last executing test programs:

15m26.937724125s ago: executing program 32 (id=451):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x6, 0xfffffffa, 0x0, 0x96, "af86ab", 0x6}})

14m15.032282983s ago: executing program 33 (id=1337):
mknod$loop(&(0x7f0000000380)='./file1\x00', 0x400, 0x1)
mount$bind(0x0, &(0x7f0000002d80)='./file1\x00', &(0x7f0000002dc0), 0x0, 0x0)

13m31.58160009s ago: executing program 34 (id=1810):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'none'}, 0xd)

10m23.793434029s ago: executing program 35 (id=3832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

7m27.060555104s ago: executing program 36 (id=5781):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, 0x0)

5m42.767394946s ago: executing program 37 (id=7037):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000100)={@empty, @empty, 0x0, "23000000791a63abd0f99331683fdc3fd440820000d72300", 0x0, 0x0, 0x0, 0x1}, 0x3c)

4m39.136365738s ago: executing program 38 (id=8060):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)

4m27.208112659s ago: executing program 5 (id=8192):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8)

4m27.010641151s ago: executing program 5 (id=8194):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000ac0)={[{@errors_remount}, {@discard}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@sys_tz}, {@dmask={'dmask', 0x3d, 0x9}}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xb1df702309c73f55)

4m26.719260187s ago: executing program 8 (id=8199):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
setregid(0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0)

4m26.701502277s ago: executing program 5 (id=8200):
r0 = memfd_create(&(0x7f0000001dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xbd\n/\xb2\'\x16X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\x007\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xd8\x12\xda\x80\x1b\'\x88\xee\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x05\x00\x00\x00\x00\x00\x00\x00\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xf3\xc2*\xa6q\xe9\x9a\x8e\xd8', 0x4)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000002, 0x11, r0, 0x0)
ftruncate(r0, 0x1000000)

