last executing test programs:

11.359005361s ago: executing program 1 (id=2264):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1})

11.167217017s ago: executing program 1 (id=2266):
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x8})
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0)
fsmount(r2, 0x0, 0x80)
syz_usb_connect(0x5, 0x3db, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x9, 0x4, 0x7f, 0xff, 0xd}, 0x4c, &(0x7f0000000180)=ANY=[@ANYBLOB="050fa60001471002c1393c4f0f13e06cee8002403f14b309c99d0e39db8b9b6cea2f381869489f4cf35be30c3d186aa181785d73c2707ea548a138fa545258ed04b94f40b16bd907ba2a36c1293e41974216952955cad5ef05"], 0x1})
ptrace$setsig(0x4203, r1, 0x8000000000000000, &(0x7f0000000600)={0xb, 0x4, 0x5})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f0000000080), 0x0)
syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000580)={[{@dmask={'dmask', 0x3d, 0x7}}, {@fmask={'fmask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x3e70ea1}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x1508, &(0x7f0000002c80)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0xe, 0x0, &(0x7f0000001580))
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
dup3(r6, r7, 0x0)
getpgid(0x0)
ioprio_get$pid(0x3, 0x0)
listen(r6, 0xfffffffa)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

7.723136338s ago: executing program 1 (id=2287):
syz_emit_ethernet(0xf6, &(0x7f0000000100)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0xc0, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0x2, 0x15, "0a1141f798ff1a51478185c633ce23b2268347dea95076e4c9c1820879230df85fd5debcbb04745c10d64d01c635a789cc0773283a12218a13219ef868057aecf5544cab18924023a4f1bd4d8c57a5390c6012fb9fbba66aed832012860a5b91ed6b3e628f0b91a4627920b3c9a708a7490afce64897971845382ca897e5a04a2bd7ff525ed2f5565b71e1757c6b82dd78d87f694b60a992f7c28be700beacd627c5889873c7"}]}}}}}}, 0x0)

7.498285777s ago: executing program 1 (id=2288):
madvise(&(0x7f0000000000/0x2000)=nil, 0xffffffffdfffffff, 0x3)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000010, &(0x7f0000000f40)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=ignore,utf8,anchor=00000000000000000001,novrs,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30300000000030303030303030303030303030303030302c6769643d69676710b01c1f9d6e6f72652c6e6f6164696e6963622c756e64656c6574652c6e6f7672732c6c617374626c6f636b3d30303030303030303030303030303030303030312c7569643d69676e6f72652c6e6f7374726963742c616e63686f723d30303030303030303030303030303030303030352c766f6c756d653d303030303030386ee5eef62188e3303030303030303030308930302c756e1202682e87dc70c6e7ea5ddae3187388c671a93c7e"], 0x1, 0xc43, &(0x7f0000000200)="$eJzs3U9sHNd9B/DfGy7Fpd1WTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRFi2KFCV/Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8ev7EybSDgrV9aAwAsC8ujn31xKmdXP8BgMfG5Z3++x8AAAAAAAAAAAAAAHhYUhTxVKSYu7iWJqrnHfUL7f6bt8ZHRreuNpiqmn1V+fKrfvLU6TNfenH4bDcvtGc+pP6D9tl4fezy+cYrszfm5qcWFqYmG+Mz7auzk1M73sNu6292rDoAjRtv3Jy8dm2hceqF03e8fGvog4EnjwydG37u+LPdsuMjo6NjG0XqveV3e/eF7WZ4HIoijkeK57/309SKiCJ2fyzq+zv2mw1WnThWdWJ8ZLTqyHS7NbNYvnipeyCKiEZPpWb3GG09FlHr39c+bK8ZsVQ2v2zwsbJ7Y3Ot+daV6anGpdb8YnuxPTtzKXVaW/anEUWcTRHLEbE6cPfu+qOIWqT4zuG1dCUi+rrH4YvVxODt21HsYR93oGxnoz9iuXgExuwAG4giXosUP3v3aFzN55nqXPOFiNfK/EHE22W+HJHKD8aZiPe3+BzxaKpFEX9Zjv+5tTRZnQ+655ULX2t8ZebabE/Z7nnlI14f7jpTPKTrw+Cm3B8H/NxUjyJa1Rl/Ld3/NzsAAAAAAAAAAAAAAAAAPGiDUcRnIsWr//En1bziqOalHz43/IdDv9o7Z/yZe+ynLPtCRCwVO5uTeyhPDLyULqX0kOcSf5zVo4g/zfP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsVL7x1Ny9G7pnh75npjMCI6q8J21/7trpm+vr6+3kidbOacyLmUcznnSs7VnFHk+jmbOSdyLuVczrmSczVn9OX6OZs5J3Iu5VzOuZJzNWfUcv2czZwTOZdyLudcybmaMw7I2r0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+TIor4RaT49jfWUqSIaEZMRCdXBh526wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0kAq4vuRovFHzdvbahGRqv87jpZ/nInmoTI/Gc3hMl+O5vmcrSprzW89hPazO/2piB9HioH6O7cHPI9/f+fZ7Y9BvP3NjWefrXWyr/vi0AcDTx45fG549Dee2e5x2qoBxy60Z27eaoyPjI6O9Wyu5Xf/ZM+2ofy+xYPpOhGx8OZbb7Smp6fm7/9B+RHYRfVH6EGqfVx66kH1IGoHohkPp+/3cLhvf85Q7KXy+v9+pPjd9/6ze8HvXP/r8SudZxvD/PM/27j+v7R5Rzu8/tc218vX//KavtX1/6mebS/l70b6axH1xRtz/Uci6gtvvnW8faN1fer61MyZEye+PDz85dMn+g9F1K+1p6d6Hj2QwwUAAAAAAAAAAAAAAACwf1IRvx8pWj9eS42IuFXN1xo6N/zc8Wf7oq+ab3XHvO3Xxy6fb7wye2NufmphYWqyMT7Tvjo7ObXTt6tX073GR0b3pDP3NLjH7R+svzI79+Z8+/ofL275+hP181cWFudbV7d+OQajiGj2bjlWNXh8ZLRq9HS7NVNVvbTlZPqPrj8V8V+R4uqZRvp83pbn/2+e4X/H/P+lzTvao/n/n+jZVr5nSkX8PFL8zl89E5+v2vlE3HXMcrm/ixTHzn4ul4tDZbluGzr3FejMDCzL/l+k+Kdf3Fm2Ox/yqY2yJ3d8YB8R5fgfjhTf/4vvxm/mbXfe/2Hr8X9i847ud/zXP3z8n+7Z9sQd9yvYddfJ4388Urz81DvxW3nbh93/o3vvjaO58O37c+zR3/9P9Wwbyu/72w+m6wAAAAAAAAAAAI+0/lTE30eKH47W0ot5205+/29y84726Pe/Pt2zbfLBrFd0zwe7PqgAAAAAcED0pyJ+EimuL75zew71nfO/e+Z//t7G/M+RtOnV6ud8v1bdN+BB/vyv11B+34nddxsAAAAAAAAAAAAAAAAAAAAOlJSKeDGvpz5Rzeef3HY99ZVI8er/PJ/LpSNlue468EPVn/WLszPHz09Pz15tLbauTE81xuZaV6fKuk9HirW//VyuW1Trq3fXm++s8b6xFvt8pBj9h27Zzlrs3bXJn94oe7Is+4lI8d//eGfZ7jrWn9ooe6os+zeR4uv/snXZIxtlT5dlvxspfvT1RrfsE2XZ7v1RP71R9oWrs8UejAoAAAAAAAAAAAAAAAAAAAAfN/2piD+PFP97Y/n2XP68/n9/z9PK29/sWe9/k1vVOv9D1fr/2z2+n/X/q/sKLG33rgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HhKUcRbkWLu4lpaGSifd9QvtGdu3hofGd262mCqavZV5cuv+slTp8986cXhs9388PoP2mfi9bHL5xuvzN6Ym59aWJiabIzPtK/OTk7teA+7rb/ZseoANG68cXPy2rWFxqkXTt/x8q2hDwaePDJ0bvi54892y46PjI6O9ZSp9d/3u98lbbP9UBTx15Hi+e/9NP1wIKKI3R+Le3x29tpg1YljVSfGR0arjky3WzOL5YuXugeiiGj0VGp2j9E+jMWuNCOWyuaXDT5Wdm9srjXfujI91bjUml9sL7ZnZy6lTmvL/jSiiLMpYjkiVgfu3l1/FPFGpPjO4bX0rwMRfd3j8MWLY189cWr7dhR72McdKNvZ6I9YLj7qmK2vr6/vXzsPuoEo4p8jxc/ePRr/NhBRi85XfCHitTJ/EPF2dMY7lR+MMxHvb/E54tFUiyL+vxz/c2vp3YHyfNA9r1z4WuMrM9dme8p2zyuP/PVhPx3w60k9ivhRdcZfS//u7zUAAAAAAAAAAAAAAADAAVLEr0eKl947mqr5wbfnFLdnrjcut65Md6b1def+dedMr6+vrzdSJ5s5J3Iu5VzOuZJzNWcUuX7OZpn19fWJ/Hwp53LOlZyrOaMv18/ZzDmRcynncs6VnKs5o5br52zmnMi5lHM550rO1ZxxQObuAQAAAAAAAAAAAAAAAAAAj5ei+i/Ft7+xltYHOutLT0QnV6wH+tj7ZQAAAP//5dj8GA==")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ftruncate(r0, 0x8002007ffb)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a163831820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f00"/124], 0x1, 0x181, &(0x7f0000000580)="$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")
listxattr(&(0x7f00000002c0)='./file1\x00', 0x0, 0x51)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001080)={0x0, 0x9, 0xfffffffffffffffe, 0x1})
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

4.464461575s ago: executing program 3 (id=2297):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$eJzs3MtvG0UYAPBZp2npkwhxgFNXqpASqbbqtKngFqAVD5Eq4nHgVBzbsdza3ih2nJATEhxRD/wnCCROHPkbOHDmhjiAuCGBvLMmhPIosvNqfz9p/e3Mjr+dWa1afbuRA/DEmkt/+SkJl8LZEMJMCOFCEvL9pNhyyzE8F0K4HEIo/WlLiv4/Ok6HEM6FEC6NksecSX7o7vMxy5s/f/3tmVPnP//quyNaMnAMvBBC6G7E/e1ujFkrxntFf23YzmP3xrCI8UD3ftHOYtxuruUZtmvjcbU8Xm/F8dnGVn8U1zu1+ii22ut5/0YvnrA/bI3z5F+4V9vM243mWh7b/SyPrd04r53d+G/bbn8Q8zSKfB/m6cNgMI6xv7nTjOvZuJ/Hem9Q9Me8WaO5M4rDIhanC/Ws08jnsTbJlT7e3mr3tnbSYXOz38566VKl+mKlerNc3cwazUHzRrnWbdy8kc63OqNh5UGz1l1uZVmr06zUs+5COt+q18vVajp/q7nWrvXSarVyvXKtvLRQ7F1NX7vzXtpppPOj+Eq7t3W63emn69lmGr+xkC5Wrr+0kF6ppu+srKarb9++vbL67t1b7995eeWNV4tBD00rnV+8trhYrl4rL1YXjsH6R//vPuL6B5Os/5Ni0v9j/clklwf+3d4N9uBI5wFwgjxU/4eDqv9D+Ozq8MrSj+p/YGtf6yTW/2Ga9f+opFL//3f9W5q8/p+o/j2u9f8JXj9MxAMmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn1vezX7ye78zF9vmi/2LR9UzRTkIIpRDCb39jJpzel3OmyDP7D+Nn/zKHb5KQZxid40yxnQshLBfbr08f9FUAAACAx9eXH11+EKv1+DF31BPiMMWHNqULH0wpXxJCmJ37YUrZSqOPZ6eULL+/T4WdKWXLH2A9NaVk8ZHbqWlleyQz4/Dxxb3OfEFJDKVDnQ4AAHAoZvaFw61CAAAAOEyf7m9O7bUWx1wSxq8yx++C87+837sHzu47BgAAAJxAyVFPAAAAADhwef3v9/8AAADg8RZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+J2du7lRG4gCAPxscID8KCjKPV3knBuUkRJyzDFQQJqgBNJCGkApgdy2hBWssEdoba0ldrGXXfR9kgeeMW9mgMubQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPv0v1vM/v778br9iclKe3f483c0IAAAAaNoW63n5ZFrF79L5D+nUpxRnEZFHxEO1+yDe1HIOUp6i5fqiMYa/EWWGQx+jdLyNiG/puP3Y96cAAAAA12uzXM2qar1qppceEM+pWrTJ33/vKF8WEcX0pqNs+aH53FGy8vc9jJ/HeD96ZILaCle5gDXuaGjVktvwhG67M6g9pJmMF+WXWEZ5P/0CAACXVK8EWqoQAAAArsCPp7+1+UduXpZ/X+9HzT297Ngc9xnTrmjaEJzUIgAAAOAVyi49AAAAAKB3Zf3v/n8AAABw3ar7/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnbbGeb5arWdvrixPz7Pbn6W5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMf+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv3zxtHEQUA/O3e7eUPoBiDXBhQkCigIfYlJKSEAmRR8BGQLOccDA6BxAWJLJAbqJDrNAhKhJBApst3SB1LaUKXwoWRqIN2b9deJ4acEmv34vx+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFS23o9X0zLu5IeJYVy9dnt7dSHvNx/oczfX70znLY+TR030/XsHn/wYS7rxWv385FTt5Nvm8wEAAOAQ2qcY71T1fUTczTbm8j6dKOr/rLomr/l/emHvEA/W/Zvbq0fLL01X9f+ff9x7eWeiieE8+aCLS8uD2YdT6R7UMp82Jx55Rbe488XvXjrFG5J+tPbSVlbcz+SHW7c+6BXhkSayBQAex6mqL4Pq56G877eZGADPjG6t8K7q/85EuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGFrLZ6r4iQipru7cW5ze3Vhv/7m+p3pqp27cWO9PmY+RBYRi0vLg6zBtYy7q9eufz6/vDy40nxwMiLam70MPhnhmoj/v6b8eEZ7q/jvIBmPNFoN0vL9GZd8doP7JyKebJzqs3fwGbb0DQkAgEMrK1te19/NNuby15LJiPs/763/36zFMWL9f+/Tc7frc9Xr/35jKxx/MyuXvpy5eu3620uX5i8OLg6+eOd0/93+mfNnz56fye/V7MxipIPZttMEAADgKdYrW73+Tycf3v8/XotjxPr/qx/739Tn6qj/97W76dd2JgAAAM+i3k704uv//J3sc0XS68XX8ysrV/rD48756eGx0XQf05Gy1ev/zmTbWQEAAABN2FpL9uz/X6jFMeL+//O/vPJbfcxORByLuBwRg1MLl5cvNLecsdbE3zkXE/XaXikAAABtOVa2+v5/Vjz/n+488pBGxFtvDOPqf12NUv93Pvzu1/pc9ef/zzS3xLGUTg3vR9FPRXSn2s4IAACAw+xo2fJi/69sY+6z349/3PP8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/g0AAP//SAE1oA==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)

