last executing test programs:

5m54.279070903s ago: executing program 2 (id=1624):
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x12)
r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x0)
recvmsg$can_j1939(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/113, 0x71}, {0x0}], 0x2, &(0x7f0000000680)=""/240, 0xf0}, 0x12000)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='1\x00', 0x2)

5m53.99571332s ago: executing program 2 (id=1626):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000})
setresuid(0xee00, 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xa)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x13)

5m52.897374307s ago: executing program 2 (id=1627):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='10 ', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='10', 0x2)

5m47.420069753s ago: executing program 2 (id=1634):
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x12)
r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x0)
recvmsg$can_j1939(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/113, 0x71}, {0x0}], 0x2, &(0x7f0000000680)=""/240, 0xf0}, 0x12000)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='1\x00', 0x2)

5m46.33633953s ago: executing program 2 (id=1639):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r3, 0x400, 0x1)
fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

5m45.246327967s ago: executing program 2 (id=1642):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='10 ', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='10', 0x2)

5m30.091058903s ago: executing program 32 (id=1642):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='10 ', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='10', 0x2)

3m13.972649025s ago: executing program 1 (id=1923):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0)

3m13.824389589s ago: executing program 1 (id=1924):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
acct(&(0x7f0000000100)='./dev/mapper/control\x00')

3m13.655775363s ago: executing program 1 (id=1927):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

3m10.098086052s ago: executing program 1 (id=1933):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3m8.029828123s ago: executing program 1 (id=1935):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB='nonumtail=0,allow_utime=00000000000000002200003,utf8=0,iocharset=iso8859-6,shortname=win95,codepage=850,iocharset=macromanian,uni_xlate=1,uni_xlate=0,shortname=win95,utf8=0,utf8=0,obj_user=,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7063723d30303030303030303030303030303034343739302c736d61636b66736465663d2d2c6f626a5f747970653daf2da0a7563d2c7375626a5f757365723d2f2c657569643d", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x25, 0x35b, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$sock_int(r1, 0x1, 0x23, 0x0, &(0x7f0000000380))
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100))
r3 = socket$rxrpc(0x21, 0x2, 0xa)
r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0xd, 0x40600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x17, {0xa, 0x4e1f, 0x3, @local, 0x4}}, 0x24)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

3m6.832577693s ago: executing program 1 (id=1938):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x8000)

2m51.491781465s ago: executing program 33 (id=1938):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x8000)

42.077862752s ago: executing program 3 (id=2261):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000900)='1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000001200)='4420\x00', 0x4)
symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00')

19.150479089s ago: executing program 5 (id=2315):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e7, 0x2, 0x0, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0})

19.044661731s ago: executing program 5 (id=2316):
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key$user(0x0, &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000340)="1d7c", 0x2, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)}], 0x1}, 0x0)
r5 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000000d00)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be83d8ebbbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6", 0x6c, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048840)
r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

19.043710521s ago: executing program 0 (id=2317):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100, 0xffff4a9c0080ffff, &(0x7f0000000140))
openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x14)
mount$bind(0x0, 0x0, 0x0, 0x81899, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

17.589271958s ago: executing program 0 (id=2319):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000196440)={0x0, 0x0})

15.13632619s ago: executing program 5 (id=2321):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB='nonumtail=0,allow_utime=00000000000000002200003,utf8=0,iocharset=iso8859-6,shortname=win95,codepage=850,iocharset=macromanian,uni_xlate=1,uni_xlate=0,shortname=win95,utf8=0,utf8=0,obj_user=,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7063723d30303030303030303030303030303034343739302c736d61636b66736465663d2d2c6f626a5f747970653daf2da0a7563d2c7375626a5f757365723d2f2c657569643d", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x25, 0x35b, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$sock_int(r1, 0x1, 0x23, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100))
r3 = socket$rxrpc(0x21, 0x2, 0xa)
r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0xd, 0x40600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x17, {0xa, 0x4e1f, 0x3, @local, 0x4}}, 0x24)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

13.328602295s ago: executing program 0 (id=2324):
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000300)='./cgroup\x00')
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0x6, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x6, 0x72, 0x7, 0xba, '\x00', 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

13.183055219s ago: executing program 0 (id=2326):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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")

12.804038909s ago: executing program 4 (id=2327):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2800083, &(0x7f0000000280)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@nospace_cache}, {@nossd_spread}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x25, 0x32, 0x36, 0x4c, 0x6d, 0x2d, 0x37, 0x35, 0x78, 0x6b, 0x36]}}, {@space_cache_v2}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000043000)={0xa41, 0x1ff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

11.683655757s ago: executing program 5 (id=2328):
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key$user(0x0, &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000340)="1d7c", 0x2, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)}], 0x1}, 0x0)
r5 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000000d00)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be83d8ebbbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6", 0x6c, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048840)
r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

9.13577038s ago: executing program 5 (id=2329):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
ioperm(0x0, 0x62ee, 0x2000000000000006)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2242, 0x114)
ioctl$KDSKBSENT(r4, 0x4b49, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)

9.003659884s ago: executing program 0 (id=2330):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16)
close(r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff)
rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680))
munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)

8.885546987s ago: executing program 3 (id=2262):
mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2)

8.779426559s ago: executing program 0 (id=2331):
socket$nl_generic(0x10, 0x3, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

8.720572441s ago: executing program 4 (id=2332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800)='0x0104\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)
close(r2)
write(0xffffffffffffffff, &(0x7f0000001400)='48000\x00', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0)
write(r3, &(0x7f0000001600)='2\x00', 0x2)

8.208535464s ago: executing program 4 (id=2333):
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000300)='./cgroup\x00')
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0x6, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x6, 0x72, 0x7, 0xba, '\x00', 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

8.156342675s ago: executing program 3 (id=2334):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

7.898219522s ago: executing program 4 (id=2336):
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key$user(0x0, &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000340)="1d7c", 0x2, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)}], 0x1}, 0x0)
r5 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000000d00)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be83d8ebbbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6", 0x6c, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048840)
r7 = syz_open_procfs(0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

7.820376514s ago: executing program 3 (id=2337):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r4)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)

6.115386006s ago: executing program 4 (id=2338):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xfe, 0x1d0, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file2\x00', 0x181480, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000)
read(r0, &(0x7f0000000200)=""/189, 0xbd)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat(0xffffffffffffffff, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

4.820709299s ago: executing program 3 (id=2339):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16)
close(r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./my_configfs\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff)
rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680))
munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)

2.076351668s ago: executing program 5 (id=2340):
r0 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x6)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
syz_clone3(&(0x7f0000003d00)={0x1e0201900, &(0x7f0000003b00)=<r3=>0xffffffffffffffff, &(0x7f0000003b40), &(0x7f0000003b80)=<r4=>0x0, {0x4}, &(0x7f0000003bc0)=""/121, 0x79, &(0x7f0000003c40)=""/78, &(0x7f0000003cc0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58)
kcmp(r2, r4, 0x3, r0, r0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r5, 0x1261, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, <r6=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6}, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
r8 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000100), 0xfe00, 0xfffffffffffffffe)
keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x1001)
syz_emit_ethernet(0x75, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x3f, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0xfff, 0x0, 0x100}, {"3202463450ef4e7ac871b5bc62fe77565a1a116eab727c565c7651d679d4b96b0880c9fb48e48ad98df026"}}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000002c0)={[], [{@fowner_eq={'fowner', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz_tun\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'dont_appraise'}}, {@subj_type={'subj_type', 0x3d, '@'}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@measure}, {@uid_gt={'uid>', r1}}, {@dont_appraise}]}, 0xfc, 0x59c, &(0x7f0000001500)="$eJzs3e9rJGcdAPDvbHbz4y6aKH1RhdbDFu6KXnLp2TaI9k4Q3xWU6usz5PZCuE32SDZtEw7N4R8giNiCb/SVbwT/AEHuTyiCYN+LFeXQq4JFtCMzO5vspTu3SS67q8nnA5N5duaZ+X6f2d3Z2ZlnMwGcWRci4npEjEXECxExU0yvFEPstoes3gcP7y5nQxJp+vpfk0iKaVm1JGIsKZY9Xyw22R49aqo92tzeub3UaNQ3isnzrbU785vbO5dX15ZW6iv19atXF15efGXxpcUrJ9LOrF2vfv1PP/nhL77x6m+++OYfbvzl0veyfKeL+Z12nLT2Nqll22JPNSI2BhFsBMaK9vwrbetdqzrstAAAKJEd4386Ij6fH//PxFifY7XxrnIy8OwAAACAk5Bem45/JxHpEdWOvAQAAAAwKpW8D2xSmSv6AkxHpTI31+7D+1ScqzSam60v3Gpurd9s95WdjVrl1mqjfiXvUzsREbUke7ywd0ah/fjFvG42JI/0Af7xzFQ+f2652bg5ihMeAAAAcAadP/D9/x8z7e//AAAAwCkzW4zPjTgPAAAAYHBmR50AAAAAMHDH+P4/Pog8AAAAgIH45muvZUPauf/1zTe2t24337h8s755e25ta3luublxZ26l2VxppBMRa/3W12g273wp1rfemm/VN1vzm9s7N9aaW+utG6uP3AIbAAAAGKJPfe7+e0lE7H55Kh+ic21/rGQBvxWAU6NyyHpp9uf9weYCDFfZxzxw+lUfP7usm+/EIHIBhqvWHiWjzgMYnX47gMmyGu8eK5yfDwEAwAhc/Mz999Lk49f/q/vnBoBT6rDX/4HTp+T6fzoz7ESAoSu9/t+nYwDw/6+mByCcef2v/5d4N591vX+ENO27LgAAYKCm8yGpzBXXAqej8mHaFrNRS26tNupXIuKTEfH7mdpE9nghXzLxowEAAAAAAAAAAAAAAAAAAAAAAAAAOKQ0TSI9huqxlgIAAABGIaLy56S4D/DFmeenD54fGE8+zG8F/FGapm/+9PW331pqtTYWsul/y6ePR0TrnWz6+ChOXwAAAABdOnf5z7+/v1gbcTYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFYfPLy73BmGGffB1yJitlf8akzm48moRcS5vydR7VouiYixE4i/ey8inu4VP8nSitkii4PxKxExlWfxxPErRbEs/jNpmvaMf/6Jo8PZdj/b/1zv9f6vxIV83Pv9X20P1540fmf/d75rH9yJ39n/je3F/+pe8GzP84lDxvjs73413/XwO/vFifb8au/9Xyd+UrL/fa5XsOrHJ3332zs7ZbmlP4+42Gl7GhFd8btjzbfW7sxvbu9cXl1bWqmv1NevXl14efGVxZcWr8zfWm3Ui7/7K3473Sv+6Jlff1QW/8GFiHMR6czDu8vjnZyKD5bZ9ugryV4q44/k9HxWqJWted9/9hfrrp2v9cG9iEvP7W3/9Ptdz//T+bjn9v/ZP9Nc/jmQzb9YfCYku+1yRPHyjYhnf/nbZ0vbf2+yKB39+b/Uv+m5F771gz8esioAMASb2zu3lxqN+sbAC++kaXq4ytlRaXmdtDga60xJInYP1skO4E64FVMRUTIrYicm96ZMFVs1Drvmp0pTfX8qYkjPzlEL145SOZ040ost2f0faOAZLoznL8iR7pYAAIAB2D/6H3UmAAAAAAAAAAAAAAAAAAAAcHYN4/+KHYy5O5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81n8DAAD//x3CzJ0=")
fcntl$getown(r3, 0x9)

1.157281921s ago: executing program 4 (id=2341):
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000b80)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})

