last executing test programs:

3m58.886675603s ago: executing program 4 (id=5):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x208, 0x208, 0xffffffff, 0x208, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @multicast1, @rand_addr=0x64010100, @gre_key=0x100, @gre_key=0xf1a}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x4, {0x7}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'xfrm0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x2e, 0x4, 0xf80d1023ff40959}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @private=0xa010102, @gre_key=0x4, @icmp_id=0x64}}}}, {{@ip={@remote, @local, 0xff, 0xffffffff, 'bond0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x89}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @empty, @rand_addr=0x64010100, @gre_key=0xb, @gre_key=0xc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)

3m58.559634185s ago: executing program 4 (id=11):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$eJzs28tvG8UfAPDvrpP019cvoZRHH0CgICIeSZMW6IEDIJA4FAkJDnCMkrQqdRvUBIlWFRSEygkhJO6II/8CJ7ggxAmJK9xRpQr10paT0dq7ie3YbuLaNcWfj7TtzO5sZr7eHXtmxw5gaE1m/yQRuyLi94gYr2UbC0zW/rtx7eLCzWsXF5KoVN76K6mWu37t4kJRtDhvZ56ZSiPSz5I40KLelfMXTs+Xy0vn8vzM6pn3Z1bOX3j21Jn5k0snl87OHTt29MjsC8/PPdeTOLM2Xd//0fLBfa+/+9Ubx79oiL8pjh6Z7HTwiUqlx9UN1u66dDIywIawJaWIyC7XaLX/j0cp1i/eeLz26UAbB/RVpVKp7Gx/+FIF+A9LojGvy8OwKD7os/lvsTUPAl7q3/Bj4K6+XJsAZXHfyLfakZFI8zKjTfPbXpqMiHcu/f1NtkV/nkMAADT4IRv/PNNq/JfG/XXl/p+vDU1ExD0RsSci7o2IvRFxX0S17AMR8eAW629eJNk4/kmvdBXYJmXjvxfzta3G8V8x+ouJUp7bXY1/NDlxqrx0OH9NpmJ0W5af7VDHj6/+9mW7Y/Xjv2zL6i/Ggnk7roxsazxncX51/nZirnf1k4j9I63iT9ZWApKI2BcR+7us49RT3x1sd+zW8XfQg3WmyrcRT9au/6Voir+QdF6fnPlflJcOzxR3xUa//Hr5zXb131b8PZBd/x0t7/+1+CeS+vXala3XcfmPz9vOabq9/8eSt6vpsXzfh/Orq+dmI8aS47VG1++fWz+3yBfls/inDrXu/3ti/ZU4EBHZTfxQRDwcEY/kbX80Ih6LiEMd4v/5lcff6z7+/sriX9zS9V9PjEXzntaJ0umfvm+odGJD/Dc7X/+j1dRUvmcz73+baVd3dzMAAADcfdKI2BVJOr2WTtPp6dr35ffGjrS8vLL69InlD84u1n4jMBGjafGka7zueehsPq0v8nNR+2pBkT+SPzf+urS9mp9eWC4vDjp4GHI72/T/zJ+lQbcO6Du/14Lhpf/D8NL/YXjp/zC8WvT/7YNoB3Dntfr8/3gA7QDuvKb+b9kPhoj5Pwwv/R+Gl/4PQ2lle9z6R/IdE8Vf6vJ0ibs0Eem/ohkSfUoM9n0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/4JAAD//3sE4iY=")
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0)
writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f', 0x100000}], 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20020008)

3m57.262681522s ago: executing program 4 (id=15):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x6d, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x37, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "1e520b4c951ee1"}}}}}}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$radio(0x0, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r2, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4054)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r3 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

3m56.541416896s ago: executing program 4 (id=21):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000001020702"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4004)

3m56.218208488s ago: executing program 32 (id=21):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000001020702"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4004)

3m27.330344039s ago: executing program 0 (id=88):
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xa0000004})

3m26.834741732s ago: executing program 0 (id=91):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)

3m26.412000694s ago: executing program 0 (id=96):
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fallocate(r0, 0x100000011, 0x0, 0x28000000)

3m25.869037148s ago: executing program 0 (id=101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m23.113292432s ago: executing program 0 (id=107):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)={0x14, 0x1a, 0xa01, 0x800000, 0x0, {0x6}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2004040)

3m20.612855915s ago: executing program 0 (id=113):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x22440, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x3})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(&(0x7f0000000280)='./file1\x00', 0x0, 0x0)

3m3.822382253s ago: executing program 33 (id=113):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x22440, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x3})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(&(0x7f0000000280)='./file1\x00', 0x0, 0x0)

1m39.525824277s ago: executing program 1 (id=375):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000080)='configfs\x00', 0x1)
fsmount(r1, 0x0, 0x80)

1m39.363017058s ago: executing program 1 (id=376):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
io_uring_setup(0x8f, &(0x7f00000002c0)={0x0, 0xf71e, 0x800, 0x100000, 0xab})
socket$inet6(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

1m38.90258902s ago: executing program 1 (id=378):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x70bd2a}, 0x10}, 0x1, 0x7}, 0x0)

1m38.484059972s ago: executing program 1 (id=383):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000018b2ab0000f2ffffff00010000000800000016800c00020000000000000000", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x20014080}, 0x4000055)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xb, 0xfe, 0x0, @SEQ_NOTEON=@note=0x2})
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

1m36.727701981s ago: executing program 1 (id=388):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
io_uring_setup(0x8f, &(0x7f00000002c0)={0x0, 0xf71e, 0x800, 0x100000, 0xab})
socket$inet6(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

1m36.321591684s ago: executing program 1 (id=390):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, &(0x7f0000000100)})
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"cb02c6d8cb00fc18137f1cad3e48018b251f7320a0e800", r2})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

1m22.891780025s ago: executing program 2 (id=422):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@bsdgroups}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0xfe0)
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0)
lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000340)=""/186, 0xba)

1m21.896477839s ago: executing program 2 (id=426):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046a6d5429a7a66ed82d75475981032f61c1771fdfdafc95b6573e353000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0)
kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x0, 0x18c, 0x203, 0x340, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x16}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20}]}}, @common=@hl={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r8}}, 0x48)
close(r7)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0xd0)
listen(r3, 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)

1m20.885405845s ago: executing program 34 (id=390):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, &(0x7f0000000100)})
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"cb02c6d8cb00fc18137f1cad3e48018b251f7320a0e800", r2})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

1m17.112118155s ago: executing program 2 (id=436):
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x47)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

1m14.863081867s ago: executing program 2 (id=442):
epoll_create1(0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000340)='./bus\x00', 0x185102, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x19, 0x1, 0x9, 0x7, 0x7, 0xd})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x6, 0x103382)
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)

1m14.021678381s ago: executing program 2 (id=444):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c00, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa29, &(0x7f0000001f80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0)
setpgid(r1, r0)
writev(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

1m12.892775747s ago: executing program 2 (id=446):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x2000, "00a138aa9318e9dd7077000000f400000000000000000000000000000000d700", <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="3bde02d8f058bdb9103802d6d04fd21719f2026f94216771a05d", 0x1a, 0x4000, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r3, 0x4000, r3}, 0x18)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}})

1m12.021624212s ago: executing program 35 (id=446):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x2000, "00a138aa9318e9dd7077000000f400000000000000000000000000000000d700", <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="3bde02d8f058bdb9103802d6d04fd21719f2026f94216771a05d", 0x1a, 0x4000, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r3, 0x4000, r3}, 0x18)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}})

13.292832891s ago: executing program 5 (id=592):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b71, &(0x7f00000003c0)={0x0, 0x2, 0x400, 0x3, 0x1a})
pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x600)

11.53732196s ago: executing program 5 (id=595):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

9.888612579s ago: executing program 8 (id=600):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x55f, &(0x7f0000001040)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f0000002340)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{0x2, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0x2, 0x3}], {}, [{}, {}], {0x10, 0x2}}, 0x54, 0x0)

9.56926058s ago: executing program 7 (id=604):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='contention_end\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg(r1, &(0x7f0000001a40)={&(0x7f0000000000)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, 0x0, 0x0, &(0x7f0000001940)}, 0x4044040)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r2, @ANYBLOB="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"], 0x8c8}}, 0x0)

9.398948251s ago: executing program 7 (id=606):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6707, 0x100, 0xfffffffe, 0x1cd}, &(0x7f00000005c0)=<r2=>0x0, &(0x7f0000000640)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', r0, 0x1000, 0x1, {0x0, r4}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2000000000000019, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f00005a0000/0x2000)=nil, 0x2000, 0x2000008, 0x20050, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)

9.007405924s ago: executing program 8 (id=607):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a", 0x5c)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

7.925252379s ago: executing program 8 (id=610):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$dupfd(r1, 0x406, r1)
semop(0x0, &(0x7f00000002c0)=[{0x4, 0x202}], 0x1)
io_setup(0xfe0a, &(0x7f0000000180)=<r2=>0x0)
io_pgetevents(r2, 0x2, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000001c0)={0x0, 0x989680}, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, 0x0, 0x15)

7.78140727s ago: executing program 5 (id=611):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x8, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r2=>0x0}, &(0x7f00000000c0)=0xc)
write$FUSE_ATTR(r0, &(0x7f0000002480)={0x78, 0x0, 0x0, {0x5, 0x80, 0x0, {0x0, 0x7884, 0x4, 0x4945, 0x7fffffffffffffff, 0x2, 0x5, 0x9, 0x7, 0x8000, 0x8, 0x0, r2, 0x81, 0xc}}}, 0x78)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0xd511}})

5.70822606s ago: executing program 5 (id=614):
openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000001300290a00000000000000000700", @ANYRES32], 0x38}}, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f0000000f40))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4004556c, &(0x7f00000000c0)='syz0\x00')
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000000))
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000040)={[{0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xf5, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6}, {0x3fb, 0x3f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40}]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

5.362628253s ago: executing program 8 (id=616):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='contention_end\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg(r1, &(0x7f0000001a40)={&(0x7f0000000000)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, 0x0, 0x0, &(0x7f0000001940)}, 0x4044040)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r2, @ANYBLOB="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"], 0x8c8}}, 0x0)

4.977953255s ago: executing program 3 (id=617):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x55f, &(0x7f0000001040)="$eJzs3V1rHNUbAPBnNknf//+mUAoKSqAXVmo3TeJLBcF6KVos6H1dkmko2XRLdlOaWGh7YW+8kSKIWBA/gPdeFr+An6KghSIl6IU3K7OZTbfNbpKmGzd1fj+Y9pyZ2Zx59sxz9szOLhtAYY1l/5QiXoqIr5OIwx3bhiPfOLa638qj69PZkkSz+ekfSST5uvb+Sf7/weRx5ZcvI06W1rdbX1qeq1Sr6UJeH2/MXxmvLy2fujRfmU1n08uTU1Nn3pqafPedt/sW6+vn//ruk3sfnvnq+Mq3Pz04cieJs3Eo39YZx3O42VkZi7H8aRiJs0/tONGHxnaTZNAHwLYM5Xk+EtkYcDiG8qwH/vtuREQTKKhE/kNBtecB7Wv7Pl0HvzAefrB6AbQ+/uHV90ZiX+va6MBK8sSVUXa9O9qH9rM2fv797p1siU3eh7jRh/YA2m7eiojTw8Prx78kH/+273TrzeONPd1G0V5/YJDuZfOfN7rNf0pr85/oMv852CV3t2Pz/C896EMzPWXzv/e6zn/Xhq7Robz2v9acbyS5eKmano6I/0fEiRjZm9U3up9zZuV+s9e2zvlftmTtt+eC+XE8GN775GNmKo3K88Tc6eGtiJe7zn+Ttf5PuvR/9nyc32Ibx9K7r/batnn8O6v5Y8RrXfv/8R2tZOP7k+Ot82G8fVas9+ftY7/2an/Q8Wf9f2Dj+EeTzvu19Wdv44d9f6e9tm33/N+TfNYq78nXXas0GgsTEXuSj9evn3z82Ha9vX8W/4njG49/3c7//RHx+Rbjv330ds9dB97/zSRmnqn/n71w/6Mvvu/V/tb6/81W6US+Zivj31YP8HmeOwAAAAAAANhtShFxKJJSea1cKpXLq5/vOBoHStVavXHyYm3x8ky0vis7GiOl/E73K9HxeYiJ/POw7frkU/WpiDgSEd8M7W/Vy9O16syggwcAAAAAAAAAAAAAAAAAAIBd4mCP7/9nfhsa9NEBO85PfkNxbZr//filJ2BX8voPxSX/objkPxSX/Ifikv9QXPIfikv+Q3HJfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOir8+fOZUtz5dH16aw+c3Vpca529dRMWp8rzy9Ol6drC1fKs7XabDUtT9fmN/t71VrtysRkLF4bb6T1xnh9afnCfG3xcuPCpfnKbHohHflXogIAAAAAAAAAAAAAAAAAAIAXS31pea5SraYLCj0L78euOIydDHDVth4+vFuiUOhrYcADEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0+CcAAP//PZ416Q==")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f0000002340)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{}, {}], {0x10, 0x2}}, 0x54, 0x0)