4m26.519411107s ago: executing program 5 (id=8203):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f0000000280)={[{@discard}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@keep_last_dots}, {@gid={'gid', 0x3d, 0xee01}}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@errors_continue}, {@errors_continue}], [{@flag='async'}]}, 0x1, 0x1537, &(0x7f0000000480)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiQhyS0haZJXEhJDbklDEpLLkFyGkFwmJo37/X5JSJImSXLLLVn/zxR/9db7f9/39/bL7/+b5/v57M+s56z9rL32POfss/c+Z+bbLkNrNK5ZtQERwX8Ef/mRCACxADAQAK4DgAAAysaVjcvszy4x8T/bCPtzNUy52jNgVxPXP2vj+mdtXP+sjeuftXH9szauf9bG9c/auP6MZWWbp+e/npesu/D9/6yM3///F8koOfbLtSVv7AoQ86+mcP3//4f/QS7X/3+t4F9ZieuftXH9s6rYqz0B9j8Av/6zgmz/sIfrn7Vx/RnLyn59LzgWrv796L96gUjW/gzkaj//GGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlDWf9FQoALrev9rwYY4wxxhhjjDH25/HZrvYMGGOMMcYYY4wx9t8PQYAEBQHEQDaIheyQAwRAzOX+6yEOboDccCPkgbyQD/JDPBSAgqDBgAWCEApBYYjCTVAEboaiUAyKQwlwUBJKwS1QGm6FMnAblIXboRzcAeWhAlSESnAnVIa7oArcDVXhHqgG1aEG1IR7oRbcB7XhfqgDD0BdeBDqwUNQHx6GBtAQGsEj0BgehSbwGDSFZtAcWkDL/1L+i9ADXoKe0AsSoTf0gZehL/SD/jAABsIrMAhehcHwGiTBEBgKr8MweAOGw5swAkbCKHgLRsPbMAbGwjgYD8kwASbCOzAJ3oXJMAWmwjRIgekwA96DmTALZsP7MAc+gLkwD+bDAkiFD2EhLII0+AgWw8eQDktgKSyD5bACVsIqWA1rYC2sg/WwATbCJtgMW2ArbIPtsAN2wiewCz6F3bAH9sJnsA8+/zfzz/xdflcEBBQoUKHCGIzBWIzFHJgDc2JOzIW5MIIRjMM4zI25MQ/mwXyYD+MxHgtiQTRokJCwEBbCKEaxCBbBolgUi2NxdOiwFJbC0ngrlsEyWBbLYjksh+WxAlbASlgJK2NlrIJVsCpWxWpYDWtgDbwX78XeWBtrYx2sg3Wx7uXbU9gAG2AjbISNsTE2wSbYFJtic2yOLbEltsJW2BpbY1tsi+2wHbbH9piACdgBO2BH7IidsBN2xs7YBbtgV+yG3TJezAb4Er6EvbCa6I19sA/2xaRs/XEADsBXcBC+iq/ia5iEQ3Aovo6v4xs4HE/jCByJo3AUVhZv4xgciyTGYzIm40SciJNwEk7GKTgFp2EKTscZOANn4iyche/jHPwAP8B5OA8XYCqm4kJchGmYhovxDKbjElyKy3A5rsDluApX4ypci+twLW7ADbgJN+EW3ILbcBvuwB34CSoA/BT34B5Mwn24D/fjfjyAB/AgHsQMzMBDeAgP42E8gkfwKB7FY3gcT+BxPIWn8DSewbN4Fs/jebyAz8d/3eiTYmuSQGRSQokYESNiRazIIXKInCKnyCVyiYiIiDgRJ3KL3CKPyCPyiXwiXsSLgqKgMMIIEmHmkUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcbsoJ+4Q5UUF0cZVEpVEZdHWVRF3i6qiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6omHRH3RG/tjQ5FZmcZiCDYRQ7GpaCbkpSNUKzEcW4s2oq14UozEEdhetHIJ4hnRQYzBjuJvYiw+JzqL8dhFvCC6im6iu3hR9BCtXU/RS0zG3qKPmIZ9RT/RXwwQM7G6eB/nZK8hXhNJYogYKl4XC/ANMVy8KUaIkWKUeEuMFm+LMWKsGCfGi2QxQUwU74hJ4l0xWUwRU8U0kSKmixniPTFTzBKzxftijvhAzBXzxHyxQKSKD8VCsUikiY/EYvGxSBdLxFKxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETvGJ2CU+FbvFHrFXfCb2ic/FfvGFOCC+FAfFVyJDfC0OiW/EYfGtOCK+E0fF9+KYOC5OiJPilPhBnBZnxFlxTpwXP4oL4idxUXgBEqWQUioZyBiZTcbK7DKHvEbmlMHl47+MkzfI3PJGmUfmlflkfhkvC8iCUksjrSQZykKysIzKm2QRebMsKovJ4rKEdLKkLCVvkaXlrbKMvE2WlbfLcvIOWV5WkBVlJXmnrCzvkhD5ZRvVZHVZQ9aU98pEuE/WlvfLOvIBWVc+KOvJh2R9+bBsIBvKRvIR2Vg+KpvIx2RT2Uw2ly1kS/m4bCWfkK1lG9lWPinbyadke/m0TJDPyA7SX3qKPCc7y+dlF/mC7Cq7ye7yJ3lRetlT9pLQG2Qf+bLsK/vJ/nKAHChfkYPkq3KwfE0mySFyqHxdDpNvyOHyTTlCjpSj5FtytHxbjpFj5Tg5XibLCXKifEdOku/KyXKKnCqnyRQ5Xfa/NNJsKf9p/jt/kD/4561vkpvlFrlVbpPb5Q65U34id8ldcrfcLffKvXKf3Cf3y/3ygDwgD8qDMkNmyEPykDwsD8sj8og8Ko/KY/K4PCdPylPyB3lanpFn5Dl5Xp6XFy79DkChEkoqpQIVo7KpWJVd5VDXqJzqWpVLXaci6noVp25QudWNKo/Kq/Kp/CpeFVAFlVZGWUUqVIVUYRVVN+GlJ4wqrkoop0qqUuqWfydfFVE3q6Kq2G/yL88v8R/Mr6VqqVqpVqq1aq3aqraqnWqn2qv2KkElqA6qg+qoOqpOqpPqrDqrLqqL6qq6qu6qu+qheqieqqdKVImqj3pZ9VX9VH81QA1Ur4jMfRisBqsklaSGqqFqmBqmhqvhaoQaoUapUWq0Gq3GqDFqnBqnklWymqgmqklqkpqsJqupaqpKUSlqhpqhZqqZaraareaoOWqumqvmq/kqVaWqhWqhSlNparFarNLVErVELVPL1Aq1Qq1Sq9QatUatU+vUBrVBpavNarPaqraq7Wq72ql2ql1ql9qtdqu9aq/ap/ap/Wq/OqAOqIPqoMpQGeqQOqQOq8PqiDqijqqj6pg6pk6oE+qUOqVOq9PqrDqrzqvz6oK6oC6qi5mnfYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDm4M8gR5g3xB/iA+KBAUDHRgAhuIS0WPBjcFRYKbg6JBsaB4UCJwQcmgVHBLUDq4NSgT3BaUDW4PygV3BOWDCkHFoFJwZ1A5uCuoEtwdVA3uCaoF1YMaQc3g3qBWcF9QO7g/qBM8ENQNHgzqBQ8F9YOHgwZBw6BR8EjQOHg0aBI8FjQNmgXNgxZByz91fO9P533C9dS9dKLurfvol3Vf3U/31wP0QP2KHqRf1YP1azpJD9FD9et6mH5DD9dv6hF6pB6l39Kj9dt6jB6rx+nxOllP0BP1O3qSfldP1lP0VD1Np+jpeoZ+T8/Us/Rs/b6eoz/Qc/U8PV8v0Kn6Q71QL9Jp+iO9WH+s0/USvVQv08v1Cr1Sr9Kr9Rq9Vq/T6/UGvVFv0pv1Fr1Vb9Pb9Q69U3+id+lP9W69R+/Vn+l9+nO9X3+hD+gv9UH9lc7QX+tD+ht9WH+rj+jv9FH9vT6mj+sT+qQ+pX/Qp/UZfVaf0+f1j/qC/klf1D7z5D7z7d0oo0yMiTGxJtbkMDlMTpPT5DK5TMRETJyJM7lNbpPH5DH5TD4Tb+JNQVPQZCJDppApZKImaoqYIqaoKWqKm+LGGWdKmVKmtCltypgypqwpa8qZcqa8KW8qmormTnOnucvcZe42d5t7zD2muqluapqappapZWqb2qaOqWPqmrqmnqln6pv6poFpYBqZRqaxaWyamCamqWlqmpvmpqVpaVqZVqa1aW3amramnWln2pv2JsEkmA6mg+loOppOppPpbDqbLqaL6Wq6mu6mu+lhepiepqdJNImmj+lj+pq+pr/pbwaagWaQGWQGm8EmySSZoWaoGWaGmeFmuBlhRppRmSeq5m0zxow148x4k2ySzUQz0Uwyk8xkM9lMNVNNikkxM8wMM9PMNLPNbDPHzDFzzVwz38w3qSbVLDQLTZpJM4vNYpNu0s1Ss9QsN8vNSrPSrDarzVqz1qyH9Waj2Wg2m81mq9lqtpvtZqfZaXaZXWa32W32mr1mn9ln9pv95oA5YA6agybDZJhD5pA5bA6bI+aIOWqOmmPmmDlhTphT5pQ5bU6bs+asOW/yXnq/9CbWZrc57DU2p73W5rLX2b+P89n8Nt4WsAWttnls3t/Exlpb1BazxW0J62xJW8re8ru4vK1gK9pK9k5b2d5lq/wurmXvs7Xt/baOfcDWtPf+Jq5rH7T17KO2PiKAbWYb2Ra2sX3UNrGP2aa2mW1uW9h29inb3j5tE+wztoN99nfxQrvIrrZr7Fq7zu62e+xZe84ett/a8/ZH29P2sgPtK3aQfdUOtq/ZJDvkd/Eo+5Ydbd+2Y+xYO86O/1081U6zKXa6nWHfszPtrN/FqfZDO8em2bl2np1vF/wcZ84pzX5kF9uPbboNYKldZpfbFXalXfV/57rMbrAb7Sa7y35qt9ptdrvdYXdePhG2e+xe+5ndZz+3h+w39oD90h60R2yG/frnOHP/jtjv7FH7vT1mj9sT9qQ9ZX9Ql7Mz9/2k/cletN4CIQFJUhRQDGWjWMpOOegayknXUi66jiJ0PcXRDZSbbqQ8lJfyUX6KpwJUkDQZskQUUiEqTFG