4.03776044s ago: executing program 1 (id=2301):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)
syz_usb_disconnect(r0)

4.03748389s ago: executing program 4 (id=2302):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x40010000)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000002c0)=0x1)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)

3.370760894s ago: executing program 4 (id=2304):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xfffffffe}, {0x6}]})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9)
write$ppp(r0, &(0x7f0000000300)="5af9", 0x2)

3.152819132s ago: executing program 0 (id=2306):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

3.093988937s ago: executing program 4 (id=2307):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8}]}}]}]}, 0x3c}}, 0x0)

3.015099593s ago: executing program 0 (id=2308):
r0 = userfaultfd(0x801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

2.956930698s ago: executing program 4 (id=2309):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0)

2.810463041s ago: executing program 0 (id=2310):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.792942972s ago: executing program 4 (id=2311):
madvise(&(0x7f0000000000/0x2000)=nil, 0xffffffffdfffffff, 0x3)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000010, &(0x7f0000000f40)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=ignore,utf8,anchor=00000000000000000001,novrs,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30300000000030303030303030303030303030303030302c6769643d69676710b01c1f9d6e6f72652c6e6f6164696e6963622c756e64656c6574652c6e6f7672732c6c617374626c6f636b3d30303030303030303030303030303030303030312c7569643d69676e6f72652c6e6f7374726963742c616e63686f723d30303030303030303030303030303030303030352c766f6c756d653d303030303030386ee5eef62188e3303030303030303030308930302c756e1202682e87dc70c6e7ea5ddae3187388c671a93c7e"], 0x1, 0xc43, &(0x7f0000000200)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ftruncate(r0, 0x8002007ffb)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a163831820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f00"/124], 0x1, 0x181, &(0x7f0000000580)="$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")
listxattr(&(0x7f00000002c0)='./file1\x00', 0x0, 0x51)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001080)={0x0, 0x9, 0xfffffffffffffffe, 0x1})
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

2.733769326s ago: executing program 0 (id=2312):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002280)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]})
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001008, 0x0)
mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x1, 0xa78, &(0x7f0000000fc0)="$eJzs3c1vHGf9APDvbGzHdqs2bfNr+4vaZpIqrdsGZ23TRFEPNLHXyRa/INuRGgnUVI2DolgUNSC1EVJTCXGiokIICZAQ6pFTpXKgF5QTcOTEAQn6H6CKU4qAQTO7a+86+5K4azstn0+03pl5vs/bzOw88Xp3nuDzLMuy4rHF9XO/3snGcvc5PfPx+x+8mz/euR5DsSeeT34bMRwRacTAv4tzZXB6ZmlxvkdBVyIuRMSNiCQi9kbtuYORlrULkfwo7t1YvxHJL+LRNtmG77Bz9JTxP223zz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgrTc+UyxNJzFUXzr2cdlZMAd4lvVHcR8Ws38lHvapNIpL8EcPDjam+H92/kfxw/uNwPFZbe6w28/dwXLvn4X0vPDRQauTv0qAdcfWta1deXVtbfaO+vjdNB3tm2rvtzbpzQ1vLdqayUF1erM6fOlNJq8uL6cnjx8vHzs4up7PVqCyfX16pzKfTS5VTK4tL6dj0M+nEyZNTaWX8/OK5hTMz43OVxsYTX5osl4+nL41/rXJqaXlx4dhL48vTZ6tzc9WFM0VMnpzHnMhPxK9WV9KVyqn5NL10eW11qlcj86CJtilJa9Bkr5Imy5OTExOTI3H8+ZPPnyiXB+obJicaG8qbxC0Ru3/S0m+/vO3I3/T9+g2fQak+/sdcVGMhzsXLkbb9Nx0zsRSLMd8mLdkorzH+HzlW6Vpv8/jfGOUf3Ug+EMX4/0Rt7YlO43+Htvb+l2W1kreav/HvarwV1+JKvBprsRar8cZnLjGN37euf7o5/V9Zlm2h3DTv7cHmfdCHtp6JSixENZZjMaoxH6eKLWl9Sxon43gcj3K8EmdjNpYjjdmoxlxUYjnOx3KsRKU4o6ZjKSppxEosxlKkMRbT8UykMREnYySmIo1KjMf5WIxzsRBnYiZOFaVcisvFfp/q0sb1oInbCZrsEnTLYP7Zxv/sbvyfINutz1dw2LqsPv4PdQzIGktj0zvWKgAAAKCf/v+Pcd/+B//w14jBeLx4X362Olcp73azAAAAgD4qPq73WP40mEXE45G0+f2/tEuNAwAAAPoiKb5jl0TEaBysLdW+CbUnfAgAAAAAviCKv/8/kT+N5ksHI1m/E8qF3W4bAAAA0B+977HfMyIZjvo9LdOLteeL9Yj6fX5HZ6tzlfHpxbkXJuKp4i4DxTcNbiltT0QyWHz94Nk4VIs6NFp7Hm0tcTiPmhh/YSKejcP1jow9mT89OdYmcrIW+XQt8ukukVN5JAB80R2+dTz+NLvD8f/ZOFqLOHpgYCgiBg60GVnLGyPrwG50FABY13uOndaIt+v5msf/L2/8/j9YT24Z/x+MS//JN67GeLwWr8daXIyjxbcNik8ctNT79ffq7xmsfwyhHEd7vBvQiP3TiVIc7fF+wGjTRC9He7wjUIuNb0RMbe9BAIAddrjDONxp/C8iovHBwdr4f7Tp9/+49ff/9amFVn2lEADuCusz2Pd1IdvTvGW3+wgAtDJKAwAAAAAAAAAAAAAAAAAAAAAAAAAAQP/19bb/w1vM/rf6vH61LVn/5yNovzBS3weNLW/f0d545+pb134cEc1JpbwT29PmoqX9LbnUh3KyiNip47VzC7EvYst7NdolDUXEtjd+pB9VfFpfqL02St0uHue6pgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA5kETsabe9FLE3IsoRcWznW7V9ru92A3beV5pXkptxM96M+3avOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX0z1+/+XovZ8T21TDJQijkTEhYjIdruN/XRztxvQJyNbzNd0///8mEeWxEDtsEcyOD2ztDifH/5i7ofSx+9/8O4jrdn33m49RWBp0+QS9Ro2x/7q3sbSA0Wu0ZnVq1e+8/q305nTUYqhOL0yOzczf2bpxY0sDycfRqRRezTk7c0f3zvyu/fa9PzDvKftba53ttg5M7fW+0i73N3r7eby2upkXtNK5eWV737r8ptNSQ/GoYgnxyLGWmv6Zv7oUNOhGOxWW/JJ8oPkvvhpXCiOf743kizJD9H9Rf9HLl1eWx1/7fW1ix3atC8ORsTFiOGebVrf1QeL60lbxVlXGsxrLRdB+Y/9PfrYXvMcF7USJzr04YHilBmt92GopQ+lDnWmnftQ7PCm/V5qLCTJ5hZN1Vs0FK0teiieanOks70RnffCU92PdHvJJ8lfkrPx5/h+0/wfpfz4H4nOr87WIorIpjOlY2SpFln0fLI54ZXNkX//2W21vu00NdypH7a8eEtN1//6serT9ShLul6Pmmqc6lBj+9fFpho3nxWljh0vRqT9m3LUrz4dM9Xaub8W1aGd/xfPRQwc6HZVvGW0fq7zFaU1/4vtk7f6+v95Mhb/iOvm/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5+ScSedttLEUciYl9jPY3I7qDYvZ0SSqPJnTaxr66v//ic21/8LLVse6d3tuRm3Mze3q5GAQAAAAAAALDTTs98/P4H7+aP4u/xe25mWf3v+2nEQETsS34yEjNLi/M9ChqMuBARN/Ll4U5B/8xqWrfm+eLejfUbEdn9W+8SANDDfwMAAP//zlFyiw==")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020)

2.604261227s ago: executing program 3 (id=2313):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

2.477077237s ago: executing program 0 (id=2314):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x7, 0x7, 0x5}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x9764, &(0x7f0000012f40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r1, &(0x7f00000002c0)='./file1\x00', 0x0)

2.370784216s ago: executing program 2 (id=2315):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x40010000)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000002c0)=0x1)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)

2.153425904s ago: executing program 2 (id=2316):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000001340)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@umask={'umask', 0x3d, 0xf3}}, {}, {@errors_remount}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000240)=""/4096, 0xb00)

1.973576519s ago: executing program 0 (id=2317):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000b010000000008003f00eeff"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

1.655572825s ago: executing program 2 (id=2319):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8}]}}]}]}, 0x3c}}, 0x0)

1.651748345s ago: executing program 3 (id=2320):
r0 = userfaultfd(0x801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

1.505004587s ago: executing program 4 (id=2321):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000fe00aaf9ffff000000000000000000006260d4383e799551e89e07666f2178aa75b79999909f6181c804ebde76fdffbacec6c03a"], 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0x20)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4)
syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000400), 0x1, 0x4b9, &(0x7f0000000480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f0000001400)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2800, 0x85)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4e)
getdents64(r5, &(0x7f0000000380)=""/4109, 0x100d)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xc, 0x2, 0x0, 0xff, 0x2c00, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xfffffffe}, 0x48)
r6 = open(&(0x7f00000013c0)='./bus\x00', 0x561c42, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r6, 0x0)
mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0)
clock_settime(0x0, &(0x7f00000014c0)={0x77359400})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1)
socket$inet6(0xa, 0x2, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000340)={0x7f, {{0xa, 0x4e21, 0x31cf, @mcast2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x108)

1.452261071s ago: executing program 2 (id=2322):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.34916943s ago: executing program 3 (id=2323):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00')
openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)

1.283861485s ago: executing program 2 (id=2324):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002280)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30]}}}}]})
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001008, 0x0)
mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x1, 0xa78, &(0x7f0000000fc0)="$eJzs3c1vHGf9APDvbGzHdqs2bfNr+4vaZpIqrdsGZ23TRFEPNLHXyRa/INuRGgnUVI2DolgUNSC1EVJTCXGiokIICZAQ6pFTpXKgF5QTcOTEAQn6H6CKU4qAQTO7a+86+5K4azstn0+03pl5vs/bzOw88Xp3nuDzLMuy4rHF9XO/3snGcvc5PfPx+x+8mz/euR5DsSeeT34bMRwRacTAv4tzZXB6ZmlxvkdBVyIuRMSNiCQi9kbtuYORlrULkfwo7t1YvxHJL+LRNtmG77Bz9JTxP223zz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgrTc+UyxNJzFUXzr2cdlZMAd4lvVHcR8Ws38lHvapNIpL8EcPDjam+H92/kfxw/uNwPFZbe6w28/dwXLvn4X0vPDRQauTv0qAdcfWta1deXVtbfaO+vjdNB3tm2rvtzbpzQ1vLdqayUF1erM6fOlNJq8uL6cnjx8vHzs4up7PVqCyfX16pzKfTS5VTK4tL6dj0M+nEyZNTaWX8/OK5hTMz43OVxsYTX5osl4+nL41/rXJqaXlx4dhL48vTZ6tzc9WFM0VMnpzHnMhPxK9WV9KVyqn5NL10eW11qlcj86CJtilJa9Bkr5Imy5OTExOTI3H8+ZPPnyiXB+obJicaG8qbxC0Ru3/S0m+/vO3I3/T9+g2fQak+/sdcVGMhzsXLkbb9Nx0zsRSLMd8mLdkorzH+HzlW6Vpv8/jfGOUf3Ug+EMX4/0Rt7YlO43+Htvb+l2W1kreav/HvarwV1+JKvBprsRar8cZnLjGN37euf7o5/V9Zlm2h3DTv7cHmfdCHtp6JSixENZZjMaoxH6eKLWl9Sxon43gcj3K8EmdjNpYjjdmoxlxUYjnOx3KsRKU4o6ZjKSppxEosxlKkMRbT8UykMREnYySmIo1KjMf5WIxzsRBnYiZOFaVcisvFfp/q0sb1oInbCZrsEnTLYP7Zxv/sbvyfINutz1dw2LqsPv4PdQzIGktj0zvWKgAAAKCf/v+Pcd/+B//w14jBeLx4X362Olcp73azAAAAgD4qPq73WP40mEXE45G0+f2/tEuNAwAAAPoiKb5jl0TEaBysLdW+CbUnfAgAAAAAviCKv/8/kT+N5ksHI1m/E8qF3W4bAAAA0B+977HfMyIZjvo9LdOLteeL9Yj6fX5HZ6tzlfHpxbkXJuKp4i4DxTcNbiltT0QyWHz94Nk4VIs6NFp7Hm0tcTiPmhh/YSKejcP1jow9mT89OdYmcrIW+XQt8ukukVN5JAB80R2+dTz+NLvD8f/ZOFqLOHpgYCgiBg60GVnLGyPrwG50FABY13uOndaIt+v5msf/L2/8/j9YT24Z/x+MS//JN67GeLwWr8daXIyjxbcNik8ctNT79ffq7xmsfwyhHEd7vBvQiP3TiVIc7fF+wGjTRC9He7wjUIuNb0RMbe9BAIAddrjDONxp/C8iovHBwdr4f7Tp9/+49ff/9amFVn2lEADuCusz2Pd1IdvTvGW3+wgAtDJKAwAAAAAAAAAAAAAAAAAAAAAAAAAAQP/19bb/w1vM/rf6vH61LVn/5yNovzBS3weNLW/f0d545+pb134cEc1JpbwT29PmoqX9LbnUh3KyiNip47VzC7EvYst7NdolDUXEtjd+pB9VfFpfqL02St0uHue6pgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA5kETsabe9FLE3IsoRcWznW7V9ru92A3beV5pXkptxM96M+3avOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX0z1+/+XovZ8T21TDJQijkTEhYjIdruN/XRztxvQJyNbzNd0///8mEeWxEDtsEcyOD2ztDifH/5i7ofSx+9/8O4jrdn33m49RWBp0+QS9Ro2x/7q3sbSA0Wu0ZnVq1e+8/q305nTUYqhOL0yOzczf2bpxY0sDycfRqRRezTk7c0f3zvyu/fa9PzDvKftba53ttg5M7fW+0i73N3r7eby2upkXtNK5eWV737r8ptNSQ/GoYgnxyLGWmv6Zv7oUNOhGOxWW/JJ8oPkvvhpXCiOf743kizJD9H9Rf9HLl1eWx1/7fW1ix3atC8ORsTFiOGebVrf1QeL60lbxVlXGsxrLRdB+Y/9PfrYXvMcF7USJzr04YHilBmt92GopQ+lDnWmnftQ7PCm/V5qLCTJ5hZN1Vs0FK0teiieanOks70RnffCU92PdHvJJ8lfkrPx5/h+0/wfpfz4H4nOr87WIorIpjOlY2SpFln0fLI54ZXNkX//2W21vu00NdypH7a8eEtN1//6serT9ShLul6Pmmqc6lBj+9fFpho3nxWljh0vRqT9m3LUrz4dM9Xaub8W1aGd/xfPRQwc6HZVvGW0fq7zFaU1/4vtk7f6+v95Mhb/iOvm/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5+ScSedttLEUciYl9jPY3I7qDYvZ0SSqPJnTaxr66v//ic21/8LLVse6d3tuRm3Mze3q5GAQAAAAAAALDTTs98/P4H7+aP4u/xe25mWf3v+2nEQETsS34yEjNLi/M9ChqMuBARN/Ll4U5B/8xqWrfm+eLejfUbEdn9W+8SANDDfwMAAP//zlFyiw==")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020)