4.841427185s ago: executing program 6 (id=618):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x61eb, 0x4)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
sendfile(r0, r1, &(0x7f0000000100), 0x8001)

4.828100705s ago: executing program 7 (id=619):
r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000580)={r0, 0x57, 0x4e}, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r5, 0x0, 0x0)

4.521609557s ago: executing program 6 (id=620):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket(0x10, 0x803, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000100))
sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000000080)={0x77359400})
unshare(0x40000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)

4.479039457s ago: executing program 3 (id=621):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

4.457988067s ago: executing program 8 (id=622):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

3.789371151s ago: executing program 7 (id=623):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x40000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfffffffffffffc25, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28)

3.400769573s ago: executing program 3 (id=624):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

3.379347123s ago: executing program 7 (id=625):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r0=>0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xb)
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x2)
write$binfmt_misc(r4, &(0x7f0000000240), 0xfdef)
splice(r1, 0x0, r4, 0x0, 0x80, 0x2)
timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

3.039671644s ago: executing program 3 (id=626):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$dupfd(r1, 0x406, r1)
semop(0x0, &(0x7f00000002c0)=[{0x4, 0x202}], 0x1)
io_setup(0xfe0a, &(0x7f0000000180)=<r2=>0x0)
io_pgetevents(r2, 0x2, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000001c0)={0x0, 0x989680}, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, 0x0, 0x15)

2.643804667s ago: executing program 6 (id=627):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x22440, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
io_setup(0x200, &(0x7f0000000140))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.596035747s ago: executing program 3 (id=628):
epoll_create1(0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000340)='./bus\x00', 0x185102, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x19, 0x1, 0x9, 0x7, 0x7, 0xd})

2.397373988s ago: executing program 8 (id=629):
epoll_create1(0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6707, 0x100, 0xfffffffe, 0x1cd}, &(0x7f00000005c0)=<r1=>0x0, &(0x7f0000000640)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x1000, 0x1, {0x0, r3}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2000000000000019, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f00005a0000/0x2000)=nil, 0x2000, 0x2000008, 0x20050, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)

1.637861462s ago: executing program 5 (id=630):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x61eb, 0x4)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
sendfile(r0, r1, &(0x7f0000000100), 0x8001)

1.405799343s ago: executing program 6 (id=631):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x55f, &(0x7f0000001040)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f0000002340)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x3}], {}, [{}, {}], {0x10, 0x2}}, 0x54, 0x0)

1.396791033s ago: executing program 5 (id=632):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e0a, &(0x7f000000c740)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
sendfile(r1, r0, 0x0, 0x1000200201005)
open(0x0, 0x14937e, 0x0)

1.366816803s ago: executing program 3 (id=633):
r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000580)={r0, 0x57, 0x4e}, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r5, 0x0, 0x0)

467.204358ms ago: executing program 6 (id=634):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

93.28412ms ago: executing program 7 (id=635):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_continue}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@noinline_data}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noheap}, {@compress_cache}, {@extent_cache}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000002000000"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})

0s ago: executing program 6 (id=636):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="003000000000000024001280110001006272466467655f736c617665000000000c00058005001900020000001b552597dee74ad14a9e07fb2505"], 0x44}}, 0x0)

kernel console output (not intermixed with test programs):


