop1: detected capacity change from 0 to 1024
[  268.391480][ T8704] EXT4-fs: Ignoring removed orlov option
[  268.419250][ T8704] EXT4-fs (loop1): Test dummy encryption mode enabled
[  268.446686][ T8704] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  268.495825][ T8704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.874700][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  268.937532][ T8723] loop3: detected capacity change from 0 to 256
[  268.982491][ T8723] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value
[  269.088439][ T8723] loop3: detected capacity change from 0 to 1024
[  269.115850][ T8723] EXT4-fs: Ignoring removed orlov option
[  269.126535][ T8723] EXT4-fs (loop3): Test dummy encryption mode enabled
[  269.136373][ T8723] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  269.203144][ T8723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.611403][ T8740] loop4: detected capacity change from 0 to 256
[  269.709840][ T8740] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  269.727404][ T8743] loop2: detected capacity change from 0 to 1024
[  269.818740][ T8743] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  269.846206][ T8743] hfsplus: xattr searching failed
[  269.865773][ T8746] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  269.882906][ T8746] hfsplus: xattr searching failed
[  269.894573][ T8743] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  269.902333][ T8743] hfsplus: xattr searching failed
[  269.933683][ T8743] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  269.949061][ T8743] hfsplus: xattr searching failed
[  270.426803][ T8751] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  270.616681][ T8758] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  270.662331][ T8132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.716182][   T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  270.934700][   T25] usb 1-1: Using ep0 maxpacket: 32
[  270.967239][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  270.978585][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  270.998910][   T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  271.009379][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.029205][   T25] usb 1-1: config 0 descriptor??
[  271.035030][ T8755] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  271.060110][   T25] hub 1-1:0.0: USB hub found
[  271.307556][   T25] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  271.325331][ T7994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.577192][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  271.593630][   T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  271.668810][   T25] usb 1-1: USB disconnect, device number 10
[  271.936004][ T8779] loop2: detected capacity change from 0 to 32768
[  271.980014][ T8779] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  272.052430][ T8779] XFS (loop2): Ending clean mount
[  272.069116][ T8779] XFS (loop2): Quotacheck needed: Please wait.
[  272.084951][ T5200] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  272.127577][ T5200] XFS (loop2): Unmount and run xfs_repair
[  272.167493][ T5200] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  272.181903][ T5200] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  272.219258][ T5200] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  272.256395][ T5200] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  272.296462][ T5200] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  272.317940][ T5200] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  272.338732][ T5200] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  272.371588][ T5200] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  272.396131][ T5200] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  272.437893][ T1045] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  272.476159][ T8813] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  272.526369][ T8779] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  272.638504][ T8117] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  272.691987][ T8117] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  272.736214][    T8] IPVS: starting estimator thread 0...
[  272.887015][ T8822] IPVS: using max 18 ests per chain, 43200 per kthread
[  273.003419][ T8827] ipvlan2: entered promiscuous mode
[  273.019255][ T8827] ipvlan2: entered allmulticast mode
[  273.043487][ T8827] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode
[  273.419229][ T8842] sctp: [Deprecated]: syz-executor.4 (pid 8842) Use of int in max_burst socket option deprecated.
[  273.419229][ T8842] Use struct sctp_assoc_value instead
[  273.560474][ T8818] loop1: detected capacity change from 0 to 32768
[  273.710986][ T8861] 9pnet_virtio: no channels available for device syz
[  273.731625][ T8818] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[  273.813336][ T8818] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  273.909943][ T8818] bcachefs (loop1): alloc_read... done
[  273.925609][ T8818] bcachefs (loop1): stripes_read... done
[  273.931368][ T8818] bcachefs (loop1): snapshots_read... done
[  273.968524][ T8818] bcachefs (loop1): journal_replay... done
[  273.993311][ T8818] bcachefs (loop1): resume_logged_ops... done
[  273.999585][ T8818] bcachefs (loop1): going read-write
[  274.036864][ T8818] bcachefs (loop1): done starting filesystem
[  274.210794][ T8886] loop2: detected capacity change from 0 to 64
[  274.249145][ T8886] Trying to free block not in datazone
[  274.296092][ T8132] bcachefs (loop1): shutting down
[  274.304405][ T8886] Trying to free block not in datazone
[  274.311175][ T8132] bcachefs (loop1): going read-only
[  274.319974][ T8132] bcachefs (loop1): finished waiting for writes to stop
[  274.327687][ T8886] Trying to free block not in datazone
[  274.337691][ T8132] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[  274.341870][ T8886] Trying to free block not in datazone
[  274.404432][ T8132] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13
[  274.452886][ T8132] bcachefs (loop1): shutdown complete, journal seq 14
[  274.476022][ T8132] bcachefs (loop1): marking filesystem clean
[  274.581076][ T8132] bcachefs (loop1): shutdown complete
[  275.666930][ T8911] rtc_cmos 00:00: Alarms can be up to one day in the future
[  276.018596][ T8917] loop2: detected capacity change from 0 to 32768
[  276.064423][ T8917] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  276.213403][ T8917] XFS (loop2): Ending clean mount
[  276.244527][ T8917] XFS (loop2): Quotacheck needed: Please wait.