1.177613324s ago: executing program 3 (id=2325):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

922.783765ms ago: executing program 2 (id=2326):
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02d4000c0000000000000fff"], 0x11)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
dup(r0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f0000000100)=@udp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000040), &(0x7f0000000640)=@udp}, 0x20)
syz_emit_vhci(&(0x7f00000027c0)=ANY=[@ANYBLOB="040f03ef00110441596b6e7d"], 0x7)
prctl$PR_SET_PDEATHSIG(0x1, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', 0x0})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00'}, 0x10)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040eb400660c"], 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESDEC=r3, @ANYRES64=r3], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0x9d, &(0x7f0000000880)=""/157, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x36}, @l2cap_cid_signaling={{0x32}, [@l2cap_conn_req={{0x2, 0xc2, 0x4}, {0x21b5, 0x2}}, @l2cap_conf_req={{0x4, 0x7f, 0x16}, {0x0, 0x8000, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x81, 0xb, 0xe0ba, 0x8, 0x81}}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x2, 0x51}}, @l2cap_conn_req={{0x2, 0xb, 0x4}, {0x4, 0x3}}]}}, 0x3b)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000003380))
r5 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0})

922.367404ms ago: executing program 3 (id=2327):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a30000000180a05000000000000000000020000000900010073797a3000000000090002"], 0x58}}, 0x0)

0s ago: executing program 1 (id=2328):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0841, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
io_setup(0x5ff, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x2, 0x0, r1, 0x0, 0x29}])
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000004400080bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010002000404000001000000b7050000000000006a0a80fe000000008500000053000000b70000000000000095000010000000004e622083328dfdb117168bd07ba08af339d1a1ee35fe2a3a255c332820440a9fa9a84452569957c1002ed7d4d8e17f791e479ac8eb484de03352c69b3edff5be26765b1318e5a3d6849bc2d589f5a5f8f2879021c2ea53ea79acd7fb38fdf7d40c617b58c8108ddf12dddd4bfc2a4dd353835685cc460d51f9b7ad225e2918581cbe0458f1f5b6beba510b4229b0d4b504516c4c3e5d1aa044d8d00728140ce37bcd68f253288e655c6b34e02e90780c3a0578442926ef4e912f01a201e694e3806e8c8fe8d52c63feefe018a761fad2ef35b69524cd19f7525d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cfc794d8b9d7c33632152c58eaf302f0b2e0c252bb66762dbfa4177a5ee917bca4885819fb498d1ddb5f06272d88e0c8088f404f011289ebc5623ea21182632161e073af1d69a2e3bbe115be3b325ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222a08471b8aa1315e9324d30ff66c9151996427816b8513c5201048bbb61afbcbc4bff6d42a9a144e30000000000000000000000000000000000000000000000000000000000f436eeac2d7594f517fad2dc9c7c4ddf49043524a078a2fcb082c73342484769e50519b060bd709f2c7e3b0fa688d8c18284a89f9db91ca5513500000000000000000000000000000000955c773e0f72e70b66c7c997b5e89b"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x103, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

kernel console output (not intermixed with test programs):