[  118.450230][ T4803] FAT-fs (loop3): Directory bread(block 64) failed
[  118.469896][ T4791] FAT-fs (loop2): Directory bread(block 65) failed
[  118.506764][ T4803] FAT-fs (loop3): Directory bread(block 65) failed
[  118.535903][ T4791] FAT-fs (loop2): Directory bread(block 66) failed
[  118.544099][ T4803] FAT-fs (loop3): Directory bread(block 66) failed
[  118.571933][ T4803] FAT-fs (loop3): Directory bread(block 67) failed
[  118.580955][ T4791] FAT-fs (loop2): Directory bread(block 67) failed
[  118.592972][ T4803] FAT-fs (loop3): Directory bread(block 68) failed
[  118.623246][ T4803] FAT-fs (loop3): Directory bread(block 69) failed
[  118.640267][ T4803] FAT-fs (loop3): Directory bread(block 70) failed
[  118.647509][ T4791] FAT-fs (loop2): Directory bread(block 68) failed
[  118.657059][ T4803] FAT-fs (loop3): Directory bread(block 71) failed
[  118.684760][ T4803] FAT-fs (loop3): Directory bread(block 72) failed
[  118.692701][ T4791] FAT-fs (loop2): Directory bread(block 69) failed
[  118.707405][ T4803] FAT-fs (loop3): Directory bread(block 73) failed
[  118.731088][ T4791] FAT-fs (loop2): Directory bread(block 70) failed
[  118.774150][ T4791] FAT-fs (loop2): Directory bread(block 71) failed
[  118.856967][ T4791] FAT-fs (loop2): Directory bread(block 72) failed
[  119.003494][ T4791] FAT-fs (loop2): Directory bread(block 73) failed
[  119.044307][ T4821] loop5: detected capacity change from 0 to 1024
[  119.094138][ T4467] kworker/u4:10: attempt to access beyond end of device
[  119.094138][ T4467] loop3: rw=1, sector=1224, nr_sectors = 32 limit=256
[  119.123422][ T4821] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  119.169607][ T4342] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  119.249432][ T4467] kworker/u4:10: attempt to access beyond end of device
[  119.249432][ T4467] loop3: rw=1, sector=1352, nr_sectors = 96 limit=256
[  120.152690][ T4830] loop5: detected capacity change from 0 to 1024
[  121.372936][ T4830] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  121.498675][ T4384] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  122.234199][ T4846] loop0: detected capacity change from 0 to 1024
[  122.867689][ T4846] EXT4-fs: Ignoring removed orlov option
[  122.940379][ T4846] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.067818][ T4846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  124.152693][ T4884] loop2: detected capacity change from 0 to 256
[  124.275017][ T4884] FAT-fs (loop2): Directory bread(block 64) failed
[  124.309133][ T4884] FAT-fs (loop2): Directory bread(block 65) failed
[  124.331054][ T4884] FAT-fs (loop2): Directory bread(block 66) failed
[  124.370162][ T4884] FAT-fs (loop2): Directory bread(block 67) failed
[  124.404004][ T4884] FAT-fs (loop2): Directory bread(block 68) failed
[  124.436819][ T4884] FAT-fs (loop2): Directory bread(block 69) failed
[  124.466440][ T4884] FAT-fs (loop2): Directory bread(block 70) failed
[  124.494701][ T4884] FAT-fs (loop2): Directory bread(block 71) failed
[  124.522819][ T4884] FAT-fs (loop2): Directory bread(block 72) failed
[  124.563338][ T4884] FAT-fs (loop2): Directory bread(block 73) failed
[  125.132180][ T4891] loop5: detected capacity change from 0 to 1024
[  125.181822][ T4891] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  125.280270][ T4342] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  125.416196][ T4900] loop2: detected capacity change from 0 to 256
[  125.631572][ T4900] FAT-fs (loop2): Directory bread(block 64) failed
[  125.682568][ T4900] FAT-fs (loop2): Directory bread(block 65) failed
[  125.743694][ T4900] FAT-fs (loop2): Directory bread(block 66) failed
[  125.776836][ T4900] FAT-fs (loop2): Directory bread(block 67) failed
[  125.783519][ T4900] FAT-fs (loop2): Directory bread(block 68) failed
[  125.912403][ T4900] FAT-fs (loop2): Directory bread(block 69) failed
[  125.934968][ T4900] FAT-fs (loop2): Directory bread(block 70) failed
[  125.995288][ T4900] FAT-fs (loop2): Directory bread(block 71) failed
[  126.047488][ T4900] FAT-fs (loop2): Directory bread(block 72) failed
[  126.054097][ T4900] FAT-fs (loop2): Directory bread(block 73) failed
[  126.386648][    C1] sched: RT throttling activated
[  126.566558][ T4895] syz.2.124: attempt to access beyond end of device
[  126.566558][ T4895] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  126.580349][ T4895] syz.2.124: attempt to access beyond end of device
[  126.580349][ T4895] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256
[  126.593864][   T26] audit: type=1800 audit(1731539626.438:16): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.124" name="file0" dev="loop2" ino=1048606 res=0 errno=0
[  126.764829][ T4913] loop5: detected capacity change from 0 to 1024
[  126.843986][ T4913] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  130.463281][ T4946] loop2: detected capacity change from 0 to 256
[  130.670112][ T4946] FAT-fs (loop2): Directory bread(block 64) failed
[  130.706954][ T4946] FAT-fs (loop2): Directory bread(block 65) failed
[  130.713639][ T4946] FAT-fs (loop2): Directory bread(block 66) failed
[  130.796076][ T4946] FAT-fs (loop2): Directory bread(block 67) failed
[  130.850120][ T4946] FAT-fs (loop2): Directory bread(block 68) failed
[  130.902496][ T4946] FAT-fs (loop2): Directory bread(block 69) failed
[  130.952065][ T4946] FAT-fs (loop2): Directory bread(block 70) failed
[  131.011564][ T4946] FAT-fs (loop2): Directory bread(block 71) failed
[  131.030960][ T4946] FAT-fs (loop2): Directory bread(block 72) failed
[  131.065315][ T4946] FAT-fs (loop2): Directory bread(block 73) failed
[  131.505712][ T4955] loop3: detected capacity change from 0 to 1024
[  131.593284][ T4955] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2)
[  131.992365][  T124] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  132.064465][   T26] audit: type=1326 audit(1731539631.898:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  132.189317][   T26] audit: type=1326 audit(1731539631.948:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  132.215763][  T124] usb 3-1: config 3 has an invalid interface number: 221 but max is 0
[  132.257450][  T124] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  132.312532][  T124] usb 3-1: config 3 has no interface number 0
[  132.340534][  T124] usb 3-1: config 3 interface 221 has no altsetting 0
[  132.356399][   T26] audit: type=1326 audit(1731539631.948:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  132.410699][  T124] usb 3-1: New USB device found, idVendor=9277, idProduct=0561, bcdDevice=7a.8f
[  132.464127][  T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.507526][   T26] audit: type=1326 audit(1731539631.948:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  132.535700][  T124] usb 3-1: Product: syz
[  132.560776][  T124] usb 3-1: Manufacturer: syz
[  132.587387][  T124] usb 3-1: SerialNumber: syz
[  132.686897][   T26] audit: type=1326 audit(1731539631.948:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  132.777223][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  132.783982][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  132.851944][   T26] audit: type=1326 audit(1731539631.948:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  132.897268][  T124] usb 3-1: USB disconnect, device number 3
[  133.003017][   T26] audit: type=1326 audit(1731539631.948:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  133.073175][   T26] audit: type=1326 audit(1731539631.948:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  133.149217][   T26] audit: type=1326 audit(1731539631.948:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  133.228298][   T26] audit: type=1326 audit(1731539631.948:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  133.595546][ T4980] netlink: 'syz.2.139': attribute type 10 has an invalid length.
[  133.608057][ T4980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.139'.
[  139.104924][ T4266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  139.116153][ T4266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  139.125939][ T4266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  139.138250][ T4266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  139.147628][ T4266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  139.156134][ T4266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  139.422195][ T4877] EXT4-fs (loop0): unmounting filesystem.
[  139.497110][   T41] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  139.574720][ T5020] loop1: detected capacity change from 0 to 256
[  139.698786][   T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.712996][ T5020] FAT-fs (loop1): Directory bread(block 64) failed
[  139.728567][ T5020] FAT-fs (loop1): Directory bread(block 65) failed
[  139.738313][   T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.754751][ T5020] FAT-fs (loop1): Directory bread(block 66) failed
[  139.766924][ T5020] FAT-fs (loop1): Directory bread(block 67) failed
[  139.773819][ T5020] FAT-fs (loop1): Directory bread(block 68) failed
[  139.806416][ T5020] FAT-fs (loop1): Directory bread(block 69) failed
[  139.818651][ T5020] FAT-fs (loop1): Directory bread(block 70) failed
[  139.825373][ T5020] FAT-fs (loop1): Directory bread(block 71) failed
[  139.832434][ T5020] FAT-fs (loop1): Directory bread(block 72) failed
[  139.833109][   T41] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  139.839372][ T5020] FAT-fs (loop1): Directory bread(block 73) failed
[  139.962875][   T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.060550][ T5005] chnl_net:caif_netlink_parms(): no params data found
[  140.098156][   T41] usb 4-1: config 0 descriptor??
[  140.424740][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.468401][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.498221][ T5005] device bridge_slave_0 entered promiscuous mode
[  140.509506][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.517281][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.527005][ T5005] device bridge_slave_1 entered promiscuous mode
[  140.634681][ T5005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.769563][ T5044] loop2: detected capacity change from 0 to 1024
[  140.803871][ T5044] EXT4-fs: Ignoring removed orlov option
[  140.843701][ T5044] EXT4-fs: Ignoring removed nomblk_io_submit option
[  140.844770][ T5041] netlink: 'syz.1.150': attribute type 10 has an invalid length.
[  140.869015][   T41] usbhid 4-1:0.0: can't add hid device: -71
[  140.876404][   T41] usbhid: probe of 4-1:0.0 failed with error -71
[  140.898228][   T41] usb 4-1: USB disconnect, device number 3
[  140.914676][ T5041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.150'.
[  140.954952][ T5044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  140.968534][ T5005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.633347][ T4251] Bluetooth: hci5: command tx timeout
[  141.781548][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  141.805690][ T5005] team0: Port device team_slave_0 added
[  141.960003][   T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.022958][ T5005] team0: Port device team_slave_1 added
[  142.105843][   T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.120935][ T5005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.128240][ T5005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.531403][ T5005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.579441][ T5057] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  143.595814][ T5073] loop5: detected capacity change from 0 to 256
[  143.647703][ T4251] Bluetooth: hci5: command tx timeout
[  143.659065][   T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.737715][ T5073] FAT-fs (loop5): Directory bread(block 64) failed
[  143.776743][ T5057] usb 2-1: Using ep0 maxpacket: 16
[  143.783347][ T5073] FAT-fs (loop5): Directory bread(block 65) failed
[  143.784363][ T5057] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.803753][ T5073] FAT-fs (loop5): Directory bread(block 66) failed
[  143.830848][ T5057] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.840601][ T5073] FAT-fs (loop5): Directory bread(block 67) failed
[  143.854406][ T5073] FAT-fs (loop5): Directory bread(block 68) failed
[  143.880362][ T5073] FAT-fs (loop5): Directory bread(block 69) failed
[  143.896306][ T5073] FAT-fs (loop5): Directory bread(block 70) failed
[  143.897300][ T5057] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  143.927402][ T5073] FAT-fs (loop5): Directory bread(block 71) failed
[  143.934217][ T5073] FAT-fs (loop5): Directory bread(block 72) failed
[  143.942665][ T5057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.956309][   T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.973338][ T5057] usb 2-1: Product: syz
[  143.978339][ T5073] FAT-fs (loop5): Directory bread(block 73) failed
[  143.990358][ T5057] usb 2-1: Manufacturer: syz
[  144.002760][ T5057] usb 2-1: SerialNumber: syz
[  144.026256][ T5005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.057663][ T5005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.654870][ T5005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.674970][ T5068] loop1: detected capacity change from 0 to 1024
[  144.984303][ T5005] device hsr_slave_0 entered promiscuous mode
[  145.024091][ T5005] device hsr_slave_1 entered promiscuous mode
[  145.043836][ T5005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.086889][ T5005] Cannot create hsr debugfs directory
[  145.465571][ T5068] EXT4-fs: Ignoring removed orlov option
[  145.473499][ T5068] EXT4-fs (loop1): Test dummy encryption mode enabled
[  145.562493][ T5068] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  145.726986][ T4251] Bluetooth: hci5: command tx timeout
[  146.239685][ T5068] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  146.426316][ T5005] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  146.504261][ T5005] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  146.543283][ T5005] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  146.585134][ T5005] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  146.607518][ T5057] usb 2-1: 0:2 : does not exist
[  146.726531][ T5114] loop2: detected capacity change from 0 to 2048
[  146.826488][ T5114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  147.068281][ T5125] netlink: 'syz.3.164': attribute type 10 has an invalid length.
[  147.115590][ T5125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.164'.
[  147.135955][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  147.154533][ T5057] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  147.173862][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  147.298373][ T5057] usb 2-1: USB disconnect, device number 2
[  147.531339][ T5005] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.096763][ T4251] Bluetooth: hci5: command tx timeout
[  149.445219][ T5005] 8021q: adding VLAN 0 to HW filter on device team0
[  149.456115][ T5042] udevd[5042]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.471403][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.472539][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.990738][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.014480][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.086283][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.093535][ T4731] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.361886][   T34] device hsr_slave_0 left promiscuous mode
[  150.658321][   T34] device hsr_slave_1 left promiscuous mode
[  150.761209][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.886373][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.975667][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.999981][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.052509][   T34] device bridge_slave_1 left promiscuous mode
[  151.077786][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.149071][   T34] device bridge_slave_0 left promiscuous mode
[  151.155355][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.329813][   T34] device veth1_macvtap left promiscuous mode
[  151.347437][   T34] device veth0_macvtap left promiscuous mode
[  151.353605][   T34] device veth1_vlan left promiscuous mode
[  151.427129][   T34] device veth0_vlan left promiscuous mode
[  151.709512][ T5167] loop3: detected capacity change from 0 to 256
[  151.807608][ T5167] FAT-fs (loop3): Directory bread(block 64) failed
[  151.949474][ T5167] FAT-fs (loop3): Directory bread(block 65) failed
[  153.296912][ T5167] FAT-fs (loop3): Directory bread(block 66) failed
[  153.303530][ T5167] FAT-fs (loop3): Directory bread(block 67) failed
[  153.378655][ T5167] FAT-fs (loop3): Directory bread(block 68) failed
[  153.387010][ T5167] FAT-fs (loop3): Directory bread(block 69) failed
[  153.393696][ T5167] FAT-fs (loop3): Directory bread(block 70) failed
[  153.466855][ T5167] FAT-fs (loop3): Directory bread(block 71) failed
[  153.473798][ T5167] FAT-fs (loop3): Directory bread(block 72) failed
[  153.515321][ T5167] FAT-fs (loop3): Directory bread(block 73) failed
[  155.655828][   T34] team0 (unregistering): Port device team_slave_1 removed
[  155.724806][   T34] team0 (unregistering): Port device team_slave_0 removed
[  155.784744][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.855194][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.619382][   T34] bond0 (unregistering): Released all slaves
[  157.744075][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.790367][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.817261][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.840446][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.847662][ T4731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.866977][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.906101][ T5179] netlink: 'syz.3.176': attribute type 10 has an invalid length.
[  157.931737][ T5179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.176'.
[  157.974461][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.078616][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.200167][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.372119][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.398109][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.436182][ T5211] loop3: detected capacity change from 0 to 4096