[  276.286043][ T5204] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  276.335469][ T5204] XFS (loop2): Unmount and run xfs_repair
[  276.341331][ T5204] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  276.370619][ T5204] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  276.403062][ T5204] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  276.407518][ T5163] rtc_cmos 00:00: Alarms can be up to one day in the future
[  276.426851][ T5204] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  276.447340][ T5163] rtc_cmos 00:00: Alarms can be up to one day in the future
[  276.448886][ T5204] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  276.470088][ T5163] rtc_cmos 00:00: Alarms can be up to one day in the future
[  276.492092][ T5163] rtc_cmos 00:00: Alarms can be up to one day in the future
[  276.502479][ T5204] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  276.512203][ T5163] rtc rtc0: __rtc_set_alarm: err=-22
[  276.534112][ T5204] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  276.563429][ T5204] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  276.587783][ T5204] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  276.601522][ T1045] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  276.639141][ T8917] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  276.896990][ T5200] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  276.922471][ T5200] XFS (loop2): Unmount and run xfs_repair
[  276.962487][ T5200] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  276.970317][ T5200] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  276.979939][ T5200] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  276.989224][ T5200] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  276.998891][ T5200] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  277.008837][ T5200] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  277.018048][ T5200] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.060610][ T5200] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.094662][ T5200] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.120236][ T1045] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  277.148044][ T8947] sctp: [Deprecated]: syz-executor.1 (pid 8947) Use of int in max_burst socket option deprecated.
[  277.148044][ T8947] Use struct sctp_assoc_value instead
[  277.174334][ T1045] XFS (loop2): page discard on page ffffea00014e6dc0, inode 0x42b, pos 0.
[  277.209709][ T5163] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  277.244863][ T5163] XFS (loop2): Unmount and run xfs_repair
[  277.253540][ T5163] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  277.260968][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  277.293534][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  277.302806][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  277.341061][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  277.352967][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  277.371858][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.385927][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.403012][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.418068][ T1045] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  277.435260][ T1045] XFS (loop2): page discard on page ffffea00019cae80, inode 0x42c, pos 0.
[  277.465806][ T5163] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  277.487377][ T5163] XFS (loop2): Unmount and run xfs_repair
[  277.497877][ T5163] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  277.506927][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  277.518487][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  277.532760][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  277.559494][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  277.578311][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  277.588878][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.598203][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.607450][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.631935][ T1045] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  277.662104][ T1045] XFS (loop2): page discard on page ffffea00014e6e00, inode 0x42b, pos 4096.
[  277.687746][ T5200] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  277.710651][ T5200] XFS (loop2): Unmount and run xfs_repair
[  277.726619][ T5200] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  277.754604][ T5200] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  277.777876][ T5200] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  277.813274][ T5200] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  277.822183][ T5200] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  277.853290][ T5200] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  277.862209][ T5200] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.902846][ T5200] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.935671][ T5200] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  277.970501][ T1045] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  277.995717][ T1045] XFS (loop2): page discard on page ffffea00019caec0, inode 0x42c, pos 4096.
[  278.033672][ T8117] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  278.064627][ T8117] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  278.506183][ T8959] loop3: detected capacity change from 0 to 32768
[  278.520865][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  278.743389][ T8998] wg2: entered promiscuous mode
[  278.766675][ T8998] wg2: entered allmulticast mode
[  278.780209][ T8959] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,background_compression=zstd,str_hash=crc32c,nojournal_transaction_names
[  278.831330][ T8959] bcachefs (loop3): recovering from clean shutdown, journal seq 8
[  278.880060][ T8959] bcachefs (loop3): alloc_read... done
[  278.886997][ T8959] bcachefs (loop3): stripes_read... done
[  278.905749][ T8959] bcachefs (loop3): snapshots_read... done
[  278.932347][ T8959] bcachefs (loop3): journal_replay... done
[  278.954477][ T8959] bcachefs (loop3): resume_logged_ops... done
[  278.990350][ T8959] bcachefs (loop3): going read-write
[  278.999961][ T8959] bcachefs (loop3): done starting filesystem
[  279.194221][ T5163] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  279.219652][   T29] audit: type=1804 audit(1716887390.750:490): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir201940829/syzkaller.nAS3ag/61/bus/bus" dev="loop3" ino=1073741824 res=1 errno=0
[  279.269671][   T29] audit: type=1804 audit(1716887390.790:491): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir201940829/syzkaller.nAS3ag/61/bus/bus" dev="loop3" ino=1073741824 res=1 errno=0
[  279.291248][ T9017] loop1: detected capacity change from 0 to 2048
[  279.323558][ T9019] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.406770][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.424729][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.436947][ T5163] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  279.448251][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.459475][ T5163] usb 3-1: config 0 descriptor??