6iS5PrziVIEclqRTdQqXpVipDt1FZup3K0R1UnipQRapEd1Jluouq0N1Ule6halSdalBNupdq0X1Um+6nOvQA1aUHqR49RPXpYWpADakRPUKN6VFqQo9RU2pGzakFtaTHqRU9Qa2pDbWlJ6kdPUXt6WlKoGeoAz1LHelv1Imeo870PHWhF6grdaPu9CL1oJeoJ/WiROpNfehl6kv9qD8NoIH0Cg2iV2kwvUZJNISG0us0jN6g4fQmjaCRNIreotH0No2hsTSOxlMyTaCJ9A5NondpMk2hqTSNUmg6zaD3aCbNotn0Ps2hD2guzaP5tIBS6UNaSIsojT6ixfQxpdMSWkrLaDmtoJW0ilbTGlpL62g9baCNtIk20xbaSttoO+2gnfQJ7aJPaTftob30Ge2jz2k/fUEH6Es6SF9RBn1Nh+gbOkzf0hH6zvei7+kYHacTdJJO0Q90ms7QWTpH5+lHukA/0UXyBCGGIpShCoMwJswWxobZwxzhNWHO8NowV3hdGAmvD+PCG8Lc4Y1hnjBvmC/MH8aHBcKCoQ5NaEMKw7BQWDiMhjeFRcKbw6JhsbB4WCJ0YcmwVHhLWDq8NSwT3haWDW8Py4V3hOXDCuGjD1QK7wwrh3eFVcK7w6rhPWG1sHpYI6wZ3hvWCu8La4f3h3XCB8Iy4YNhvfChsH74cNggbBg2Ch8JG4ePhk3Cx8KmYbOwedgibBk+HrYKnwhbh23CtuE1YbvwqbB9+HSYED4Tdgif/bn/wUWX+5/8XX9i2DvsE74cvhx6f7+cH10QTY1+GF0YXRRNi34UXRz9OJoeXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10f3RDdGN0U9b5mNnDohJNOucDFuGwu1mV3Odw1Lqe71uVy17mIu97FuRtcbnejy+Pyunwuv4t3BVxBp51x1pELXSFX2EXdTa6Iu9kVdcVccVfCOVfSlXItXEvX0rVyT7jWro1r6550T7qn3FPuafe0e8Z1cM+6ju5vrpN7znV2z7vn3Quuq+vmursXXQ83Idcvr8lE18f1cX1dX9ff9XcD3UA3yA1yg91gl+SS3FA31A1zw9xwN9yNcCPcKDfKjXaj3Rg3xo1z41yyS3YT3UQ3yU1yk91kN9VNdSkuxc1wM9xMN9NVnvXLVua6uW6+m+9SXapb6DLPGdPcYrfYpbt0t9QtdcvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa30+10u9wut9tf98ugbp/b7/a7A+6AO+i+chnua3fIfeMOu2/dEfedO+q+d8fccXfCnXSn3A/utDvjzrpz7rz70V1wP7mLzrvkyITIxMg7kUmRdyOTI1MiUyPTIimR6ZEZkfciMyOzIrMj70fmRD6IzI3Mi8yPLIikRj6MLIwsiqRFPoosjnwcSY8siSyNLIssj6yIeF9ga+gL+cI+6m/yRfzNvqgv5ov7Et75kr6Uv8WX9rf6Mv42X9bf7sv5O3x5X8FX9I/5pr6Zb+5b+Jb+cd/KP+Fb+za+rX/St/NP+fb+aZ/gn/Ed/LO+o/+b7+Sf8539876Lf8F39d18d/+i7+Ff8j19L5/oe/s+/mXf1/fz/f0AP9C/4gf5V/1g/5pP8kP8UP+6H+bf8MP9m36EH+lHxbzlR1++RIbxPtlP8BP9O36Sf9dP9lP8VD/Np/jpfoZ/z8/0s/xs/76f4z/wc/08P98v8Kn+Q7/QL/Jp/iO/2H/s0/2SyzeN/Uq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xO/4nf5T/1u/0ev9d/5vf5z/1+/4U/4L/0B/1XPsN/7Q/5b/xh/60/4r/zR/33/pg/7k/4k/6U/8Gf9mf8WX/On/c/+gv+J3+R/2aNMcYYY+xfMuFKU/y255fb+b3/IEf8auU+AHDttvwZv+7PPKNcn+eXdj8R3y4CAM/06tLw5+Vkx4bVqiUmJl5aN11CUHgewOVPgjL9/NWDS/ESaAtPQQK0gdJ/OP9+ott5+vX4vbr8bvzo7QA5fpUTC1fiK+N/AYCJfzD+40+OWlguPBv3/xh/HkDRwldyssOVeAm0/fn+Shso8w/mn7fVP5l/9i+TAVr/KicnXImvzL8UPAHPQsJv1mSMMcYYY4wxxn7RT1TsdPn68/I3Pv/o+jxeXcnJBlfif3Z9zhhjjDHGGGOMsavvuW7dn348IaFNp3+/UeW/lPUvN5rAf9fI3PjDhvcAlx9RAPAfDgiQ2ZB/5V5s+Uu2lXTppfP3XcvP+QD+Z5Tyz2hc5QMTY4wxxhhj7E935aT/t4+rqzUhxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/or/p3Y1d5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Gr7PwEAAP//EGkAiw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x4c10, 0x0)