[  158.453176][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.491910][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.528276][ T5211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  158.559225][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.602203][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.626308][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.639182][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.748454][ T5220] loop2: detected capacity change from 0 to 256
[  158.778873][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  158.871759][ T5220] FAT-fs (loop2): Directory bread(block 64) failed
[  158.880704][ T5220] FAT-fs (loop2): Directory bread(block 65) failed
[  158.953279][ T5220] FAT-fs (loop2): Directory bread(block 66) failed
[  158.970140][ T5220] FAT-fs (loop2): Directory bread(block 67) failed
[  159.016856][ T5220] FAT-fs (loop2): Directory bread(block 68) failed
[  159.023574][ T5220] FAT-fs (loop2): Directory bread(block 69) failed
[  159.072507][ T5220] FAT-fs (loop2): Directory bread(block 70) failed
[  159.112101][ T5220] FAT-fs (loop2): Directory bread(block 71) failed
[  159.163535][ T5220] FAT-fs (loop2): Directory bread(block 72) failed
[  159.221592][ T5220] FAT-fs (loop2): Directory bread(block 73) failed
[  159.356018][ T5233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'.
[  160.249694][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  160.260601][ T5241] loop1: detected capacity change from 0 to 1024
[  160.274332][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  160.295701][ T5241] EXT4-fs: Ignoring removed nomblk_io_submit option
[  160.314427][ T5005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.398494][ T5241] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  160.407554][ T5243] loop2: detected capacity change from 0 to 512
[  160.418034][ T5243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  160.458146][ T5243] EXT4-fs (loop2): 1 orphan inode deleted
[  160.499877][ T5243] EXT4-fs (loop2): 1 truncate cleaned up
[  160.505590][ T5243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  160.558679][ T5254] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.189: reserved inode found cleared - inode=18
[  160.775822][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  160.841070][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  162.745904][ T5294] loop2: detected capacity change from 0 to 256
[  162.822929][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  162.851375][ T5294] FAT-fs (loop2): Directory bread(block 64) failed
[  162.876895][ T5294] FAT-fs (loop2): Directory bread(block 65) failed
[  162.888830][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.065957][ T5294] FAT-fs (loop2): Directory bread(block 66) failed
[  163.082697][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  163.089094][ T5294] FAT-fs (loop2): Directory bread(block 67) failed
[  163.150601][ T5296] loop5: detected capacity change from 0 to 8192
[  163.157446][ T5294] FAT-fs (loop2): Directory bread(block 68) failed
[  163.166002][ T5294] FAT-fs (loop2): Directory bread(block 69) failed
[  163.202982][ T5294] FAT-fs (loop2): Directory bread(block 70) failed
[  163.228829][ T5296] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.242900][ T5294] FAT-fs (loop2): Directory bread(block 71) failed
[  163.277645][ T5294] FAT-fs (loop2): Directory bread(block 72) failed
[  163.278521][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.294813][ T5294] FAT-fs (loop2): Directory bread(block 73) failed
[  163.360406][ T5005] device veth0_vlan entered promiscuous mode
[  163.418025][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.434673][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.494337][ T5005] device veth1_vlan entered promiscuous mode
[  163.662106][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  163.713528][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  163.785421][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  163.830260][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  163.871711][ T5005] device veth0_macvtap entered promiscuous mode
[  163.930217][ T5005] device veth1_macvtap entered promiscuous mode
[  164.033505][ T5309] loop3: detected capacity change from 0 to 1024
[  164.059261][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.078374][ T5309] EXT4-fs: Ignoring removed nomblk_io_submit option
[  164.099237][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.135828][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.165020][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.188169][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.212154][ T5309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  164.276799][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.334400][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.395940][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.458513][ T5005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.465960][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.493456][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  164.519247][   T11] kworker/u4:1: attempt to access beyond end of device
[  164.519247][   T11] loop2: rw=1, sector=1224, nr_sectors = 32 limit=256
[  164.597561][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  164.613633][   T11] kworker/u4:1: attempt to access beyond end of device
[  164.613633][   T11] loop2: rw=1, sector=1352, nr_sectors = 96 limit=256
[  164.641821][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.682185][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.748796][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.768415][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.785610][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.834681][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.907924][ T5005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.970301][ T5005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.106709][ T4343] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  165.359612][ T5005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.647695][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.664711][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.710383][ T5005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.758515][ T5005] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.768475][ T4343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.807070][ T4343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.834253][ T5005] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.844590][ T4343] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  165.858505][ T5005] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.878110][ T4343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.952076][ T4343] usb 6-1: config 0 descriptor??
[  167.113935][ T4343] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  167.126995][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.164155][ T4343] hid-led 0003:0FC5:B080.0003: item fetching failed at offset 1/3
[  167.169495][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.196507][ T4343] hid-led: probe of 0003:0FC5:B080.0003 failed with error -22
[  167.238824][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.265158][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  167.287303][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.320997][ T4239] usb 6-1: USB disconnect, device number 2
[  167.350511][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.295326][ T5375] cgroup: subsys name conflicts with all
[  168.553410][ T4251] Bluetooth: hci4: ISO packet for unknown connection handle 1039
[  170.096821][ T4258] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  170.301864][ T4258] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.333246][ T4258] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  170.375414][ T4258] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping
[  170.431479][ T5402] loop6: detected capacity change from 0 to 1024
[  170.434133][ T4258] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  170.492888][ T4258] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  170.528691][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  170.556071][ T5402] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2)
[  170.583267][ T4258] usb 6-1: SerialNumber: syz
[  171.748363][ T4258] usb 6-1: 0:2 : does not exist
[  171.756982][ T5410] loop3: detected capacity change from 0 to 1024
[  171.775527][ T4258] usb 6-1: unit 5 not found!
[  171.808351][ T5410] =======================================================
[  171.808351][ T5410] WARNING: The mand mount option has been deprecated and
[  171.808351][ T5410]          and is ignored by this kernel. Remove the mand
[  171.808351][ T5410]          option from the mount to silence this warning.
[  171.808351][ T5410] =======================================================
[  171.990544][ T5410] EXT4-fs: Ignoring removed bh option
[  172.032001][ T4258] usb 6-1: USB disconnect, device number 3
[  172.115441][ T5410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  172.149754][ T5410] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.299214][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  172.299232][   T26] audit: type=1800 audit(1731539672.138:37): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.224" name="file1" dev="loop3" ino=15 res=0 errno=0
[  172.334788][ T5410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.224: bg 0: block 273: padding at end of block bitmap is not set
[  172.397537][ T5042] udevd[5042]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.617029][  T127] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  172.632760][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  172.828340][  T127] usb 7-1: config 0 has an invalid interface number: 133 but max is 0
[  172.847989][  T127] usb 7-1: config 0 has no interface number 0
[  173.100485][ T5435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'.
[  174.325371][  T127] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  174.362648][  T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.400190][  T127] usb 7-1: Product: syz
[  174.578268][  T127] usb 7-1: Manufacturer: syz
[  174.593498][  T127] usb 7-1: SerialNumber: syz
[  175.646295][  T127] usb 7-1: config 0 descriptor??
[  175.651933][  T127] usb 7-1: can't set config #0, error -71
[  175.715683][  T127] usb 7-1: USB disconnect, device number 2
[  176.664914][ T5456] loop6: detected capacity change from 0 to 1024
[  176.750203][ T5456] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2)
[  176.842228][ T5042] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  178.561285][ T5479] netlink: 'syz.5.242': attribute type 10 has an invalid length.
[  178.583261][ T5479] netlink: 40 bytes leftover after parsing attributes in process `syz.5.242'.
[  178.620826][ T5479] device team0 entered promiscuous mode
[  178.629685][ T5479] device team_slave_0 entered promiscuous mode
[  178.646023][ T5479] device team_slave_1 entered promiscuous mode
[  178.659443][ T5479] bridge0: port 3(team0) entered blocking state
[  178.677211][ T5479] bridge0: port 3(team0) entered disabled state
[  178.697245][ T5488] loop2: detected capacity change from 0 to 256
[  178.698091][ T5488] exfat: Bad value for 'uid'
[  178.799317][ T5479] bridge0: port 3(team0) entered blocking state
[  178.806779][ T5479] bridge0: port 3(team0) entered forwarding state
[  179.399861][ T5505] loop6: detected capacity change from 0 to 1024
[  179.450978][ T5505] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2)
[  181.155438][ T5532] netlink: 'syz.1.255': attribute type 10 has an invalid length.
[  181.201519][ T5532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.255'.
[  182.299036][ T5548] loop5: detected capacity change from 0 to 1024
[  182.341763][ T5548] EXT4-fs: Ignoring removed orlov option
[  182.341794][ T5548] EXT4-fs: Ignoring removed nomblk_io_submit option
[  182.509190][ T5548] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  183.248471][ T4412] EXT4-fs (loop5): unmounting filesystem.
[  183.652157][ T5563] loop5: detected capacity change from 0 to 1024
[  183.711933][ T5563] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  183.765443][ T5568] netlink: 20 bytes leftover after parsing attributes in process `syz.6.265'.
[  186.064518][ T5594] loop6: detected capacity change from 0 to 16
[  186.178510][ T5594] erofs: (device loop6): mounted with root inode @ nid 36.
[  187.586689][ T5610] loop2: detected capacity change from 0 to 1024
[  187.673076][ T5610] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2)
[  188.344528][ T5625] loop6: detected capacity change from 0 to 256
[  188.459693][ T5625] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  188.881584][ T5625] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  189.541293][ T5640] loop3: detected capacity change from 0 to 256
[  189.639669][ T5640] FAT-fs (loop3): Directory bread(block 64) failed
[  189.671429][ T5640] FAT-fs (loop3): Directory bread(block 65) failed
[  189.720754][ T5640] FAT-fs (loop3): Directory bread(block 66) failed
[  189.751038][ T5640] FAT-fs (loop3): Directory bread(block 67) failed
[  189.770341][ T5640] FAT-fs (loop3): Directory bread(block 68) failed
[  189.790194][ T5640] FAT-fs (loop3): Directory bread(block 69) failed
[  189.856866][ T5640] FAT-fs (loop3): Directory bread(block 70) failed
[  189.880895][ T5640] FAT-fs (loop3): Directory bread(block 71) failed
[  189.937095][ T5640] FAT-fs (loop3): Directory bread(block 72) failed
[  189.943707][ T5640] FAT-fs (loop3): Directory bread(block 73) failed
[  190.090861][ T5649] netlink: 'syz.5.287': attribute type 10 has an invalid length.
[  190.124185][ T5649] netlink: 40 bytes leftover after parsing attributes in process `syz.5.287'.
[  190.256279][ T4719] kworker/u4:15: attempt to access beyond end of device
[  190.256279][ T4719] loop3: rw=1, sector=1224, nr_sectors = 32 limit=256
[  190.294069][ T4719] kworker/u4:15: attempt to access beyond end of device
[  190.294069][ T4719] loop3: rw=1, sector=1352, nr_sectors = 96 limit=256
[  190.431728][ T5656] loop2: detected capacity change from 0 to 1024
[  190.504568][ T5656] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2)
[  191.709049][ T5670] loop3: detected capacity change from 0 to 256
[  191.844525][ T5670] FAT-fs (loop3): Directory bread(block 64) failed
[  191.876975][ T5670] FAT-fs (loop3): Directory bread(block 65) failed
[  191.884316][ T5670] FAT-fs (loop3): Directory bread(block 66) failed
[  191.957797][ T5670] FAT-fs (loop3): Directory bread(block 67) failed
[  191.975678][ T5670] FAT-fs (loop3): Directory bread(block 68) failed
[  192.011306][ T5670] FAT-fs (loop3): Directory bread(block 69) failed
[  192.061083][ T5670] FAT-fs (loop3): Directory bread(block 70) failed
[  192.112170][ T5670] FAT-fs (loop3): Directory bread(block 71) failed
[  192.159018][ T5670] FAT-fs (loop3): Directory bread(block 72) failed
[  192.195270][ T5670] FAT-fs (loop3): Directory bread(block 73) failed
[  192.501592][ T5670] syz.3.289: attempt to access beyond end of device
[  192.501592][ T5670] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  192.516698][ T5670] syz.3.289: attempt to access beyond end of device
[  192.516698][ T5670] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256
[  192.556930][   T26] audit: type=1800 audit(1731539692.378:38): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.289" name="file0" dev="loop3" ino=1048623 res=0 errno=0
[  194.277596][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  194.284158][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  194.610456][ T5710] loop5: detected capacity change from 0 to 256
[  194.674434][ T5710] FAT-fs (loop5): Directory bread(block 64) failed
[  194.713182][ T5710] FAT-fs (loop5): Directory bread(block 65) failed
[  194.831078][ T5710] FAT-fs (loop5): Directory bread(block 66) failed
[  194.892048][ T5710] FAT-fs (loop5): Directory bread(block 67) failed
[  194.931013][ T5710] FAT-fs (loop5): Directory bread(block 68) failed
[  194.975022][ T5710] FAT-fs (loop5): Directory bread(block 69) failed
[  195.005742][ T5710] FAT-fs (loop5): Directory bread(block 70) failed
[  195.114677][ T5710] FAT-fs (loop5): Directory bread(block 71) failed
[  195.149412][ T5710] FAT-fs (loop5): Directory bread(block 72) failed
[  195.173322][ T5710] FAT-fs (loop5): Directory bread(block 73) failed
[  195.451759][ T4625] kworker/u4:14: attempt to access beyond end of device
[  195.451759][ T4625] loop5: rw=1, sector=1224, nr_sectors = 32 limit=256
[  195.485750][ T5721] loop1: detected capacity change from 0 to 256
[  195.518591][ T5721] exfat: Deprecated parameter 'utf8'
[  195.542308][ T5721] exfat: Deprecated parameter 'namecase'
[  195.547853][ T4625] kworker/u4:14: attempt to access beyond end of device
[  195.547853][ T4625] loop5: rw=1, sector=1352, nr_sectors = 96 limit=256
[  195.552435][ T5721] exfat: Deprecated parameter 'utf8'
[  195.621727][ T5721] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  195.802036][ T5721] syz.1.303: attempt to access beyond end of device
[  195.802036][ T5721] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  196.078533][ T5721] syz.1.303: attempt to access beyond end of device
[  196.078533][ T5721] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  196.190546][   T26] audit: type=1800 audit(1731539696.028:39): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.303" name="file1" dev="loop1" ino=1048625 res=0 errno=0
[  196.286950][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  196.293246][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  196.299434][ T4255] Bluetooth: hci0: command 0x0406 tx timeout
[  197.123899][   T41] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  197.318346][   T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.340150][   T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.366803][   T41] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  197.394461][   T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.435159][   T41] usb 7-1: config 0 descriptor??
[  198.336878][ T5759] "syz.1.310" (5759) uses obsolete ecb(arc4) skcipher
[  200.976782][ T5057] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  201.039591][   T41] usbhid 7-1:0.0: can't add hid device: -71
[  201.055636][   T41] usbhid: probe of 7-1:0.0 failed with error -71
[  201.083573][   T41] usb 7-1: USB disconnect, device number 3
[  201.224059][ T5774] loop6: detected capacity change from 0 to 256