: Cannot find PRIVHEAD 1.
[  478.770340][T10871]  loop3: p2 p3 p4
[  478.798701][T10871] loop3: partition table partially beyond EOD, truncated
[  478.813038][T10871] loop3: p2 start 452985600 is beyond EOD, truncated
[  478.828823][T10871] loop3: p3 size 33554432 extends beyond EOD, truncated
[  478.858768][T10871] loop3: p4 start 8388607 is beyond EOD, truncated
[  479.612668][T10882] loop4: detected capacity change from 0 to 2048
[  479.732333][T10882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  479.913196][T10874] loop2: detected capacity change from 0 to 32768
[  479.918166][ T7311] EXT4-fs (loop4): unmounting filesystem.
[  479.933467][T10874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1925 (10874)
[  479.954535][T10892] loop1: detected capacity change from 0 to 2048
[  480.014672][T10874] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  480.148014][T10874] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  480.157060][T10874] BTRFS info (device loop2): using free space tree
[  480.165485][T10897] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ÿÿ…
[  481.074517][T10907] loop3: detected capacity change from 0 to 512
[  481.092556][T10907] EXT4-fs: Ignoring removed bh option
[  481.123305][T10907] EXT4-fs error (device loop3): __ext4_iget:5044: inode #12: block 2: comm syz.3.1936: invalid block
[  481.157215][T10907] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1936: couldn't read orphan inode 12 (err -117)
[  481.175436][T10907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  481.298750][ T3562] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  481.305555][ T3562] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  481.314481][ T3562] Bluetooth: hci0: Injecting HCI hardware error event
[  481.324249][   T48] Bluetooth: hci0: hardware error 0x00
[  481.415443][ T9701] EXT4-fs (loop3): unmounting filesystem.
[  481.570063][T10874] BTRFS info (device loop2): enabling ssd optimizations
[  481.815845][T10940] loop1: detected capacity change from 0 to 2048
[  481.877711][ T9054] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  481.895115][T10940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  482.091953][   T27] kauditd_printk_skb: 109 callbacks suppressed
[  482.091989][   T27] audit: type=1800 audit(1721816285.017:314): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1944" name="bus" dev="loop1" ino=18 res=0 errno=0
[  482.140570][T10953] binder: BINDER_SET_CONTEXT_MGR already set
[  482.187321][T10953] binder: 10943:10953 ioctl 4018620d 20000040 returned -16
[  482.720775][ T4594] EXT4-fs (loop1): unmounting filesystem.
[  482.851008][T10921] loop4: detected capacity change from 0 to 40427
[  482.971036][T10967] loop1: detected capacity change from 0 to 512
[  482.977895][T10967] EXT4-fs: Ignoring removed bh option
[  483.938013][   T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  483.955795][T10967] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.1949: invalid block
[  483.992165][T10921] F2FS-fs (loop4): Found nat_bits in checkpoint
[  484.031577][T10967] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1949: couldn't read orphan inode 12 (err -117)
[  484.045770][T10946] No such timeout policy "syz1"
[  484.084602][T10967] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  484.231010][T10921] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  484.383998][T10921] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  484.435783][T10921] syz.4.1939: attempt to access beyond end of device
[  484.435783][T10921] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  484.457810][ T4594] EXT4-fs (loop1): unmounting filesystem.
[  485.265647][T10993] loop2: detected capacity change from 0 to 2048
[  485.446194][T10993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  485.471907][T11000] loop0: detected capacity change from 0 to 512
[  485.525743][T11000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  486.367225][   T27] audit: type=1800 audit(1721816288.958:315): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1960" name="bus" dev="loop2" ino=18 res=0 errno=0
[  486.494138][T11000] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1959: casefold flag without casefold feature
[  486.548366][T11000] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1959: missing EA_INODE flag
[  486.650491][T11000] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1959: error while reading EA inode 12 err=-117
[  486.719655][T11000] EXT4-fs (loop0): 1 orphan inode deleted
[  486.725439][T11000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  486.820989][ T9054] EXT4-fs (loop2): unmounting filesystem.
[  487.013120][ T9024] EXT4-fs (loop0): unmounting filesystem.
[  487.028411][T11021] loop2: detected capacity change from 0 to 512
[  487.071225][T11021] EXT4-fs: Ignoring removed bh option
[  487.105175][T11021] EXT4-fs error (device loop2): __ext4_iget:5044: inode #12: block 2: comm syz.2.1965: invalid block
[  487.139094][T11021] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1965: couldn't read orphan inode 12 (err -117)
[  487.230571][T11021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  487.293925][T11015] loop4: detected capacity change from 0 to 32768
[  487.340866][T11015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1957 (11015)
[  487.434389][T11015] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  487.465654][T11015] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  487.519876][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'.
[  487.639345][T11015] BTRFS info (device loop4): using free space tree
[  487.684191][ T9054] EXT4-fs (loop2): unmounting filesystem.
[  488.620516][T11015] BTRFS info (device loop4): enabling ssd optimizations
[  488.645070][T11023] loop3: detected capacity change from 0 to 40427
[  488.726419][T11023] F2FS-fs (loop3): Found nat_bits in checkpoint
[  488.806275][T11075] loop0: detected capacity change from 0 to 512
[  488.821228][ T7311] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  488.867355][ T3002] udevd[3002]: worker [9027] terminated by signal 33 (Unknown signal 33)
[  488.882186][T11023] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  488.900090][ T3002] udevd[3002]: worker [9027] failed while handling '/devices/virtual/block/loop4'
[  488.900124][T11075] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1978: casefold flag without casefold feature
[  488.946545][T11081] loop2: detected capacity change from 0 to 512
[  488.953173][T11023] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  488.962762][T11081] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  488.972879][T11075] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.1978: missing EA_INODE flag
[  489.016915][T11075] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1978: error while reading EA inode 2 err=-117
[  489.083937][T11023] syz.3.1968: attempt to access beyond end of device
[  489.083937][T11023] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  489.097967][T11081] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1980: casefold flag without casefold feature
[  489.138735][T11081] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1980: missing EA_INODE flag
[  489.145023][T11075] EXT4-fs (loop0): 1 orphan inode deleted
[  489.160631][T11075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  489.186120][T11081] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1980: error while reading EA inode 12 err=-117
[  489.220164][T11081] EXT4-fs (loop2): 1 orphan inode deleted
[  489.226101][T11081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  489.406413][ T9024] EXT4-fs (loop0): unmounting filesystem.
[  489.569822][ T9054] EXT4-fs (loop2): unmounting filesystem.
[  489.767799][T11083] loop1: detected capacity change from 0 to 32768
[  489.859385][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'.
[  490.097376][T11083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1981 (11083)
[  490.209745][T11083] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  490.231219][T11083] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  490.284709][T11083] BTRFS info (device loop1): using free space tree
[  490.499336][T11117] loop3: detected capacity change from 0 to 512
[  490.570483][T11117] EXT4-fs (loop3): 1 truncate cleaned up
[  490.577970][T11117] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  490.688993][T11117] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #12: block 7: comm syz.3.1982: bad entry in directory: rec_len is too small for name_len - offset=0, inode=122849872, rec_len=24, size=52 fake=0
[  490.751276][T11083] BTRFS info (device loop1): enabling ssd optimizations
[  490.782163][T11117] EXT4-fs (loop3): Remounting filesystem read-only
[  490.855480][T11133] loop2: detected capacity change from 0 to 512
[  490.869230][ T9701] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  490.906785][T11133] EXT4-fs: Ignoring removed bh option
[  490.957052][ T4594] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  490.983769][T11133] EXT4-fs error (device loop2): __ext4_iget:5044: inode #12: block 2: comm syz.2.1988: invalid block
[  490.989798][ T9701] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  491.040810][T11133] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1988: couldn't read orphan inode 12 (err -117)
[  491.056327][ T9701] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  491.136990][T11133] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  491.599182][ T9054] EXT4-fs (loop2): unmounting filesystem.
[  491.670455][ T9701] EXT4-fs (loop3): unmounting filesystem.
[  492.494258][T11151] loop2: detected capacity change from 0 to 512
[  492.602860][T11151] EXT4-fs (loop2): orphan cleanup on readonly fs
[  492.639511][T11151] Quota error (device loop2): v2_read_file_info: Can't read info structure
[  492.648993][T11151] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  492.673276][T11151] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  492.699101][T11151] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1994: bg 0: block 64: padding at end of block bitmap is not set
[  492.775716][ T3934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.781782][T11151] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  492.801496][T11151] EXT4-fs (loop2): 1 orphan inode deleted
[  492.831892][T11151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  492.946876][ T3934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.984336][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'.
[  493.008256][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'.
[  493.019623][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1999'.
[  493.062969][ T9054] EXT4-fs (loop2): unmounting filesystem.
[  493.178237][ T3934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.380946][ T3934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.436227][T11178] loop0: detected capacity change from 0 to 64
[  493.698451][ T3562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  493.710314][ T3562] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  493.718729][ T3562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  493.726740][ T3562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  493.736092][ T3562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  493.747043][ T3562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  494.678532][T11195] loop1: detected capacity change from 0 to 512
[  494.766709][T11195] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.2010: casefold flag without casefold feature
[  494.783473][T11195] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.2010: missing EA_INODE flag
[  494.861302][T11195] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2010: error while reading EA inode 2 err=-117
[  494.943482][T11195] EXT4-fs (loop1): 1 orphan inode deleted
[  494.976169][T11195] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  495.192985][ T4594] EXT4-fs (loop1): unmounting filesystem.
[  495.225218][T11186] loop0: detected capacity change from 0 to 32768
[  495.285858][T11186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2007 (11186)
[  495.324457][T11183] chnl_net:caif_netlink_parms(): no params data found
[  495.379037][T11213] loop1: detected capacity change from 0 to 512
[  495.390055][T11186] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  495.431004][T11186] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  495.459000][T11186] BTRFS info (device loop0): using free space tree
[  495.488283][T11213] EXT4-fs (loop1): orphan cleanup on readonly fs
[  495.517649][T11213] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  495.556961][T11213] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  495.610840][T11213] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  495.621130][T11183] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.640464][T11213] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2011: bg 0: block 64: padding at end of block bitmap is not set
[  495.687583][T11213] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  495.708670][T11213] EXT4-fs (loop1): 1 orphan inode deleted
[  495.714450][T11213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  495.735925][T11183] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.744433][T11183] device bridge_slave_0 entered promiscuous mode
[  495.748676][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'.
[  495.751811][T11186] BTRFS info (device loop0): enabling ssd optimizations
[  495.844751][T11183] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.854933][T11183] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.896462][T11183] device bridge_slave_1 entered promiscuous mode
[  495.959881][ T4594] EXT4-fs (loop1): unmounting filesystem.
[  496.070503][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'.
[  496.088785][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2013'.
[  496.126520][ T9024] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  496.206930][ T3562] Bluetooth: hci0: command tx timeout
[  496.461165][T11183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.650279][T11183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.680341][T11245] loop1: detected capacity change from 0 to 40427
[  496.748763][T11245] F2FS-fs (loop1): Found nat_bits in checkpoint
[  496.787168][ T3934] device hsr_slave_0 left promiscuous mode
[  496.798944][ T3934] device hsr_slave_1 left promiscuous mode
[  496.822017][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  496.834932][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  496.843585][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  496.858021][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.859092][T11245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  496.873441][ T3934] device bridge_slave_1 left promiscuous mode
[  496.886076][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.004671][ T3934] device bridge_slave_0 left promiscuous mode
[  497.078149][ T3934] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.706908][ T4594] syz-executor: attempt to access beyond end of device
[  497.706908][ T4594] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  497.723128][ T3934] device veth1_macvtap left promiscuous mode
[  497.746516][ T3934] device veth0_macvtap left promiscuous mode
[  497.752808][ T3934] device veth1_vlan left promiscuous mode
[  497.767283][ T3934] device veth0_vlan left promiscuous mode
[  498.461753][ T3562] Bluetooth: hci0: command tx timeout
[  498.648242][ T3934] team0 (unregistering): Port device team_slave_1 removed
[  498.690584][ T3934] team0 (unregistering): Port device team_slave_0 removed
[  498.729641][ T3934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.769316][ T3934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  499.161997][T11301] loop4: detected capacity change from 0 to 512
[  499.188162][T11301] EXT4-fs: Ignoring removed i_version option
[  499.202592][T11301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  499.292057][T11301] EXT4-fs (loop4): 1 truncate cleaned up
[  499.298035][T11301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  499.338519][   T27] audit: type=1800 audit(1721816300.939:316): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2026" name="bus" dev="loop4" ino=18 res=0 errno=0
[  499.359869][   T27] audit: type=1804 audit(1721816300.939:317): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2026" name="/newroot/205/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  499.381825][   T27] audit: type=1804 audit(1721816300.939:318): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2026" name="/newroot/205/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  499.517590][ T3934] bond0 (unregistering): Released all slaves
[  499.893271][T11183] team0: Port device team_slave_0 added
[  499.960681][T11183] team0: Port device team_slave_1 added
[  500.127442][T11183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.138104][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.183597][T11312] loop2: detected capacity change from 0 to 512
[  500.189101][T11183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.204248][T11183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.211314][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.223831][T11309] loop1: detected capacity change from 0 to 4096
[  500.242502][T11183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.260494][ T7311] EXT4-fs (loop4): unmounting filesystem.
[  500.282212][T11312] EXT4-fs (loop2): 1 truncate cleaned up
[  500.298346][T11312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  500.442135][T11312] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #12: block 7: comm syz.2.2030: bad entry in directory: rec_len is too small for name_len - offset=0, inode=122849872, rec_len=24, size=52 fake=0
[  500.481610][T11312] EXT4-fs (loop2): Remounting filesystem read-only
[  500.533864][T11183] device hsr_slave_0 entered promiscuous mode
[  500.555210][ T9054] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  500.585537][T11183] device hsr_slave_1 entered promiscuous mode
[  500.589018][ T9054] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  500.619381][ T9054] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  500.714044][ T3562] Bluetooth: hci0: command tx timeout
[  501.000361][ T9054] EXT4-fs (loop2): unmounting filesystem.
[  501.458139][T11342] loop4: detected capacity change from 0 to 64
[  501.615901][   T27] audit: type=1804 audit(1721816303.043:319): pid=11346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2046" name="/newroot/212/file1/file1" dev="loop4" ino=5 res=1 errno=0
[  501.852917][   T27] audit: type=1800 audit(1721816303.265:320): pid=11346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2046" name="file1" dev="loop4" ino=5 res=0 errno=0
[  502.038300][T11183] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  502.101474][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  502.111383][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  502.122398][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  502.138454][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  502.146795][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  502.154070][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  502.228804][T11183] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  502.266754][T11183] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  502.331062][T11183] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  502.691596][T11183] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.836525][T11183] 8021q: adding VLAN 0 to HW filter on device team0
[  502.877061][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  502.908374][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  502.953878][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  502.967300][ T3562] Bluetooth: hci0: command tx timeout
[  503.003674][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  503.046672][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.053864][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.135203][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  503.137001][T11376] loop4: detected capacity change from 0 to 64
[  503.154057][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  503.164248][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.171336][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.192192][T11353] chnl_net:caif_netlink_parms(): no params data found
[  503.208181][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'.
[  503.255480][T11374] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2056'.
[  503.426011][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  503.432115][   T27] audit: type=1800 audit(1721816304.714:321): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2057" name="file1" dev="loop4" ino=5 res=0 errno=0
[  503.440082][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  503.518640][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  503.556576][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  503.629045][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  503.641864][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  503.651635][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  503.666229][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  503.681001][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  503.690464][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  503.705232][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  503.758922][T11183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  503.766605][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  503.910481][T11353] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.917711][T11353] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.925747][T11353] device bridge_slave_0 entered promiscuous mode
[  503.954513][T11353] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.961620][T11353] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.017180][T11353] device bridge_slave_1 entered promiscuous mode
[  504.161375][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.204770][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.347146][T11353] team0: Port device team_slave_0 added
[  504.354234][   T48] Bluetooth: hci4: command tx timeout
[  504.382296][T11353] team0: Port device team_slave_1 added
[  504.402845][T11401] loop0: detected capacity change from 0 to 4096
[  504.563870][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.581494][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.625088][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.659378][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.666543][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.705598][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.829660][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  504.834581][T11410] loop0: detected capacity change from 0 to 128
[  504.849708][T11410] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  504.861319][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  504.869669][T11410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  505.117525][ T3934] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.123001][T11396] loop4: detected capacity change from 0 to 32768
[  505.155314][T11183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.163720][T11396] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2063 (11396)