0s ago: executing program 3 (id=2342):
mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2)

kernel console output (not intermixed with test programs):

idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  508.547352][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.575934][ T5817] usb 2-1: Product: syz
[  508.585400][ T5817] usb 2-1: Manufacturer: syz
[  508.619826][ T5817] usb 2-1: SerialNumber: syz
[  508.672402][ T5817] usb 2-1: config 0 descriptor??
[  508.676143][ T9077] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  508.906794][ T5817] usb 2-1: can't set config #0, error -71
[  508.919252][ T5817] usb 2-1: USB disconnect, device number 16
[  509.046804][ T9999] gadgetfs: bound to dummy_udc driver
[  511.012080][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'.
[  513.008886][T10028] 8021q: adding VLAN 0 to HW filter on device bond7
[  514.961398][T10037] sctp: [Deprecated]: syz.2.1320 (pid 10037) Use of struct sctp_assoc_value in delayed_ack socket option.
[  514.961398][T10037] Use struct sctp_sack_info instead
[  514.983120][T10037] loop5: detected capacity change from 0 to 7
[  515.027415][T10037] Dev loop5: unable to read RDB block 7
[  515.033166][T10037]  loop5: unable to read partition table
[  515.049449][T10037] loop5: partition table beyond EOD, truncated
[  515.095854][T10037] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  515.184821][T10043] loop1: detected capacity change from 0 to 128
[  515.195278][T10042] loop3: detected capacity change from 0 to 256
[  515.205405][T10042] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  515.428590][   T28] audit: type=1800 audit(1786138349.896:19): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1322" name="file1" dev="loop1" ino=1048804 res=0 errno=0
[  515.477277][ T8008] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  515.516064][T10047] gadgetfs: bound to dummy_udc driver
[  516.443906][ T8008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  516.481354][ T8157] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  516.496105][ T8008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  516.537313][ T8008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  516.550820][ T8157] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  516.604444][ T8008] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  516.638271][ T8008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.669492][ T8008] usb 3-1: Product: syz
[  516.673743][ T8008] usb 3-1: Manufacturer: syz
[  516.718399][ T8008] usb 3-1: SerialNumber: syz
[  516.738364][ T8008] usb 3-1: config 0 descriptor??
[  516.764647][T10053] syzkaller0: entered promiscuous mode
[  516.802764][T10053] syzkaller0: entered allmulticast mode
[  517.088713][ T8008] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  517.350542][ T5817] usb 3-1: USB disconnect, device number 19
[  518.741669][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'.
[  518.793391][T10067] loop3: detected capacity change from 0 to 4096
[  518.813354][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'.
[  518.833469][T10067] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  518.903901][T10067] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  518.946862][T10067] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  519.069931][T10067] ntfs3: loop3: ino=5, "/" directory corrupted
[  519.298967][ T5774] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22.
[  519.309202][T10071] loop0: detected capacity change from 0 to 256
[  519.348592][T10071] FAT-fs (loop0): Unrecognized mount option "obj_user=" or missing value
[  519.705225][T10077] gadgetfs: bound to dummy_udc driver
[  522.620269][ T5818] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  522.628800][T10087] sctp: [Deprecated]: syz.3.1336 (pid 10087) Use of struct sctp_assoc_value in delayed_ack socket option.
[  522.628800][T10087] Use struct sctp_sack_info instead
[  522.683606][T10087] loop5: detected capacity change from 0 to 7
[  522.692472][ T5818] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  522.726983][T10087] Dev loop5: unable to read RDB block 7
[  522.743127][T10087]  loop5: unable to read partition table
[  522.762236][T10087] loop5: partition table beyond EOD, truncated
[  523.229199][T10087] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  523.827266][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  524.043020][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  524.077996][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  524.107813][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  524.147765][ T5817] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  524.156926][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.197312][ T5817] usb 4-1: Product: syz
[  524.201577][ T5817] usb 4-1: Manufacturer: syz
[  524.206224][ T5817] usb 4-1: SerialNumber: syz
[  524.248734][ T5817] usb 4-1: config 0 descriptor??
[  524.487628][ T5817] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  524.517549][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'.
[  524.557003][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'.
[  524.768202][ T5817] usb 4-1: USB disconnect, device number 11
[  524.944954][T10104] loop0: detected capacity change from 0 to 256
[  524.959325][T10104] FAT-fs (loop0): Unrecognized mount option "obj_user=" or missing value
[  525.281229][T10106] gadgetfs: bound to dummy_udc driver
[  525.577482][ T5817] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  525.739730][T10103] gadgetfs: suspended from state 2
[  526.855365][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'.
[  527.746798][ T8157] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  527.757359][ T5817] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  527.779795][ T8157] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  528.056462][ T5817] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  528.067295][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  528.075443][ T5817] usb 1-1: Product: syz
[  528.112228][ T5817] usb 1-1: Manufacturer: syz
[  528.116959][ T5817] usb 1-1: SerialNumber: syz
[  528.148865][ T5817] usb 1-1: config 0 descriptor??
[  529.269278][T10130] loop2: detected capacity change from 0 to 256
[  529.275616][ T5817] usb 1-1: USB disconnect, device number 25
[  529.289714][T10130] FAT-fs (loop2): Unrecognized mount option "obj_user=" or missing value
[  529.389791][ T9063] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  529.706238][T10134] gadgetfs: bound to dummy_udc driver
[  530.579002][T10137] sctp: [Deprecated]: syz.2.1352 (pid 10137) Use of struct sctp_assoc_value in delayed_ack socket option.
[  530.579002][T10137] Use struct sctp_sack_info instead
[  530.692873][T10140] loop5: detected capacity change from 0 to 7
[  530.812178][T10140] Dev loop5: unable to read RDB block 7
[  530.833268][T10140]  loop5: unable to read partition table
[  530.862445][T10140] loop5: partition table beyond EOD, truncated
[  530.908034][T10140] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  531.067643][ T5817] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  531.308227][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  531.330139][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  531.359919][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  531.383842][ T5817] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  531.397368][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.416325][ T5817] usb 3-1: Product: syz
[  531.425445][ T5817] usb 3-1: Manufacturer: syz
[  531.438420][ T5817] usb 3-1: SerialNumber: syz
[  531.449556][ T5817] usb 3-1: config 0 descriptor??
[  531.559185][ T8156] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  531.678800][ T5817] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  531.758620][ T8156] usb 4-1: Using ep0 maxpacket: 16
[  531.774531][ T8156] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  531.793759][ T8156] usb 4-1: config 1 has no interface number 0
[  531.802314][ T8156] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  531.815501][ T8156] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  531.830394][ T8156] usb 4-1: config 1 interface 105 has no altsetting 0
[  531.844743][ T8156] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  531.859764][ T8156] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  531.868801][ T8156] usb 4-1: Product: syz
[  531.873025][ T8156] usb 4-1: Manufacturer: syz
[  531.882134][ T8156] usb 4-1: SerialNumber: syz
[  531.949656][T10149] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  531.977086][T10149] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  531.995166][ T5817] usb 3-1: USB disconnect, device number 20
[  532.239394][T10155] loop1: detected capacity change from 0 to 2048
[  532.278227][T10156] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  532.406240][T10149] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  532.429012][T10149] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  532.456313][   T28] audit: type=1800 audit(1786138366.926:20): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1360" name="enable" dev="configfs" ino=21334 res=0 errno=0
[  532.671545][T10163] loop1: detected capacity change from 0 to 256
[  532.679616][T10163] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  532.760636][ T9063] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  533.147741][ T8156] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  533.196753][ T8147] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  533.270189][ T8156] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  533.286183][ T8147] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  533.297624][ T8156] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  533.321380][ T8156] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e2:6a:1f:57:67:86
[  533.347039][ T8156] usb 4-1: USB disconnect, device number 12
[  533.360176][ T8156] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  533.489139][ T8156] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  534.518201][ T8156] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  534.584369][ T8156] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  534.760849][T10171] nvmet: adding nsid 1 to subsystem subsys1
[  535.324952][T10182] loop3: detected capacity change from 0 to 2048
[  535.482213][T10185] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  535.632885][   T28] audit: type=1800 audit(1786138370.106:21): pid=10188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1370" name="enable" dev="configfs" ino=21371 res=0 errno=0
[  535.789018][T10191] sctp: [Deprecated]: syz.3.1371 (pid 10191) Use of struct sctp_assoc_value in delayed_ack socket option.
[  535.789018][T10191] Use struct sctp_sack_info instead
[  537.035486][T10196] loop5: detected capacity change from 0 to 7
[  537.050750][T10196] Dev loop5: unable to read RDB block 7
[  537.056416][T10196]  loop5: unable to read partition table
[  537.063421][T10196] loop5: partition table beyond EOD, truncated
[  537.100541][T10196] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  537.387263][ T5817] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  537.460792][T10201] loop0: detected capacity change from 0 to 256
[  537.498874][T10201] FAT-fs (loop0): Unrecognized mount option "obj_user=" or missing value
[  537.561553][ T9072] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  537.580431][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  537.804407][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  537.814906][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  537.829377][ T5817] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  537.841364][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.849658][ T5817] usb 4-1: Product: syz
[  537.853964][ T5817] usb 4-1: Manufacturer: syz
[  537.858663][ T5817] usb 4-1: SerialNumber: syz
[  537.865781][ T5817] usb 4-1: config 0 descriptor??
[  537.959275][T10203] gadgetfs: bound to dummy_udc driver
[  538.251314][ T8156] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  538.291105][T10200] gadgetfs: suspended from state 2
[  538.578711][ T5817] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  538.701287][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'.
[  538.740483][ T8157] usb 4-1: USB disconnect, device number 13
[  538.787015][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'.
[  538.804091][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'.
[  539.015439][ T8157] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  539.029949][ T8157] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  539.792219][   T28] audit: type=1800 audit(1786138374.266:22): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1380" name="enable" dev="configfs" ino=21410 res=0 errno=0
[  541.488695][ T5817] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  541.707961][ T5817] usb 3-1: Using ep0 maxpacket: 8
[  541.741146][ T5817] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  541.778457][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.807456][ T5817] usb 3-1: Product: syz
[  541.814819][ T5817] usb 3-1: Manufacturer: syz
[  541.827112][ T5817] usb 3-1: SerialNumber: syz
[  541.904333][ T5817] usb 3-1: config 0 descriptor??
[  542.050197][ T5817] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  542.933379][ T5817] radio-usb-si4713: probe of 3-1:0.0 failed with error -71
[  542.941819][ T5817] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  542.972140][ T5817] usb 3-1: USB disconnect, device number 21
[  543.159977][T10239] sctp: [Deprecated]: syz.1.1386 (pid 10239) Use of struct sctp_assoc_value in delayed_ack socket option.
[  543.159977][T10239] Use struct sctp_sack_info instead
[  543.211521][T10239] loop5: detected capacity change from 0 to 7
[  543.230474][T10239] Dev loop5: unable to read RDB block 7
[  543.236134][T10239]  loop5: unable to read partition table
[  543.266642][T10239] loop5: partition table beyond EOD, truncated
[  543.307349][T10239] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  543.538262][ T5817] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  545.261517][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  545.286041][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  545.306855][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  545.330380][ T5817] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  545.347548][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.355629][ T5817] usb 2-1: Product: syz
[  545.377287][   T28] audit: type=1800 audit(1786138379.846:23): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1390" name="enable" dev="configfs" ino=21923 res=0 errno=0
[  545.400810][ T5817] usb 2-1: Manufacturer: syz
[  545.405488][ T5817] usb 2-1: SerialNumber: syz
[  545.424273][T10250] CIFS: Attempting to mount //127.0.0.1/share
[  545.432073][ T5817] usb 2-1: config 0 descriptor??
[  546.007206][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  547.379463][ T5817] adutux 2-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  547.400986][ T5817] usb 2-1: USB disconnect, device number 17
[  547.419072][T10250] CIFS: VFS: Error connecting to socket. Aborting operation.
[  547.426680][T10250] CIFS: VFS: cifs_mount failed w/return code = -4
[  547.754397][T10260] loop0: detected capacity change from 0 to 4096
[  547.837443][T10261] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  548.447332][ T8147] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  548.637592][ T8147] usb 1-1: Using ep0 maxpacket: 8
[  548.732212][ T8147] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  548.818071][ T8147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.885604][ T8147] usb 1-1: Product: syz
[  548.907299][ T8147] usb 1-1: Manufacturer: syz
[  548.929835][ T8147] usb 1-1: SerialNumber: syz
[  549.009588][ T8147] usb 1-1: config 0 descriptor??
[  549.043083][ T8147] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  549.802909][ T8147] radio-usb-si4713: probe of 1-1:0.0 failed with error -71
[  549.829179][ T8147] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  549.842926][   T28] audit: type=1800 audit(1786138384.316:24): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1399" name="enable" dev="configfs" ino=21491 res=0 errno=0
[  549.860040][ T8147] usb 1-1: USB disconnect, device number 27
[  554.198919][T10298] Can't find ip_set type h
[  555.092464][   T28] audit: type=1800 audit(1786138389.566:25): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1409" name="enable" dev="configfs" ino=22028 res=0 errno=0
[  555.167255][ T8156] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  555.519851][ T8156] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  555.533093][ T8156] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  555.552086][ T8156] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  555.561706][ T8156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.571218][ T8156] usb 1-1: Product: syz
[  555.576606][ T8156] usb 1-1: Manufacturer: syz
[  555.581876][ T8156] usb 1-1: SerialNumber: syz
[  555.602249][ T8156] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[  555.635524][ T8156] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  555.644223][ T8157] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  555.782685][ T8156] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  555.867789][ T8157] usb 4-1: Using ep0 maxpacket: 8
[  556.001027][ T8157] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  556.031873][ T8157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.065702][ T8157] usb 4-1: Product: syz
[  556.081837][ T8157] usb 4-1: Manufacturer: syz
[  556.086683][ T8157] usb 4-1: SerialNumber: syz
[  556.293272][ T8157] usb 4-1: config 0 descriptor??
[  556.313309][ T8157] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244)