[  279.496786][ T7994] bcachefs (loop3): shutting down
[  279.506455][ T7994] bcachefs (loop3): going read-only
[  279.524527][ T7994] bcachefs (loop3): finished waiting for writes to stop
[  279.551917][ T7994] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10
[  279.569507][ T9019] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  279.594675][ T9019] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  279.604417][ T7994] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[  279.635266][ T9019] Remounting filesystem read-only
[  279.641611][   T35] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  279.656105][ T7994] bcachefs (loop3): shutdown complete, journal seq 12
[  279.663420][   T35] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  279.671854][ T7994] bcachefs (loop3): marking filesystem clean
[  279.684769][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  279.720302][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  279.744089][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  279.758476][   T35] NILFS (loop1): discard dirty page: offset=0, ino=3
[  279.765793][ T7994] bcachefs (loop3): shutdown complete
[  279.772353][   T35] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  279.785792][   T35] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  279.801890][   T35] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  279.816147][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  279.834816][   T35] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  279.851517][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  279.868766][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  279.882922][ T5163] hid (null): bogus close delimiter
[  279.923583][   T35] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  279.931077][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  279.963134][   T35] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  279.980056][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.003448][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.025801][   T35] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  280.053487][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.076000][   T35] NILFS (loop1): discard dirty page: offset=0, ino=5
[  280.091750][   T35] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  280.105454][ T5163] usb 3-1: language id specifier not provided by device, defaulting to English
[  280.119107][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.130811][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  280.165591][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.195668][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.233949][   T35] NILFS (loop1): discard dirty page: offset=0, ino=4
[  280.240840][   T35] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  280.261590][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.276233][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.296854][   T35] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.326065][ T8132] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  280.336614][ T8132] NILFS (loop1): discard dirty page: offset=0, ino=6
[  280.348762][ T8132] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  280.357778][ T8132] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  280.365477][ T8132] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  280.373033][ T8132] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  280.396716][ T9032] wg2: entered promiscuous mode
[  280.418467][ T9032] wg2: entered allmulticast mode
[  280.641706][ T5163] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input10
[  281.055832][ T5163] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input11
[  281.631888][ T5163] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input12
[  281.756326][ T5163] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input13
[  281.837605][ T5163] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  281.910652][ T5163] usb 3-1: USB disconnect, device number 13
[  281.995220][ T9048] loop4: detected capacity change from 0 to 2048
[  282.084506][ T9056] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.371304][ T9056] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  282.411162][ T9056] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  282.432597][ T9056] Remounting filesystem read-only
[  282.443513][   T50] NILFS (loop4): discard dirty page: offset=4096, ino=6
[  282.452872][   T50] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[  282.475798][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.506543][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.533448][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.563241][   T50] NILFS (loop4): discard dirty page: offset=0, ino=3
[  282.593451][   T50] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  282.609050][   T50] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  282.639605][   T50] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  282.673330][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.703646][   T50] NILFS (loop4): discard dirty page: offset=65536, ino=3
[  282.716466][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.750425][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.780208][   T50] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  282.792877][ T9068] wg2: left promiscuous mode
[  282.798874][ T9068] wg2: left allmulticast mode
[  282.805975][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.836281][   T50] NILFS (loop4): discard dirty page: offset=196608, ino=3
[  282.850456][   T29] audit: type=1804 audit(1716887394.370:492): pid=9044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4021169048/syzkaller.Zdurk8/261/bus" dev="sda1" ino=1970 res=1 errno=0
[  282.898063][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.930912][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  282.973489][   T50] NILFS (loop4): discard dirty block: blocknr=49, size=1024
[  282.981045][   T29] audit: type=1804 audit(1716887394.420:493): pid=9044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4021169048/syzkaller.Zdurk8/261/bus" dev="sda1" ino=1970 res=1 errno=0
[  283.014213][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  283.037994][   T50] NILFS (loop4): discard dirty page: offset=0, ino=5
[  283.045675][ T9068] wg2: entered promiscuous mode
[  283.050695][ T9068] wg2: entered allmulticast mode
[  283.061522][   T50] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  283.080108][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  283.089570][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  283.107796][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  283.120376][   T50] NILFS (loop4): discard dirty page: offset=0, ino=4
[  283.144190][   T50] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  283.172207][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  283.197047][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  283.252670][   T50] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  283.267654][ T8355] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  283.314611][ T8355] NILFS (loop4): discard dirty page: offset=0, ino=6
[  283.321355][ T8355] NILFS (loop4): discard dirty block: blocknr=35, size=1024
[  283.370648][ T8355] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[  283.406050][ T8355] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  283.451620][ T8355] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  283.556909][   T29] audit: type=1326 audit(1716887395.090:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399467cee9 code=0x7ffc0000
[  283.611577][   T29] audit: type=1326 audit(1716887395.090:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f399467cee9 code=0x7ffc0000
[  283.659414][   T29] audit: type=1326 audit(1716887395.090:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399467cee9 code=0x7ffc0000
[  283.710941][   T29] audit: type=1326 audit(1716887395.140:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399467cee9 code=0x7ffc0000
[  284.273336][ T5163] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  284.300966][ T9110] deleting an unspecified loop device is not supported.
[  284.466700][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.513538][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.534264][ T5163] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  284.556590][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.578619][ T5163] usb 5-1: config 0 descriptor??
[  285.042652][ T5163] hid (null): bogus close delimiter
[  285.114386][   T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  285.238818][ T5163] usb 5-1: string descriptor 0 read error: -22
[  285.336190][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.366505][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.386722][   T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  285.417763][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.440363][ T5163] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71
[  285.450749][   T25] usb 3-1: config 0 descriptor??