[  505.200996][T11353] device hsr_slave_0 entered promiscuous mode
[  505.220802][T11353] device hsr_slave_1 entered promiscuous mode
[  505.228998][T11353] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.237871][T11353] Cannot create hsr debugfs directory
[  505.270442][T11396] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  505.281980][T11396] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  505.301477][T11396] BTRFS info (device loop4): using free space tree
[  505.304869][ T3934] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.435144][ T3934] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.506515][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  505.517506][T11396] BTRFS info (device loop4): enabling ssd optimizations
[  505.529070][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  505.612519][ T7311] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  505.922468][ T3934] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.976436][T11183] device veth0_vlan entered promiscuous mode
[  506.017170][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  506.033839][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  506.060668][T11183] device veth1_vlan entered promiscuous mode
[  506.182040][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  506.192770][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  506.417468][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  506.435885][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  506.463851][T11183] device veth0_macvtap entered promiscuous mode
[  506.489719][T11183] device veth1_macvtap entered promiscuous mode
[  506.608000][   T48] Bluetooth: hci4: command tx timeout
[  506.758666][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.788126][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.801627][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.819769][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.831495][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.838049][T11431] loop4: detected capacity change from 0 to 32768
[  506.849190][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.850538][T11437] loop1: detected capacity change from 0 to 512
[  506.862548][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.876795][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.891151][T11183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.898975][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  506.908453][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  506.919614][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  506.928960][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  506.940485][T11437] EXT4-fs: Ignoring removed i_version option
[  506.963488][T11431] XFS (loop4): Mounting V5 Filesystem
[  506.974726][T11437] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  507.002353][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.035217][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.048183][T11437] EXT4-fs (loop1): 1 truncate cleaned up
[  507.073407][T11437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  507.084108][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.094730][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.106081][   T27] audit: type=1800 audit(1721816308.101:322): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2072" name="bus" dev="loop1" ino=18 res=0 errno=0
[  507.132173][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.155800][T11431] XFS (loop4): Ending clean mount
[  507.160178][   T27] audit: type=1804 audit(1721816308.129:323): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2072" name="/newroot/435/bus/bus" dev="loop1" ino=18 res=1 errno=0
[  507.203695][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.214593][   T27] audit: type=1804 audit(1721816308.129:324): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2072" name="/newroot/435/bus/bus" dev="loop1" ino=18 res=1 errno=0
[  507.237575][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.249420][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.306093][T11183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.334145][ T7311] XFS (loop4): Unmounting Filesystem
[  507.351002][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  507.361554][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  507.440298][T11435] loop0: detected capacity change from 0 to 40427
[  507.503179][T11435] F2FS-fs (loop0): Found nat_bits in checkpoint
[  507.526433][T11183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.537397][T11183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.546624][T11183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.559151][T11183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.615561][T11435] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  508.413776][ T4594] EXT4-fs (loop1): unmounting filesystem.
[  508.552434][T11458] loop4: detected capacity change from 0 to 4096
[  508.560506][ T9024] syz-executor: attempt to access beyond end of device
[  508.560506][ T9024] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  508.623951][T11458] ntfs: volume version 3.1.
[  508.861141][ T3562] Bluetooth: hci4: command tx timeout
[  508.973351][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.995632][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.011884][T11353] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  509.059859][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  509.103868][T11464] loop4: detected capacity change from 0 to 256
[  509.131089][T11464] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  509.176125][T11353] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  509.212951][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.237714][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.304748][T11460] loop1: detected capacity change from 0 to 32768
[  509.353052][T11460] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.2074 (11460)
[  509.385991][T11460] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  509.396901][T11353] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  509.421062][T11460] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  509.434547][T11353] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  509.455318][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  509.507569][T11460] BTRFS info (device loop1): using free space tree
[  509.778769][T11489] loop0: detected capacity change from 0 to 512
[  509.797060][T11489] EXT4-fs: Ignoring removed i_version option
[  509.804904][T11489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  509.935626][T11460] BTRFS info (device loop1): enabling ssd optimizations
[  510.880012][T11489] EXT4-fs (loop0): 1 truncate cleaned up
[  510.907626][ T3934] device hsr_slave_0 left promiscuous mode
[  510.914227][ T3934] device hsr_slave_1 left promiscuous mode
[  511.087868][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.115212][T11489] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  511.249672][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.277230][   T48] Bluetooth: hci4: command tx timeout
[  511.344721][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.358947][   T27] audit: type=1800 audit(1721816312.033:325): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2083" name="bus" dev="loop0" ino=18 res=0 errno=0
[  511.397510][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.504669][   T27] audit: type=1804 audit(1721816312.052:326): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2083" name="/newroot/101/bus/bus" dev="loop0" ino=18 res=1 errno=0
[  511.550324][ T3934] device bridge_slave_1 left promiscuous mode
[  511.556884][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.579626][   T27] audit: type=1804 audit(1721816312.052:327): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2083" name="/newroot/101/bus/bus" dev="loop0" ino=18 res=1 errno=0
[  511.601168][ T3934] device bridge_slave_0 left promiscuous mode
[  511.611646][ T3934] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.755756][ T9024] EXT4-fs (loop0): unmounting filesystem.
[  511.825280][ T3934] device veth1_macvtap left promiscuous mode
[  511.841644][ T4594] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  511.857097][ T3934] device veth0_macvtap left promiscuous mode
[  511.868106][T11506] loop0: detected capacity change from 0 to 128
[  511.887933][ T3934] device veth1_vlan left promiscuous mode
[  511.894116][ T3934] device veth0_vlan left promiscuous mode
[  511.939884][T11506] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  511.984428][T11506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  512.682913][T11504] loop3: detected capacity change from 0 to 40427
[  512.684805][ T3562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  512.712318][T11504] F2FS-fs (loop3): Found nat_bits in checkpoint
[  512.721996][ T3562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  512.739739][ T3562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  512.747997][ T3562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  512.755799][ T3562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  512.772691][ T3557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  512.871122][T11504] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  512.962448][T11520] loop0: detected capacity change from 0 to 256
[  513.008219][T11520] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  513.639590][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  513.645957][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  513.831599][T11183] syz-executor: attempt to access beyond end of device
[  513.831599][T11183] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  514.233468][ T3934] team0 (unregistering): Port device team_slave_1 removed
[  514.318998][ T3934] team0 (unregistering): Port device team_slave_0 removed
[  514.429186][ T3934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  514.495436][ T3934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  514.620980][T11524] loop3: detected capacity change from 0 to 32768
[  514.641953][T11524] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2093 (11524)
[  514.718567][T11524] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  514.740600][T11524] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  514.762727][T11524] BTRFS info (device loop3): using free space tree
[  514.860528][T11524] BTRFS info (device loop3): enabling ssd optimizations
[  514.953357][T11183] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  515.015349][ T3562] Bluetooth: hci3: command tx timeout
[  515.339114][ T3934] bond0 (unregistering): Released all slaves
[  516.303422][T11550] loop3: detected capacity change from 0 to 256
[  516.330678][T11550] FAT-fs (loop3): Directory bread(block 64) failed
[  516.337389][T11550] FAT-fs (loop3): Directory bread(block 65) failed
[  516.344719][T11550] FAT-fs (loop3): Directory bread(block 66) failed
[  516.351822][T11550] FAT-fs (loop3): Directory bread(block 67) failed
[  516.360748][T11550] FAT-fs (loop3): Directory bread(block 68) failed
[  516.367382][T11550] FAT-fs (loop3): Directory bread(block 69) failed
[  516.374131][T11550] FAT-fs (loop3): Directory bread(block 70) failed
[  516.381028][T11550] FAT-fs (loop3): Directory bread(block 71) failed
[  516.387740][T11550] FAT-fs (loop3): Directory bread(block 72) failed
[  516.394312][T11353] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.425041][T11550] FAT-fs (loop3): Directory bread(block 73) failed
[  516.538105][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  516.553645][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  516.592246][T11353] 8021q: adding VLAN 0 to HW filter on device team0
[  516.621717][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  516.632914][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  516.642312][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.649431][ T3745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.769014][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  516.797997][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  516.832652][T11554] Bluetooth: MGMT ver 1.22
[  516.835630][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  516.874742][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.881896][ T3745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.903972][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  516.942804][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  517.024600][T11353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  517.052112][T11353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  517.114817][T11552] loop1: detected capacity change from 0 to 32768
[  517.117155][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  517.129007][T11552] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.2096 (11552)
[  517.148361][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  517.171658][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  517.193414][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  517.201944][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  517.223600][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  517.224251][T11552] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  517.247590][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  517.256091][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  517.257490][T11557] loop3: detected capacity change from 0 to 4096
[  517.275465][ T3562] Bluetooth: hci3: command tx timeout
[  517.279973][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  517.302960][T11552] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  517.312638][T11552] BTRFS info (device loop1): using free space tree
[  517.321604][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  517.342279][T11557] ntfs: volume version 3.1.
[  517.508149][ T3557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  517.519175][T11552] BTRFS info (device loop1): enabling ssd optimizations
[  517.526636][ T3557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  517.537360][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  517.547661][ T3557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  517.556390][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  517.564321][ T3557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  517.708061][T11511] chnl_net:caif_netlink_parms(): no params data found
[  517.849041][ T4594] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  518.491302][T11511] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.504310][T11511] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.579156][T11511] device bridge_slave_0 entered promiscuous mode
[  518.740101][T11511] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.866100][T11511] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.023222][T11511] device bridge_slave_1 entered promiscuous mode
[  519.140384][T11604] loop1: detected capacity change from 0 to 256
[  519.239452][T11604] FAT-fs (loop1): Directory bread(block 64) failed
[  519.283726][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  519.291250][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  519.300233][T11604] FAT-fs (loop1): Directory bread(block 65) failed
[  519.327622][T11604] FAT-fs (loop1): Directory bread(block 66) failed
[  519.334474][T11604] FAT-fs (loop1): Directory bread(block 67) failed
[  519.398355][T11604] FAT-fs (loop1): Directory bread(block 68) failed
[  519.431100][T11353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.449186][T11604] FAT-fs (loop1): Directory bread(block 69) failed
[  519.455823][T11604] FAT-fs (loop1): Directory bread(block 70) failed
[  519.476680][T11511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.486023][T11604] FAT-fs (loop1): Directory bread(block 71) failed
[  519.500392][T11604] FAT-fs (loop1): Directory bread(block 72) failed
[  519.517946][T11604] FAT-fs (loop1): Directory bread(block 73) failed
[  519.520512][T11511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.532923][ T3557] Bluetooth: hci3: command tx timeout
[  519.645474][T11511] team0: Port device team_slave_0 added
[  519.658710][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  519.668492][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  519.720560][T11511] team0: Port device team_slave_1 added
[  519.774534][T11567] chnl_net:caif_netlink_parms(): no params data found
[  519.782137][ T3557] Bluetooth: hci2: command tx timeout
[  519.881369][T11511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.888344][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.968453][T11607] loop3: detected capacity change from 0 to 32768
[  519.976103][T11511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.025944][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  520.030504][T11607] XFS (loop3): Mounting V5 Filesystem
[  520.042898][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  520.066382][T11353] device veth0_vlan entered promiscuous mode
[  520.075390][T11511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.082730][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.109646][T11511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.126563][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  520.134936][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  520.142515][T11607] XFS (loop3): Ending clean mount
[  520.158722][T11607] XFS (loop3): Quotacheck needed: Please wait.
[  520.212425][T11353] device veth1_vlan entered promiscuous mode
[  520.230695][T11607] XFS (loop3): Quotacheck: Done.
[  520.326107][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  520.335796][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  520.343832][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  520.353082][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  520.399567][   T27] audit: type=1800 audit(1721816320.368:328): pid=11607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2107" name="bus" dev="loop3" ino=1066 res=0 errno=0
[  520.444551][T11511] device hsr_slave_0 entered promiscuous mode
[  520.454315][T11511] device hsr_slave_1 entered promiscuous mode
[  520.464714][T11511] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.472285][T11511] Cannot create hsr debugfs directory
[  520.508403][T11567] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.515503][T11567] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.524291][T11567] device bridge_slave_0 entered promiscuous mode
[  520.590291][T11353] device veth0_macvtap entered promiscuous mode
[  520.622744][T11567] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.626589][T11183] XFS (loop3): Unmounting Filesystem
[  520.637962][T11567] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.646161][T11567] device bridge_slave_1 entered promiscuous mode
[  520.735790][T11353] device veth1_macvtap entered promiscuous mode
[  520.788972][T11567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.813856][T11626] loop1: detected capacity change from 0 to 32768
[  520.831660][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.861133][T11626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2109 (11626)
[  520.866463][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.884143][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.895511][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.905607][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.916726][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.930768][T11626] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  520.939749][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.940912][T11626] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  520.960147][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.997177][T11353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  521.010811][T11567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.021016][T11626] BTRFS info (device loop1): using free space tree
[  521.057010][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  521.066713][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  521.077391][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.088782][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.099915][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.111335][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.121672][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.132877][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.143078][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.154006][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.165683][T11353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  521.190842][T11626] BTRFS info (device loop1): enabling ssd optimizations
[  521.194055][T11567] team0: Port device team_slave_0 added
[  521.208316][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  521.217678][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  521.271296][T11353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.290319][T11353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.305521][T11353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.316058][T11353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.345454][ T4594] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  521.369317][T11567] team0: Port device team_slave_1 added
[  521.654954][T11567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.662794][T11567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.696130][T11567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.746507][T11567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.762214][T11567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.797988][ T3557] Bluetooth: hci3: command tx timeout
[  521.798102][   T27] audit: type=1326 audit(1721816321.669:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  521.826051][   T27] audit: type=1326 audit(1721816321.697:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  521.849272][   T27] audit: type=1326 audit(1721816321.697:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  521.873470][   T27] audit: type=1326 audit(1721816321.697:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  521.896085][T11567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.896440][   T27] audit: type=1326 audit(1721816321.697:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  521.930142][   T27] audit: type=1326 audit(1721816321.697:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  521.953429][   T27] audit: type=1326 audit(1721816321.697:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  521.976535][   T27] audit: type=1326 audit(1721816321.697:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  521.999969][   T27] audit: type=1326 audit(1721816321.697:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  522.046346][ T3557] Bluetooth: hci2: command tx timeout
[  522.103505][ T3934] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.152661][T11567] device hsr_slave_0 entered promiscuous mode
[  522.163579][T11567] device hsr_slave_1 entered promiscuous mode
[  522.193921][T11567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  522.209000][T11567] Cannot create hsr debugfs directory
[  522.230683][ T3875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.238954][ T3875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.339952][ T3934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.374405][ T8771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  522.394057][ T6809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.402346][ T6809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.142632][T11665] loop1: detected capacity change from 0 to 256