[  556.933992][ T8157] radio-usb-si4713: probe of 4-1:0.0 failed with error -71
[  556.950121][ T8157] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  556.967525][T10311] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  556.991956][ T8157] usb 4-1: USB disconnect, device number 14
[  557.019794][T10311] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  557.057466][T10311] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  557.463555][T10311] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32
[  557.692634][ T8147] usb 1-1: USB disconnect, device number 28
[  557.746052][ T8147] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  557.836114][ T8147] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  557.901760][ T8147] ti_usb_3410_5052 1-1:2.0: device disconnected
[  559.227280][   T28] audit: type=1800 audit(1786138393.696:26): pid=10346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1418" name="enable" dev="configfs" ino=22099 res=0 errno=0
[  560.273801][T10364] loop3: detected capacity change from 0 to 2048
[  560.612143][T10367] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  562.289355][   T28] audit: type=1800 audit(1786138396.726:27): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1427" name="enable" dev="configfs" ino=22163 res=0 errno=0
[  563.558425][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  563.584232][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.921789][T10394] loop2: detected capacity change from 0 to 2048
[  564.039918][T10395] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  565.095910][T10397] Can't find ip_set type h
[  565.301692][T10405] loop2: detected capacity change from 0 to 256
[  565.317043][T10405] FAT-fs (loop2): Unrecognized mount option "obj_user=" or missing value
[  565.545726][T10408] gadgetfs: bound to dummy_udc driver
[  565.817439][ T8157] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  566.085664][T10403] gadgetfs: suspended from state 2
[  569.160480][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'.
[  569.318008][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'.
[  570.815663][T10440] loop2: detected capacity change from 0 to 256
[  571.707451][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  571.968575][T10440] FAT-fs (loop2): Unrecognized mount option "obj_user=" or missing value
[  572.355716][T10445] gadgetfs: bound to dummy_udc driver
[  576.160920][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'.
[  576.497728][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'.
[  577.270264][T10482] loop3: detected capacity change from 0 to 256
[  577.689390][T10482] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  578.126597][T10490] gadgetfs: bound to dummy_udc driver
[  579.707723][T10503] netlink: 'syz.0.1463': attribute type 1 has an invalid length.
[  579.716127][T10503] netlink: 'syz.0.1463': attribute type 2 has an invalid length.
[  581.409156][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'.
[  583.264490][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'.
[  583.417755][T10528] loop2: detected capacity change from 0 to 256
[  583.425808][T10528] FAT-fs (loop2): Unrecognized mount option "obj_user=" or missing value
[  583.809931][T10532] gadgetfs: bound to dummy_udc driver
[  584.219645][T10527] gadgetfs: suspended from state 2
[  584.392994][ T8157] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  586.362127][T10559] loop0: detected capacity change from 0 to 256
[  586.398851][T10559] FAT-fs (loop0): Unrecognized mount option "obj_user=" or missing value
[  587.103691][T10564] gadgetfs: bound to dummy_udc driver
[  588.203503][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'.
[  588.276705][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'.
[  588.376074][T10557] loop1: detected capacity change from 0 to 32768
[  588.407803][T10557] 
[  588.407803][T10557]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  588.407803][T10557] 
[  588.461038][T10557] ERROR: (device loop1): dbDiscardAG: -EIO
[  588.461038][T10557] 
[  588.489334][T10557] ERROR: (device loop1): remounting filesystem as read-only
[  589.119836][T10587] loop1: detected capacity change from 0 to 256
[  589.140095][T10587] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  589.211514][T10590] loop3: detected capacity change from 0 to 256
[  589.227921][ T9072] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  589.250107][T10590] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  589.627796][T10594] gadgetfs: bound to dummy_udc driver
[  591.903612][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'.
[  592.057722][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'.
[  592.545875][T10621] loop2: detected capacity change from 0 to 256
[  592.619151][T10621] FAT-fs (loop2): Unrecognized mount option "obj_user=" or missing value
[  593.054135][T10627] gadgetfs: bound to dummy_udc driver
[  593.127690][T10625] loop3: detected capacity change from 0 to 4096
[  593.161218][T10625] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  593.337269][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  593.351788][T10620] gadgetfs: suspended from state 2
[  594.008913][T10625] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  594.102176][T10625] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  595.372181][ T5774] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22.
[  595.935636][T10653] loop1: detected capacity change from 0 to 256
[  595.970174][T10653] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  596.305024][T10653] gadgetfs: bound to dummy_udc driver
[  597.304502][T10668] loop3: detected capacity change from 0 to 256
[  597.313346][T10671] db_root: cannot be changed because it's in use
[  597.360752][T10668] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  598.131531][T10673] gadgetfs: bound to dummy_udc driver
[  599.100832][T10694] loop1: detected capacity change from 0 to 256
[  599.135251][T10694] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  599.516464][ T9072] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  602.049948][T10694] gadgetfs: bound to dummy_udc driver
[  604.736709][T10730] syzkaller0: entered promiscuous mode
[  604.743796][T10730] syzkaller0: entered allmulticast mode
[  605.036192][T10736] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  605.100976][T10738] loop3: detected capacity change from 0 to 256
[  605.122771][T10738] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  605.173809][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'.
[  605.227217][ T5818] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  605.246562][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'.
[  605.413081][T10738] gadgetfs: bound to dummy_udc driver
[  605.453317][ T5818] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  605.494886][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  605.523655][ T5818] usb 2-1: Product: syz
[  605.541537][ T5818] usb 2-1: Manufacturer: syz
[  605.549737][ T5818] usb 2-1: SerialNumber: syz
[  605.619091][ T5818] usb 2-1: config 0 descriptor??
[  605.861198][ T8147] usb 2-1: USB disconnect, device number 18
[  607.099169][T10750] Can't find ip_set type h
[  607.532934][T10758] syzkaller0: entered promiscuous mode
[  607.549695][T10758] syzkaller0: entered allmulticast mode
[  607.555815][T10762] loop1: detected capacity change from 0 to 256
[  607.573056][T10762] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  607.614960][T10762] gadgetfs: bound to dummy_udc driver
[  607.851502][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'.
[  607.918715][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'.
[  607.959894][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'.
[  608.908489][T10774] loop1: detected capacity change from 0 to 256
[  608.916235][T10774] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  608.978912][ T9072] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  609.222770][T10774] gadgetfs: bound to dummy_udc driver
[  609.946147][    T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  610.153562][    T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  610.164734][    T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  610.174275][    T9] usb 2-1: Product: syz
[  610.180940][    T9] usb 2-1: Manufacturer: syz
[  610.185895][    T9] usb 2-1: SerialNumber: syz
[  610.977181][    T9] usb 2-1: config 0 descriptor??
[  611.215447][    T9] usb 2-1: USB disconnect, device number 19
[  611.262751][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'.
[  611.335223][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'.
[  611.383372][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'.
[  611.848701][T10822] hub 8-0:1.0: USB hub found
[  611.853741][T10822] hub 8-0:1.0: 1 port detected
[  612.451750][T10828] loop2: detected capacity change from 0 to 4096
[  612.467496][T10828] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  612.520132][T10828] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  612.555332][T10828] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  612.720071][ T5778] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22.
[  612.754120][T10832] loop3: detected capacity change from 0 to 256
[  612.842928][T10832] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  612.958389][T10834] loop2: detected capacity change from 0 to 1024
[  612.978575][T10834] EXT4-fs: Ignoring removed nobh option
[  612.984366][T10834] EXT4-fs: Ignoring removed bh option
[  612.999866][T10834] EXT4-fs: Ignoring removed nobh option
[  613.030477][T10834] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  613.101323][T10834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.290088][   T28] audit: type=1800 audit(1786138447.766:28): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1574" name="file1" dev="loop2" ino=15 res=0 errno=0
[  613.564961][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.947444][ T8157] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  614.128799][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'.
[  614.142918][ T8157] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  614.152437][ T8157] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  614.172524][ T8157] usb 3-1: Product: syz
[  614.176865][ T8157] usb 3-1: Manufacturer: syz
[  614.186537][ T8157] usb 3-1: SerialNumber: syz
[  614.202684][ T8157] usb 3-1: config 0 descriptor??
[  614.222122][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'.
[  614.249636][T10859] loop1: detected capacity change from 0 to 4096
[  614.264122][T10859] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  614.289094][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'.
[  614.301666][T10859] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  614.321849][T10859] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  614.422464][ T5773] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22.
[  614.472397][ T5817] usb 3-1: USB disconnect, device number 22
[  614.987581][T10867] syzkaller0: entered promiscuous mode
[  614.993145][T10867] syzkaller0: entered allmulticast mode
[  616.706807][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'.
[  616.774050][T10880] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  616.832818][T10880] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  616.920789][T10880] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  616.994683][T10880] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  617.557386][T10890] loop1: detected capacity change from 0 to 4096
[  617.583500][T10890] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  617.787413][ T5817] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  617.939413][ T5786] Bluetooth: hci1: command 0x0406 tx timeout
[  618.029683][T10890] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  618.156536][T10890] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  618.694734][ T5773] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22.
[  618.704808][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'.
[  618.731094][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'.
[  618.787221][ T5817] usb 4-1: Using ep0 maxpacket: 8
[  618.839624][ T5817] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  618.850446][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.876795][ T5817] usb 4-1: Product: syz
[  618.898082][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[  618.917264][ T5817] usb 4-1: Manufacturer: syz
[  618.922040][ T5817] usb 4-1: SerialNumber: syz
[  618.978976][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout
[  619.018387][T10902] loop0: detected capacity change from 0 to 512
[  619.057230][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[  619.105839][T10902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  619.243973][T10902] EXT4-fs (loop0): 1 truncate cleaned up
[  619.283933][T10902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.711366][ T5817] usb 4-1: config 0 descriptor??
[  619.834190][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.937796][ T5817] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  620.339654][ T5817] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  620.366784][ T5817] usb 4-1: USB disconnect, device number 15
[  620.649866][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'.
[  622.343762][T10930] UBIFS error (pid: 10930): cannot open "(null)", error -22
[  623.233404][T10936] tipc: Started in network mode
[  623.261953][T10936] tipc: Node identity ac14142f, cluster identity 4711
[  623.280419][T10936] tipc: New replicast peer: 172.20.20.170
[  623.297775][T10936] tipc: Enabled bearer <udp:syz2>, priority 10
[  623.431248][T10935] loop3: detected capacity change from 0 to 4096
[  623.477806][T10935] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  624.353818][T10935] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  624.470811][ T5870] tipc: Node number set to 2886997039
[  624.478614][T10935] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  624.656511][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  624.666700][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  624.764801][ T5774] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22.
[  626.121893][T10962] UBIFS error (pid: 10962): cannot open "(null)", error -22
[  628.709670][T10974] loop0: detected capacity change from 0 to 1024
[  628.826696][T10974] EXT4-fs: Ignoring removed nobh option
[  628.850455][T10974] EXT4-fs: Ignoring removed bh option
[  628.855910][T10974] EXT4-fs: Ignoring removed nobh option
[  628.881242][T10974] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  628.946832][T10974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.000966][   T28] audit: type=1800 audit(1786138463.476:29): pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1617" name="file1" dev="loop0" ino=15 res=0 errno=0
[  629.345184][T10982] syzkaller0: entered promiscuous mode
[  629.364954][T10982] syzkaller0: entered allmulticast mode
[  629.397922][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.599541][T10988] binder: 10987:10988 ioctl c0306201 0 returned -14
[  629.887286][ T5870] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  630.108411][ T5870] usb 1-1: Dual-Role OTG device on HNP port
[  630.123328][ T5870] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  630.150747][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.225409][ T5870] gspca_main: spca501-2.14.0 probing 0000:0000
[  630.232820][ T5870] gspca_spca501: reg write: error -32
[  630.238803][ T5870] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  630.253482][ T5870] spca501: probe of 1-1:1.0 failed with error -22
[  630.347908][ T5870] cdc_acm 1-1:1.1: ttyACM0: USB ACM device
[  632.219140][T11015] loop3: detected capacity change from 0 to 2048
[  632.318052][T11015] Alternate GPT is invalid, using primary GPT.
[  632.325507][T11015]  loop3: p2 p3 p7
[  639.634537][T11056] syzkaller0: entered promiscuous mode
[  639.660721][T11056] syzkaller0: entered allmulticast mode
[  639.698148][T11050] syzkaller0: entered promiscuous mode
[  639.735102][T11050] syzkaller0: entered allmulticast mode
[  642.262566][T11085] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  642.295412][T11085] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  645.635516][T11064] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.685656][T11066] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.593955][T11157] loop1: detected capacity change from 0 to 1024
[  651.602097][T11157] EXT4-fs: Ignoring removed nobh option
[  651.609211][T11157] EXT4-fs: Ignoring removed bh option
[  651.614808][T11157] EXT4-fs: Ignoring removed nobh option
[  651.637083][T11157] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  651.689925][T11157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  651.731489][   T28] audit: type=1800 audit(1786138486.206:30): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1668" name="file1" dev="loop1" ino=15 res=0 errno=0
[  651.832145][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.374553][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  655.387345][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  655.396153][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  655.404648][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  655.412490][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  655.420128][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  656.566715][T11186] chnl_net:caif_netlink_parms(): no params data found
[  657.567354][ T5780] Bluetooth: hci4: command tx timeout
[  657.872738][T11186] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.890346][T11186] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.905357][T11186] bridge_slave_0: entered allmulticast mode
[  657.917183][T11186] bridge_slave_0: entered promiscuous mode