[  201.254186][ T5774] exfat: Deprecated parameter 'namecase'
[  201.277636][ T5774] exfat: Deprecated parameter 'utf8'
[  201.344894][ T5774] exfat: Deprecated parameter 'namecase'
[  201.472753][ T5774] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  202.230477][ T5799] loop6: detected capacity change from 0 to 512
[  202.463986][ T5799] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  202.524966][ T5799] EXT4-fs (loop6): orphan cleanup on readonly fs
[  202.642067][ T5799] EXT4-fs warning (device loop6): ext4_enable_quotas:7036: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  202.715934][ T5806] loop5: detected capacity change from 0 to 1024
[  202.728292][ T5799] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  202.769859][ T5806] EXT4-fs: Ignoring removed mblk_io_submit option
[  202.784933][ T5799] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.323: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  203.002907][ T5799] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.323: couldn't read orphan inode 13 (err -117)
[  203.904221][ T5799] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  203.968713][ T5806] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  203.987116][ T5799] EXT4-fs error (device loop6): ext4_lookup:1858: comm syz.6.323: inode #15: comm syz.6.323: iget: illegal inode #
[  204.200470][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  204.406700][   T41] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  204.617518][   T41] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  204.656999][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.706801][   T41] usb 3-1: config 0 has no interfaces?
[  204.737777][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.797122][   T41] usb 3-1: config 0 has no interfaces?
[  204.833055][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.869784][   T41] usb 3-1: config 0 has no interfaces?
[  204.891949][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.955492][   T41] usb 3-1: config 0 has no interfaces?
[  204.984331][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.049939][   T41] usb 3-1: config 0 has no interfaces?
[  205.076867][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.089117][   T41] usb 3-1: config 0 has no interfaces?
[  205.101651][ T4412] EXT4-fs (loop5): unmounting filesystem.
[  205.108145][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.118662][   T41] usb 3-1: config 0 has no interfaces?
[  205.166734][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.229763][   T41] usb 3-1: config 0 has no interfaces?
[  205.273217][   T41] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  205.354520][   T41] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  205.402492][   T41] usb 3-1: Product: syz
[  205.436666][   T41] usb 3-1: Manufacturer: syz
[  205.443049][   T41] usb 3-1: SerialNumber: syz
[  205.460218][   T41] usb 3-1: config 0 descriptor??
[  205.485272][ T5854] loop3: detected capacity change from 0 to 2048
[  205.635711][ T5854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  205.892392][ T4239] usb 3-1: USB disconnect, device number 4
[  207.210905][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  211.673451][ T4251] Bluetooth: hci3: command 0x0406 tx timeout
[  214.460051][ T5934] loop5: detected capacity change from 0 to 1024
[  214.587675][ T5934] EXT4-fs: Ignoring removed orlov option
[  214.618885][ T5934] EXT4-fs: Ignoring removed nomblk_io_submit option
[  214.926479][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.6.356'.
[  214.939086][ T5934] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  215.880969][ T5952] ALSA: seq fatal error: cannot create timer (-22)
[  216.399821][ T4412] EXT4-fs (loop5): unmounting filesystem.
[  216.856872][ T4239] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  217.058436][ T4239] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  217.124729][ T4239] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  217.906426][ T4239] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  218.114012][ T4239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.838652][ T4239] usb 6-1: Product: syz
[  219.842984][ T4239] usb 6-1: Manufacturer: syz
[  219.857796][ T4239] usb 6-1: SerialNumber: syz
[  219.873214][ T4239] usb 6-1: config 0 descriptor??
[  219.933242][ T4239] usb 6-1: can't set config #0, error -71
[  219.976869][ T5057] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  220.004575][ T4239] usb 6-1: USB disconnect, device number 4
[  220.550377][ T5057] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  220.599773][ T5057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.626776][ T5057] usb 2-1: config 0 has no interfaces?
[  220.636863][ T5057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.700601][ T5057] usb 2-1: config 0 has no interfaces?
[  220.912681][ T5057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.966737][ T5057] usb 2-1: config 0 has no interfaces?
[  220.994547][ T5057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.021909][ T5057] usb 2-1: config 0 has no interfaces?
[  221.049518][ T5057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.080114][ T5057] usb 2-1: config 0 has no interfaces?
[  221.248511][ T5057] usb 2-1: unable to read config index 5 descriptor/start: -71
[  221.274413][ T5057] usb 2-1: can't read configurations, error -71
[  221.502388][ T6011] loop6: detected capacity change from 0 to 1024
[  222.089937][ T6011] capability: warning: `syz.6.372' uses deprecated v2 capabilities in a way that may be insecure
[  222.391761][ T6018] loop5: detected capacity change from 0 to 1024
[  222.430196][ T6018] EXT4-fs: Ignoring removed nomblk_io_submit option
[  222.574308][ T6018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  222.751467][ T4412] EXT4-fs (loop5): unmounting filesystem.
[  224.246848][   T14] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  224.798933][   T14] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  224.840258][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.913041][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  224.967448][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.014070][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.054961][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.073146][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.090853][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.121921][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.142178][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.168107][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.210218][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.255304][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.279135][ T6074] loop6: detected capacity change from 0 to 1024
[  225.286479][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.326745][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.358941][ T6074] EXT4-fs: Ignoring removed nomblk_io_submit option
[  225.369530][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.390602][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.451154][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.476715][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.484879][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.516683][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.525618][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.532574][  T124] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  225.541284][ T6074] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  225.551603][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.576707][   T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.585638][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.604689][   T14] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  225.623869][   T14] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  225.633176][   T14] usb 6-1: Product: syz
[  225.637803][   T14] usb 6-1: Manufacturer: syz
[  225.642440][   T14] usb 6-1: SerialNumber: syz
[  225.649259][   T14] usb 6-1: config 0 descriptor??
[  225.673536][   T14] yurex 6-1:0.0: Could not find endpoints
[  225.756151][  T124] usb 3-1: config 3 has an invalid interface number: 221 but max is 0
[  225.776739][  T124] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  225.794245][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  225.797424][  T124] usb 3-1: config 3 has no interface number 0
[  225.806130][  T124] usb 3-1: config 3 interface 221 has no altsetting 0
[  225.859696][  T124] usb 3-1: New USB device found, idVendor=9277, idProduct=0561, bcdDevice=7a.8f
[  225.895889][ T5914] usb 6-1: USB disconnect, device number 5
[  225.910433][  T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.943732][  T124] usb 3-1: Product: syz
[  225.956016][  T124] usb 3-1: Manufacturer: syz
[  225.966957][  T124] usb 3-1: SerialNumber: syz
[  226.204643][  T124] cdc_acm 3-1:3.221: skipping garbage
[  226.232043][  T124] usb 3-1: USB disconnect, device number 5
[  226.521172][ T6101] loop3: detected capacity change from 0 to 2048
[  226.973526][ T6111] loop2: detected capacity change from 0 to 512
[  227.048020][ T6111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  227.085129][ T6111] EXT4-fs (loop2): 1 truncate cleaned up
[  227.101143][ T6111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  227.137540][   T26] audit: type=1800 audit(1731539726.978:40): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.395" name="file1" dev="loop2" ino=15 res=0 errno=0
[  227.523220][ T6115] loop5: detected capacity change from 0 to 1024
[  227.537763][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  227.635982][ T6115] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  229.812994][ T6149] loop2: detected capacity change from 0 to 1024
[  231.149808][ T6149] EXT4-fs: Ignoring removed nomblk_io_submit option
[  231.618081][ T6149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  231.666799][ T4297] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  231.906518][ T4297] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  231.933851][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  231.978108][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.021470][ T4297] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.070388][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.102849][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.158164][ T4297] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.198814][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.234509][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.310208][ T4297] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.360507][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.397631][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.437472][ T4297] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.470973][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.519744][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.561394][ T4297] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.611278][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  232.620532][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.670490][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.702189][ T4297] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.763456][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.808079][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.840564][ T4297] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.895298][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.946491][ T4297] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.976800][ T4297] usb 4-1: config 0 interface 0 has no altsetting 0
[  233.008321][ T4297] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  233.041038][ T4297] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  233.081747][ T4297] usb 4-1: Product: syz
[  233.085973][ T4297] usb 4-1: Manufacturer: syz
[  233.122961][ T4297] usb 4-1: SerialNumber: syz
[  233.167023][ T4297] usb 4-1: config 0 descriptor??
[  233.198706][ T4297] yurex 4-1:0.0: Could not find endpoints
[  234.353613][ T5057] usb 4-1: USB disconnect, device number 5
[  235.426792][ T4251] Bluetooth: hci5: link tx timeout
[  235.433385][ T4251] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  235.567315][   T48] Bluetooth: hci5: link tx timeout
[  235.572511][   T48] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  237.487042][   T48] Bluetooth: hci5: command 0x0406 tx timeout
[  238.376269][ T6237] loop3: detected capacity change from 0 to 1024
[  238.436561][ T6237] EXT4-fs: Ignoring removed nomblk_io_submit option
[  238.443399][ T6240] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[  238.516830][ T6237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  238.625171][ T6240] netlink: 92 bytes leftover after parsing attributes in process `syz.2.419'.
[  238.759093][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  239.471182][ T6251] loop2: detected capacity change from 0 to 1024
[  239.549995][ T6251] EXT4-fs: Ignoring removed orlov option
[  239.586730][ T6251] EXT4-fs: Ignoring removed nomblk_io_submit option
[  239.839305][ T6251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  240.064587][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  240.166957][  T124] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  240.379380][  T124] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  240.401435][  T124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.430789][  T124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  240.468834][  T124] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.496351][  T124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.531693][  T124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  240.560480][  T124] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.581604][  T124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.618953][  T124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  240.650706][  T124] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.677973][  T124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.710928][  T124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  240.750779][  T124] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.796888][  T124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.817351][  T124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  240.856822][  T124] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.891375][  T124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.951229][  T124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  240.991821][  T124] usb 6-1: config 0 interface 0 has no altsetting 0
[  241.039554][  T124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.103101][  T124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.164402][  T124] usb 6-1: config 0 interface 0 has no altsetting 0
[  241.210766][  T124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.258751][  T124] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.298176][  T124] usb 6-1: config 0 interface 0 has no altsetting 0
[  241.333356][  T124] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  241.410389][  T124] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  241.429717][  T124] usb 6-1: Product: syz
[  241.444193][  T124] usb 6-1: Manufacturer: syz
[  241.493865][  T124] usb 6-1: SerialNumber: syz
[  241.533844][  T124] usb 6-1: config 0 descriptor??
[  241.579605][  T124] yurex 6-1:0.0: Could not find endpoints
[  241.805858][  T124] usb 6-1: USB disconnect, device number 6
[  242.682392][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  242.698150][ T4255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  242.710901][ T4255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  242.720938][ T4255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  242.729994][ T4255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  242.737567][ T4255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  243.972300][ T4303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.099015][ T6303] loop3: detected capacity change from 0 to 1024
[  244.167697][ T6303] EXT4-fs: Ignoring removed orlov option
[  244.209919][ T6303] EXT4-fs (loop3): Test dummy encryption mode enabled
[  244.253337][ T6303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  244.288393][ T4303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.461468][ T6309] kvm: emulating exchange as write
[  244.487718][ T4303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.630908][ T6311] loop6: detected capacity change from 0 to 1024
[  244.702730][ T6311] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2)
[  244.767120][   T48] Bluetooth: hci2: command tx timeout
[  246.076151][ T4303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.093783][ T6294] chnl_net:caif_netlink_parms(): no params data found
[  246.114346][ T6320] netlink: 'syz.6.435': attribute type 10 has an invalid length.
[  246.134857][ T6320] netlink: 40 bytes leftover after parsing attributes in process `syz.6.435'.
[  246.162439][ T6320] device team0 entered promiscuous mode
[  246.179816][ T6320] device team_slave_0 entered promiscuous mode
[  246.202506][ T6320] device team_slave_1 entered promiscuous mode
[  246.223688][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  246.230778][ T6320] bridge0: port 3(team0) entered blocking state
[  246.271929][ T6320] bridge0: port 3(team0) entered disabled state
[  246.306204][ T6320] bridge0: port 3(team0) entered blocking state
[  246.312638][ T6320] bridge0: port 3(team0) entered forwarding state
[  246.451987][ T6319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.474900][ T6340] loop3: detected capacity change from 0 to 2048
[  246.846781][   T48] Bluetooth: hci2: command tx timeout
[  247.081108][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.091167][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.108270][ T6294] device bridge_slave_0 entered promiscuous mode
[  247.176916][ T4297] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  247.212536][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.226500][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.235548][ T6361] loop2: detected capacity change from 0 to 512
[  247.245153][ T6294] device bridge_slave_1 entered promiscuous mode
[  247.277517][ T6361] EXT4-fs: Ignoring removed i_version option