[  285.467272][ T5163] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71
[  285.496656][ T5163] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71
[  285.512829][ T5163] uclogic 0003:256C:006D.000A: failed probing parameters: -71
[  285.554427][ T5163] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71
[  285.606149][ T5163] usb 5-1: USB disconnect, device number 7
[  285.760012][ T9145] pim6reg1: entered promiscuous mode
[  285.792779][ T9145] pim6reg1: entered allmulticast mode
[  286.082093][   T25] usb 3-1: language id specifier not provided by device, defaulting to English
[  286.344384][ T9163] loop3: detected capacity change from 0 to 512
[  286.363620][ T9163] EXT4-fs: user quota file already specified
[  286.699457][   T25] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #100: -71
[  286.726720][   T25] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71
[  286.781351][   T25] uclogic 0003:256C:006D.000B: failed probing pen v1 parameters: -71
[  286.823466][   T25] uclogic 0003:256C:006D.000B: failed probing parameters: -71
[  286.831090][   T25] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71
[  286.907709][   T25] usb 3-1: USB disconnect, device number 14
[  287.549251][ T9187] loop3: detected capacity change from 0 to 256
[  287.720206][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  287.758596][ T9199] netlink: 'syz-executor.0': attribute type 13 has an invalid length.
[  287.824169][ T9199] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.833862][ T9199] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.842596][ T9199] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.851811][ T9199] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.879642][ T9199] vxlan0: entered promiscuous mode
[  287.900922][ T9203] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  287.909938][ T9203] netlink: 'syz-executor.4': attribute type 20 has an invalid length.
[  287.935191][ T9203] IPv6: NLM_F_CREATE should be specified when creating new route
[  288.073724][ T5163] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  288.278843][ T5163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.301235][ T5163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.328486][ T5163] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  288.340532][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.361699][ T5163] usb 2-1: config 0 descriptor??
[  288.553874][ T9234] loop3: detected capacity change from 0 to 1024
[  288.593589][ T5204] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  288.631127][ T9234] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002]
[  288.640923][ T9234] System zones: 0-1, 3-12
[  288.651673][ T9236] dccp_invalid_packet: P.CsCov 9 exceeds packet length 256
[  288.664455][ T9234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.823356][ T5204] usb 3-1: Using ep0 maxpacket: 16
[  288.832603][ T5204] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  288.842507][ T7994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.868810][ T5204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.893558][ T5204] usb 3-1: Product: syz
[  288.897832][ T5204] usb 3-1: Manufacturer: syz
[  288.902452][ T5204] usb 3-1: SerialNumber: syz
[  288.947295][ T5204] r8152-cfgselector 3-1: Unknown version 0x0000
[  288.964314][ T5204] r8152-cfgselector 3-1: config 0 descriptor??
[  288.994247][ T5163] usb 2-1: language id specifier not provided by device, defaulting to English
[  289.272025][ T9255] loop4: detected capacity change from 0 to 512
[  289.323473][ T9255] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  289.382950][ T9255] EXT4-fs (loop4): 1 truncate cleaned up
[  289.399323][ T9255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.434130][ T5204] r8152-cfgselector 3-1: Unknown version 0x0000
[  289.440657][ T5204] r8152-cfgselector 3-1: bad CDC descriptors
[  289.451667][ T5204] r8152-cfgselector 3-1: USB disconnect, device number 15
[  289.595007][ T8355] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.599989][ T5163] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71
[  289.604803][ T9262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  289.614164][ T5163] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71
[  289.637855][ T5163] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71
[  289.671101][ T5163] uclogic 0003:256C:006D.000C: failed probing parameters: -71
[  289.679073][ T5163] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71
[  289.691735][ T5163] usb 2-1: USB disconnect, device number 8
[  290.070978][ T9272] dccp_invalid_packet: P.CsCov 9 exceeds packet length 256
[  290.254068][ T9277] loop2: detected capacity change from 0 to 512
[  290.295146][ T9277] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino
[  290.463073][ T9277] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  290.584702][ T9277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.007262][ T8117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.068436][ T9289] loop4: detected capacity change from 0 to 512
[  291.100415][ T9291] loop3: detected capacity change from 0 to 512
[  291.202063][ T9289] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  291.223438][ T9291] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  291.232497][ T9291] syz-executor.3: attempt to access beyond end of device
[  291.232497][ T9291] loop75: rw=0, sector=2, nr_sectors = 2 limit=0
[  291.261485][ T9291] EXT4-fs (loop3): couldn't read superblock of external journal
[  291.309505][ T9289] EXT4-fs (loop4): 1 truncate cleaned up
[  291.396064][ T9289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.755412][ T8355] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.941936][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  292.540327][ T9324] loop2: detected capacity change from 0 to 2048