[  657.936475][T11186] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.954163][T11186] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.963132][T11186] bridge_slave_1: entered allmulticast mode
[  657.971839][T11186] bridge_slave_1: entered promiscuous mode
[  658.009609][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.037467][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.103256][T11186] team0: Port device team_slave_0 added
[  658.125602][T11186] team0: Port device team_slave_1 added
[  659.525112][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.536315][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  659.610741][ T5780] Bluetooth: hci4: command tx timeout
[  659.631817][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.670966][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.703711][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  659.817176][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  660.033747][T11186] hsr_slave_0: entered promiscuous mode
[  660.213976][T11186] hsr_slave_1: entered promiscuous mode
[  660.244413][T11186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  660.298660][T11186] Cannot create hsr debugfs directory
[  660.972250][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.731242][ T5780] Bluetooth: hci4: command tx timeout
[  662.117191][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.296927][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.376421][T11186] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  662.410678][T11186] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  662.522665][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.561064][T11186] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  662.784209][T11186] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  663.768395][ T5780] Bluetooth: hci4: command tx timeout
[  664.421234][T11186] 8021q: adding VLAN 0 to HW filter on device bond0
[  664.604768][T11186] 8021q: adding VLAN 0 to HW filter on device team0
[  664.666354][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.673665][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  664.795052][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.802360][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.778741][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'.
[  669.277069][T11186] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.964618][   T12] hsr_slave_0: left promiscuous mode
[  670.061583][   T12] hsr_slave_1: left promiscuous mode
[  670.140382][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  670.193751][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  670.854133][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  670.892032][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  670.940755][   T12] bridge_slave_1: left allmulticast mode
[  670.970667][   T12] bridge_slave_1: left promiscuous mode
[  671.002723][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.102604][   T12] bridge_slave_0: left allmulticast mode
[  671.286214][   T12] bridge_slave_0: left promiscuous mode
[  671.333165][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.996269][   T12] veth1_macvtap: left promiscuous mode
[  672.116849][   T12] veth0_macvtap: left promiscuous mode
[  672.213263][   T12] veth1_vlan: left promiscuous mode
[  672.240990][   T12] veth0_vlan: left promiscuous mode
[  675.625217][   T12] bond5 (unregistering): Released all slaves
[  676.529437][   T12] bond4 (unregistering): Released all slaves
[  676.674770][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'.
[  676.913615][   T12] bond3 (unregistering): Released all slaves
[  678.490955][   T12] bond2 (unregistering): Released all slaves
[  678.960163][   T12] bond1 (unregistering): Released all slaves
[  679.487556][T11042] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  679.679720][T11042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.703614][T11042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  679.733465][T11042] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  679.774248][T11042] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  679.798664][T11042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.848483][T11042] usb 2-1: config 0 descriptor??
[  680.311815][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.333246][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.381808][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.403698][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.412528][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.423769][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.433795][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.442079][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.452831][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.461709][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.472895][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.480497][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.493140][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.502120][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.514519][T11042] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  680.553737][T11042] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving
[  680.566220][   T12] team0 (unregistering): Port device team_slave_1 removed
[  680.591183][T11042] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  680.613817][T11042] usb 2-1: USB disconnect, device number 20
[  680.732502][   T12] team0 (unregistering): Port device team_slave_0 removed
[  680.761163][T11378] fido_id[11378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  680.848991][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  680.867530][   T12] bond_slave_1 (unregistering): left allmulticast mode
[  680.985494][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  681.000933][   T12] bond_slave_0 (unregistering): left allmulticast mode
[  681.898420][   T12] bond0 (unregistering): Released all slaves
[  682.458975][T11186] veth0_vlan: entered promiscuous mode
[  682.504227][T11186] veth1_vlan: entered promiscuous mode
[  683.391778][T11186] veth0_macvtap: entered promiscuous mode
[  683.472535][T11186] veth1_macvtap: entered promiscuous mode
[  683.648863][T11186] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.734845][T11186] batman_adv: batadv0: Interface activated: batadv_slave_1
[  683.902099][T11186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  683.925892][T11186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  683.971496][T11186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.025330][T11186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.151443][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.159815][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.342462][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.355364][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.098160][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  686.107638][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  686.635507][T11440] syzkaller0: entered promiscuous mode
[  686.663652][T11440] syzkaller0: entered allmulticast mode
[  689.239476][T11475] loop1: detected capacity change from 0 to 128
[  689.302538][T11475] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  689.353290][T11475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  689.433297][T11477] loop0: detected capacity change from 0 to 512
[  689.485503][T11477] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  689.586746][T11473] loop3: detected capacity change from 0 to 40427
[  689.610490][T11473] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  689.618954][T11473] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  689.634246][T11477] EXT4-fs (loop0): 1 truncate cleaned up
[  689.680999][T11477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  689.701459][T11473] F2FS-fs (loop3): Found nat_bits in checkpoint
[  689.790036][T11473] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  689.797874][T11473] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  689.985675][   T28] audit: type=1804 audit(1786138524.436:31): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1737" name="/newroot/453/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  690.171957][T11469] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  690.403277][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1737'.
[  691.939503][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  697.147244][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  698.980300][T11546] syzkaller0: entered promiscuous mode
[  698.985876][T11546] syzkaller0: entered allmulticast mode
[  704.440846][T11596] loop0: detected capacity change from 0 to 512
[  704.526629][T11596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  704.605454][T11596] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  705.039008][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  705.788627][T11628] UBIFS error (pid: 11628): cannot open "(null)", error -22
[  708.049584][T11653] loop4: detected capacity change from 0 to 256
[  708.135928][T11653] FAT-fs (loop4): Unrecognized mount option "obj_user=" or missing value
[  709.038397][T11664] gadgetfs: bound to dummy_udc driver
[  710.976122][T11686] syzkaller0: entered promiscuous mode
[  710.995900][T11686] syzkaller0: entered allmulticast mode
[  711.285020][T11690] UBIFS error (pid: 11690): cannot open "(null)", error -22
[  713.417242][   T28] audit: type=1326 audit(1786138547.886:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.3.1789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b57b9e0d9 code=0x0
[  716.180182][T11741] UBIFS error (pid: 11741): cannot open "(null)", error -22
[  716.458950][T11748] loop4: detected capacity change from 0 to 256
[  716.530919][T11748] FAT-fs (loop4): Unrecognized mount option "obj_user=" or missing value
[  717.755866][T11761] loop1: detected capacity change from 0 to 256
[  717.793110][T11761] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  717.843249][T11761] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  717.884814][T11761] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  717.927450][T11761] exFAT-fs (loop1): failed to load alloc-bitmap
[  717.947502][T11761] exFAT-fs (loop1): failed to recognize exfat type
[  718.008202][ T5780] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  718.027419][T11764] syzkaller0: entered promiscuous mode
[  718.033171][T11764] syzkaller0: entered allmulticast mode
[  718.394563][T11770] gadgetfs: bound to dummy_udc driver
[  719.110180][T11777] UBIFS error (pid: 11777): cannot open "(null)", error -22
[  721.910948][T11790] loop0: detected capacity change from 0 to 2048
[  722.048549][T11792] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  724.464284][T11811] loop3: detected capacity change from 0 to 256
[  724.493229][T11811] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  725.983128][T11832] gadgetfs: bound to dummy_udc driver
[  727.016566][T11841] loop0: detected capacity change from 0 to 2048
[  727.177211][T11845] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  728.469654][T11860] No such timeout policy "syz1"
[  728.616642][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'.
[  730.498750][T11880] hub 8-0:1.0: USB hub found
[  730.503864][T11880] hub 8-0:1.0: 1 port detected
[  731.786485][T11887] loop4: detected capacity change from 0 to 2048
[  731.812375][T11892] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  732.757598][T11906] tipc: Enabled bearer <eth:hsr0>, priority 10
[  732.953574][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'.
[  733.987589][T11896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1826'.
[  733.996774][T11896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1826'.
[  734.064846][T11916] loop4: detected capacity change from 0 to 256
[  734.103747][T11916] FAT-fs (loop4): Unrecognized mount option "obj_user=" or missing value
[  735.108810][T11937] gadgetfs: bound to dummy_udc driver
[  738.129894][T11950] hub 8-0:1.0: USB hub found
[  738.134876][T11950] hub 8-0:1.0: 1 port detected
[  738.358553][T11952] loop1: detected capacity change from 0 to 2048
[  738.769570][T11960] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  739.851011][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'.
[  740.686846][T11973] UBIFS error (pid: 11973): cannot open "(null)", error -22
[  741.021137][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'.
[  741.216341][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'.
[  743.686905][T12011] loop1: detected capacity change from 0 to 2048
[  743.909485][T12013] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  744.734767][T12031] loop0: detected capacity change from 0 to 512
[  744.755110][T12031] EXT4-fs: Ignoring removed oldalloc option
[  744.798533][T12031] EXT4-fs: Ignoring removed oldalloc option
[  744.912689][T12031] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.1849: corrupted in-inode xattr: invalid ea_ino
[  744.997534][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'.
[  745.037209][T12031] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1849: couldn't read orphan inode 15 (err -117)
[  745.094844][T12031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  745.096564][T12039] loop3: detected capacity change from 0 to 256
[  745.146645][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'.
[  745.231089][T12039] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  745.461698][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  746.183449][T12057] UBIFS error (pid: 12057): cannot open "(null)", error -22
[  746.895484][T12061] loop1: detected capacity change from 0 to 2048
[  747.049934][T12062] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  747.537613][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  747.544018][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  750.224077][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'.
[  751.757899][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'.
[  751.830300][T12105] nvmet: failed to open block device ./file0: (-2)
[  753.806515][T12128] loop1: detected capacity change from 0 to 256
[  753.848933][T12128] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  753.930149][T12125] loop3: detected capacity change from 0 to 2048
[  753.945295][T11820] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  753.977523][T12132] loop4: detected capacity change from 0 to 512
[  754.087472][T12132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  754.295790][T12135] gadgetfs: bound to dummy_udc driver
[  754.587284][T11042] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  754.610019][T12127] gadgetfs: suspended from state 2
[  754.888613][T12132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  754.896710][T12132] System zones: 1-2, 4-12, 8-8
[  755.046788][T12132] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1869: iget: bad i_size value: 38620345925642
[  755.079510][T12145] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  755.112039][T12132] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1869: couldn't read orphan inode 15 (err -117)
[  755.440004][T12132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  756.109722][T12132] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1869: bg 0: block 5: invalid block bitmap
[  756.236357][T12132] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  756.322028][T12132] EXT4-fs (loop4): This should not happen!! Data will be lost
[  756.322028][T12132] 
[  756.347367][T12132] EXT4-fs (loop4): Total free blocks count 0
[  756.374721][T12152] nvmet: failed to open block device ./file0: (-2)
[  756.410914][T12132] EXT4-fs (loop4): Free/Dirty block details
[  756.460597][T12132] EXT4-fs (loop4): free_blocks=0
[  756.518889][T12132] EXT4-fs (loop4): dirty_blocks=2
[  756.528126][T12132] EXT4-fs (loop4): Block reservation details
[  756.534196][T12132] EXT4-fs (loop4): i_reserved_data_blocks=2
[  756.758089][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'.
[  756.772219][T11186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.191885][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'.
[  760.759239][T12186] loop1: detected capacity change from 0 to 256
[  761.040463][T12186] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  761.932834][T12192] gadgetfs: bound to dummy_udc driver
[  763.550931][ T5818] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  763.582593][T12204] loop3: detected capacity change from 0 to 2048
[  763.757215][ T5818] usb 2-1: Using ep0 maxpacket: 16
[  763.776298][T12209] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  763.800674][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short
[  763.838323][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  763.858959][ T5818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  763.899967][ T5818] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  763.917311][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.936084][ T5818] usb 2-1: Product: syz
[  763.941104][ T5818] usb 2-1: Manufacturer: syz
[  763.952913][ T5818] usb 2-1: SerialNumber: syz
[  764.515806][ T5818] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu
[  764.569935][ T5818] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  764.671230][ T5818] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  764.703079][ T5818] usb 2-1: USB disconnect, device number 23
[  764.753732][T12139] udevd[12139]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  764.979246][T12208] loop0: detected capacity change from 0 to 32768
[  765.012749][T12208] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1883 (12208)
[  765.086494][T12208] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  765.097203][ T5818] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  765.118442][T12208] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  765.181849][T12208] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  765.219488][T12208] BTRFS info (device loop0): use zstd compression, level 3