4m26.491799071s ago: executing program 8 (id=8204):
r0 = epoll_create(0x6)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x12000200a})

4m26.292338008s ago: executing program 8 (id=8207):
unshare(0x22020600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)

4m26.127256777s ago: executing program 8 (id=8208):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
link(&(0x7f0000000040)='./file0/file0\x00', 0x0)

4m26.075179329s ago: executing program 5 (id=8210):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)

4m25.931385266s ago: executing program 8 (id=8212):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
sendmsg$sock(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000010c0)="0bff17", 0x3}, {0x0, 0x20}], 0x2}, 0x40)

4m25.457983833s ago: executing program 5 (id=8218):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000280)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,uni_xlate=1,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf0,utf8=0,utf8=0,usefree,codepage=1255,iocharset=cp864,nonumtail=0,dmask=00000000000000000000004,uni_xlate=0,\x00'], 0x6, 0x2cf, &(0x7f0000000e80)="$eJzs3T9rJGUYAPBnksnsnhabwkoEB7SwOi7X2myQOxBTeWyhFhq8O5DsIuQg4B9cr7K1sbDwEwiCH8TGbyDYHth54sHIzL5zO5vbxN3ARrz8fk2evO/zvPPM5CWZFHnz0SuTo7tl3H/45W/R72exNYxhPM5iN7ai9XUsGH4bAMD/2eOqij+qmXXqsojob64tAGCDVvv5n8/Dny+lLQBgg+689/47+wcHt94ty37cnnxzMqp/s68/zub378cnMY57cSMG8SSieVHYieZtoQ5vV1U1zcvabrw+mZ6M6srJh7+k9fcfRTT1ezGI3Wbo6dtGU//2wa29cqZTP637eCFdf1jX34xBvPS0eKH+5pL6GBXxxmud/q/HIH79OD6NcdxtmpjXf7VXlm9V3/35xQd1e3V9Nj0Z9Zq8uWr7kr80AAAAAAAAAAAAAAAAAAAAAAA8x66ns3N60ZzfUw+l83e2n9Sf7ETZ2l08n2dWn7ULdc8HqqpqWsUP7fk6N8qyrFLivD6Pl/PuwYIAAAAAAAAAAAAAAAAAAABwdT347POjw/H43nEKrh2fHlknaE8DyCPirzsRF11n2Bl5tTij1RT00vTheLyVwsWcvDsS221OFnFuG/VNXKj59YNrz/Scgh9/WnfB/r/n7Cy/1gWC+nkvnWp319FhtvwZ9qId6adN8n0RMc8pYsU2irOmqlhn+xVLpwbLkx/9ffY6LzbB9JxrRXaqsbx5UGnkzd9nTy4lZ+1d5Gmk6CYvBjsp6JSf2hsr7efoz8qf/V6ROa0DAAAAAAAAAAAAAAAAAAA2av7Xv0smH55bulX1NtYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyq+f//XyOYpuIVkos4fvAf3yIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXwD8BAAD//9ytVcw=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80047210, &(0x7f00000003c0)={@desc={0x4100, 0x0, @auto="a2bdcc3777059337"}})