[  292.680525][ T9324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.782736][ T9324] ext4 filesystem being mounted at /root/syzkaller-testdir1192932397/syzkaller.y9KTzC/89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.941853][ T9324] 9pnet: p9_errstr2errno: server reported unknown error ­q!nFÎä£4f¦Ó&éHúûÁÉyÞóõ¼Oæðfä=
¼´^/$Cq5"ª›ÛÓˆ8ÚŽŽEÜÞ8nýÑ­©rI¢ÕºöKR
[  293.074733][ T8117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.102791][ T9331] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  293.206062][ T9331] team0: Device ipvlan1 failed to register rx_handler
[  293.389894][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  293.903798][ T5125] Bluetooth: hci5: command 0x0406 tx timeout
[  293.971810][ T9362] loop2: detected capacity change from 0 to 4096
[  294.203768][ T9362] NILFS (loop2): invalid segment: Checksum error in segment payload
[  294.212611][ T9362] NILFS (loop2): trying rollback from an earlier position
[  294.360290][ T9362] NILFS (loop2): recovery complete
[  294.410645][ T9367] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  294.769944][ T9378] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  294.801080][ T9378] team0: Device ipvlan1 failed to register rx_handler
[  294.831440][ T9384] random: crng reseeded on system resumption
[  294.968180][ T9386] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  295.069585][ T9386] team0: Device ipvlan1 failed to register rx_handler
[  295.194062][ T9391] loop1: detected capacity change from 0 to 128
[  296.103995][ T9383] loop3: detected capacity change from 0 to 32768
[  296.133613][ T9383] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9383)
[  296.404143][ T9383] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  296.433976][ T9395] loop2: detected capacity change from 0 to 32768
[  296.441803][ T9383] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  296.453814][ T9420] random: crng reseeded on system resumption
[  296.580210][ T9383] BTRFS info (device loop3): using free-space-tree
[  296.598859][ T9395] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 84a25241 should be 29d2fb78
[  296.740306][ T9395] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  296.752606][ T9395] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[  296.802504][ T9383] BTRFS info (device loop3): rebuilding free space tree
[  296.806382][ T9395] bcachefs (loop2): alloc_read... done
[  296.823320][ T9395] bcachefs (loop2): stripes_read... done
[  296.833564][ T9395] bcachefs (loop2): snapshots_read... done
[  296.850352][ T9395] bcachefs (loop2): journal_replay... done
[  296.863483][ T9395] bcachefs (loop2): resume_logged_ops... done
[  296.875163][ T9395] bcachefs (loop2): going read-write
[  296.909365][ T9395] bcachefs (loop2): done starting filesystem
[  296.976007][ T9395] bcachefs (loop2): inode 1073741824 i_blocks underflow: 0 + -8 < 0 (ondisk 0)
[  297.140628][ T5123] bcachefs (loop2): unable to write journal to sufficient devices
[  297.148264][ T9395] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 8
[  297.154928][ T5160] bcachefs (loop2): going read-only
[  297.177913][ T5160] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8
[  297.187398][ T5160] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8
[  297.203780][ T5160] bcachefs (loop2): unshutdown complete, journal seq 8
[  297.224090][ T5160] bcachefs (loop2): finished waiting for writes to stop
[  297.231241][ T5160] bcachefs (loop2): done going read-only, filesystem not clean
[  297.858427][ T7994] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  297.917665][ T8117] bcachefs (loop2): shutting down
[  298.064754][ T8117] bcachefs (loop2): shutdown complete
[  298.702435][ T9471] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  298.763358][ T9471] geneve0: entered promiscuous mode
[  298.836438][ T9471] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  300.094669][ T9483] loop4: detected capacity change from 0 to 2048
[  300.132622][ T9475] loop1: detected capacity change from 0 to 32768
[  300.194276][ T9475] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9475)
[  300.242780][ T9487] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.311622][ T9475] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  300.371013][ T9475] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  300.439440][ T9475] BTRFS info (device loop1): using free-space-tree
[  300.553038][ T9487] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  300.585733][ T9487] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  300.629043][ T9487] Remounting filesystem read-only
[  300.638343][ T9475] BTRFS info (device loop1): rebuilding free space tree
[  300.643514][   T35] NILFS (loop4): discard dirty page: offset=4096, ino=6
[  300.682558][   T35] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[  300.724568][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  300.746779][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  300.776893][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  300.802619][ T9477] loop3: detected capacity change from 0 to 32768
[  300.818296][   T35] NILFS (loop4): discard dirty page: offset=0, ino=3
[  300.832453][   T35] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  300.849837][ T9477] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got 84a25241 should be 29d2fb78
[  300.869275][   T35] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  300.881536][   T35] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  300.901376][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  300.925535][   T35] NILFS (loop4): discard dirty page: offset=65536, ino=3
[  300.969449][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.037779][ T8132] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  301.063385][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.087509][   T35] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  301.131770][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.160046][ T9477] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  301.181574][   T35] NILFS (loop4): discard dirty page: offset=196608, ino=3