[  765.226807][T12208] BTRFS info (device loop0): using free space tree
[  765.257446][ T5818] usb 2-1: device descriptor read/64, error -71
[  765.346198][T12208] BTRFS info (device loop0): enabling ssd optimizations
[  765.391950][T12208] BTRFS info (device loop0): auto enabling async discard
[  765.554515][   T28] audit: type=1800 audit(1786138600.026:33): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1883" name="file1" dev="loop0" ino=260 res=0 errno=0
[  765.575977][ T5818] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  766.531786][ T5818] usb 2-1: device descriptor read/64, error -71
[  766.726257][ T5818] usb usb2-port1: attempt power cycle
[  767.181635][ T5784] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  767.698717][T12246] loop4: detected capacity change from 0 to 256
[  767.735939][T12246] FAT-fs (loop4): Unrecognized mount option "obj_user=" or missing value
[  768.135749][T12252] gadgetfs: bound to dummy_udc driver
[  777.248030][T12363] loop0: detected capacity change from 0 to 4096
[  778.877370][T12363] EXT4-fs: Ignoring removed orlov option
[  779.028238][T12363] EXT4-fs (loop0): Test dummy encryption mode enabled
[  779.057852][T12363] EXT4-fs (loop0): stripe (182) is not aligned with cluster size (16), stripe is disabled
[  779.259190][T12363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  779.840550][T12363] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  780.379577][T12392] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  780.408313][T12392] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  780.898422][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[  781.218204][T12363] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  781.917306][T12388] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4
[  782.229691][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  784.396690][T12423] loop3: detected capacity change from 0 to 4096
[  788.737541][ T8008] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  789.457243][ T8008] usb 4-1: Using ep0 maxpacket: 16
[  789.505449][ T8008] usb 4-1: unable to get BOS descriptor or descriptor too short
[  789.534963][ T8008] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  789.564382][ T8008] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  789.600162][ T8008] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  789.619705][ T8008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.647359][ T8008] usb 4-1: Product: syz
[  789.651613][ T8008] usb 4-1: Manufacturer: syz
[  789.656249][ T8008] usb 4-1: SerialNumber: syz
[  790.038673][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  790.087986][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  790.365340][ T8008] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu
[  790.416459][ T8008] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  790.478825][ T8008] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  790.510078][ T8008] usb 4-1: USB disconnect, device number 16
[  790.657334][T12139] udevd[12139]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  796.876279][T12501] loop1: detected capacity change from 0 to 256
[  796.908739][T12501] FAT-fs (loop1): Unrecognized mount option "obj_user=" or missing value
[  799.626746][T12513] syzkaller0: entered promiscuous mode
[  799.635021][T12513] syzkaller0: entered allmulticast mode
[  802.008159][ T8156] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  802.057597][ T8156] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  803.738124][T12539] loop4: detected capacity change from 0 to 256
[  803.746592][T12539] FAT-fs (loop4): Unrecognized mount option "obj_user=" or missing value
[  803.947842][T12139] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  806.597581][T12546] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock
[  806.710378][T12550] nvmet: adding nsid 1 to subsystem testnqn
[  806.726122][   T28] audit: type=1800 audit(1786138641.206:34): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1949" name="device_path" dev="configfs" ino=29132 res=0 errno=0
[  806.745523][T12550] nvmet: failed to open block device (null): (-22)
[  806.780085][   T28] audit: type=1800 audit(1786138641.206:35): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1949" name="enable" dev="configfs" ino=29133 res=0 errno=0
[  806.803564][T12550] nvmet_tcp: malformed ip/port passed: :4420
[  806.941442][   T28] audit: type=1800 audit(1786138641.266:36): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1949" name="addr_trtype" dev="configfs" ino=29139 res=0 errno=0
[  807.009698][   T28] audit: type=1800 audit(1786138641.266:37): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1949" name="addr_adrfam" dev="configfs" ino=29140 res=0 errno=0
[  807.069761][ T5870] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  807.082975][   T28] audit: type=1800 audit(1786138641.286:38): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1949" name="addr_trsvcid" dev="configfs" ino=29141 res=0 errno=0
[  807.129694][ T5870] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  808.270282][T12562] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  808.547565][T12568] loop0: detected capacity change from 0 to 256
[  808.572341][T12568] FAT-fs (loop0): Unrecognized mount option "obj_user=" or missing value
[  809.298050][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  809.305023][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  810.104027][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'.
[  812.347194][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  812.530038][T11042] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  812.568071][T11042] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  814.749644][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  814.761990][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  814.773782][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  814.782214][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  814.790380][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  814.797937][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  815.303210][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'.
[  817.040991][ T5780] Bluetooth: hci2: command tx timeout
[  817.125158][T12606] chnl_net:caif_netlink_parms(): no params data found
[  817.318223][ T8147] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  817.346354][ T8147] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  817.803173][T12606] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.847580][T12606] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.854881][T12606] bridge_slave_0: entered allmulticast mode
[  817.883308][T12606] bridge_slave_0: entered promiscuous mode
[  818.017435][T12606] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.024726][T12606] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.047369][T12606] bridge_slave_1: entered allmulticast mode
[  818.054945][T12606] bridge_slave_1: entered promiscuous mode
[  818.220176][T12606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  818.279198][T12606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.389385][T12606] team0: Port device team_slave_0 added
[  818.493475][T12606] team0: Port device team_slave_1 added
[  818.643907][T12606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  818.661247][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  818.715690][T12606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  818.751849][T12606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  818.762545][T12631] loop3: detected capacity change from 0 to 40427
[  818.779472][T12631] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  818.797772][T12631] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  818.808433][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  818.859800][T12631] F2FS-fs (loop3): Found nat_bits in checkpoint
[  818.922079][T12606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  819.021563][ T7637] tipc: Disabling bearer <udp:syz2>
[  819.048214][ T7637] tipc: Disabling bearer <eth:hsr0>
[  819.110537][T12631] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  819.127989][T12631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  819.142492][ T5780] Bluetooth: hci2: command tx timeout
[  819.166433][ T7637] tipc: Left network mode
[  819.252834][T12644] loop4: detected capacity change from 0 to 512
[  819.279621][   T28] audit: type=1804 audit(1786138653.756:39): pid=12631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1973" name="/newroot/505/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  819.374391][T12644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  819.400537][T12644] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  819.537565][T12631] syz.3.1973: attempt to access beyond end of device
[  819.537565][T12631] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  819.593554][T11186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  819.612456][T12606] hsr_slave_0: entered promiscuous mode
[  819.668940][T12606] hsr_slave_1: entered promiscuous mode
[  820.741683][   T49] kworker/u4:3: attempt to access beyond end of device
[  820.741683][   T49] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  821.247503][ T5780] Bluetooth: hci2: command tx timeout
[  823.011050][ T8156] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  823.074198][ T8156] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  823.155653][T12606] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  823.289577][ T5780] Bluetooth: hci2: command tx timeout
[  823.345424][T12606] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  824.226415][T12606] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  824.530754][ T7637] hsr_slave_1: left promiscuous mode
[  824.554302][ T7637] bridge_slave_1: left allmulticast mode
[  824.560608][ T7637] bridge_slave_1: left promiscuous mode
[  824.586825][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.613616][ T7637] bridge_slave_0: left allmulticast mode
[  824.637844][ T7637] bridge_slave_0: left promiscuous mode
[  824.665139][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.813052][ T7637] bond4 (unregistering): Released all slaves
[  825.911199][T12706] UBIFS error (pid: 12706): cannot open "(null)", error -22
[  826.134039][T12702] loop4: detected capacity change from 0 to 40427
[  826.201187][T12702] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  826.240119][T12702] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  826.301438][ T7637] bond3 (unregistering): Released all slaves
[  826.364128][T12702] F2FS-fs (loop4): Found nat_bits in checkpoint
[  826.567820][T12702] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  826.574963][T12702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  826.727552][   T28] audit: type=1804 audit(1786138661.196:40): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1984" name="/newroot/72/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  826.931633][ T7637] bond2 (unregistering): Released all slaves
[  826.993595][T12702] syz.4.1984: attempt to access beyond end of device
[  826.993595][T12702] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  827.595963][ T7637] bond1 (unregistering): Released all slaves
[  827.612040][ T2115] kworker/u4:9: attempt to access beyond end of device
[  827.612040][ T2115] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  827.647727][T12715] loop3: detected capacity change from 0 to 32768
[  827.657095][T12715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1987 (12715)
[  827.696897][T12715] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  827.707851][T12715] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  827.716563][T12715] BTRFS info (device loop3): use zlib compression, level 3
[  827.723955][T12715] BTRFS info (device loop3): turning on sync discard
[  827.730812][T12715] BTRFS info (device loop3): using free space tree
[  828.020983][T12715] BTRFS info (device loop3): enabling ssd optimizations
[  828.851741][   T28] audit: type=1800 audit(1786138663.266:41): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1987" name="file1" dev="loop3" ino=260 res=0 errno=0
[  829.721604][ T5774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  829.979802][T12139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (12139)
[  833.037226][ T8008] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  833.077603][ T8008] hid-generic 0000:0000:0000.0024: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  833.843518][ T7637] team0 (unregistering): Port device team_slave_1 removed
[  833.884935][T12764] UBIFS error (pid: 12764): cannot open "(null)", error -22
[  833.967735][ T7637] team0 (unregistering): Port device team_slave_0 removed
[  834.096463][ T7637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  834.125936][ T7637] bond_slave_1 (unregistering): left allmulticast mode
[  834.205105][ T7637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  834.216173][ T7637] bond_slave_0 (unregistering): left allmulticast mode
[  834.842036][ T7637] bond0 (unregistering): Released all slaves
[  834.973250][T12768] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  835.122981][T12606] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  837.371397][T12606] 8021q: adding VLAN 0 to HW filter on device bond0
[  837.452815][T12606] 8021q: adding VLAN 0 to HW filter on device team0
[  837.566500][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  837.573871][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  837.619432][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.626675][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  838.772886][T12606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  840.431481][T12606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  840.805653][T12811] UBIFS error (pid: 12811): cannot open "(null)", error -22
[  842.883293][T12606] veth0_vlan: entered promiscuous mode
[  843.506297][T12606] veth1_vlan: entered promiscuous mode
[  843.823856][T12606] veth0_macvtap: entered promiscuous mode
[  843.835396][T12606] veth1_macvtap: entered promiscuous mode
[  843.861545][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  843.872310][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  843.885268][T12606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  843.904285][T12606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  843.916423][T12606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  843.928351][T12606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  843.973949][T12606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  844.018557][T12606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  844.052739][T12606] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  844.091616][T12606] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  844.347519][T12330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  844.355432][T12330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  844.414683][ T7637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  844.431895][ T7637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.057141][ T8008] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  846.309846][ T8008] usb 4-1: Using ep0 maxpacket: 16
[  846.366551][ T8008] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  846.462346][ T8008] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  846.594855][ T8008] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  846.690262][ T8008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.798329][ T8008] usb 4-1: Product: syz
[  846.854522][ T8008] usb 4-1: Manufacturer: syz
[  846.940718][ T8008] usb 4-1: SerialNumber: syz
[  847.197257][ T8008] usb 4-1: 0:2 : does not exist
[  847.283674][ T8008] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  847.368145][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2012'.
[  848.017867][ T8008] usb 4-1: USB disconnect, device number 17
[  848.302157][T12139] udevd[12139]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  848.847781][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'.
[  849.582469][T12888] loop5: detected capacity change from 0 to 256
[  849.592533][T12888] FAT-fs (loop5): Unrecognized mount option "obj_user=" or missing value
[  849.856632][T12888] gadgetfs: bound to dummy_udc driver
[  850.634654][T12905] nvmet: failed to open block device ./file0: (-2)
[  851.110856][T12917] process 'syz.3.2028' launched './file0' with NULL argv: empty string added
[  851.327780][T12917] CacheFiles: No cache directory specified
[  851.421739][T12923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  851.444436][T12923] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  852.642910][T12933] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[  853.752571][T12946] nvmet: failed to open block device ./file0: (-2)
[  854.053434][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2040'.
[  854.166277][T12953] team0 (unregistering): left allmulticast mode
[  854.174008][T12953] team_slave_0: left allmulticast mode
[  854.179763][T12953] team_slave_1: left allmulticast mode
[  854.185365][T12953] team0 (unregistering): left promiscuous mode
[  854.209787][T12953] team_slave_0: left promiscuous mode
[  854.216492][T12953] team_slave_1: left promiscuous mode
[  854.238119][T12953] bridge0: port 3(team0) entered disabled state
[  854.405092][T12953] team0 (unregistering): Port device team_slave_0 removed
[  854.546759][T12953] team0 (unregistering): Port device team_slave_1 removed
[  854.570993][T12953] team0 (unregistering): Port device bridge3 removed
[  857.371733][T12978] nvmet: failed to open block device ./file0: (-2)