[  523.194063][ T3934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.227858][T11665] FAT-fs (loop1): Directory bread(block 64) failed
[  523.250060][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  523.258353][T11665] FAT-fs (loop1): Directory bread(block 65) failed
[  523.291440][T11667] loop3: detected capacity change from 0 to 8
[  523.299843][T11667] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  523.320293][T11665] FAT-fs (loop1): Directory bread(block 66) failed
[  523.329716][T11667] cramfs: unsupported filesystem features
[  523.358811][T11665] FAT-fs (loop1): Directory bread(block 67) failed
[  523.365463][T11665] FAT-fs (loop1): Directory bread(block 68) failed
[  523.379844][ T3934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.386733][T11665] FAT-fs (loop1): Directory bread(block 69) failed
[  523.397656][T11665] FAT-fs (loop1): Directory bread(block 70) failed
[  523.438585][T11665] FAT-fs (loop1): Directory bread(block 71) failed
[  523.465408][T11665] FAT-fs (loop1): Directory bread(block 72) failed
[  523.473262][T11665] FAT-fs (loop1): Directory bread(block 73) failed
[  523.728308][T11671] loop3: detected capacity change from 0 to 64
[  524.018019][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  524.229249][T11671] hfs: invalid catalog max_key_len 7
[  524.235560][T11671] hfs: unable to open catalog tree
[  524.329222][ T3557] Bluetooth: hci2: command tx timeout
[  526.543084][ T3557] Bluetooth: hci2: command tx timeout
[  527.028849][T11682] loop3: detected capacity change from 0 to 32768
[  527.065161][T11682] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.2122 (11682)
[  527.148121][T11682] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  527.161930][T11682] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  527.171558][T11682] BTRFS info (device loop3): using free space tree
[  528.099295][T11682] BTRFS error (device loop3): open_ctree failed
[  528.403833][ T3604] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  528.412396][T11712] loop2: detected capacity change from 0 to 32768
[  528.458189][T11712] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2126 (11712)
[  528.502537][T11712] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  528.523835][T11712] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  528.572648][T11712] BTRFS info (device loop2): using free space tree
[  528.589653][T11511] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  528.600305][T11511] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  528.610911][T11511] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  528.639711][T11511] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  528.727759][ T3604] usb 2-1: Using ep0 maxpacket: 8
[  528.739922][T11567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.810094][T11716] loop3: detected capacity change from 0 to 32768
[  528.890285][ T3604] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  528.901746][ T3604] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  528.905183][T11567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.918515][ T3604] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30
[  528.930670][T11712] BTRFS info (device loop2): enabling ssd optimizations
[  528.932311][ T3604] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  529.002968][T11716] XFS (loop3): Mounting V5 Filesystem
[  529.067512][T11353] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  529.084665][T11567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.208473][ T3604] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  529.218157][ T3604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.227366][ T3604] usb 2-1: Product: syz
[  529.232184][ T3604] usb 2-1: Manufacturer: syz
[  529.236803][ T3604] usb 2-1: SerialNumber: syz
[  529.265538][T11716] XFS (loop3): Ending clean mount
[  529.277312][T11716] XFS (loop3): Quotacheck needed: Please wait.
[  529.412052][T11716] XFS (loop3): Quotacheck: Done.
[  529.460350][T11567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.481725][   T27] kauditd_printk_skb: 25 callbacks suppressed
[  529.481740][   T27] audit: type=1800 audit(1721816328.758:363): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2128" name="bus" dev="loop3" ino=1066 res=0 errno=0
[  529.530923][T11745] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  529.570311][T11511] 8021q: adding VLAN 0 to HW filter on device bond0
[  529.616917][T11183] XFS (loop3): Unmounting Filesystem
[  529.631329][ T3604] usb 2-1: cannot find UAC_HEADER
[  529.656853][ T3604] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  529.670489][ T3604] usb 2-1: USB disconnect, device number 29
[  529.729576][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  529.737247][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  529.860129][T11511] 8021q: adding VLAN 0 to HW filter on device team0
[  529.867096][   T27] audit: type=1326 audit(1721816329.109:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  529.897325][ T8655] udevd[8655]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  529.915089][   T27] audit: type=1326 audit(1721816329.164:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  529.942239][   T27] audit: type=1326 audit(1721816329.182:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  529.965421][   T27] audit: type=1326 audit(1721816329.182:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  529.990134][   T27] audit: type=1326 audit(1721816329.182:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  530.018809][ T3934] device hsr_slave_0 left promiscuous mode
[  530.025324][ T3934] device hsr_slave_1 left promiscuous mode
[  530.032194][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.039690][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.047224][   T27] audit: type=1326 audit(1721816329.182:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  530.077893][   T27] audit: type=1326 audit(1721816329.182:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  530.107532][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.115223][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.150982][ T3934] device bridge_slave_1 left promiscuous mode
[  530.157212][ T3934] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.175526][   T27] audit: type=1326 audit(1721816329.182:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  530.208228][   T27] audit: type=1326 audit(1721816329.182:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11749 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  530.361497][ T3934] device bridge_slave_0 left promiscuous mode
[  530.368542][ T3934] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.399240][ T3934] device veth1_macvtap left promiscuous mode
[  530.406954][ T3934] device veth0_macvtap left promiscuous mode
[  530.416556][ T3934] device veth1_vlan left promiscuous mode
[  530.439467][ T3934] device veth0_vlan left promiscuous mode
[  532.414723][ T3745] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  532.490179][ T3562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  532.515051][ T3562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  532.533932][ T3562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  532.542213][ T3562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  532.552255][ T3562] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  532.561304][ T3562] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  532.839314][ T3745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt
[  532.900640][ T3934] team0 (unregistering): Port device team_slave_1 removed
[  532.947988][ T3934] team0 (unregistering): Port device team_slave_0 removed
[  532.991725][ T3934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.036305][ T3934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.135822][ T3745] usb 3-1: string descriptor 0 read error: -22
[  533.142483][ T3745] usb 3-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33
[  533.151753][ T3745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.175056][ T3745] usb 3-1: config 0 descriptor??
[  533.200816][T11757] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  533.224586][ T3745] r8712u: register rtl8712_netdev_ops to netdev_ops
[  533.231849][ T3745] usb 3-1: r8712u: USB_SPEED_LOW with 1 endpoints
[  533.443672][ T3934] bond0 (unregistering): Released all slaves
[  533.527744][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  533.537277][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  533.546214][ T3943] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.553334][ T3943] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.561301][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  533.570258][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  533.579234][ T3943] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.586365][ T3943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.594117][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  533.602828][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  533.611734][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  533.622075][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  533.632128][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  533.640872][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  533.649141][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  533.658011][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  533.666432][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  533.674835][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  533.685398][T11511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  533.693417][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  533.701423][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  533.720115][T11768] netlink: 'syz.3.2137': attribute type 10 has an invalid length.
[  533.837073][ T3745] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed
[  533.863254][ T3745] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  533.887474][ T3745] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  533.977258][ T3745] usb 3-1: USB disconnect, device number 14
[  534.223371][T11567] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  534.239861][T11567] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  534.280126][T11567] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  534.320737][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  534.351155][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  534.378360][T11511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.385747][T11567] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  534.557009][T11769] chnl_net:caif_netlink_parms(): no params data found
[  534.684291][T11793] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  534.777428][ T3557] Bluetooth: hci5: command tx timeout
[  534.830138][T11769] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.837898][T11769] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.871321][T11769] device bridge_slave_0 entered promiscuous mode
[  534.923110][T11567] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.929969][ T3745] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  534.951267][T11769] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.976206][T11769] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.001516][T11769] device bridge_slave_1 entered promiscuous mode
[  535.030014][T11801] loop3: detected capacity change from 0 to 256
[  535.060114][T11567] 8021q: adding VLAN 0 to HW filter on device team0
[  535.077141][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  535.091350][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  535.162018][T11769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.185096][T11769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.199394][ T3745] usb 3-1: Using ep0 maxpacket: 8
[  535.321202][T11769] team0: Port device team_slave_0 added
[  535.337994][ T3745] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.348999][ T3745] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  535.367829][ T3745] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30
[  535.380802][ T3745] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  535.403141][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  535.414952][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  535.429148][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.436273][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.452033][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  535.464298][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  535.477460][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.484586][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.500055][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  535.509135][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  535.526941][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  535.541533][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  535.553616][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  535.571866][T11769] team0: Port device team_slave_1 added
[  535.580149][ T3745] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  535.590759][ T3745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.598765][ T3745] usb 3-1: Product: syz
[  535.610248][ T3745] usb 3-1: Manufacturer: syz
[  535.614966][ T3745] usb 3-1: SerialNumber: syz
[  535.637691][T11511] device veth0_vlan entered promiscuous mode
[  535.656674][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  535.671177][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  535.687329][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  535.696854][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  535.755050][T11769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.762027][T11769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.794041][T11769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.824640][T11511] device veth1_vlan entered promiscuous mode
[  535.854467][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  535.865630][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  535.887526][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  535.893937][T11805] loop3: detected capacity change from 0 to 4096
[  535.898398][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  535.926163][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  535.955993][T11805] ntfs: volume version 3.1.
[  535.959954][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  535.968955][ T3745] usb 3-1: cannot find UAC_HEADER
[  535.996452][T11769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.008145][T11769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.010496][ T3745] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  536.041398][T11769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.064557][ T3745] usb 3-1: USB disconnect, device number 15
[  536.095771][T11567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  536.119818][T11567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  536.149191][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  536.160636][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  536.196201][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  536.204664][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  536.221125][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  536.328202][T11769] device hsr_slave_0 entered promiscuous mode
[  536.336224][T11769] device hsr_slave_1 entered promiscuous mode
[  536.355517][ T8655] udevd[8655]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  536.379226][T11769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.388426][T11769] Cannot create hsr debugfs directory
[  536.421881][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  536.441070][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  536.460460][T11511] device veth0_macvtap entered promiscuous mode
[  536.524027][T11511] device veth1_macvtap entered promiscuous mode
[  536.574464][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.594822][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.605231][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.621155][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.631990][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.649762][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.675404][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.692450][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.705410][T11511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.740259][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  536.759755][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  536.767892][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  536.780687][T11820] loop3: detected capacity change from 0 to 512
[  536.788063][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  536.798997][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.810888][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.821695][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.833013][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.843548][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.852701][T11820] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2151: invalid indirect mapped block 2 (level 1)
[  536.854864][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.877580][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.882295][T11820] EXT4-fs (loop3): 1 truncate cleaned up
[  536.889645][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.900755][T11820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  536.905232][T11511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.923908][T11511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.932675][T11511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.941365][T11511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.950592][T11511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.977054][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  536.983249][T11820] EXT4-fs error (device loop3): ext4_lookup:1855: inode #12: comm syz.3.2151: unexpected EA_INODE flag
[  536.985740][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  537.025595][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  537.033164][ T3557] Bluetooth: hci5: command tx timeout
[  537.039225][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  537.072201][T11183] EXT4-fs (loop3): unmounting filesystem.
[  537.081623][T11567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.140949][ T6870] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  537.247745][T11826] loop3: detected capacity change from 0 to 8
[  537.267810][T11826] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  537.276906][T11769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.296598][T11826] cramfs: unsupported filesystem features
[  537.306289][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  537.316110][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  537.325478][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  537.350001][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  537.391429][T11567] device veth0_vlan entered promiscuous mode
[  537.467103][ T3934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.476611][ T3940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.494548][ T3934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.501993][ T3940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.536084][T11769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.555580][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  537.563352][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  537.570965][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  537.579642][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  537.659352][ T6870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt
[  537.748913][T11829] loop3: detected capacity change from 0 to 64
[  537.770998][T11829] hfs: invalid catalog max_key_len 7
[  537.777046][T11829] hfs: unable to open catalog tree
[  537.994907][ T6870] usb 3-1: string descriptor 0 read error: -22
[  538.003389][ T6870] usb 3-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33
[  538.074680][ T6870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.163796][ T6870] usb 3-1: config 0 descriptor??
[  538.211358][T11818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  538.220056][T11567] device veth1_vlan entered promiscuous mode
[  538.256758][ T6870] r8712u: register rtl8712_netdev_ops to netdev_ops
[  538.263405][ T6870] usb 3-1: r8712u: USB_SPEED_LOW with 1 endpoints
[  538.270120][ T8655] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  538.336352][T11769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.362921][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  538.457115][T11833] loop4: detected capacity change from 0 to 512
[  538.493514][T11769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.512599][T11833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  538.525419][ T6870] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed
[  538.532064][ T6870] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  538.555146][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  538.564045][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  538.575423][T11567] device veth0_macvtap entered promiscuous mode
[  538.587065][ T6870] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  538.607113][T11567] device veth1_macvtap entered promiscuous mode
[  538.626264][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.640367][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.651215][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.663617][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.674768][ T6870] usb 3-1: USB disconnect, device number 16
[  538.675105][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.691874][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.701921][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.738309][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.759989][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.785247][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.789488][T11836] loop3: detected capacity change from 0 to 4096
[  538.796628][T11567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.814127][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.850319][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.860180][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.876448][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.879327][T11836] ntfs: volume version 3.1.
[  538.888716][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.901338][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.911386][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.921863][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.931945][T11567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.942672][T11567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.954936][T11567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.955937][T11511] EXT4-fs (loop4): unmounting filesystem.