[  301.189661][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.200478][ T9477] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[  301.248098][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.261968][   T35] NILFS (loop4): discard dirty block: blocknr=49, size=1024
[  301.279841][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.300425][   T35] NILFS (loop4): discard dirty page: offset=0, ino=5
[  301.333765][   T35] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  301.345886][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.415200][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.444706][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.462941][ T9477] bcachefs (loop3): alloc_read... done
[  301.505218][   T35] NILFS (loop4): discard dirty page: offset=0, ino=4
[  301.508406][ T9477] bcachefs (loop3): stripes_read... done
[  301.539108][ T9477] bcachefs (loop3): snapshots_read... done
[  301.550397][   T35] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  301.557952][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.586880][ T9477] bcachefs (loop3): journal_replay... done
[  301.592963][ T9477] bcachefs (loop3): resume_logged_ops... done
[  301.599465][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.625569][   T35] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.668467][ T8355] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  301.704020][ T9477] bcachefs (loop3): going read-write
[  301.727280][ T8355] NILFS (loop4): discard dirty page: offset=0, ino=6
[  301.780921][ T8355] NILFS (loop4): discard dirty block: blocknr=35, size=1024
[  301.799888][ T9477] bcachefs (loop3): done starting filesystem
[  301.840290][ T8355] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[  301.873784][ T8355] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  301.939083][ T8355] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  302.061322][ T9477] bcachefs (loop3): inode 1073741824 i_blocks underflow: 0 + -8 < 0 (ondisk 0)
[  302.157505][ T5200] bcachefs (loop3): going read-only
[  302.161794][ T5123] bcachefs (loop3): unable to write journal to sufficient devices
[  302.176644][ T9477] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 8
[  302.213432][ T5200] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8
[  302.247919][ T5200] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8
[  302.297607][ T5200] bcachefs (loop3): unshutdown complete, journal seq 8
[  302.331308][ T5200] bcachefs (loop3): finished waiting for writes to stop
[  302.351666][ T7994] bcachefs (loop3): shutting down
[  302.357548][ T5200] bcachefs (loop3): done going read-only, filesystem not clean
[  302.392197][ T7994] bcachefs (loop3): shutdown complete
[  302.673749][ T9539] loop1: detected capacity change from 0 to 2048
[  302.746902][ T9540] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  303.051625][ T9540] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  303.129734][ T9540] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  303.194848][ T9540] Remounting filesystem read-only
[  303.243645][ T9547] hub 9-0:1.0: USB hub found
[  303.249295][ T9547] hub 9-0:1.0: 8 ports detected
[  303.370337][   T50] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  303.413366][   T50] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  303.465618][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.543249][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.554721][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.564383][   T50] NILFS (loop1): discard dirty page: offset=0, ino=3
[  303.581036][   T50] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  303.589002][   T50] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  303.596540][   T50] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  303.621521][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.633451][   T50] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  303.640773][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.664919][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.674689][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  303.694634][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.710596][   T50] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  303.783850][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.811455][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.893394][   T50] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  303.900733][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.922871][   T50] NILFS (loop1): discard dirty page: offset=0, ino=5
[  303.937603][   T50] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  303.954536][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  303.975212][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  304.002478][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  304.030617][ T8132] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  304.064355][ T8132] NILFS (loop1): discard dirty page: offset=0, ino=6
[  304.071317][ T8132] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  304.091768][ T8132] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  304.099767][ T8132] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  304.107334][ T8132] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  304.117145][ T8132] NILFS (loop1): discard dirty page: offset=0, ino=4
[  304.124075][ T8132] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  304.131390][ T8132] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  304.140457][ T8132] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  304.184560][ T8132] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  305.399215][ T9575] loop3: detected capacity change from 0 to 256