[  857.752609][T12981] loop0: detected capacity change from 0 to 40427
[  857.767560][T12981] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  857.775385][T12981] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  857.874252][T12981] F2FS-fs (loop0): Found nat_bits in checkpoint
[  857.981752][T12981] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  857.989120][T12981] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  858.118268][T12987] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  858.158263][   T28] audit: type=1804 audit(1786138692.626:42): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2047" name="/newroot/504/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  858.229990][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.306109][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.329136][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.475781][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.502309][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.515006][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.528684][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.542202][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.555329][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.568202][T12988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  858.681017][T12974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2047'.
[  858.745999][T12993] loop3: detected capacity change from 0 to 4096
[  860.987246][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  861.979474][   T28] audit: type=1800 audit(1786138696.456:43): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2044" name="device_path" dev="configfs" ino=32326 res=0 errno=0
[  862.009707][T13030] nvmet: failed to open block device (null): (-22)
[  862.036303][T13030] nvmet_tcp: malformed ip/port passed: :4420
[  862.050792][   T28] audit: type=1800 audit(1786138696.486:44): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2044" name="enable" dev="configfs" ino=32327 res=0 errno=0
[  862.125480][   T28] audit: type=1800 audit(1786138696.506:45): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2044" name="addr_trtype" dev="configfs" ino=32328 res=0 errno=0
[  862.190262][   T28] audit: type=1800 audit(1786138696.506:46): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2044" name="addr_adrfam" dev="configfs" ino=32329 res=0 errno=0
[  863.123598][T13054] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  863.157247][T12995] IPVS: starting estimator thread 0...
[  863.163417][   T28] audit: type=1326 audit(1786138697.616:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcd99e0d9 code=0x7fc00000
[  863.286611][T13039] loop5: detected capacity change from 0 to 40427
[  863.296081][T13039] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  863.304094][T13039] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  863.317667][T13056] IPVS: using max 16 ests per chain, 38400 per kthread
[  863.368819][T13039] F2FS-fs (loop5): Found nat_bits in checkpoint
[  863.435316][T13039] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  863.442569][T13039] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  863.502131][   T28] audit: type=1804 audit(1786138697.966:48): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2059" name="/newroot/10/bus/bus" dev="loop5" ino=10 res=1 errno=0
[  863.590700][T13039] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  863.727685][T13039] syz.5.2059: attempt to access beyond end of device
[  863.727685][T13039] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  863.761668][T13068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2059'.
[  864.265814][ T2107] kworker/u4:8: attempt to access beyond end of device
[  864.265814][ T2107] loop5: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  864.396109][T12606] syz-executor: attempt to access beyond end of device
[  864.396109][T12606] loop5: rw=2051, sector=45096, nr_sectors = 8 limit=40427
[  864.435537][T12606] F2FS-fs (loop5): Issue discard(5637, 5637, 1) failed, ret: -5
[  865.451986][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'.
[  865.920673][   T28] audit: type=1800 audit(1786138700.386:49): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2068" name="device_path" dev="configfs" ino=32359 res=0 errno=0
[  865.957703][T13092] nvmet: failed to open block device (null): (-22)
[  866.001476][T13092] nvmet_tcp: malformed ip/port passed: :4420
[  866.057654][   T28] audit: type=1800 audit(1786138700.426:50): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2068" name="enable" dev="configfs" ino=32360 res=0 errno=0
[  866.159246][   T28] audit: type=1800 audit(1786138700.466:51): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2068" name="addr_trtype" dev="configfs" ino=32361 res=0 errno=0
[  867.851495][T13111] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  867.872432][T13111] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  869.848621][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'.
[  870.547691][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  870.557792][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  872.181732][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'.
[  872.696002][T13136] loop4: detected capacity change from 0 to 256
[  872.778101][T13136] FAT-fs (loop4): Unrecognized mount option "obj_user=" or missing value
[  873.124623][T13140] gadgetfs: bound to dummy_udc driver
[  873.409571][T12996] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  873.443984][    C0] gadgetfs: connected
[  873.450020][T12996] gadgetfs: disconnected
[  874.318225][T13160] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  874.341563][T13160] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  875.443923][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2084'.
[  878.922836][T13200] loop3: detected capacity change from 0 to 256
[  879.014957][T13200] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  879.337324][T13203] gadgetfs: bound to dummy_udc driver
[  879.637162][T12995] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  879.645030][    C1] gadgetfs: connected
[  879.692067][T12995] gadgetfs: disconnected
[  880.257666][T13214] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  880.280524][T13214] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  881.375310][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2094'.
[  885.262130][T13240] loop3: detected capacity change from 0 to 32768
[  885.829134][T13240] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  886.540178][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[  886.926901][   T28] audit: type=1800 audit(1786138721.396:52): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2106" name="device_path" dev="configfs" ino=31460 res=0 errno=0
[  886.962525][T13267] nvmet: failed to open block device (null): (-22)
[  886.971517][   T28] audit: type=1800 audit(1786138721.426:53): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2106" name="enable" dev="configfs" ino=32563 res=0 errno=0
[  887.028102][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'.
[  887.062819][T13269] nvmet_tcp: malformed ip/port passed: :4420
[  887.185100][   T28] audit: type=1800 audit(1786138721.646:54): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2106" name="addr_trtype" dev="configfs" ino=32564 res=0 errno=0
[  888.739807][T13271] loop3: detected capacity change from 0 to 32768
[  888.756493][T13271] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2109 (13271)
[  888.817312][T13271] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  888.847342][T13271] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  888.856180][T13271] BTRFS info (device loop3): setting nodatasum
[  888.862625][T13271] BTRFS info (device loop3): disabling tree log
[  888.870510][T13271] BTRFS info (device loop3): max_inline at 0
[  888.878087][T13271] BTRFS info (device loop3): turning on sync discard
[  888.885727][T13271] BTRFS info (device loop3): using free space tree
[  889.225194][T13271] BTRFS info (device loop3): enabling ssd optimizations
[  890.266626][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  892.290018][T13304] loop3: detected capacity change from 0 to 2048
[  892.359018][T13305] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  892.393785][T13304] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=6, cno=3, offset=234, blocknr=0, vblocknr=17179869186
[  892.426786][T13304] NILFS (loop3): error -2 preparing GC: cannot read source blocks
[  893.272887][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2118'.
[  894.431408][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2123'.
[  894.704262][T13343] fuse: Bad value for 'fd'
[  896.107739][T13349] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  896.117717][T13349] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  897.083551][T13369] loop4: detected capacity change from 0 to 40427
[  897.110106][T13369] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  897.118017][T13369] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  897.153016][T13369] F2FS-fs (loop4): Found nat_bits in checkpoint
[  897.196107][T13369] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  897.203361][T13369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  897.278727][   T28] audit: type=1804 audit(1786138731.746:55): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2131" name="/newroot/103/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  897.387886][T13378] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  897.418156][T13378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2131'.
[  897.474717][T13380] syz.4.2131: attempt to access beyond end of device
[  897.474717][T13380] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  898.115678][T12338] kworker/u4:22: attempt to access beyond end of device
[  898.115678][T12338] loop4: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  898.196557][T11186] syz-executor: attempt to access beyond end of device
[  898.196557][T11186] loop4: rw=2051, sector=45096, nr_sectors = 8 limit=40427
[  898.212575][T11186] F2FS-fs (loop4): Issue discard(5637, 5637, 1) failed, ret: -5
[  899.448096][ T5818] IPVS: starting estimator thread 0...
[  899.547298][T13413] IPVS: using max 16 ests per chain, 38400 per kthread
[  899.972678][T13420] gadgetfs: bound to dummy_udc driver
[  900.085679][   T28] audit: type=1326 audit(1786138734.556:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13416 comm="syz.5.2140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ac799e0d9 code=0x0
[  900.430454][T13433] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  900.448351][T13433] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  901.139784][T13416] gadgetfs: suspended from state 2
[  901.157300][ T5818] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  901.807580][T13446] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(2.0.0), cmd(1)
[  902.370392][T13451] fuse: Bad value for 'fd'
[  904.091026][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  904.337304][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  904.365167][    T9] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1024
[  904.383489][    T9] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  904.563505][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[  904.653377][    T9] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  904.762081][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.920194][    T9] usb 5-1: Product: syz
[  904.941329][    T9] usb 5-1: Manufacturer: ╬䅗㚏뇉龎ﻻ混쀺ꐮ裶惪蝷꛼ᬹ캗폙潲쾥鲵㩩觯ᾆ㣜㣪ા␑
[  904.978850][    T9] usb 5-1: SerialNumber: syz
[  905.004909][T13453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  905.077403][T13466] loop3: detected capacity change from 0 to 1024
[  905.139366][T13466] EXT4-fs: inline encryption not supported
[  905.180759][T13466] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  905.387571][    T9] usb 5-1: USB disconnect, device number 2
[  905.548272][T13466] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.2149: Freeing blocks not in datazone - block = 0, count = 4096
[  905.636872][T13466] EXT4-fs (loop3): Remounting filesystem read-only
[  905.650651][T13466] EXT4-fs (loop3): 1 orphan inode deleted
[  905.686467][T12333] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  905.694460][T13466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  905.723356][T12333] Quota error (device loop3): write_blk: dquota write failed
[  905.738412][T12333] Quota error (device loop3): remove_free_dqentry: Can't write block (2) with free entries
[  905.780981][T12333] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  905.821728][T12333] Quota error (device loop3): write_blk: dquota write failed
[  905.843461][T12333] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list
[  905.887469][T12333] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  905.948597][T12333] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  906.811086][T13499] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2159'.
[  906.852223][T13499] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2159'.
[  907.089607][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  907.510545][T13510] loop4: detected capacity change from 0 to 2048
[  908.893192][T13522] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  909.099581][T13529] loop5: detected capacity change from 0 to 128
[  909.187216][T12139] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  909.288697][T13532] block2mtd: illegal erase size
[  909.691797][T13522] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  910.099903][T13522] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  910.279427][T13522] Remounting filesystem read-only
[  910.308463][T13546] loop3: detected capacity change from 0 to 256
[  910.336575][T13546] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  910.409886][T11186] NILFS (loop4): discard dirty page: offset=0, ino=6
[  910.429693][T12139] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  910.450275][T11186] NILFS (loop4): discard dirty block: blocknr=35, size=1024
[  910.577289][T11186] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[  910.584692][T11186] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  910.647313][T11186] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  910.655511][T11186] NILFS (loop4): discard dirty page: offset=4096, ino=6
[  910.704504][T11186] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[  910.927049][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  910.983829][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.024078][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.093544][T11186] NILFS (loop4): discard dirty page: offset=0, ino=5
[  911.131047][T11186] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  911.174585][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.233137][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.306276][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.329115][T11186] NILFS (loop4): discard dirty page: offset=0, ino=4
[  911.335900][T11186] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  911.356784][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.370428][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.389509][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.419945][T11186] NILFS (loop4): discard dirty page: offset=0, ino=3
[  911.439351][T11186] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  911.451377][T11186] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  911.479646][T11186] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  911.487326][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.496426][T11186] NILFS (loop4): discard dirty page: offset=65536, ino=3
[  911.503742][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.512828][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.526445][T11186] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  911.550708][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.581216][T11186] NILFS (loop4): discard dirty page: offset=98304, ino=3
[  911.599018][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.624910][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.652427][T11186] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  911.664535][T11186] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  911.682558][T13562] loop5: detected capacity change from 0 to 256
[  911.694584][T11186] NILFS (loop4): discard dirty page: offset=102400, ino=3
[  911.702167][T11186] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  911.715589][T13562] FAT-fs (loop5): Unrecognized mount option "obj_user=" or missing value
[  911.727212][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  911.736327][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  912.023005][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  912.437223][T13568] gadgetfs: bound to dummy_udc driver
[  912.462796][T11186] NILFS (loop4): discard dirty page: offset=196608, ino=3
[  912.500180][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  912.542059][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  912.736787][T13571] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  912.748931][T13571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2166'.
[  912.910717][T11186] NILFS (loop4): discard dirty block: blocknr=49, size=1024
[  912.956860][T11186] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  914.987118][T13586] nvmet_tcp: malformed ip/port passed: :4420
[  914.993376][   T28] audit: type=1800 audit(1786138749.426:57): pid=13586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2179" name="device_path" dev="configfs" ino=32934 res=0 errno=0
[  915.146474][   T28] audit: type=1800 audit(1786138749.426:58): pid=13586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2179" name="addr_trtype" dev="configfs" ino=32935 res=0 errno=0