[  247.301348][ T6361] EXT4-fs: Ignoring removed nobh option
[  247.330527][ T6361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  247.378138][ T4297] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  247.393087][ T6361] EXT4-fs (loop2): 1 truncate cleaned up
[  247.402566][ T6361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  247.429107][ T4297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.466915][ T6294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.505556][ T4297] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  247.568458][ T4297] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  247.589125][ T4297] usb 7-1: config 0 interface 0 has no altsetting 0
[  247.616240][ T4297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.652897][ T4297] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  247.698882][ T6361] EXT4-fs error (device loop2): ext4_resize_begin:62: comm syz.2.442: resize_inode disabled but reserved GDT blocks non-zero
[  247.702817][ T4297] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  247.784794][ T4297] usb 7-1: config 0 interface 0 has no altsetting 0
[  247.816636][ T6294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.826156][ T4297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.861489][ T4297] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  247.892686][ T4297] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  247.934682][ T4263] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 804536315 in block_group 0
[  247.963883][ T4297] usb 7-1: config 0 interface 0 has no altsetting 0
[  247.964305][ T4263] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  247.985291][ T4263] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error
[  248.000424][ T4263] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 804536315 in block_group 0
[  248.018855][ T4263] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 804536315 in block_group 0
[  248.035646][ T4297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.064574][ T4297] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.101013][ T4297] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  248.115313][ T4297] usb 7-1: config 0 interface 0 has no altsetting 0
[  248.137209][ T4297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.165742][ T4297] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.218717][ T4297] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  248.258730][ T4297] usb 7-1: config 0 interface 0 has no altsetting 0
[  248.268204][ T6359] syz.5.441 (6359) used greatest stack depth: 19640 bytes left
[  248.285289][ T4297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.314302][ T4297] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.334762][ T4297] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  248.386846][ T4297] usb 7-1: config 0 interface 0 has no altsetting 0
[  248.416920][ T4297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.441118][ T4297] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.451784][ T4297] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  248.465427][ T4297] usb 7-1: config 0 interface 0 has no altsetting 0
[  248.487751][ T4297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.498406][ T4297] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.515379][ T4297] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  248.530317][ T4297] usb 7-1: config 0 interface 0 has no altsetting 0
[  248.567009][ T4297] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  248.576802][ T6379] loop5: detected capacity change from 0 to 256
[  248.592712][ T4297] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  248.606886][ T4297] usb 7-1: Product: syz
[  248.611841][ T4297] usb 7-1: Manufacturer: syz
[  248.619845][ T4297] usb 7-1: SerialNumber: syz
[  248.639301][ T4297] usb 7-1: config 0 descriptor??
[  248.663443][ T4297] yurex 7-1:0.0: Could not find endpoints
[  248.673675][ T6379] FAT-fs (loop5): Directory bread(block 64) failed
[  248.684957][ T6379] FAT-fs (loop5): Directory bread(block 65) failed
[  248.696207][ T6379] FAT-fs (loop5): Directory bread(block 66) failed
[  248.720691][ T6379] FAT-fs (loop5): Directory bread(block 67) failed
[  248.732617][ T6379] FAT-fs (loop5): Directory bread(block 68) failed
[  248.742749][ T6379] FAT-fs (loop5): Directory bread(block 69) failed
[  248.765339][ T6379] FAT-fs (loop5): Directory bread(block 70) failed
[  248.785480][ T6379] FAT-fs (loop5): Directory bread(block 71) failed
[  248.792804][ T6379] FAT-fs (loop5): Directory bread(block 72) failed
[  248.800031][ T6379] FAT-fs (loop5): Directory bread(block 73) failed
[  248.818983][   T46] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm kworker/u4:3: Invalid inode table block 804536315 in block_group 0
[  248.873055][ T4297] usb 7-1: USB disconnect, device number 4
[  248.885281][ T6294] team0: Port device team_slave_0 added
[  248.908745][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  248.926992][   T48] Bluetooth: hci2: command tx timeout
[  248.954227][ T6294] team0: Port device team_slave_1 added
[  249.641054][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.654644][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.746271][ T6294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.853425][   T34] kworker/u4:2: attempt to access beyond end of device
[  249.853425][   T34] loop5: rw=1, sector=1224, nr_sectors = 32 limit=256
[  249.889560][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.895647][   T34] kworker/u4:2: attempt to access beyond end of device
[  249.895647][   T34] loop5: rw=1, sector=1352, nr_sectors = 96 limit=256
[  249.906728][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.983157][ T6294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.224225][ T6391] netlink: 'syz.6.448': attribute type 10 has an invalid length.
[  250.232264][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.6.448'.
[  250.664175][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.673675][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.681712][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.709300][ T4255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.721273][ T4255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  250.729817][ T4255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.745380][ T6405] loop6: detected capacity change from 0 to 1024
[  250.763007][ T6405] EXT4-fs: Ignoring removed orlov option
[  250.769551][ T6405] EXT4-fs: Ignoring removed nomblk_io_submit option
[  250.803730][ T6405] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  250.921503][ T6409] ALSA: seq fatal error: cannot create timer (-22)
[  251.017739][ T4255] Bluetooth: hci2: command tx timeout
[  251.325587][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  251.332428][ T6294] device hsr_slave_0 entered promiscuous mode
[  251.430753][ T6294] device hsr_slave_1 entered promiscuous mode
[  251.485917][ T6294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.504059][ T6294] Cannot create hsr debugfs directory
[  251.581093][ T4303] device hsr_slave_0 left promiscuous mode
[  251.640615][ T6413] loop6: detected capacity change from 0 to 2048
[  251.659254][ T4303] device hsr_slave_1 left promiscuous mode
[  251.666342][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.676062][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.705451][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.714182][ T5042] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  252.381591][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.767589][ T4255] Bluetooth: hci0: command tx timeout
[  252.861015][ T4303] bridge0: port 3(team0) entered disabled state
[  252.915120][ T4303] device bridge_slave_1 left promiscuous mode
[  252.934744][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.948003][ T4303] device bridge_slave_0 left promiscuous mode
[  252.954376][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.000500][ T4303] device veth1_macvtap left promiscuous mode
[  253.012303][ T4303] device veth0_macvtap left promiscuous mode
[  253.018521][ T4303] device veth1_vlan left promiscuous mode
[  253.024371][ T4303] device veth0_vlan left promiscuous mode
[  253.489830][ T4303] device team_slave_1 left promiscuous mode
[  253.500082][ T4303] team0 (unregistering): Port device team_slave_1 removed
[  253.543787][ T4303] device team_slave_0 left promiscuous mode
[  253.550786][ T4303] team0 (unregistering): Port device team_slave_0 removed
[  253.594724][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.643329][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.657905][ T4303] bond0 (unregistering): Released all slaves
[  254.846669][ T4255] Bluetooth: hci0: command tx timeout
[  255.164924][ T6433] loop6: detected capacity change from 0 to 1024
[  255.215273][ T6433] EXT4-fs: Ignoring removed orlov option
[  255.264330][ T6433] EXT4-fs: Ignoring removed nomblk_io_submit option
[  255.374897][ T6433] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  255.723013][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  255.902237][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  256.032938][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  256.041370][ T6294] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  256.117305][ T6294] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  256.163071][ T6294] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  256.196520][ T6403] chnl_net:caif_netlink_parms(): no params data found
[  256.265091][ T6294] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  256.413483][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.570448][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.656730][  T127] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  256.746987][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.808826][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.829887][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.859782][  T127] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  256.860426][ T6403] device bridge_slave_0 entered promiscuous mode
[  256.912632][  T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.926899][ T4255] Bluetooth: hci0: command tx timeout
[  256.957435][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.968162][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  256.977940][  T127] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  256.991669][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.001736][  T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.013285][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.023118][  T127] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.036686][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.057534][  T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.068200][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.077839][  T127] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.091457][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.100806][  T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.112570][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.122157][  T127] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.135712][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.144925][  T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.158820][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.178112][  T127] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.191862][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.203008][  T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.214780][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.224278][  T127] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.237840][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.249799][  T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.263729][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.274147][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.288185][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.298738][  T127] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.318501][ T6403] device bridge_slave_1 entered promiscuous mode
[  257.352669][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.375227][  T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.386683][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  257.396310][  T127] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.415528][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.432961][  T127] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  257.443102][  T127] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  257.452199][  T127] usb 6-1: Product: syz
[  257.457458][  T127] usb 6-1: Manufacturer: syz
[  258.034865][  T127] usb 6-1: SerialNumber: syz
[  258.068808][  T127] usb 6-1: config 0 descriptor??
[  258.096039][  T127] yurex 6-1:0.0: Could not find endpoints
[  258.125390][ T6294] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.189076][ T6403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.270188][ T6403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.309240][ T4297] usb 6-1: USB disconnect, device number 7
[  258.350834][ T6473] loop3: detected capacity change from 0 to 512
[  258.359125][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  258.392416][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  258.401670][ T6473] EXT4-fs: Ignoring removed nomblk_io_submit option
[  258.521634][ T6473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  258.523555][ T6294] 8021q: adding VLAN 0 to HW filter on device team0
[  258.545350][ T6403] team0: Port device team_slave_0 added
[  258.552115][ T6473] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  258.657554][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  259.016964][ T4255] Bluetooth: hci0: command tx timeout
[  259.207829][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  259.224737][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.231952][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.351988][ T6403] team0: Port device team_slave_1 added
[  259.384100][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  259.435191][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  259.487440][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  259.494537][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  259.502037][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.509306][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.563035][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.588912][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  259.610734][ T6483] loop5: detected capacity change from 0 to 1024
[  259.682928][ T6483] EXT4-fs: Ignoring removed orlov option
[  259.722914][ T6483] EXT4-fs: Ignoring removed nomblk_io_submit option
[  259.796027][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  259.816035][ T6483] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  259.817454][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  259.916304][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  260.047169][ T6493] ALSA: seq fatal error: cannot create timer (-22)
[  260.444813][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  260.490674][ T4412] EXT4-fs (loop5): unmounting filesystem.
[  260.510069][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  260.519164][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  260.528860][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  260.538037][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.549118][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  260.738555][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.745548][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.833744][ T6502] loop3: detected capacity change from 0 to 2048
[  260.860598][ T6403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.881771][ T5042] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  260.967920][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.983227][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.094983][ T6403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.218441][ T6513] loop6: detected capacity change from 0 to 256
[  261.307923][ T6513] FAT-fs (loop6): Directory bread(block 64) failed
[  261.330322][ T6513] FAT-fs (loop6): Directory bread(block 65) failed
[  261.353463][ T6513] FAT-fs (loop6): Directory bread(block 66) failed
[  261.368569][ T6513] FAT-fs (loop6): Directory bread(block 67) failed
[  261.392973][ T6513] FAT-fs (loop6): Directory bread(block 68) failed
[  261.411739][ T6513] FAT-fs (loop6): Directory bread(block 69) failed
[  261.429082][ T6513] FAT-fs (loop6): Directory bread(block 70) failed
[  261.456739][ T6513] FAT-fs (loop6): Directory bread(block 71) failed
[  261.467322][ T6513] FAT-fs (loop6): Directory bread(block 72) failed
[  261.566924][ T6513] FAT-fs (loop6): Directory bread(block 73) failed
[  262.954466][ T6403] device hsr_slave_0 entered promiscuous mode
[  263.040708][ T6403] device hsr_slave_1 entered promiscuous mode
[  263.074248][ T6403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  263.204774][ T6403] Cannot create hsr debugfs directory
[  263.338270][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  263.345960][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  263.360267][ T6531] loop6: detected capacity change from 0 to 1024
[  263.385557][ T6294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.400567][ T6531] EXT4-fs: Ignoring removed orlov option
[  263.429842][ T6531] EXT4-fs: Ignoring removed nomblk_io_submit option
[  263.506938][  T127] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  263.512284][ T6531] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  263.723595][ T6538] ALSA: seq fatal error: cannot create timer (-22)
[  263.754063][  T127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.771682][  T127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.781962][  T127] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  263.794044][  T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.917285][  T127] usb 6-1: config 0 descriptor??
[  264.221723][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  264.422361][  T127] hid-rmi 0003:1532:011D.0004: unknown main item tag 0x7
[  264.447183][  T127] hid-rmi 0003:1532:011D.0004: item fetching failed at offset 6/7
[  264.487487][  T127] hid-rmi 0003:1532:011D.0004: parse failed
[  264.513001][  T127] hid-rmi: probe of 0003:1532:011D.0004 failed with error -22