[  539.026906][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  539.039582][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  539.050436][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  539.080934][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  539.093217][T11840] loop3: detected capacity change from 0 to 1024
[  539.100931][T11840] EXT4-fs: Ignoring removed orlov option
[  539.107272][T11840] EXT4-fs: Ignoring removed nomblk_io_submit option
[  539.113139][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  539.123654][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  539.135581][T11567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.150601][T11567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.150637][T11567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.150663][T11567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.159117][T11840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  539.239644][T11183] EXT4-fs (loop3): unmounting filesystem.
[  539.284859][ T3562] Bluetooth: hci5: command tx timeout
[  539.357972][T11769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  539.409029][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.424290][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.435268][T11769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  539.448661][T11769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  539.468674][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  539.481511][T11769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  539.482066][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.505950][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.523661][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  539.606547][T11769] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.622320][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  539.631083][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  539.644136][T11769] 8021q: adding VLAN 0 to HW filter on device team0
[  539.657505][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  539.678623][ T4059] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  539.688938][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  539.698066][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.705188][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.728483][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  539.737608][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  539.747616][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  539.756412][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.763575][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.771791][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  539.780594][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  539.799340][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  539.809535][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  539.818850][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  539.828055][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  539.843995][T11769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  539.857667][T11769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  539.878487][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  539.887377][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  539.904008][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  539.913300][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  539.921783][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  539.940768][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  540.086875][ T4059] usb 4-1: unable to get BOS descriptor set
[  540.135296][T11850] loop0: detected capacity change from 0 to 40427
[  540.182345][T11850] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  540.192274][T11850] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  540.193917][ T4059] usb 4-1: config 7 has an invalid interface number: 23 but max is 2
[  540.209333][T11850] F2FS-fs (loop0): invalid crc value
[  540.217840][T11850] F2FS-fs (loop0): Found nat_bits in checkpoint
[  540.225389][ T4059] usb 4-1: config 7 has an invalid interface number: 231 but max is 2
[  540.241839][ T4059] usb 4-1: config 7 has an invalid interface number: 100 but max is 2
[  540.252242][ T4059] usb 4-1: config 7 has an invalid interface number: 215 but max is 2
[  540.265715][ T4059] usb 4-1: config 7 has 4 interfaces, different from the descriptor's value: 3
[  540.292317][T11769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  540.299269][ T4059] usb 4-1: config 7 has no interface number 0
[  540.321380][T11850] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  540.321404][ T4059] usb 4-1: config 7 has no interface number 1
[  540.337881][T11850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  540.378499][ T4059] usb 4-1: config 7 has no interface number 2
[  540.381241][T11862] loop2: detected capacity change from 0 to 8
[  540.384675][ T4059] usb 4-1: config 7 has no interface number 3
[  540.397447][ T4059] usb 4-1: config 7 interface 23 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  540.411727][ T4059] usb 4-1: config 7 interface 231 altsetting 2 has an invalid endpoint with address 0x1F, skipping
[  540.423280][T11862] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  540.446684][ T4059] usb 4-1: config 7 interface 231 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  540.451912][T11769] device veth0_vlan entered promiscuous mode
[  540.458736][T11862] cramfs: unsupported filesystem features
[  540.469164][ T4059] usb 4-1: config 7 interface 231 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  540.482140][ T4059] usb 4-1: config 7 interface 231 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  540.492433][T11769] device veth1_vlan entered promiscuous mode
[  540.504349][ T4059] usb 4-1: config 7 interface 231 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  540.516613][ T4059] usb 4-1: config 7 interface 231 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  540.536165][ T4059] usb 4-1: config 7 interface 231 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 10
[  540.563334][T11769] device veth0_macvtap entered promiscuous mode
[  540.586964][ T4059] usb 4-1: too many endpoints for config 7 interface 100 altsetting 84: 190, using maximum allowed: 30
[  540.598226][ T4059] usb 4-1: config 7 interface 100 altsetting 84 has a duplicate endpoint with address 0xF, skipping
[  540.609194][ T4059] usb 4-1: config 7 interface 100 altsetting 84 has 1 endpoint descriptor, different from the interface descriptor's value: 190
[  540.622883][ T4059] usb 4-1: config 7 interface 215 altsetting 244 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  540.634359][ T4059] usb 4-1: config 7 interface 215 altsetting 244 endpoint 0xE has invalid maxpacket 991, setting to 64
[  540.645555][ T4059] usb 4-1: config 7 interface 231 has no altsetting 0
[  540.656501][ T4059] usb 4-1: config 7 interface 100 has no altsetting 0
[  540.679202][T11769] device veth1_macvtap entered promiscuous mode
[  540.692359][ T4059] usb 4-1: config 7 interface 215 has no altsetting 0
[  540.724157][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  540.753908][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  540.762169][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  540.774276][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  540.787463][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  540.796640][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  540.964537][T11866] loop2: detected capacity change from 0 to 64
[  540.996266][T11866] hfs: invalid catalog max_key_len 7
[  541.002365][T11866] hfs: unable to open catalog tree
[  541.411780][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  541.419927][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  541.427819][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  541.436539][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  541.447658][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  541.461936][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  541.469725][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  541.489075][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  541.537316][ T3557] Bluetooth: hci5: command tx timeout
[  541.580520][ T4059] usb 4-1: string descriptor 0 read error: -22
[  541.596284][ T4059] usb 4-1: New USB device found, idVendor=1a72, idProduct=1015, bcdDevice=8a.3e
[  541.607074][ T4059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.612182][T11868] loop2: detected capacity change from 0 to 512
[  541.619882][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.633579][T11868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  541.644651][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.668792][ T4059] ftdi_sio 4-1:7.23: FTDI USB Serial Device converter detected
[  541.677077][ T4059] ftdi_sio ttyUSB0: unknown device type: 0x8a3e
[  541.683928][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.691371][T11868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  541.697090][ T4059] ftdi_sio 4-1:7.231: FTDI USB Serial Device converter detected
[  541.710349][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.720535][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.731542][T11868] System zones: 1-12
[  541.738619][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.749033][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.752397][ T4059] ftdi_sio ttyUSB1: unknown device type: 0x8a3e
[  541.773634][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.783836][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.783855][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.783868][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.806249][T11868] EXT4-fs (loop2): 1 truncate cleaned up
[  541.816963][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.832313][T11769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.832651][ T4059] ftdi_sio 4-1:7.100: FTDI USB Serial Device converter detected
[  541.843321][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.858867][T11868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  541.865096][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.869208][ T4059] ftdi_sio ttyUSB2: unknown device type: 0x8a3e
[  541.883990][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.884009][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.884023][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.884035][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.884048][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.884060][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.884075][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.884086][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.884098][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.884109][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.885453][T11769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.902765][T11846] loop3: detected capacity change from 0 to 256
[  541.999959][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  542.001455][ T4059] ftdi_sio 4-1:7.215: FTDI USB Serial Device converter detected
[  542.020852][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  542.023212][ T4059] ftdi_sio ttyUSB3: unknown device type: 0x8a3e
[  542.030394][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  542.070433][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  542.082050][T11769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.103223][T11769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.112565][T11846] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  542.124360][T11769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.144669][T11769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.175860][T11353] EXT4-fs (loop2): unmounting filesystem.
[  542.368530][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.387887][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.412972][ T3557] Bluetooth: hci4: Unknown advertising packet type: 0x14
[  542.413058][ T3557] Bluetooth: hci4: Unknown advertising packet type: 0x20
[  542.427177][T11874] netlink: 'syz.2.2165': attribute type 25 has an invalid length.
[  542.458192][ T3943] usb 4-1: USB disconnect, device number 17
[  542.463421][T11874] netlink: 'syz.2.2165': attribute type 7 has an invalid length.
[  542.472706][ T3943] ftdi_sio 4-1:7.23: device disconnected
[  542.489382][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  542.506458][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.508863][T11874] netlink: 'syz.2.2165': attribute type 23 has an invalid length.
[  542.528986][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'.
[  542.531697][T11876] loop4: detected capacity change from 0 to 1024
[  542.542721][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.554151][T11874] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.558621][ T3943] ftdi_sio 4-1:7.231: device disconnected
[  542.563304][T11874] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.581559][ T3943] ftdi_sio 4-1:7.100: device disconnected
[  542.605655][T11874] device bridge0 entered promiscuous mode
[  542.608003][T11876] EXT4-fs: Ignoring removed nobh option
[  542.626346][ T3943] ftdi_sio 4-1:7.215: device disconnected
[  542.682808][ T4059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  542.727477][T11876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  542.901005][T11511] EXT4-fs (loop4): unmounting filesystem.
[  545.152330][T11905] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  545.435988][T11918] loop1: detected capacity change from 0 to 1024
[  545.447127][T11888] loop0: detected capacity change from 0 to 32768
[  545.453739][T11918] EXT4-fs: Ignoring removed orlov option
[  545.453764][T11918] EXT4-fs: Ignoring removed nomblk_io_submit option
[  545.519820][T11918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  545.588120][T11888] XFS (loop0): Mounting V5 Filesystem
[  545.688666][T11888] XFS (loop0): Ending clean mount
[  545.695676][T11888] XFS (loop0): Quotacheck needed: Please wait.
[  545.744215][T11769] EXT4-fs (loop1): unmounting filesystem.
[  545.836650][T11888] XFS (loop0): Quotacheck: Done.
[  545.945334][T11567] XFS (loop0): Unmounting Filesystem
[  545.977853][T11912] loop4: detected capacity change from 0 to 32768
[  546.034197][T11912] XFS: ikeep mount option is deprecated.
[  546.186799][T11912] XFS (loop4): Mounting V5 Filesystem
[  546.402091][T11912] XFS (loop4): Ending clean mount
[  546.855371][ T4059] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  547.268519][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  547.268536][   T27] audit: type=1326 audit(1721816344.929:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b77b75f19 code=0x7ffc0000
[  547.347696][ T4059] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  547.387683][ T4059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.426607][   T27] audit: type=1326 audit(1721816344.929:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7b77b75f19 code=0x7ffc0000
[  547.468499][ T4059] usb 3-1: config 0 descriptor??
[  547.546791][T11963] loop0: detected capacity change from 0 to 4096
[  547.563258][T11963] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker.
[  547.585647][   T27] audit: type=1326 audit(1721816344.957:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b77b75f19 code=0x7ffc0000
[  547.587822][T11511] XFS (loop4): Unmounting Filesystem
[  547.626700][   T27] audit: type=1326 audit(1721816344.984:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b77b75f19 code=0x7ffc0000
[  547.650543][   T27] audit: type=1326 audit(1721816345.003:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7b77b75f19 code=0x7ffc0000
[  547.655751][T11963] ntfs: volume version 3.1.
[  547.676463][   T27] audit: type=1326 audit(1721816345.012:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b77b75f19 code=0x7ffc0000
[  547.707670][   T27] audit: type=1326 audit(1721816345.012:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b77b75f19 code=0x7ffc0000
[  547.880664][T11972] loop1: detected capacity change from 0 to 1024
[  547.958575][T11972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  548.092714][ T4059] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  548.557841][ T4059] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  548.589894][T11769] EXT4-fs (loop1): unmounting filesystem.
[  548.645609][ T4059] usb 3-1: USB disconnect, device number 17
[  548.816203][   T27] audit: type=1326 audit(1721816346.599:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  548.937273][   T27] audit: type=1326 audit(1721816346.599:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f85e2775f19 code=0x7ffc0000
[  549.673671][T11986] loop0: detected capacity change from 0 to 32768
[  549.696037][T11992] loop4: detected capacity change from 0 to 32768
[  549.782278][ T4059] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[  549.796074][T11986] XFS (loop0): Mounting V5 Filesystem
[  549.824360][T11992] XFS (loop4): Mounting V5 Filesystem
[  549.891978][T11986] XFS (loop0): Ending clean mount
[  549.918712][T12005] loop1: detected capacity change from 0 to 40427
[  549.942986][T12005] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  549.962502][T12005] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  549.989367][T12005] F2FS-fs (loop1): invalid crc value
[  550.002747][T11992] XFS (loop4): Ending clean mount
[  550.028915][T11992] XFS (loop4): Quotacheck needed: Please wait.
[  550.035340][T12005] F2FS-fs (loop1): Found nat_bits in checkpoint
[  550.125654][T11992] XFS (loop4): Quotacheck: Done.
[  550.167642][T12005] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  550.178310][T12005] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  550.186393][ T4059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt
[  550.268558][T11511] XFS (loop4): Unmounting Filesystem
[  550.453921][ T4059] usb 3-1: string descriptor 0 read error: -22
[  550.460198][ T4059] usb 3-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33
[  550.503681][ T4059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.533040][ T4059] usb 3-1: config 0 descriptor??
[  550.561322][T11567] XFS (loop0): Unmounting Filesystem
[  550.573216][T12008] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  550.596828][ T4059] r8712u: register rtl8712_netdev_ops to netdev_ops
[  550.614349][ T4059] usb 3-1: r8712u: USB_SPEED_LOW with 1 endpoints
[  550.771505][T12031] loop4: detected capacity change from 0 to 1024
[  550.850647][T12031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  550.862271][T12034] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  550.909052][ T4059] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed
[  550.915686][ T4059] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  550.998108][ T4059] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  551.057325][T11511] EXT4-fs (loop4): unmounting filesystem.
[  551.061245][ T4059] usb 3-1: USB disconnect, device number 18
[  551.625194][T12063] loop2: detected capacity change from 0 to 1024
[  551.694951][T12063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  551.730134][T12063] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff)
[  551.879771][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2223'.
[  551.882192][T12076] loop0: detected capacity change from 0 to 8
[  551.894797][T12077] netlink: 'syz.3.2223': attribute type 12 has an invalid length.
[  551.894873][T12077] netlink: 'syz.3.2223': attribute type 11 has an invalid length.
[  551.927830][T12076] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  551.941240][T12077] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  551.950441][T12077] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  551.959176][T12077] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  551.967966][T12077] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  551.982752][T11353] EXT4-fs (loop2): unmounting filesystem.
[  551.998977][T12076] cramfs: unsupported filesystem features
[  552.125026][T12077] device vxlan0 entered promiscuous mode
[  552.234376][T12086] xt_bpf: check failed: parse error
[  552.576561][T12090] loop0: detected capacity change from 0 to 64
[  552.689748][T12090] hfs: invalid catalog max_key_len 7
[  552.697531][T12090] hfs: unable to open catalog tree
[  553.250105][   T27] kauditd_printk_skb: 30 callbacks suppressed
[  553.250120][   T27] audit: type=1326 audit(1721816350.698:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  553.364204][T12105] 9pnet_fd: Insufficient options for proto=fd
[  553.605962][   T27] audit: type=1326 audit(1721816350.698:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  553.666673][   T27] audit: type=1326 audit(1721816350.735:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  553.870642][   T27] audit: type=1326 audit(1721816350.735:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  553.924321][   T27] audit: type=1326 audit(1721816350.735:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  553.962097][   T27] audit: type=1326 audit(1721816350.735:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  553.990710][   T27] audit: type=1326 audit(1721816350.735:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  554.058897][   T27] audit: type=1326 audit(1721816350.735:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  554.081281][    C0] vkms_vblank_simulate: vblank timer overrun
[  554.136613][   T27] audit: type=1326 audit(1721816350.735:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  554.172576][   T27] audit: type=1326 audit(1721816350.735:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea575f19 code=0x7ffc0000
[  554.353024][T12124] loop3: detected capacity change from 0 to 4096
[  554.435698][T12124] ntfs: volume version 3.1.
[  554.693535][T12131] xt_bpf: check failed: parse error
[  554.800535][ T4059] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  555.101631][ T4059] usb 3-1: Using ep0 maxpacket: 8
[  555.238480][ T4059] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  555.259913][ T4059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.281584][ T4059] usb 3-1: config 0 descriptor??
[  555.330250][ T4059] ums-alauda 3-1:0.0: USB Mass Storage device detected
[  555.338915][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'.
[  555.360709][T12135] netlink: 'syz.1.2242': attribute type 12 has an invalid length.
[  555.369867][T12135] netlink: 'syz.1.2242': attribute type 11 has an invalid length.
[  555.456539][T12135] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  555.465444][T12135] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  555.474687][T12135] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  555.483449][T12135] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  555.517890][T12135] device vxlan0 entered promiscuous mode
[  555.588423][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.616705][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.712512][ T5157] usb 3-1: USB disconnect, device number 19
[  555.738179][ T3557] Bluetooth: Unexpected start frame (len 10)
[  555.830024][T12152] 9pnet_fd: Insufficient options for proto=fd
[  557.002630][T12174] xt_bpf: check failed: parse error
[  557.286123][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'.
[  557.296688][T12187] netlink: 'syz.0.2261': attribute type 12 has an invalid length.
[  557.304901][T12187] netlink: 'syz.0.2261': attribute type 11 has an invalid length.