[  916.804073][T13605] loop3: detected capacity change from 0 to 256
[  916.829559][T13605] FAT-fs (loop3): Unrecognized mount option "obj_user=" or missing value
[  917.195410][T13615] gadgetfs: bound to dummy_udc driver
[  917.557619][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  917.568677][T13602] gadgetfs: suspended from state 2
[  917.842388][T13626] loop3: detected capacity change from 0 to 512
[  918.114410][T13631] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  918.530507][T13626] netlink: 'syz.3.2189': attribute type 1 has an invalid length.
[  918.692349][T13626] netlink: 'syz.3.2189': attribute type 1 has an invalid length.
[  920.635579][T13638] nvmet_tcp: malformed ip/port passed: :4420
[  920.641920][   T28] audit: type=1800 audit(1786138755.076:59): pid=13638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2191" name="addr_trtype" dev="configfs" ino=33019 res=0 errno=0
[  922.053220][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'.
[  922.622766][T13663] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  922.634193][T13663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2196'.
[  923.279648][T13677] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  923.305400][T13677] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  923.963706][T13680] loop3: detected capacity change from 0 to 1024
[  923.977483][T13680] EXT4-fs: Ignoring removed orlov option
[  923.997144][T13680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  924.005784][T13680] EXT4-fs (loop3): Test dummy encryption mode enabled
[  924.138457][T13680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  924.281761][T13689] netlink: 'syz.5.2193': attribute type 10 has an invalid length.
[  924.350755][T13689] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.431155][T13689] bridge_slave_1: left allmulticast mode
[  924.437077][T13689] bridge_slave_1: left promiscuous mode
[  924.443463][T13689] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.521960][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.955334][T13704] loop5: detected capacity change from 0 to 40427
[  925.980273][T13704] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  925.988210][T13704] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  926.028428][T13682] loop4: detected capacity change from 0 to 32768
[  926.072193][T13704] F2FS-fs (loop5): Found nat_bits in checkpoint
[  926.171247][T13704] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  926.178626][T13704] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  926.322283][   T28] audit: type=1804 audit(1786138760.736:60): pid=13702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2209" name="/newroot/37/bus/bus" dev="loop5" ino=10 res=1 errno=0
[  926.348694][T13704] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  926.410286][T13724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2209'.
[  926.514806][T13725] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  926.539267][T13725] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  927.098447][T13682] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  927.217606][T13682] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR
[  927.218731][T13682] XFS (loop4): log mount failed
[  930.329572][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'.
[  930.593758][T13764] vlan2: entered allmulticast mode
[  930.637934][T13764] bridge1: entered allmulticast mode
[  930.715459][T13764] bridge1: port 1(erspan0) entered blocking state
[  930.777487][T13764] bridge1: port 1(erspan0) entered disabled state
[  930.784211][T13764] erspan0: entered allmulticast mode
[  930.840263][T13764] erspan0: entered promiscuous mode
[  930.871224][T13764] bridge1: port 1(erspan0) entered blocking state
[  930.877985][T13764] bridge1: port 1(erspan0) entered forwarding state
[  930.955437][T13771] loop5: detected capacity change from 0 to 40427
[  930.965321][T13771] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  930.973242][T13771] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  931.017622][T13769] bridge1: port 1(erspan0) entered disabled state
[  931.039136][T13771] F2FS-fs (loop5): Found nat_bits in checkpoint
[  931.055006][T13769] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.111104][T13771] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  931.118316][T13771] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  931.136200][T13769] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.194731][   T28] audit: type=1804 audit(1786138765.666:61): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2220" name="/newroot/40/bus/bus" dev="loop5" ino=10 res=1 errno=0
[  931.294681][T13771] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  931.385809][T13771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2220'.
[  931.398663][T13779] syz.5.2220: attempt to access beyond end of device
[  931.398663][T13779] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  931.868861][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  931.875272][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  931.970694][   T28] audit: type=1800 audit(1786138766.446:62): pid=13787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2224" name="addr_trtype" dev="configfs" ino=33191 res=0 errno=0
[  931.997500][T13787] nvmet_tcp: malformed ip/port passed: :4420
[  932.070456][   T49] kworker/u4:3: attempt to access beyond end of device
[  932.070456][   T49] loop5: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  932.138606][T12606] syz-executor: attempt to access beyond end of device
[  932.138606][T12606] loop5: rw=2051, sector=45096, nr_sectors = 8 limit=40427
[  932.186786][T12606] F2FS-fs (loop5): Issue discard(5637, 5637, 1) failed, ret: -5
[  932.219820][T13790] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2225'.
[  932.838789][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2226'.
[  933.852270][T13803] option changes via remount are deprecated (pid=13802 comm=syz.3.2229)
[  934.696793][T13811] loop3: detected capacity change from 0 to 40427
[  934.705136][T13811] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  934.713154][T13811] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  934.760355][T13811] F2FS-fs (loop3): Found nat_bits in checkpoint
[  934.913600][T13811] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  934.921473][T13811] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  934.982424][   T28] audit: type=1804 audit(1786138769.446:63): pid=13808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2231" name="/newroot/591/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  935.071271][T13811] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  935.106876][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2231'.
[  935.509215][ T2115] kworker/u4:9: attempt to access beyond end of device
[  935.509215][ T2115] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  935.864634][T13831] loop5: detected capacity change from 0 to 256
[  935.878689][T13831] FAT-fs (loop5): Unrecognized mount option "obj_user=" or missing value
[  936.274626][T13836] gadgetfs: bound to dummy_udc driver
[  936.657118][ T5870] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  936.693035][T13830] gadgetfs: suspended from state 2
[  937.096322][T13842] fuse: Bad value for 'fd'
[  937.866792][T13847] loop3: detected capacity change from 0 to 4096
[  939.031503][   T28] audit: type=1800 audit(1786138773.506:64): pid=13851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2242" name="addr_trtype" dev="configfs" ino=34233 res=0 errno=0
[  939.040378][T13851] nvmet_tcp: malformed ip/port passed: :4420
[  939.061301][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  940.319326][T13864] loop5: detected capacity change from 0 to 256
[  940.390835][T13864] FAT-fs (loop5): Unrecognized mount option "obj_user=" or missing value
[  940.798931][T13870] gadgetfs: bound to dummy_udc driver
[  941.097723][ T5818] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  941.120600][T13862] gadgetfs: suspended from state 2
[  941.446013][   T28] audit: type=1800 audit(1786138775.916:65): pid=13874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2251" name="addr_trtype" dev="configfs" ino=34309 res=0 errno=0
[  941.469943][T13874] nvmet_tcp: malformed ip/port passed: :4420
[  941.554679][T13876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2252'.
[  941.626745][T13854] loop4: detected capacity change from 0 to 40427
[  941.673031][T13854] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  941.717132][T13854] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  941.793799][T13854] F2FS-fs (loop4): invalid crc value
[  941.832376][T13854] F2FS-fs (loop4): Found nat_bits in checkpoint
[  941.940209][T13881] UBIFS error (pid: 13881): cannot open "(null)", error -22
[  942.145472][T13854] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  942.187132][T13854] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  945.665460][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  945.679271][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  945.690412][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  945.704346][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  945.842826][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  945.854358][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  946.607967][T13931] loop5: detected capacity change from 0 to 256
[  946.632514][T13931] FAT-fs (loop5): Unrecognized mount option "obj_user=" or missing value
[  947.148478][T13938] gadgetfs: bound to dummy_udc driver
[  948.168864][ T5780] Bluetooth: hci1: command tx timeout
[  948.178320][T13933] loop4: detected capacity change from 0 to 32768
[  948.273596][T13933] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  948.624015][T13918] chnl_net:caif_netlink_parms(): no params data found
[  948.910663][T12333] tipc: Left network mode
[  948.928010][T11186] ocfs2: Unmounting device (7,4) on (node local)
[  949.376238][T13918] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.406373][T13918] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.425908][T13918] bridge_slave_0: entered allmulticast mode
[  949.468077][T13918] bridge_slave_0: entered promiscuous mode
[  949.664830][T13918] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.689874][T13918] bridge0: port 2(bridge_slave_1) entered disabled state
[  949.717300][T13918] bridge_slave_1: entered allmulticast mode
[  949.735170][T13918] bridge_slave_1: entered promiscuous mode
[  950.055032][T13918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  950.247786][ T5780] Bluetooth: hci1: command tx timeout
[  950.309674][T13918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  951.637699][T13918] team0: Port device team_slave_0 added
[  951.696295][T13918] team0: Port device team_slave_1 added
[  951.808048][T13918] batman_adv: batadv0: Adding interface: batadv_slave_0
[  951.815210][T13918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.847467][T13918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  951.861852][T13918] batman_adv: batadv0: Adding interface: batadv_slave_1
[  951.871951][T13918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.899948][T13918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  952.005492][T14004] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  952.015432][T14004] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  952.086282][T13918] hsr_slave_0: entered promiscuous mode
[  952.096568][T13918] hsr_slave_1: entered promiscuous mode
[  952.121104][T13918] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  952.150103][T13918] Cannot create hsr debugfs directory
[  952.340665][ T5780] Bluetooth: hci1: command tx timeout
[  952.772258][T14015] loop4: detected capacity change from 0 to 4096
[  952.789807][T12333] hsr_slave_0: left promiscuous mode
[  952.839074][T12333] hsr_slave_1: left promiscuous mode
[  952.946525][T12333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  953.003365][T12333] batman_adv: batadv0: Removing interface: batadv_slave_1
[  953.052397][T12333] bridge_slave_1: left allmulticast mode
[  953.061620][T12333] bridge_slave_1: left promiscuous mode
[  953.077453][T12333] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.628383][T12333] bridge_slave_0: left allmulticast mode
[  953.678372][T12333] bridge_slave_0: left promiscuous mode
[  953.714802][T12333] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.151922][T14040] loop5: detected capacity change from 0 to 2048
[  954.407257][ T5780] Bluetooth: hci1: command tx timeout
[  954.452954][T14040] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  954.650781][T14040] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  954.704551][T14040] UDF-fs: Scanning with blocksize 512 failed
[  954.759795][T14040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  955.073080][T14040] UDF-fs: bad mount option "�'*��v��z��nt" or missing value
[  955.106759][   T28] audit: type=1800 audit(1786138789.576:66): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2293" name="file1" dev="loop5" ino=838 res=0 errno=0
[  955.340344][T12333] bond7 (unregistering): Released all slaves
[  955.787805][T12333] bond6 (unregistering): Released all slaves
[  956.369115][T12333] bond5 (unregistering): Released all slaves
[  956.563525][T12333] bond4 (unregistering): Released all slaves
[  956.763853][T12333] bond3 (unregistering): Released all slaves
[  956.960575][T12333] bond2 (unregistering): Released all slaves
[  957.143761][T12333] bond1 (unregistering): Released all slaves
[  957.984320][T12333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  958.058745][T12333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  958.510181][T12333] bond0 (unregistering): Released all slaves
[  958.658245][T14045] team0: Device xfrm0 is of different type
[  958.744374][T14046] tipc: Started in network mode
[  958.749491][T14046] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  958.756830][T14046] tipc: Enabled bearer <eth:team0>, priority 0
[  959.109613][T14068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2300'.
[  959.147278][T14068] tipc: Resetting bearer <eth:team0>
[  960.182413][T14068] tipc: Disabling bearer <eth:team0>
[  960.201006][T14077] loop5: detected capacity change from 0 to 256
[  960.254240][T14077] FAT-fs (loop5): Unrecognized mount option "obj_user=" or missing value
[  960.302765][T14068] team0 (unregistering): Port device team_slave_0 removed
[  960.537310][T14068] team0 (unregistering): Port device team_slave_1 removed
[  960.644430][T14084] gadgetfs: bound to dummy_udc driver
[  960.937292][ T8147] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  960.999556][T14076] gadgetfs: suspended from state 2
[  961.258782][ T5870] tipc: Node number set to 11578026
[  961.504663][T14088] loop5: detected capacity change from 0 to 4096
[  963.335377][T14092] hub 8-0:1.0: USB hub found
[  963.340330][T14092] hub 8-0:1.0: 1 port detected
[  964.482473][T12333] IPVS: stop unused estimator thread 0...
[  964.590154][T14105] loop4: detected capacity change from 0 to 4096
[  964.775395][T14105] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  967.885448][T14139] UBIFS error (pid: 14139): cannot open "(null)", error -22
[  968.025953][T13918] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  968.059618][T13918] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  968.090856][T13918] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  969.771867][T13918] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  970.946612][T13918] 8021q: adding VLAN 0 to HW filter on device bond0
[  971.053483][T13918] 8021q: adding VLAN 0 to HW filter on device team0
[  971.071088][T14153] loop4: detected capacity change from 0 to 512
[  971.084996][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.092307][ T7637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.153970][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.161261][ T7637] bridge0: port 2(bridge_slave_1) entered forwarding state
[  971.192607][T14153] EXT4-fs (loop4): 1 truncate cleaned up
[  971.229504][T14153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  971.274285][T14153] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2323: bg 0: block 465: padding at end of block bitmap is not set
[  971.464654][T11186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  971.695034][T14169] loop4: detected capacity change from 0 to 128
[  971.768834][T14169] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  972.016573][T14175] loop5: detected capacity change from 0 to 256
[  972.056936][T14175] FAT-fs (loop5): Unrecognized mount option "obj_user=" or missing value
[  972.142515][T13918] 8021q: adding VLAN 0 to HW filter on device batadv0
[  972.327779][T13918] veth0_vlan: entered promiscuous mode
[  972.494746][T14183] gadgetfs: bound to dummy_udc driver
[  972.911007][T13918] veth1_vlan: entered promiscuous mode
[  973.137700][T13918] veth0_macvtap: entered promiscuous mode
[  973.193002][T13918] veth1_macvtap: entered promiscuous mode
[  973.244928][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  973.266854][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.277531][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  973.302968][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.338865][T13918] batman_adv: batadv0: Interface activated: batadv_slave_0
[  973.356670][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.379413][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.398800][T13918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  973.430171][T13918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  973.488933][T13918] batman_adv: batadv0: Interface activated: batadv_slave_1