[  264.625269][  T127] usb 6-1: USB disconnect, device number 8
[  265.100336][    T9] device hsr_slave_0 left promiscuous mode
[  265.118569][    T9] device hsr_slave_1 left promiscuous mode
[  265.137021][  T127] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  265.158405][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.208891][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.222373][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.230603][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.249374][    T9] bridge0: port 3(team0) entered disabled state
[  265.273085][    T9] device bridge_slave_1 left promiscuous mode
[  265.291042][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.313250][    T9] device bridge_slave_0 left promiscuous mode
[  265.321373][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.348087][  T127] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  265.361990][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.395599][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.430583][  T127] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.444175][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.453624][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.465364][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.475774][  T127] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.543777][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.577056][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.577114][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.577153][  T127] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.577175][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.578419][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.578444][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.578477][  T127] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.578498][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.579596][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.579621][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.579654][  T127] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.579676][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.602070][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.602102][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.602143][  T127] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.602172][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.603531][    T9] device veth1_macvtap left promiscuous mode
[  265.603636][    T9] device veth0_macvtap left promiscuous mode
[  265.603763][    T9] device veth1_vlan left promiscuous mode
[  265.603908][    T9] device veth0_vlan left promiscuous mode
[  265.605061][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.605087][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.605129][  T127] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.605158][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.609014][  T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.609042][  T127] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.609115][  T127] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.609145][  T127] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.611884][  T127] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  265.611915][  T127] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  265.611940][  T127] usb 4-1: Product: syz
[  265.611957][  T127] usb 4-1: Manufacturer: syz
[  265.611973][  T127] usb 4-1: SerialNumber: syz
[  265.618703][  T127] usb 4-1: config 0 descriptor??
[  265.626192][  T127] yurex 4-1:0.0: Could not find endpoints
[  265.827869][  T127] usb 4-1: USB disconnect, device number 6
[  267.799985][ T6573] loop3: detected capacity change from 0 to 2048
[  270.299016][    T9] device team_slave_1 left promiscuous mode
[  270.319384][    T9] team0 (unregistering): Port device team_slave_1 removed
[  270.488186][    T9] device team_slave_0 left promiscuous mode
[  270.508093][    T9] team0 (unregistering): Port device team_slave_0 removed
[  270.672855][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.752132][ T6589] loop5: detected capacity change from 0 to 8192
[  270.810788][ T6589] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  270.868931][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.896525][ T6591] loop6: detected capacity change from 0 to 1024
[  270.910950][ T6591] EXT4-fs: Ignoring removed orlov option
[  270.941128][ T6591] EXT4-fs: Ignoring removed nomblk_io_submit option
[  271.024424][ T6591] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  271.575116][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  272.106115][  T127] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  272.355136][  T127] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  272.384878][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  272.430803][  T127] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  272.478911][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.521487][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  272.591916][  T127] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  272.640313][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.705218][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  272.715947][  T127] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  272.732192][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.741993][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  272.757080][  T127] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  272.773338][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.791637][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  272.813726][  T127] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  272.826183][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.840674][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  272.883096][  T127] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  272.894066][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.930161][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  272.944262][  T127] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  272.957923][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.987826][  T127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  273.003454][  T127] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  273.013931][  T127] usb 6-1: config 0 interface 0 has no altsetting 0
[  273.064365][  T127] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  273.078389][  T127] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  273.097697][  T127] usb 6-1: Product: syz
[  273.113232][  T127] usb 6-1: Manufacturer: syz
[  273.118319][  T127] usb 6-1: SerialNumber: syz
[  273.126247][  T127] usb 6-1: config 0 descriptor??
[  273.137526][  T127] yurex 6-1:0.0: Could not find endpoints
[  273.817559][ T4298] usb 6-1: USB disconnect, device number 9
[  274.808017][    T9] bond0 (unregistering): Released all slaves
[  274.949334][ T6403] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  275.047791][ T6403] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  275.058033][ T6403] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  275.068371][ T6403] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  275.106541][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  275.159246][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  275.268535][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  275.300405][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  275.367158][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  275.387926][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  275.522734][ T6294] device veth0_vlan entered promiscuous mode
[  276.691852][ T6294] device veth1_vlan entered promiscuous mode
[  276.739593][ T6627] loop6: detected capacity change from 0 to 1024
[  276.780740][ T6627] EXT4-fs: Ignoring removed orlov option
[  276.786528][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  276.810839][ T6627] EXT4-fs: Ignoring removed nomblk_io_submit option
[  276.862587][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  276.883862][ T6294] device veth0_macvtap entered promiscuous mode
[  276.923813][ T6294] device veth1_macvtap entered promiscuous mode
[  276.973651][ T6627] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  276.990374][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.097630][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  277.136439][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  277.321444][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  277.419505][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  277.759879][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.890769][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.035888][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.352508][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.399914][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.451573][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.494977][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  278.509773][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.601115][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.676810][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.697352][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.718624][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.739075][ T6294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.775102][ T6294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.816462][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.856219][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  278.873619][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  278.921558][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  278.962026][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  279.013943][ T6403] 8021q: adding VLAN 0 to HW filter on device team0
[  279.032974][ T6294] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.059212][ T6294] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.077989][ T6294] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.078030][ T6294] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.116127][ T6653] loop6: detected capacity change from 0 to 2048
[  279.132945][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  279.133681][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  279.134144][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.134248][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.135112][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.164271][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  279.164925][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  279.165353][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.165410][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.165851][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  279.170324][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  279.218549][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  279.219856][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  279.220689][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  279.237541][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  279.238440][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  279.253221][ T6403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  279.253243][ T6403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  279.280240][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  279.280828][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  279.281423][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  279.281846][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  279.282246][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  279.389857][ T5995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.389927][ T5995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.438780][ T6657] loop3: detected capacity change from 0 to 2048
[  279.746527][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  279.801522][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.810827][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.852600][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  280.069981][ T6657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  280.095047][ T6657] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.106207][ T4239] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  280.284689][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  280.326143][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  280.334800][ T4239] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  280.354744][ T6657] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.492: bg 0: block 288: padding at end of block bitmap is not set
[  280.372759][ T4239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.403463][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.414137][ T4239] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  280.444390][ T6657] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  280.465566][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0
[  280.501833][ T4239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.547091][ T4239] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  280.600663][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0
[  280.640514][ T4239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.675774][ T4239] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  280.706264][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0
[  280.724753][ T4239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.735993][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  280.778881][ T4239] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  280.822599][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0
[  280.885495][ T4239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.923820][ T4239] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  280.963308][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0
[  281.002096][ T4239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.070705][ T4239] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  281.119231][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0
[  281.149465][ T4239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.206209][ T4239] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  281.252018][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0
[  281.281961][ T4239] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.329298][ T4239] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  281.368439][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0
[  281.397449][ T4239] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  281.426800][ T4239] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  281.455781][ T4239] usb 6-1: Product: syz
[  281.460557][ T4239] usb 6-1: Manufacturer: syz
[  281.466487][ T4239] usb 6-1: SerialNumber: syz
[  281.485902][ T4239] usb 6-1: config 0 descriptor??
[  281.510211][ T4239] yurex 6-1:0.0: Could not find endpoints
[  281.713066][ T4239] usb 6-1: USB disconnect, device number 10
[  281.754460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  281.807923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  282.575151][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  282.626411][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  282.701376][ T6403] device veth0_vlan entered promiscuous mode
[  282.738205][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  282.793534][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  282.878224][ T6403] device veth1_vlan entered promiscuous mode
[  282.931480][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  283.113251][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  283.162007][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  283.251756][ T6403] device veth0_macvtap entered promiscuous mode
[  283.300235][ T6403] device veth1_macvtap entered promiscuous mode
[  285.028374][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  285.037307][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  285.052372][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.096654][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.116813][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.139992][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.170207][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.190960][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.217859][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.241446][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.266377][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.288875][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  285.304096][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  285.325371][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.341833][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.352566][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.368278][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.577856][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.577946][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.579035][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.579190][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.601502][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.613610][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  285.614558][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  285.783783][ T6403] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.915372][ T6403] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.941474][ T6403] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.969142][ T6403] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.240930][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.283057][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.344143][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  286.382293][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.406048][ T6735] loop3: detected capacity change from 0 to 2048
[  286.408066][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.479836][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  288.553906][ T6752] netlink: 'syz.6.506': attribute type 10 has an invalid length.
[  288.588650][ T6752] netlink: 40 bytes leftover after parsing attributes in process `syz.6.506'.