4m25.006376766s ago: executing program 39 (id=8218):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000280)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,uni_xlate=1,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf0,utf8=0,utf8=0,usefree,codepage=1255,iocharset=cp864,nonumtail=0,dmask=00000000000000000000004,uni_xlate=0,\x00'], 0x6, 0x2cf, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80047210, &(0x7f00000003c0)={@desc={0x4100, 0x0, @auto="a2bdcc3777059337"}})

4m24.994831523s ago: executing program 8 (id=8223):
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)

4m24.455029264s ago: executing program 40 (id=8223):
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)

3m50.219238065s ago: executing program 3 (id=8531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000005740)=""/4103, 0x1007}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/101, 0x65}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4082, 0xff2}], 0x4}, 0x8}], 0x3, 0x2, 0x0)

3m49.986123046s ago: executing program 3 (id=8535):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)

3m49.842310862s ago: executing program 3 (id=8539):
r0 = io_uring_setup(0x2ad5, &(0x7f0000000100)={0x0, 0xfffffffe, 0x0, 0x80000})
close(r0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)

3m48.759311035s ago: executing program 3 (id=8552):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@i_version}, {@user_xattr}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540), 0x10000, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

3m48.073871714s ago: executing program 3 (id=8554):
r0 = socket$packet(0x11, 0x2, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$packet_buf(r0, 0x107, 0xd, 0x0, 0x0)

3m45.726254569s ago: executing program 3 (id=8577):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_delete(0x0)

3m45.384716411s ago: executing program 41 (id=8577):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_delete(0x0)

1m15.479281872s ago: executing program 9 (id=10683):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r2, 0x0, 0x1, 0x260dec, 0xefff, 0x0, 0x10001})

1m15.171036052s ago: executing program 9 (id=10687):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))

1m14.842147318s ago: executing program 9 (id=10692):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020)

1m14.594027445s ago: executing program 9 (id=10695):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000300)='./file2\x00', 0x0)

1m13.917923016s ago: executing program 9 (id=10701):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0xd, 0x1c80, 0xfffa, 0xff4e, 0xced, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x2, 0x7, 0x9, 0xffffffff, 0x5}}, &(0x7f0000000040)=0xb0)

1m7.033371326s ago: executing program 9 (id=10771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000000001c000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)

1m6.431168652s ago: executing program 42 (id=10771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000000001c000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)

5.30350252s ago: executing program 7 (id=11369):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x7f}, 0x8)

4.395958305s ago: executing program 2 (id=11376):
r0 = socket(0x2, 0x80805, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001500)=@assoc_value={0x0, 0x7}, &(0x7f00000014c0)=0x8)

4.277863989s ago: executing program 7 (id=11377):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000200001000000000000000f000a002040000000070000000014000200fc0200000000000000000000000000001400030076"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

4.030504231s ago: executing program 7 (id=11378):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080)

3.958128918s ago: executing program 2 (id=11380):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)

3.803296907s ago: executing program 2 (id=11384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b40)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x49}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x50, 0x18}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x54}}, 0x0)

3.773465676s ago: executing program 7 (id=11385):
syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60aa, &(0x7f000000d780)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21c0, 0x103)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r0, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000980)='./file0\x00', 0x0)

3.622663893s ago: executing program 0 (id=11387):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

3.529788244s ago: executing program 2 (id=11388):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [], 0x0, [0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x4, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000)

3.356217446s ago: executing program 0 (id=11390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

3.241335969s ago: executing program 2 (id=11392):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x11, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.927716465s ago: executing program 2 (id=11395):
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0)
ioctl$TIOCPKT(r1, 0x5420, 0x0)
sendfile(r0, r1, 0x0, 0x110003)

2.519766142s ago: executing program 0 (id=11400):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="1000508004000a00050002"], 0x2c}}, 0x0)

2.389025027s ago: executing program 7 (id=11402):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/73, 0x49)

2.364877019s ago: executing program 0 (id=11403):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x40)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000880))

2.337821346s ago: executing program 4 (id=11404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8410}, 0xc880)