[  973.539404][T13918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  973.599229][T13918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  973.655013][T13918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  973.701241][T13918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  975.653527][T12332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  975.682388][T12332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  975.779482][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  975.807216][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.831356][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  980.856543][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  980.869551][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  980.887432][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  980.900173][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  980.910042][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  982.900291][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.050578][ T5780] Bluetooth: hci0: command tx timeout
[  983.122893][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.292419][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.431363][T14250] loop4: detected capacity change from 0 to 16
[  983.472682][T14250] erofs: (device loop4): mounted with root inode @ nid 36.
[  983.496207][T14250] syz.4.2338: attempt to access beyond end of device
[  983.496207][T14250] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  983.517549][T14250] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096]
[  983.580327][T14250] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096]
[  983.588680][   T28] audit: type=1800 audit(1786138818.056:67): pid=14250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2338" name="file2" dev="loop4" ino=89 res=0 errno=0
[  983.718290][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.810747][T14266] 
[  984.813160][T14266] ======================================================
[  984.820214][T14266] WARNING: possible circular locking dependency detected
[  984.827277][T14266] syzkaller #0 Not tainted
[  984.831829][T14266] ------------------------------------------------------
[  984.838973][T14266] syz.5.2340/14266 is trying to acquire lock:
[  984.845077][T14266] ffff88814d9060e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x189/0x390
[  984.854606][T14266] 
[  984.854606][T14266] but task is already holding lock:
[  984.862011][T14266] ffff888148d23bc8 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580
[  984.872489][T14266] 
[  984.872489][T14266] which lock already depends on the new lock.
[  984.872489][T14266] 
[  984.882929][T14266] 
[  984.882929][T14266] the existing dependency chain (in reverse order) is:
[  984.891968][T14266] 
[  984.891968][T14266] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}:
[  984.900185][T14266]        __mutex_lock+0x135/0xc80
[  984.905399][T14266]        bd_finish_claiming+0x229/0x3f0
[  984.910989][T14266]        blkdev_get_by_dev+0x469/0x610
[  984.916482][T14266]        bdev_open_by_dev+0x77/0x100
[  984.921876][T14266]        setup_bdev_super+0x59/0x660
[  984.927187][T14266]        mount_bdev+0x1ce/0x2c0
[  984.932060][T14266]        legacy_get_tree+0xea/0x180
[  984.937319][T14266]        vfs_get_tree+0x8c/0x280
[  984.942309][T14266]        do_new_mount+0x24a/0xa40
[  984.947368][T14266]        init_mount+0xde/0x130
[  984.952209][T14266]        do_mount_root+0x97/0x230
[  984.957337][T14266]        mount_root_generic+0x1a6/0x3e0
[  984.962912][T14266]        prepare_namespace+0xc2/0x100
[  984.968318][T14266]        kernel_init_freeable+0x41a/0x560
[  984.974072][T14266]        kernel_init+0x1d/0x1c0
[  984.979080][T14266]        ret_from_fork+0x48/0x80
[  984.984071][T14266]        ret_from_fork_asm+0x11/0x20
[  984.989436][T14266] 
[  984.989436][T14266] -> #3 (bdev_lock){+.+.}-{3:3}:
[  984.996594][T14266]        __mutex_lock+0x135/0xc80
[  985.001650][T14266]        bd_prepare_to_claim+0x1d9/0x4a0
[  985.007394][T14266]        truncate_bdev_range+0x4e/0x260
[  985.012958][T14266]        blkdev_fallocate+0x428/0x6a0
[  985.018359][T14266]        vfs_fallocate+0x585/0x6f0
[  985.023493][T14266]        do_madvise+0x166b/0x3790
[  985.028585][T14266]        __x64_sys_madvise+0xa6/0xc0
[  985.033930][T14266]        do_syscall_64+0x55/0xb0
[  985.038902][T14266]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.045457][T14266] 
[  985.045457][T14266] -> #2 (mapping.invalidate_lock){++++}-{3:3}:
[  985.053834][T14266]        down_write+0x97/0x200
[  985.058640][T14266]        set_blocksize+0x247/0x4b0
[  985.063807][T14266]        sb_min_blocksize+0xbe/0x190
[  985.069125][T14266]        ext4_fill_super+0x6e7/0x6870
[  985.074569][T14266]        get_tree_bdev+0x3e5/0x520
[  985.079709][T14266]        vfs_get_tree+0x8c/0x280
[  985.084772][T14266]        do_new_mount+0x24a/0xa40
[  985.089842][T14266]        init_mount+0xde/0x130
[  985.094638][T14266]        do_mount_root+0x97/0x230
[  985.099701][T14266]        mount_root_generic+0x1a6/0x3e0
[  985.105283][T14266]        prepare_namespace+0xc2/0x100
[  985.110711][T14266]        kernel_init_freeable+0x41a/0x560
[  985.116474][T14266]        kernel_init+0x1d/0x1c0
[  985.121358][T14266]        ret_from_fork+0x48/0x80
[  985.126354][T14266]        ret_from_fork_asm+0x11/0x20
[  985.131674][T14266] 
[  985.131674][T14266] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  985.140314][T14266]        down_write+0x97/0x200
[  985.145195][T14266]        set_blocksize+0x1ff/0x4b0
[  985.150331][T14266]        sb_min_blocksize+0xbe/0x190
[  985.155666][T14266]        ext4_fill_super+0x6e7/0x6870
[  985.161092][T14266]        get_tree_bdev+0x3e5/0x520
[  985.166256][T14266]        vfs_get_tree+0x8c/0x280
[  985.171221][T14266]        do_new_mount+0x24a/0xa40
[  985.176267][T14266]        init_mount+0xde/0x130
[  985.181047][T14266]        do_mount_root+0x97/0x230
[  985.186095][T14266]        mount_root_generic+0x1a6/0x3e0
[  985.191671][T14266]        prepare_namespace+0xc2/0x100
[  985.197073][T14266]        kernel_init_freeable+0x41a/0x560
[  985.202825][T14266]        kernel_init+0x1d/0x1c0
[  985.207723][T14266]        ret_from_fork+0x48/0x80
[  985.212688][T14266]        ret_from_fork_asm+0x11/0x20
[  985.217999][T14266] 
[  985.217999][T14266] -> #0 (&type->s_umount_key#31){++++}-{3:3}:
[  985.226284][T14266]        __lock_acquire+0x37ef/0x7d80
[  985.231721][T14266]        lock_acquire+0x19e/0x420
[  985.236770][T14266]        down_read+0x46/0x2e0
[  985.241469][T14266]        super_lock+0x189/0x390
[  985.246345][T14266]        fs_bdev_sync+0xa4/0x170
[  985.251307][T14266]        blkdev_common_ioctl+0x8a9/0x2580
[  985.257056][T14266]        blkdev_ioctl+0x512/0x730
[  985.262106][T14266]        __se_sys_ioctl+0xfd/0x170
[  985.267251][T14266]        do_syscall_64+0x55/0xb0
[  985.272212][T14266]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.278651][T14266] 
[  985.278651][T14266] other info that might help us debug this:
[  985.278651][T14266] 
[  985.288911][T14266] Chain exists of:
[  985.288911][T14266]   &type->s_umount_key#31 --> bdev_lock --> &bdev->bd_holder_lock
[  985.288911][T14266] 
[  985.302685][T14266]  Possible unsafe locking scenario:
[  985.302685][T14266] 
[  985.310154][T14266]        CPU0                    CPU1
[  985.315535][T14266]        ----                    ----
[  985.320914][T14266]   lock(&bdev->bd_holder_lock);
[  985.325874][T14266]                                lock(bdev_lock);
[  985.332308][T14266]                                lock(&bdev->bd_holder_lock);
[  985.339787][T14266]   rlock(&type->s_umount_key#31);
[  985.344956][T14266] 
[  985.344956][T14266]  *** DEADLOCK ***
[  985.344956][T14266] 
[  985.353116][T14266] 1 lock held by syz.5.2340/14266:
[  985.358248][T14266]  #0: ffff888148d23bc8 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580
[  985.368897][T14266] 
[  985.368897][T14266] stack backtrace:
[  985.374816][T14266] CPU: 1 PID: 14266 Comm: syz.5.2340 Not tainted syzkaller #0
[  985.382298][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  985.392378][T14266] Call Trace:
[  985.395681][T14266]  <TASK>
[  985.398631][T14266]  dump_stack_lvl+0x18c/0x250
[  985.403344][T14266]  ? load_image+0x420/0x420
[  985.407987][T14266]  ? show_regs_print_info+0x20/0x20
[  985.413229][T14266]  ? print_circular_bug+0x12b/0x1a0
[  985.418460][T14266]  check_noncircular+0x2fc/0x400
[  985.423429][T14266]  ? print_deadlock_bug+0x5d0/0x5d0
[  985.428660][T14266]  ? lockdep_lock+0xf5/0x230
[  985.433273][T14266]  ? _find_first_zero_bit+0xd6/0x100
[  985.438619][T14266]  __lock_acquire+0x37ef/0x7d80
[  985.443496][T14266]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.449588][T14266]  ? arch_stack_walk+0x160/0x190
[  985.454548][T14266]  ? verify_lock_unused+0x140/0x140
[  985.459768][T14266]  ? verify_lock_unused+0x140/0x140
[  985.464987][T14266]  ? stack_trace_save+0xaa/0x100
[  985.469974][T14266]  ? stack_trace_snprint+0xf0/0xf0
[  985.475114][T14266]  ? __stack_depot_save+0x1f/0x660
[  985.480245][T14266]  ? do_syscall_64+0x55/0xb0
[  985.484857][T14266]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.490972][T14266]  lock_acquire+0x19e/0x420
[  985.495500][T14266]  ? super_lock+0x189/0x390
[  985.500025][T14266]  ? __might_sleep+0xe0/0xe0
[  985.504667][T14266]  ? read_lock_is_recursive+0x20/0x20
[  985.510063][T14266]  ? __mutex_trylock_common+0x160/0x270
[  985.515630][T14266]  ? trace_raw_output_contention_end+0xd0/0xd0
[  985.521808][T14266]  down_read+0x46/0x2e0
[  985.525995][T14266]  ? super_lock+0x189/0x390
[  985.530522][T14266]  super_lock+0x189/0x390
[  985.534902][T14266]  ? end_current_label_crit_section+0x170/0x170
[  985.541232][T14266]  ? user_get_super+0x180/0x180
[  985.546112][T14266]  ? mutex_lock_nested+0x20/0x20
[  985.551084][T14266]  fs_bdev_sync+0xa4/0x170
[  985.555540][T14266]  ? fs_bdev_mark_dead+0x1f0/0x1f0
[  985.560671][T14266]  blkdev_common_ioctl+0x8a9/0x2580
[  985.565898][T14266]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  985.571558][T14266]  ? blkdev_bszset+0x1f0/0x1f0
[  985.576355][T14266]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  985.581859][T14266]  blkdev_ioctl+0x512/0x730
[  985.586394][T14266]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  985.591881][T14266]  ? bpf_lsm_file_ioctl+0x9/0x10
[  985.596887][T14266]  ? security_file_ioctl+0x80/0xa0
[  985.602092][T14266]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  985.607609][T14266]  __se_sys_ioctl+0xfd/0x170
[  985.612262][T14266]  do_syscall_64+0x55/0xb0
[  985.616719][T14266]  ? clear_bhb_loop+0x40/0x90
[  985.621504][T14266]  ? clear_bhb_loop+0x40/0x90
[  985.626222][T14266]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.632173][T14266] RIP: 0033:0x7f0ac799e0d9
[  985.636630][T14266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  985.656354][T14266] RSP: 002b:00007f0ac87b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  985.664962][T14266] RAX: ffffffffffffffda RBX: 00007f0ac7c25fa0 RCX: 00007f0ac799e0d9
[  985.672977][T14266] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004
[  985.680980][T14266] RBP: 00007f0ac7a35024 R08: 0000000000000000 R09: 0000000000000000
[  985.688977][T14266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  985.696980][T14266] R13: 00007f0ac7c26038 R14: 00007f0ac7c25fa0 R15: 00007ffd0a262028
[  985.704990][T14266]  </TASK>
[  985.737068][ T5780] Bluetooth: hci0: command tx timeout
[  985.822613][T14233] chnl_net:caif_netlink_parms(): no params data found
[  985.924625][   T11] tipc: Left network mode
[  987.536894][   T11] hsr_slave_0: left promiscuous mode
[  987.542999][   T11] hsr_slave_1: left promiscuous mode
[  987.550558][   T11] bridge_slave_1: left allmulticast mode
[  987.557613][   T11] bridge_slave_1: left promiscuous mode
[  987.563391][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.576285][   T11] bridge_slave_0: left allmulticast mode
[  987.582147][   T11] bridge_slave_0: left promiscuous mode
[  987.589362][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.611994][   T11] veth1_macvtap: left promiscuous mode
[  987.617658][   T11] veth0_macvtap: left promiscuous mode
[  987.623409][   T11] veth1_vlan: left promiscuous mode
[  987.632392][   T11] veth0_vlan: left promiscuous mode
[  987.956362][   T11] bond4 (unregistering): Released all slaves
[  988.124330][   T11] bond3 (unregistering): Released all slaves
[  988.290620][   T11] bond2 (unregistering): Released all slaves
[  988.445824][   T11] bond1 (unregistering): Released all slaves
[  988.722438][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  988.761160][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  988.873916][   T11] bond0 (unregistering): Released all slaves
[  989.213831][   T11] IPVS: stop unused estimator thread 0...
[  989.370109][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.439910][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.484954][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.536145][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.649797][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.694595][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.764918][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.824501][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.989423][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.074706][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.134444][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.185352][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.341847][   T11] tipc: Disabling bearer <eth:team0>
[  990.354448][   T11] tipc: Left network mode
[  990.977983][   T11] bridge1: port 1(erspan0) entered disabled state
[  990.996811][   T11] erspan0 (unregistering): left allmulticast mode
[  991.003926][   T11] erspan0 (unregistering): left promiscuous mode
[  991.010865][   T11] bridge1: port 1(erspan0) entered disabled state
[  991.750753][   T11] hsr_slave_0: left promiscuous mode
[  991.756793][   T11] hsr_slave_1: left promiscuous mode
[  991.763828][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  991.773495][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.783161][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  991.792125][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  991.800170][   T11] bridge_slave_0: left allmulticast mode
[  991.805954][   T11] bridge_slave_0: left promiscuous mode
[  991.814800][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.832612][   T11] hsr_slave_0: left promiscuous mode
[  991.838998][   T11] hsr_slave_1: left promiscuous mode
[  991.845131][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  991.854340][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.864341][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  991.873670][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  991.883991][   T11] bridge_slave_1: left allmulticast mode
[  991.891076][   T11] bridge_slave_1: left promiscuous mode
[  991.896918][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.905932][   T11] bridge_slave_0: left allmulticast mode
[  991.912065][   T11] bridge_slave_0: left promiscuous mode
[  991.918250][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.932404][   T11] hsr_slave_0: left promiscuous mode
[  991.939228][   T11] hsr_slave_1: left promiscuous mode
[  991.945344][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  991.954337][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.963034][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  991.971962][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  991.981312][   T11] bridge_slave_1: left allmulticast mode
[  991.989314][   T11] bridge_slave_1: left promiscuous mode
[  991.995076][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  992.004693][   T11] bridge_slave_0: left allmulticast mode
[  992.014735][   T11] bridge_slave_0: left promiscuous mode
[  992.021123][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  992.041791][   T11] veth1_macvtap: left promiscuous mode
[  992.048661][   T11] veth0_macvtap: left promiscuous mode
[  992.054373][   T11] veth1_vlan: left promiscuous mode
[  992.060226][   T11] veth0_vlan: left promiscuous mode
[  992.067542][   T11] veth1_macvtap: left promiscuous mode
[  992.073109][   T11] veth0_macvtap: left promiscuous mode
[  992.081609][   T11] veth1_vlan: left promiscuous mode
[  992.086997][   T11] veth0_vlan: left promiscuous mode
[  992.094351][   T11] veth1_macvtap: left promiscuous mode
[  992.102358][   T11] veth0_macvtap: left promiscuous mode
[  992.108593][   T11] veth1_vlan: left promiscuous mode
[  992.113947][   T11] veth0_vlan: left promiscuous mode
[  992.528047][   T11] team0 (unregistering): Port device team_slave_1 removed
[  992.560517][   T11] team0 (unregistering): Port device team_slave_0 removed
[  992.595415][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  992.612236][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  992.740412][   T11] bond0 (unregistering): Released all slaves
[  992.842267][   T11] bond0 (unregistering): Released all slaves
[  993.090619][   T11] team0 (unregistering): Port device team_slave_1 removed
[  993.126510][   T11] team0 (unregistering): Port device team_slave_0 removed
[  993.160686][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  993.196887][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  993.294078][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  993.300534][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  993.326904][   T11] bond0 (unregistering): Released all slaves
[  993.570194][   T11] team0 (unregistering): Port device team_slave_1 removed
[  993.584725][   T11] team0 (unregistering): Port device team_slave_0 removed
[  993.624256][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  993.660007][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  993.751006][   T11] bond0 (unregistering): Released all slaves