[  289.577889][ T6775] loop5: detected capacity change from 0 to 1024
[  289.607713][ T6775] EXT4-fs: Ignoring removed nomblk_io_submit option
[  289.745201][ T6775] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  290.059493][ T4412] EXT4-fs (loop5): unmounting filesystem.
[  290.948247][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.635186][ T6816] netlink: 'syz.5.525': attribute type 10 has an invalid length.
[  291.666745][ T6816] netlink: 40 bytes leftover after parsing attributes in process `syz.5.525'.
[  292.016654][ T6825] loop6: detected capacity change from 0 to 1024
[  292.040590][ T6825] EXT4-fs: Ignoring removed nomblk_io_submit option
[  292.095894][ T6825] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  292.096017][ T6828] loop7: detected capacity change from 0 to 2048
[  292.115450][ T6831] loop5: detected capacity change from 0 to 2048
[  292.316119][ T6828] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  292.332683][ T6828] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.403465][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  292.753181][ T6294] EXT4-fs (loop7): unmounting filesystem.
[  292.886867][ T5057] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  293.088418][ T5057] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.115783][ T5057] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  293.168320][ T5057] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  293.191109][ T5057] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  293.229939][ T5057] usb 7-1: SerialNumber: syz
[  293.522866][ T5057] usb 7-1: USB disconnect, device number 5
[  294.348997][ T5042] udevd[5042]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  294.463665][ T6876] loop7: detected capacity change from 0 to 512
[  294.661387][ T6877] netlink: 'syz.6.540': attribute type 10 has an invalid length.
[  294.690716][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.6.540'.
[  294.702917][ T6876] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  294.726527][ T6876] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.871113][ T6876] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #2: comm syz.7.541: corrupted inode contents
[  294.989455][ T6876] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #2: comm syz.7.541: mark_inode_dirty error
[  295.021507][ T6890] loop3: detected capacity change from 0 to 1024
[  295.049653][ T6876] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #2: comm syz.7.541: corrupted inode contents
[  295.058066][ T6892] loop6: detected capacity change from 0 to 1024
[  295.074050][ T6890] EXT4-fs: Ignoring removed orlov option
[  295.099471][ T6876] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #2: comm syz.7.541: mark_inode_dirty error
[  295.111304][ T6890] EXT4-fs: Ignoring removed nomblk_io_submit option
[  295.151446][ T6892] EXT4-fs: Ignoring removed nomblk_io_submit option
[  295.163714][ T6890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  295.249380][ T6892] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  295.891209][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  295.975581][ T6294] EXT4-fs (loop7): unmounting filesystem.
[  296.001085][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  296.141645][ T6901] loop3: detected capacity change from 0 to 2048
[  297.193791][ T5042] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  298.383394][ T6928] loop3: detected capacity change from 0 to 128
[  298.497124][ T6928] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  298.518444][ T6928] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  298.589334][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.555'.
[  298.642616][ T6933] loop6: detected capacity change from 0 to 1024
[  298.677527][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.555'.
[  298.688872][ T6933] EXT4-fs: Ignoring removed orlov option
[  298.694670][ T6933] EXT4-fs: Ignoring removed nomblk_io_submit option
[  298.811568][ T6933] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  299.572768][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  299.754135][ T6949] loop7: detected capacity change from 0 to 1024
[  299.756134][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  299.776178][ T6949] EXT4-fs: Ignoring removed nomblk_io_submit option
[  299.881952][ T6949] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  300.062273][ T6965] loop5: detected capacity change from 0 to 2048
[  300.097407][ T6294] EXT4-fs (loop7): unmounting filesystem.
[  301.233699][ T6990] loop3: detected capacity change from 0 to 1024
[  301.271415][ T6990] EXT4-fs: Ignoring removed orlov option
[  301.290330][ T6990] EXT4-fs: Ignoring removed nomblk_io_submit option
[  301.401831][ T6990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  301.550152][ T7011] ALSA: seq fatal error: cannot create timer (-22)
[  301.826822][   T14] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  302.105933][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  302.112978][   T14] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  302.139336][   T14] usb 7-1: config 0 interface 0 has no altsetting 0
[  302.168384][   T14] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  302.218953][   T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.246698][   T14] usb 7-1: Product: syz
[  302.250928][   T14] usb 7-1: Manufacturer: syz
[  302.255549][   T14] usb 7-1: SerialNumber: syz
[  302.327834][   T14] usb 7-1: config 0 descriptor??
[  302.340493][   T14] usb 7-1: selecting invalid altsetting 0
[  302.622761][ T6720] usb 7-1: USB disconnect, device number 6
[  303.834192][ T7029] loop3: detected capacity change from 0 to 1024
[  303.877482][ T7029] EXT4-fs: Ignoring removed nomblk_io_submit option
[  304.003054][ T7029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  304.170549][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  304.521143][ T7042] binder: 7039:7042 ioctl 400c620e 20000040 returned -22
[  307.878595][ T7085] loop5: detected capacity change from 0 to 1024
[  307.905902][ T7085] EXT4-fs: Ignoring removed nomblk_io_submit option
[  307.985587][ T7085] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  308.189165][ T4412] EXT4-fs (loop5): unmounting filesystem.
[  308.333493][ T7099] loop6: detected capacity change from 0 to 1024
[  308.377108][ T7099] EXT4-fs: Ignoring removed orlov option
[  308.427992][ T7099] EXT4-fs: Ignoring removed nomblk_io_submit option
[  308.723612][ T7099] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  309.988687][ T7119] ALSA: seq fatal error: cannot create timer (-22)
[  310.537608][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  312.448695][ T7156] loop8: detected capacity change from 0 to 1024
[  312.503661][ T7156] EXT4-fs: Ignoring removed nomblk_io_submit option
[  312.678604][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.788874][ T7156] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  312.951526][ T6403] EXT4-fs (loop8): unmounting filesystem.
[  313.163172][ T7178] loop6: detected capacity change from 0 to 1024
[  313.264659][ T7178] EXT4-fs: Ignoring removed orlov option
[  313.311612][ T7178] EXT4-fs: Ignoring removed nomblk_io_submit option
[  313.368786][ T7178] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  313.643687][ T7194] ALSA: seq fatal error: cannot create timer (-22)
[  314.223424][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  316.435411][ T7215] loop3: detected capacity change from 0 to 1024
[  316.486101][ T7215] EXT4-fs: Ignoring removed orlov option
[  316.528141][ T7215] EXT4-fs: Ignoring removed nomblk_io_submit option
[  316.617738][ T7215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  317.034374][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  317.090285][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  317.096818][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  317.225935][ T7231] loop3: detected capacity change from 0 to 1024
[  317.261411][ T7231] EXT4-fs: Ignoring removed nomblk_io_submit option
[  317.333492][ T7231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  317.546031][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  318.703150][   T26] audit: type=1326 audit(1731539818.538:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  318.750841][   T26] audit: type=1326 audit(1731539818.538:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  318.926733][   T26] audit: type=1326 audit(1731539818.568:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60fab7d0b0 code=0x7ffc0000
[  319.079356][   T26] audit: type=1326 audit(1731539818.568:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f60fab7ff47 code=0x7ffc0000
[  319.223123][   T26] audit: type=1326 audit(1731539818.568:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  319.396870][   T26] audit: type=1326 audit(1731539818.568:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f60fab7ff47 code=0x7ffc0000
[  319.494466][   T26] audit: type=1326 audit(1731539818.568:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f60fab7d3aa code=0x7ffc0000
[  319.622730][   T26] audit: type=1326 audit(1731539818.568:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  319.714319][ T7282] loop6: detected capacity change from 0 to 1024
[  319.725493][   T26] audit: type=1326 audit(1731539818.568:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  319.798167][ T7282] EXT4-fs: Ignoring removed orlov option
[  319.804183][ T7283] loop3: detected capacity change from 0 to 512
[  319.846732][ T7282] EXT4-fs: Ignoring removed nomblk_io_submit option
[  319.856668][   T26] audit: type=1326 audit(1731539818.578:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f60fab7e719 code=0x7ffc0000
[  319.897411][ T7283] EXT4-fs: Ignoring removed i_version option
[  319.903491][ T7283] EXT4-fs: Ignoring removed nobh option
[  319.955574][ T7283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  320.114151][ T7283] EXT4-fs (loop3): 1 truncate cleaned up
[  320.124088][ T7283] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  320.142906][ T7282] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  320.327888][ T7283] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 25 (only 1 groups)
[  320.569181][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  320.579961][ T4253] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  320.723284][ T4253] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  320.836533][ T4253] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  320.894959][ T7307] loop6: detected capacity change from 0 to 1024
[  320.948376][ T4253] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  320.979374][ T7307] EXT4-fs: Ignoring removed nomblk_io_submit option
[  321.077715][ T4253] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  321.165585][ T7307] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  321.283211][ T4253] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  321.385456][ T4253] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  321.455670][ T4253] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  321.488874][ T5005] EXT4-fs (loop6): unmounting filesystem.
[  321.561923][ T4253] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  321.732608][ T4253] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  322.042118][ T7304] loop5: detected capacity change from 0 to 32768
[  322.151723][ T7304] ================================================================================
[  322.180328][ T7304] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:9
[  322.213245][ T7304] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
[  322.242127][ T7304] CPU: 1 PID: 7304 Comm: syz.5.632 Not tainted 6.1.116-syzkaller #0
[  322.250174][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  322.260398][ T7304] Call Trace:
[  322.263985][ T7304]  <TASK>
[  322.266956][ T7304]  dump_stack_lvl+0x1e3/0x2cb
[  322.271713][ T7304]  ? __get_metapage+0x9ae/0x1040
[  322.276709][ T7304]  ? nf_tcp_handle_invalid+0x642/0x642
[  322.282251][ T7304]  ? panic+0x764/0x764
[  322.286477][ T7304]  __ubsan_handle_out_of_bounds+0x118/0x140
[  322.292529][ T7304]  xtInsert+0xf41/0xfa0
[  322.296758][ T7304]  ? xtSearch+0x1ca0/0x1ca0
[  322.301342][ T7304]  ? mark_lock+0x9a/0x340
[  322.305739][ T7304]  ? __dquot_drop+0x420/0x420
[  322.310512][ T7304]  ? rcu_is_watching+0x11/0xb0
[  322.315407][ T7304]  ? __mark_inode_dirty+0x430/0xf80
[  322.320674][ T7304]  extAlloc+0xa70/0x1000
[  322.325003][ T7304]  ? jfs_ioc_trim+0x6a0/0x6a0
[  322.329737][ T7304]  ? bio_add_page+0x47b/0x750
[  322.334480][ T7304]  jfs_get_block+0x417/0xe50
[  322.339123][ T7304]  ? dio_send_cur_page+0x580/0x880
[  322.344278][ T7304]  ? jfs_dirty_inode+0x230/0x230
[  322.349252][ T7304]  ? jfs_dirty_inode+0x230/0x230
[  322.354234][ T7304]  __blockdev_direct_IO+0x1d00/0x4810
[  322.359709][ T7304]  ? sb_init_dio_done_wq+0x80/0x80
[  322.364915][ T7304]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  322.371006][ T7304]  ? jfs_dirty_inode+0x230/0x230
[  322.376188][ T7304]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  322.382543][ T7304]  ? ktime_get_real_ts64+0x460/0x460
[  322.387874][ T7304]  jfs_direct_IO+0xf6/0x1e0
[  322.392702][ T7304]  generic_file_direct_write+0x204/0x460
[  322.398386][ T7304]  __generic_file_write_iter+0x1c4/0x400
[  322.404036][ T7304]  generic_file_write_iter+0xab/0x310
[  322.409551][ T7304]  do_iter_write+0x6e6/0xc40
[  322.414162][ T7304]  ? vfs_iter_write+0xa0/0xa0
[  322.418858][ T7304]  ? rcu_read_lock_any_held+0xb3/0x160
[  322.424547][ T7304]  do_pwritev+0x216/0x360
[  322.428897][ T7304]  ? do_preadv+0x350/0x350
[  322.433337][ T7304]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  322.439344][ T7304]  ? print_irqtrace_events+0x210/0x210
[  322.444828][ T7304]  ? syscall_enter_from_user_mode+0x2e/0x230
[  322.450816][ T7304]  ? lockdep_hardirqs_on+0x94/0x130
[  322.456027][ T7304]  ? __x64_sys_pwritev2+0xb9/0x100
[  322.461152][ T7304]  do_syscall_64+0x3b/0xb0
[  322.465586][ T7304]  ? clear_bhb_loop+0x45/0xa0
[  322.470561][ T7304]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.476473][ T7304] RIP: 0033:0x7f4b9fb7e719
[  322.481083][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.500791][ T7304] RSP: 002b:00007f4ba0a46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  322.509234][ T7304] RAX: ffffffffffffffda RBX: 00007f4b9fd35f80 RCX: 00007f4b9fb7e719
[  322.517234][ T7304] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000006
[  322.525243][ T7304] RBP: 00007f4b9fbf175e R08: 0000000000000000 R09: 0000000000000003
[  322.533239][ T7304] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
[  322.541242][ T7304] R13: 0000000000000000 R14: 00007f4b9fd35f80 R15: 00007ffe0dff9988
[  322.549388][ T7304]  </TASK>
[  322.672065][ T7304] ================================================================================
[  322.701000][ T7304] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  322.708308][ T7304] CPU: 0 PID: 7304 Comm: syz.5.632 Not tainted 6.1.116-syzkaller #0
[  322.716328][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  322.726591][ T7304] Call Trace:
[  322.730247][ T7304]  <TASK>
[  322.733298][ T7304]  dump_stack_lvl+0x1e3/0x2cb
[  322.738023][ T7304]  ? nf_tcp_handle_invalid+0x642/0x642
[  322.743537][ T7304]  ? panic+0x764/0x764
[  322.747706][ T7304]  ? vscnprintf+0x59/0x80
[  322.752073][ T7304]  panic+0x318/0x764
[  322.756007][ T7304]  ? check_panic_on_warn+0x1d/0xa0
[  322.761194][ T7304]  ? memcpy_page_flushcache+0xfc/0xfc
[  322.766609][ T7304]  ? dump_stack_lvl+0x24f/0x2cb
[  322.771518][ T7304]  check_panic_on_warn+0x7e/0xa0
[  322.776531][ T7304]  __ubsan_handle_out_of_bounds+0x138/0x140
[  322.782487][ T7304]  xtInsert+0xf41/0xfa0
[  322.786740][ T7304]  ? xtSearch+0x1ca0/0x1ca0
[  322.791582][ T7304]  ? mark_lock+0x9a/0x340
[  322.796058][ T7304]  ? __dquot_drop+0x420/0x420
[  322.800876][ T7304]  ? rcu_is_watching+0x11/0xb0
[  322.805692][ T7304]  ? __mark_inode_dirty+0x430/0xf80
[  322.810949][ T7304]  extAlloc+0xa70/0x1000
[  322.815255][ T7304]  ? jfs_ioc_trim+0x6a0/0x6a0
[  322.819984][ T7304]  ? bio_add_page+0x47b/0x750
[  322.824728][ T7304]  jfs_get_block+0x417/0xe50
[  322.829392][ T7304]  ? dio_send_cur_page+0x580/0x880
[  322.834558][ T7304]  ? jfs_dirty_inode+0x230/0x230
[  322.839549][ T7304]  ? jfs_dirty_inode+0x230/0x230
[  322.844614][ T7304]  __blockdev_direct_IO+0x1d00/0x4810
[  322.850096][ T7304]  ? sb_init_dio_done_wq+0x80/0x80
[  322.855259][ T7304]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  322.861304][ T7304]  ? jfs_dirty_inode+0x230/0x230
[  322.866300][ T7304]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  322.872599][ T7304]  ? ktime_get_real_ts64+0x460/0x460
[  322.877975][ T7304]  jfs_direct_IO+0xf6/0x1e0
[  322.882551][ T7304]  generic_file_direct_write+0x204/0x460
[  322.888245][ T7304]  __generic_file_write_iter+0x1c4/0x400
[  322.893922][ T7304]  generic_file_write_iter+0xab/0x310
[  322.899347][ T7304]  do_iter_write+0x6e6/0xc40
[  322.904083][ T7304]  ? vfs_iter_write+0xa0/0xa0
[  322.908796][ T7304]  ? rcu_read_lock_any_held+0xb3/0x160
[  322.914316][ T7304]  do_pwritev+0x216/0x360
[  322.918694][ T7304]  ? do_preadv+0x350/0x350
[  322.923173][ T7304]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  322.929257][ T7304]  ? print_irqtrace_events+0x210/0x210
[  322.934869][ T7304]  ? syscall_enter_from_user_mode+0x2e/0x230
[  322.940892][ T7304]  ? lockdep_hardirqs_on+0x94/0x130
[  322.946196][ T7304]  ? __x64_sys_pwritev2+0xb9/0x100
[  322.951349][ T7304]  do_syscall_64+0x3b/0xb0
[  322.955798][ T7304]  ? clear_bhb_loop+0x45/0xa0
[  322.960609][ T7304]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.966543][ T7304] RIP: 0033:0x7f4b9fb7e719
[  322.970984][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.990627][ T7304] RSP: 002b:00007f4ba0a46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  322.999088][ T7304] RAX: ffffffffffffffda RBX: 00007f4b9fd35f80 RCX: 00007f4b9fb7e719
[  323.007178][ T7304] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000006
[  323.015275][ T7304] RBP: 00007f4b9fbf175e R08: 0000000000000000 R09: 0000000000000003
[  323.023291][ T7304] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
[  323.031295][ T7304] R13: 0000000000000000 R14: 00007f4b9fd35f80 R15: 00007ffe0dff9988
[  323.039316][ T7304]  </TASK>
[  323.042633][ T7304] Kernel Offset: disabled
[  323.047073][ T7304] Rebooting in 86400 seconds..