[  305.463955][ T9575] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  305.583897][ T9577] loop2: detected capacity change from 0 to 2048
[  305.646219][ T9578] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  305.784845][ T9578] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  305.822866][ T9578] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  305.886253][ T9578] Remounting filesystem read-only
[  305.892644][ T2836] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  305.902033][ T2836] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  305.924173][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  305.973368][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.006644][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.027037][ T2836] NILFS (loop2): discard dirty page: offset=0, ino=3
[  306.049349][ T2836] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  306.074373][ T2836] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  306.081727][ T2836] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  306.123499][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.153288][ T2836] NILFS (loop2): discard dirty page: offset=65536, ino=3
[  306.160373][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.194962][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.229308][ T2836] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  306.256877][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.285549][ T2836] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  306.292724][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.335682][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.367832][ T2836] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  306.404202][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  306.405546][ T9573] loop1: detected capacity change from 0 to 32768
[  306.439442][ T2836] NILFS (loop2): discard dirty page: offset=0, ino=5
[  306.442503][ T9573] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 84a25241 should be 29d2fb78
[  306.453268][ T2836] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  306.704256][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  307.095339][ T5123] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  307.104638][ T5123] Bluetooth: hci1: Injecting HCI hardware error event
[  307.123672][ T5125] Bluetooth: hci1: hardware error 0x00
[  307.171358][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  307.503444][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  307.550065][ T2836] NILFS (loop2): discard dirty page: offset=0, ino=4
[  307.566531][ T9573] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  307.591463][ T9608] loop4: detected capacity change from 0 to 256
[  307.601069][ T2836] NILFS (loop2): discard dirty block: blocknr=40, size=1024
[  307.629101][ T9608] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  307.647088][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  307.663556][ T9573] bcachefs (loop1): recovering from clean shutdown, journal seq 7
[  307.693932][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  307.754105][ T2836] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  307.779689][ T9573] bcachefs (loop1): alloc_read... done
[  307.797248][ T9573] bcachefs (loop1): stripes_read... done
[  307.813450][ T9573] bcachefs (loop1): snapshots_read... done
[  307.829182][ T9573] bcachefs (loop1): journal_replay... done
[  307.842006][ T9573] bcachefs (loop1): resume_logged_ops... done
[  307.849426][ T9573] bcachefs (loop1): going read-write
[  307.868971][ T9573] bcachefs (loop1): done starting filesystem
[  307.937550][ T9573] ------------[ cut here ]------------
[  307.944057][ T9573] WARNING: CPU: 1 PID: 9573 at fs/bcachefs/fs-io.c:327 __bch2_truncate_folio+0x1a33/0x1d80
[  307.955030][ T9573] Modules linked in:
[  307.959780][ T9573] CPU: 1 PID: 9573 Comm: syz-executor.1 Not tainted 6.10.0-rc1-next-20240528-syzkaller #0
[  307.969844][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  307.980364][ T9573] RIP: 0010:__bch2_truncate_folio+0x1a33/0x1d80
2024/05/28 09:10:19 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  307.987011][ T9573] Code: 41 5f 5d c3 cc cc cc cc e8 9a 84 6b fd 48 c7 c7 ed b0 c1 8d e8 ce 1a ea ff 89 05 a8 2c 6a 10 e9 ed ea ff ff e8 7e 84 6b fd 90 <0f> 0b 90 e9 0a fa ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f0
[  308.007182][ T9573] RSP: 0018:ffffc90012e9f6c0 EFLAGS: 00010283
[  308.013823][ T9573] RAX: ffffffff842ab282 RBX: 0000000000000000 RCX: 0000000000040000
[  308.021836][ T9573] RDX: ffffc900097f1000 RSI: 0000000000007e0f RDI: 0000000000007e10
[  308.030515][ T9573] RBP: ffffc90012e9f950 R08: ffffffff842aac87 R09: 1ffffd4000351ce0
[  308.038894][ T9573] R10: dffffc0000000000 R11: fffff94000351ce1 R12: 1ffff1100bffba2e
[  308.046949][ T9573] R13: ffff88804c40075a R14: 0000000000000000 R15: ffff88805ffdd170
[  308.055103][ T9573] FS:  00007f05c53ff6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  308.065189][ T9573] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  308.071901][ T9573] CR2: 000000c0011f4978 CR3: 000000007ac9e000 CR4: 00000000003506f0
[  308.080843][ T9573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  308.089152][ T9573] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  308.097303][ T9573] Call Trace:
[  308.100627][ T9573]  <TASK>
[  308.103643][ T9573]  ? __warn+0x163/0x4e0
[  308.107831][ T9573]  ? __bch2_truncate_folio+0x1a33/0x1d80
[  308.113656][ T9573]  ? report_bug+0x2b3/0x500
[  308.118198][ T9573]  ? __bch2_truncate_folio+0x1a33/0x1d80
[  308.123929][ T9573]  ? handle_bug+0x3e/0x70
[  308.128287][ T9573]  ? exc_invalid_op+0x1a/0x50
[  308.132995][ T9573]  ? asm_exc_invalid_op+0x1a/0x20
[  308.138117][ T9573]  ? __bch2_truncate_folio+0x1437/0x1d80