[  557.318109][T12187] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  557.326972][T12187] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  557.335763][T12187] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  557.344547][T12187] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  557.353379][T12187] device vxlan0 entered promiscuous mode
[  557.533203][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'.
[  557.597267][T12191] tmpfs: Unknown parameter 'usrquota'
[  557.780234][ T3557] Bluetooth: Unexpected start frame (len 10)
[  558.148449][T12203] 9pnet_fd: Insufficient options for proto=fd
[  559.554706][ T3590] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  559.696190][T12210] binder: 12208:12210 ioctl 5206 200001c0 returned -22
[  559.798237][T12210] loop0: detected capacity change from 0 to 512
[  560.071620][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'.
[  560.107859][ T3590] usb 2-1: unable to get BOS descriptor set
[  560.115897][T12225] loop4: detected capacity change from 0 to 1024
[  560.179869][T12225] hfsplus: inconsistency in B*Tree (1,0,2,1,0)
[  560.194109][ T3590] usb 2-1: config 7 has an invalid interface number: 23 but max is 2
[  560.213253][ T3590] usb 2-1: config 7 has an invalid interface number: 231 but max is 2
[  560.235828][ T3590] usb 2-1: config 7 has an invalid interface number: 100 but max is 2
[  560.246767][ T3590] usb 2-1: config 7 has an invalid interface number: 215 but max is 2
[  560.256046][ T3590] usb 2-1: config 7 has 4 interfaces, different from the descriptor's value: 3
[  560.267577][ T3590] usb 2-1: config 7 has no interface number 0
[  560.275523][ T3590] usb 2-1: config 7 has no interface number 1
[  560.281892][ T3590] usb 2-1: config 7 has no interface number 2
[  560.287967][ T3590] usb 2-1: config 7 has no interface number 3
[  560.294189][ T3590] usb 2-1: config 7 interface 23 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  560.307394][ T3590] usb 2-1: config 7 interface 231 altsetting 2 has an invalid endpoint with address 0x1F, skipping
[  560.318189][ T3590] usb 2-1: config 7 interface 231 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  560.334522][ T3590] usb 2-1: config 7 interface 231 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  560.347682][ T3590] usb 2-1: config 7 interface 231 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  560.367679][ T3590] usb 2-1: config 7 interface 231 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  560.387004][ T3590] usb 2-1: config 7 interface 231 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  560.399217][ T3590] usb 2-1: config 7 interface 231 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 10
[  560.413341][ T3590] usb 2-1: too many endpoints for config 7 interface 100 altsetting 84: 190, using maximum allowed: 30
[  560.424578][ T3590] usb 2-1: config 7 interface 100 altsetting 84 has a duplicate endpoint with address 0xF, skipping
[  560.435619][ T3590] usb 2-1: config 7 interface 100 altsetting 84 has 1 endpoint descriptor, different from the interface descriptor's value: 190
[  560.453845][ T3590] usb 2-1: config 7 interface 215 altsetting 244 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  560.472650][ T3590] usb 2-1: config 7 interface 215 altsetting 244 endpoint 0xE has invalid maxpacket 991, setting to 64
[  560.500450][ T3590] usb 2-1: config 7 interface 231 has no altsetting 0
[  560.507278][ T3590] usb 2-1: config 7 interface 100 has no altsetting 0
[  560.514814][ T3590] usb 2-1: config 7 interface 215 has no altsetting 0
[  560.832829][T12244] 9pnet_fd: Insufficient options for proto=fd
[  560.872939][ T3590] usb 2-1: string descriptor 0 read error: -22
[  560.939090][ T3590] usb 2-1: New USB device found, idVendor=1a72, idProduct=1015, bcdDevice=8a.3e
[  561.127405][ T3590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.212262][ T3590] usb 2-1: can't set config #7, error -71
[  561.241917][ T3590] usb 2-1: USB disconnect, device number 30
[  562.312879][T12253] loop1: detected capacity change from 0 to 2048
[  562.384131][T12253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  562.563310][T12256] loop3: detected capacity change from 0 to 4096
[  562.650032][T12256] __ntfs_warning: 64 callbacks suppressed
[  562.650045][T12256] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker.
[  562.813140][T12269] binder: 12263:12269 ioctl 5206 200001c0 returned -22
[  563.458080][T12269] loop0: detected capacity change from 0 to 512
[  563.539138][T12256] ntfs: volume version 3.1.
[  563.542675][ T8655] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  563.706377][T12243] loop2: detected capacity change from 0 to 32768
[  563.735958][T12266] UDF-fs: error (device loop1): udf_read_inode: (ino 1346) failed !bh
[  563.787620][T12243] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2284 (12243)
[  565.145887][T12296] 9pnet_fd: Insufficient options for proto=fd
[  565.618073][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'.
[  565.721934][T12306] binder: 12301:12306 ioctl 5206 200001c0 returned -22
[  565.749675][T12306] loop2: detected capacity change from 0 to 512
[  565.816641][ T3943] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  565.833668][ T8655] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  566.047015][T12282] loop3: detected capacity change from 0 to 40427
[  566.054782][T12282] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  566.081854][T12282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  566.109282][ T3943] usb 2-1: Using ep0 maxpacket: 8
[  566.154254][T12282] F2FS-fs (loop3): Found nat_bits in checkpoint
[  566.205842][T12282] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  566.221662][T12282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  566.253326][ T3943] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  566.273074][T12325] loop4: detected capacity change from 0 to 2048
[  566.286662][ T3943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  566.306290][ T3943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  566.310949][T12324] loop0: detected capacity change from 0 to 1764
[  566.328608][ T3943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  566.330936][T12325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  566.339308][ T3943] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  566.368267][ T3943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  566.377829][ T3943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.637473][T12326] UDF-fs: error (device loop4): udf_read_inode: (ino 1346) failed !bh
[  566.683718][ T3943] usb 2-1: usb_control_msg returned -32
[  566.690367][ T3943] usbtmc 2-1:16.0: can't read capabilities
[  566.869566][T12330] loop2: detected capacity change from 0 to 256
[  566.941779][T12330] exfat: Deprecated parameter 'utf8'
[  566.995960][T12330] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  567.058822][ T3934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.082777][ T3934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.329559][ T3934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.373027][ T3934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.378031][   T22] usb 2-1: USB disconnect, device number 31
[  567.398569][T12334] usbtmc 2-1:16.0: usb_control_msg returned -71
[  567.583177][ T3934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.620179][ T3934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.647469][T12345] loop4: detected capacity change from 0 to 512
[  567.716277][T12345] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  567.819427][T12349] loop2: detected capacity change from 0 to 1764
[  567.867182][ T3934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.915607][ T3934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.048211][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'.
[  681.829564][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  681.836562][    C0] rcu: 	1-...!: (1 GPs behind) idle=3884/1/0x4000000000000000 softirq=55365/55366 fqs=18
[  681.848405][    C0] 	(detected by 0, t=10505 jiffies, g=70177, q=490 ncpus=2)
[  681.855703][    C0] Sending NMI from CPU 0 to CPUs 1:
[  681.860910][    C1] NMI backtrace for cpu 1
[  681.860921][    C1] CPU: 1 PID: 12336 Comm: syz-executor Not tainted 6.1.100-syzkaller #0
[  681.860937][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  681.860954][    C1] RIP: 0010:validate_chain+0x0/0x5950
[  681.860984][    C1] Code: c1 e8 b8 73 8e 80 e1 07 80 c1 03 38 c1 7c 92 48 c7 c7 e8 b8 73 8e e8 ef fb 76 00 eb 84 e8 68 33 20 09 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 02
[  681.860997][    C1] RSP: 0018:ffffc900001e0a58 EFLAGS: 00000086
[  681.861010][    C1] RAX: 1ffffffff2049064 RBX: ffffffff90248320 RCX: 9c499799e614992d
[  681.861022][    C1] RDX: 0000000000000001 RSI: ffff888076a12918 RDI: ffff888076a11dc0
[  681.861033][    C1] RBP: 9c499799e614992d R08: dffffc0000000000 R09: fffffbfff2093881
[  681.861045][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888076a12898
[  681.861055][    C1] R13: ffff888076a11dc0 R14: 0000000000000001 R15: 1ffff1100ed42527
[  681.861066][    C1] FS:  0000555555bcb500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  681.861080][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  681.861091][    C1] CR2: 0000001b33707ff8 CR3: 00000000211d3000 CR4: 00000000003506e0
[  681.861104][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  681.861113][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  681.861122][    C1] Call Trace:
[  681.861129][    C1]  <NMI>
[  681.861136][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  681.861163][    C1]  ? read_lock_is_recursive+0x10/0x10
[  681.861185][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  681.861216][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  681.861238][    C1]  ? nmi_handle+0x12e/0x440
[  681.861260][    C1]  ? nmi_handle+0x25/0x440
[  681.861280][    C1]  ? reacquire_held_locks+0x660/0x660
[  681.861302][    C1]  ? default_do_nmi+0x62/0x150
[  681.861318][    C1]  ? exc_nmi+0xa8/0x100
[  681.861332][    C1]  ? end_repeat_nmi+0x16/0x31
[  681.861357][    C1]  ? reacquire_held_locks+0x660/0x660
[  681.861379][    C1]  ? reacquire_held_locks+0x660/0x660
[  681.861402][    C1]  ? reacquire_held_locks+0x660/0x660
[  681.861424][    C1]  </NMI>
[  681.861429][    C1]  <IRQ>
[  681.861434][    C1]  __lock_acquire+0x125b/0x1f80
[  681.861460][    C1]  lock_acquire+0x1f8/0x5a0
[  681.861480][    C1]  ? advance_sched+0x47/0x970
[  681.861502][    C1]  ? read_lock_is_recursive+0x10/0x10
[  681.861522][    C1]  ? debug_deactivate+0x1d/0x280
[  681.861540][    C1]  ? __hrtimer_run_queues+0x4b0/0xe50
[  681.861557][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  681.861578][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  681.861600][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  681.861617][    C1]  _raw_spin_lock+0x2a/0x40
[  681.861634][    C1]  ? advance_sched+0x47/0x970
[  681.861652][    C1]  advance_sched+0x47/0x970
[  681.861671][    C1]  ? _raw_spin_unlock+0x40/0x40
[  681.861688][    C1]  ? debug_object_deactivate+0x63/0x380
[  681.861711][    C1]  ? taprio_free_sched_cb+0x1a0/0x1a0
[  681.861730][    C1]  ? taprio_free_sched_cb+0x1a0/0x1a0
[  681.861750][    C1]  __hrtimer_run_queues+0x5e5/0xe50
[  681.861775][    C1]  ? hrtimer_interrupt+0x980/0x980
[  681.861792][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  681.861815][    C1]  hrtimer_interrupt+0x392/0x980
[  681.861847][    C1]  __sysvec_apic_timer_interrupt+0x156/0x580
[  681.861868][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[  681.861885][    C1]  </IRQ>
[  681.861890][    C1]  <TASK>
[  681.861895][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  681.861916][    C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x30
[  681.861934][    C1] Code: bd 59 e8 03 00 75 e7 48 c7 c7 e0 00 ec 8a 48 c7 c6 00 25 ec 8a e8 e0 31 c7 f6 0f 0b eb d0 cc cc cc cc cc cc cc cc cc cc cc cc <31> c0 83 3d f7 25 e8 03 00 74 1d 83 3d 82 59 e8 03 00 74 14 65 48
[  681.861946][    C1] RSP: 0018:ffffc90003be78e8 EFLAGS: 00000286
[  681.861958][    C1] RAX: ffffffff81eccb09 RBX: ffff88801606f690 RCX: ffff888076a11dc0
[  681.861970][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88801606f690
[  681.861979][    C1] RBP: ffffc90003be79d8 R08: ffffffff81ecdf00 R09: ffffed1002c0ded2
[  681.861991][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 80000000598c1027
[  681.862001][    C1] R13: ffff8880287a0f00 R14: ffffc90003be7960 R15: ffff888079db4418
[  681.862015][    C1]  ? page_table_check_set+0x290/0x6d0
[  681.862036][    C1]  ? page_ext_put+0x9/0xb0
[  681.862059][    C1]  page_ext_put+0x17/0xb0
[  681.862080][    C1]  insert_page_into_pte_locked+0x4c6/0x570
[  681.862102][    C1]  ? validate_page_before_insert+0x480/0x480
[  681.862121][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  681.862140][    C1]  vm_insert_page+0x3e5/0x5a0
[  681.862157][    C1]  kcov_mmap+0x80/0xd0
[  681.862176][    C1]  mmap_region+0xf96/0x1fa0
[  681.862201][    C1]  ? arch_get_unmapped_area_topdown+0xda/0x7a0
[  681.862223][    C1]  ? file_mmap_ok+0x150/0x150
[  681.862246][    C1]  ? cap_mmap_addr+0x15e/0x2d0
[  681.862273][    C1]  do_mmap+0x8c5/0xf60
[  681.862298][    C1]  ? mlock_future_check+0x100/0x100
[  681.862317][    C1]  ? ima_file_mmap+0x12f/0x1c0
[  681.862335][    C1]  ? ima_file_free+0x3c0/0x3c0
[  681.862356][    C1]  vm_mmap_pgoff+0x1ca/0x2d0
[  681.862375][    C1]  ? account_locked_vm+0xe0/0xe0
[  681.862392][    C1]  ? __fget_files+0x435/0x4a0
[  681.862407][    C1]  ? __fget_files+0x28/0x4a0
[  681.862424][    C1]  ksys_mmap_pgoff+0x4f5/0x6d0
[  681.862447][    C1]  do_syscall_64+0x3b/0xb0
[  681.862467][    C1]  ? clear_bhb_loop+0x45/0xa0
[  681.862488][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  681.862508][    C1] RIP: 0033:0x7f8b4d175f53
[  681.862522][    C1] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  681.862534][    C1] RSP: 002b:00007ffd8b516f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  681.862548][    C1] RAX: ffffffffffffffda RBX: 00007f8b4d305f20 RCX: 00007f8b4d175f53
[  681.862559][    C1] RDX: 0000000000000003 RSI: 0000000000800000 RDI: 00007f8b4bbf9000
[  681.862569][    C1] RBP: 00007f8b4bbf8000 R08: 00000000000000d7 R09: 0000000000000000
[  681.862579][    C1] R10: 0000000000000011 R11: 0000000000000246 R12: 000000000000000c
[  681.862588][    C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009
[  681.862603][    C1]  </TASK>
[  681.862903][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10414 jiffies! g70177 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  682.474540][    C0] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=36686
[  682.482445][    C0] rcu: rcu_preempt kthread starved for 10415 jiffies! g70177 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  682.493817][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  682.503790][    C0] rcu: RCU grace-period kthread stack dump:
[  682.509707][    C0] task:rcu_preempt     state:I stack:26712 pid:16    ppid:2      flags:0x00004000
[  682.518918][    C0] Call Trace:
[  682.522192][    C0]  <TASK>
[  682.525124][    C0]  __schedule+0x143f/0x4570
[  682.529643][    C0]  ? _raw_spin_unlock+0x40/0x40
[  682.534524][    C0]  ? __mod_timer+0x956/0xee0
[  682.539141][    C0]  ? __sched_text_start+0x8/0x8
[  682.544023][    C0]  ? lockdep_softirqs_off+0x420/0x420
[  682.549412][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  682.555314][    C0]  ? _raw_spin_unlock+0x40/0x40
[  682.560180][    C0]  schedule+0xbf/0x180
[  682.564258][    C0]  schedule_timeout+0x1b9/0x300
[  682.569121][    C0]  ? console_conditional_schedule+0x40/0x40
[  682.575022][    C0]  ? update_process_times+0x1b0/0x1b0
[  682.580405][    C0]  ? prepare_to_swait_event+0x329/0x350
[  682.585962][    C0]  rcu_gp_fqs_loop+0x2d2/0x1150
[  682.590825][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  682.596984][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  682.602182][    C0]  ? rcu_gp_init+0x15f0/0x15f0
[  682.606944][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  682.612846][    C0]  ? finish_swait+0xcf/0x1e0
[  682.617448][    C0]  rcu_gp_kthread+0xa3/0x3b0
[  682.622043][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  682.627172][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  682.633103][    C0]  ? __kthread_parkme+0x168/0x1c0
[  682.638151][    C0]  kthread+0x28d/0x320
[  682.642226][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  682.647343][    C0]  ? kthread_blkcg+0xd0/0xd0
[  682.651936][    C0]  ret_from_fork+0x1f/0x30
[  682.656372][    C0]  </TASK>
[  682.659387][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  682.665706][    C0] CPU: 0 PID: 12355 Comm: syz.1.2328 Not tainted 6.1.100-syzkaller #0
[  682.673861][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  682.683916][    C0] RIP: 0010:smp_call_function_many_cond+0x1fb0/0x3460
[  682.690685][    C0] Code: 2f 44 89 ee 83 e6 01 31 ff e8 2c 43 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 0a e8 b7 3f 0b 00 e9 1b ff ff ff f3 90 <42> 0f b6 04 2b 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 fe fe ff ff
[  682.710288][    C0] RSP: 0018:ffffc9000382f240 EFLAGS: 00000246
[  682.716356][    C0] RAX: ffffffff817f5aeb RBX: 1ffff110173281b1 RCX: 0000000000040000
[  682.724329][    C0] RDX: ffffc9000fece000 RSI: 000000000003ffff RDI: 0000000000040000
[  682.732301][    C0] RBP: ffffc9000382f620 R08: ffffffff817f5ab4 R09: fffffbfff2093845
[  682.740270][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000
[  682.748237][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b9940d88
[  682.756208][    C0] FS:  00007f6b24df16c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  682.765137][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  682.771719][    C0] CR2: 0000001b3351fffc CR3: 0000000074bfe000 CR4: 00000000003506f0
[  682.779853][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  682.787920][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  682.795902][    C0] Call Trace:
[  682.799183][    C0]  <IRQ>
[  682.802116][    C0]  ? rcu_check_gp_kthread_starvation+0x1b8/0x220
[  682.808460][    C0]  ? print_other_cpu_stall+0x150c/0x1640
[  682.814115][    C0]  ? print_cpu_stall+0x5f0/0x5f0
[  682.819076][    C0]  ? rcu_sched_clock_irq+0xaf6/0x1200
[  682.824456][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  682.829320][    C0]  ? hrtimer_run_queues+0x163/0x450
[  682.834520][    C0]  ? acct_account_cputime+0xdd/0x270
[  682.839807][    C0]  ? update_process_times+0x147/0x1b0
[  682.845182][    C0]  ? tick_sched_timer+0x386/0x550
[  682.850295][    C0]  ? tick_setup_sched_timer+0x2f0/0x2f0
[  682.855847][    C0]  ? __hrtimer_run_queues+0x5a7/0xe50
[  682.861252][    C0]  ? hrtimer_interrupt+0x980/0x980
[  682.866373][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  682.872452][    C0]  ? hrtimer_interrupt+0x392/0x980
[  682.877586][    C0]  ? __sysvec_apic_timer_interrupt+0x156/0x580
[  682.883747][    C0]  ? sysvec_apic_timer_interrupt+0x8c/0xb0
[  682.889562][    C0]  </IRQ>
[  682.892491][    C0]  <TASK>
[  682.895421][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  682.901586][    C0]  ? smp_call_function_many_cond+0x1f94/0x3460
[  682.907741][    C0]  ? smp_call_function_many_cond+0x1fcb/0x3460
[  682.913908][    C0]  ? smp_call_function_many_cond+0x1fb0/0x3460
[  682.920088][    C0]  ? text_poke_sync+0x20/0x20
[  682.924779][    C0]  ? __text_poke+0x81a/0x9a0
[  682.929373][    C0]  ? mark_lock+0x9a/0x340
[  682.933710][    C0]  ? smp_call_function_many+0x30/0x30
[  682.939089][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  682.945079][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  682.950300][    C0]  ? _raw_spin_unlock+0x24/0x40
[  682.955166][    C0]  ? __SCT__tp_func_kmalloc+0x8/0x8
[  682.960371][    C0]  ? __text_poke+0x81a/0x9a0
[  682.964976][    C0]  ? __SCT__tp_func_kmalloc+0x8/0x8
[  682.970177][    C0]  ? __text_poke+0x9a0/0x9a0
[  682.974777][    C0]  ? text_poke+0x90/0x90
[  682.979028][    C0]  ? __get_immv32+0x19c/0x350
[  682.983713][    C0]  ? insn_get_immediate+0xbb3/0x1390
[  682.989010][    C0]  ? text_poke_sync+0x20/0x20
[  682.993695][    C0]  on_each_cpu_cond_mask+0x3b/0x80
[  682.998813][    C0]  ? __SCT__tp_func_kmalloc+0x8/0x8
[  683.004009][    C0]  text_poke_bp_batch+0x2bb/0x940
[  683.009042][    C0]  ? text_poke_finish+0x30/0x30
[  683.013901][    C0]  ? text_poke_loc_init+0x680/0x680
[  683.019110][    C0]  ? trace_raw_output_contention_end+0xd0/0xd0
[  683.025270][    C0]  ? __SCT__tp_func_kmalloc+0x8/0x8
[  683.030470][    C0]  text_poke_bp+0xc8/0x140
[  683.034893][    C0]  ? text_poke_queue+0x190/0x190
[  683.039837][    C0]  ? __mutex_lock+0x2f7/0xd80
[  683.044523][    C0]  __static_call_transform+0x333/0x560
[  683.049983][    C0]  ? __SCT__tp_func_kmalloc+0x8/0x8
[  683.055182][    C0]  ? __bpf_trace_kmalloc+0x160/0x160
[  683.060470][    C0]  ? text_poke_bp+0x140/0x140
[  683.065151][    C0]  ? rcu_read_lock_bh_held+0x110/0x110
[  683.070619][    C0]  ? __bpf_trace_kmalloc+0x160/0x160
[  683.075902][    C0]  ? __SCT__tp_func_kmalloc+0x8/0x8
[  683.081098][    C0]  arch_static_call_transform+0xcc/0x270
[  683.086743][    C0]  ? __SCT__tp_func_kmalloc+0x8/0x8
[  683.091943][    C0]  __static_call_update+0xd4/0x5c0
[  683.097054][    C0]  ? __bpf_trace_kmalloc+0x160/0x160
[  683.102344][    C0]  ? __static_call_return0+0x10/0x10
[  683.107627][    C0]  ? tracepoint_add_func+0x2de/0x9d0
[  683.112917][    C0]  ? rcu_is_watching+0x11/0xb0
[  683.117683][    C0]  ? tracepoint_add_func+0x494/0x9d0
[  683.122973][    C0]  ? __bpf_trace_kmalloc+0x160/0x160
[  683.128259][    C0]  tracepoint_add_func+0x90c/0x9d0
[  683.133374][    C0]  ? __bpf_trace_kmalloc+0x160/0x160
[  683.138660][    C0]  tracepoint_probe_register_prio_may_exist+0x11e/0x190
[  683.145601][    C0]  ? acct_clear_integrals+0x30/0x30
[  683.150805][    C0]  ? __bpf_trace_kmalloc+0x160/0x160
[  683.156092][    C0]  ? anon_inode_getfile+0xfb/0x180
[  683.161215][    C0]  ? bpf_probe_register+0x10f/0x1d0
[  683.166418][    C0]  bpf_raw_tp_link_attach+0x456/0x6b0
[  683.171793][    C0]  ? bpf_insn_prepare_dump+0x950/0x950
[  683.177366][    C0]  bpf_raw_tracepoint_open+0x196/0x210
[  683.182836][    C0]  __sys_bpf+0x4a7/0x6c0
[  683.187090][    C0]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[  683.192479][    C0]  ? print_irqtrace_events+0x210/0x210
[  683.197947][    C0]  ? print_irqtrace_events+0x210/0x210
[  683.203420][    C0]  ? syscall_enter_from_user_mode+0x2e/0x230
[  683.209399][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  683.214603][    C0]  __x64_sys_bpf+0x78/0x90
[  683.219026][    C0]  do_syscall_64+0x3b/0xb0
[  683.223449][    C0]  ? clear_bhb_loop+0x45/0xa0
[  683.228134][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  683.234036][    C0] RIP: 0033:0x7f6b23f75f19
[  683.238458][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  683.258061][    C0] RSP: 002b:00007f6b24df1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  683.266482][    C0] RAX: ffffffffffffffda RBX: 00007f6b24105f60 RCX: 00007f6b23f75f19
[  683.274453][    C0] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000011
[  683.282420][    C0] RBP: 00007f6b23fe4e68 R08: 0000000000000000 R09: 0000000000000000
[  683.290391][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  683.298357][    C0] R13: 000000000000000b R14: 00007f6b24105f60 R15: 00007ffd91ab0718
[  683.306339][    C0]  </TASK>