[  308.144171][ T9573]  ? __bch2_truncate_folio+0x1a32/0x1d80
[  308.149846][ T9573]  ? __bch2_truncate_folio+0x1a33/0x1d80
[  308.155697][ T9573]  ? __pfx___bch2_truncate_folio+0x10/0x10
[  308.162427][ T9573]  ? __bch2_truncate_folio+0x6c9/0x1d80
[  308.168905][ T9573]  ? _raw_spin_unlock_irq+0x23/0x50
[  308.174267][ T9573]  ? lockdep_hardirqs_on+0x99/0x150
[  308.179504][ T9573]  ? mnt_put_write_access_file+0xc2/0x100
[  308.185349][ T9573]  bch2_fallocate_dispatch+0x7d2/0x3a30
[  308.190944][ T9573]  ? __pfx_validate_chain+0x10/0x10
[  308.196320][ T9573]  ? __pfx_bch2_fallocate_dispatch+0x10/0x10
[  308.202338][ T9573]  ? aa_file_perm+0x137/0xf60
[  308.207168][ T9573]  ? __pfx_lock_release+0x10/0x10
[  308.212235][ T9573]  ? mark_lock+0x9a/0x350
[  308.216669][ T9573]  ? __lock_acquire+0x1346/0x1fd0
[  308.221749][ T9573]  ? __pfx_lock_acquire+0x10/0x10
[  308.226894][ T9573]  ? rcu_read_lock_any_held+0xb7/0x160
[  308.232380][ T9573]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  308.238406][ T9573]  vfs_fallocate+0x553/0x6c0
[  308.243032][ T9573]  __x64_sys_fallocate+0xbd/0x110
[  308.248174][ T9573]  do_syscall_64+0xf3/0x230
[  308.252701][ T9573]  ? clear_bhb_loop+0x35/0x90
[  308.257450][ T9573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.264246][ T9573] RIP: 0033:0x7f05c587cee9
[  308.268704][ T9573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  308.289193][ T9573] RSP: 002b:00007f05c53ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  308.297752][ T9573] RAX: ffffffffffffffda RBX: 00007f05c59b3f80 RCX: 00007f05c587cee9
[  308.306131][ T9573] RDX: 00000000000000d1 RSI: 0000000000000003 RDI: 0000000000000004
[  308.314368][ T9573] RBP: 00007f05c58c947f R08: 0000000000000000 R09: 0000000000000000
[  308.322372][ T9573] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000
[  308.330513][ T9573] R13: 000000000000000b R14: 00007f05c59b3f80 R15: 00007ffeac31eee8
[  308.338607][ T9573]  </TASK>
[  308.341646][ T9573] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  308.348936][ T9573] CPU: 1 PID: 9573 Comm: syz-executor.1 Not tainted 6.10.0-rc1-next-20240528-syzkaller #0
[  308.358852][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  308.368942][ T9573] Call Trace:
[  308.372251][ T9573]  <TASK>
[  308.375197][ T9573]  dump_stack_lvl+0x241/0x360
[  308.380093][ T9573]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.385325][ T9573]  ? __pfx__printk+0x10/0x10
[  308.389954][ T9573]  ? vscnprintf+0x5d/0x90
[  308.394307][ T9573]  panic+0x349/0x860
[  308.398226][ T9573]  ? __warn+0x172/0x4e0
[  308.402403][ T9573]  ? __pfx_panic+0x10/0x10
[  308.406871][ T9573]  __warn+0x346/0x4e0
[  308.410897][ T9573]  ? __bch2_truncate_folio+0x1a33/0x1d80
[  308.416578][ T9573]  report_bug+0x2b3/0x500
[  308.420989][ T9573]  ? __bch2_truncate_folio+0x1a33/0x1d80
[  308.426682][ T9573]  handle_bug+0x3e/0x70
[  308.430946][ T9573]  exc_invalid_op+0x1a/0x50
[  308.435486][ T9573]  asm_exc_invalid_op+0x1a/0x20
[  308.440364][ T9573] RIP: 0010:__bch2_truncate_folio+0x1a33/0x1d80
[  308.446653][ T9573] Code: 41 5f 5d c3 cc cc cc cc e8 9a 84 6b fd 48 c7 c7 ed b0 c1 8d e8 ce 1a ea ff 89 05 a8 2c 6a 10 e9 ed ea ff ff e8 7e 84 6b fd 90 <0f> 0b 90 e9 0a fa ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f0
[  308.466366][ T9573] RSP: 0018:ffffc90012e9f6c0 EFLAGS: 00010283
[  308.472435][ T9573] RAX: ffffffff842ab282 RBX: 0000000000000000 RCX: 0000000000040000
[  308.480407][ T9573] RDX: ffffc900097f1000 RSI: 0000000000007e0f RDI: 0000000000007e10
[  308.488466][ T9573] RBP: ffffc90012e9f950 R08: ffffffff842aac87 R09: 1ffffd4000351ce0
[  308.496444][ T9573] R10: dffffc0000000000 R11: fffff94000351ce1 R12: 1ffff1100bffba2e
[  308.504592][ T9573] R13: ffff88804c40075a R14: 0000000000000000 R15: ffff88805ffdd170
[  308.512568][ T9573]  ? __bch2_truncate_folio+0x1437/0x1d80
[  308.518202][ T9573]  ? __bch2_truncate_folio+0x1a32/0x1d80
[  308.523861][ T9573]  ? __pfx___bch2_truncate_folio+0x10/0x10
[  308.529669][ T9573]  ? __bch2_truncate_folio+0x6c9/0x1d80
[  308.535307][ T9573]  ? _raw_spin_unlock_irq+0x23/0x50
[  308.540507][ T9573]  ? lockdep_hardirqs_on+0x99/0x150
[  308.545793][ T9573]  ? mnt_put_write_access_file+0xc2/0x100
[  308.551517][ T9573]  bch2_fallocate_dispatch+0x7d2/0x3a30
[  308.557071][ T9573]  ? __pfx_validate_chain+0x10/0x10
[  308.562288][ T9573]  ? __pfx_bch2_fallocate_dispatch+0x10/0x10
[  308.568360][ T9573]  ? aa_file_perm+0x137/0xf60
[  308.573058][ T9573]  ? __pfx_lock_release+0x10/0x10
[  308.578088][ T9573]  ? mark_lock+0x9a/0x350
[  308.582417][ T9573]  ? __lock_acquire+0x1346/0x1fd0
[  308.587459][ T9573]  ? __pfx_lock_acquire+0x10/0x10
[  308.592782][ T9573]  ? rcu_read_lock_any_held+0xb7/0x160
[  308.598243][ T9573]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  308.604593][ T9573]  vfs_fallocate+0x553/0x6c0
[  308.609210][ T9573]  __x64_sys_fallocate+0xbd/0x110
[  308.614303][ T9573]  do_syscall_64+0xf3/0x230
[  308.618823][ T9573]  ? clear_bhb_loop+0x35/0x90
[  308.623679][ T9573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.629568][ T9573] RIP: 0033:0x7f05c587cee9
[  308.634002][ T9573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  308.653644][ T9573] RSP: 002b:00007f05c53ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  308.662085][ T9573] RAX: ffffffffffffffda RBX: 00007f05c59b3f80 RCX: 00007f05c587cee9
[  308.670068][ T9573] RDX: 00000000000000d1 RSI: 0000000000000003 RDI: 0000000000000004
[  308.678137][ T9573] RBP: 00007f05c58c947f R08: 0000000000000000 R09: 0000000000000000
[  308.686210][ T9573] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000
[  308.694193][ T9573] R13: 000000000000000b R14: 00007f05c59b3f80 R15: 00007ffeac31eee8
[  308.702190][ T9573]  </TASK>
[  308.705334][ T9573] Kernel Offset: disabled
[  308.709754][ T9573] Rebooting in 86400 seconds..