2.215576384s ago: executing program 0 (id=11405):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000001980)={0x0, 0x14, 0x3, "b844a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.106145888s ago: executing program 4 (id=11407):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0xcc04, &(0x7f0000000800)={[{@dots}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x5}}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@usefree}, {@dots}, {@nodots}, {@nodots}, {@fat=@gid}, {@dots}, {@fat=@usefree}, {@fat=@gid}, {}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@dots}]}, 0x1, 0x1bf, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2)
lseek(r0, 0x2, 0x3)
getdents64(r0, 0x0, 0x22)

2.094676672s ago: executing program 6 (id=11408):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}]}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000100), 0x6)

1.984339727s ago: executing program 4 (id=11410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0x40)

1.959985783s ago: executing program 6 (id=11411):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x41, 0x0)
r0 = syz_io_uring_setup(0x22b, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

1.835612309s ago: executing program 6 (id=11412):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)

1.774245022s ago: executing program 1 (id=11413):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000240), &(0x7f0000000340)=""/86}, 0x20)

1.773708371s ago: executing program 4 (id=11414):
unshare(0x22020600)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x2004}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9)

1.650643294s ago: executing program 1 (id=11415):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.639997003s ago: executing program 6 (id=11416):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90600fc60", 0x14}], 0x1}, 0x800)

1.552094562s ago: executing program 4 (id=11417):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x200002, &(0x7f0000000040), 0x1, 0x559a, &(0x7f0000005680)="$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")
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

1.511687644s ago: executing program 6 (id=11418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000009b0b000008000300", @ANYRES32=r1, @ANYBLOB="0800260080090000080027"], 0x2c}}, 0x0)

1.360269338s ago: executing program 1 (id=11419):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)

1.285947543s ago: executing program 6 (id=11420):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x4, 0x2, 0xffff, 0x3, 0x1, 0x6, 0x0, 0x36a, 0x1020003f})
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')

1.151829883s ago: executing program 1 (id=11421):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="41000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x44}}, 0x0)

929.722864ms ago: executing program 1 (id=11422):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x101, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800)

682.064661ms ago: executing program 1 (id=11423):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

607.256639ms ago: executing program 7 (id=11424):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
fdatasync(r0)

111.787276ms ago: executing program 4 (id=11425):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

0s ago: executing program 0 (id=11426):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x60801, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x401, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

kernel console output (not intermixed with test programs):

nk+0x5/0xfbef5
[  943.285567][   T13]  ? f2fs_hw_is_readonly+0x39b/0x470
[  943.285603][   T13]  f2fs_handle_critical_error+0x37c/0x540
[  943.285640][   T13]  f2fs_write_end_io+0x495/0x810
[  943.285670][   T13]  ? blkg_put+0x22/0x240
[  943.285733][   T13]  __submit_merged_bio+0x27a/0x6a0
[  943.285770][   T13]  __submit_merged_write_cond+0x255/0x530
[  943.285824][   T13]  f2fs_write_data_pages+0x261d/0x3000
[  943.285908][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  943.285960][   T13]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  943.286050][   T13]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  943.286079][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.286107][   T13]  ? look_up_lock_class+0x74/0x170
[  943.286150][   T13]  ? trace_f2fs_writepages+0x7f/0x200
[  943.286180][   T13]  ? f2fs_write_node_pages+0x478/0x6e0
[  943.286251][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.286286][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  943.286319][   T13]  do_writepages+0x32e/0x550
[  943.286366][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.286393][   T13]  ? reacquire_held_locks+0x127/0x1d0
[  943.286424][   T13]  ? writeback_sb_inodes+0x372/0x1000
[  943.286472][   T13]  __writeback_single_inode+0x145/0xff0
[  943.286506][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.286534][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  943.286578][   T13]  writeback_sb_inodes+0x6b5/0x1000
[  943.286611][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  943.286648][   T13]  ? rcu_is_watching+0x15/0xb0
[  943.286684][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.286731][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  943.286832][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.286860][   T13]  ? rcu_is_watching+0x15/0xb0
[  943.286890][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.286934][   T13]  wb_writeback+0x43b/0xaf0
[  943.286981][   T13]  ? queue_io+0x321/0x590
[  943.287020][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  943.287068][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  943.287102][   T13]  wb_workfn+0x409/0xef0
[  943.287156][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  943.287192][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.287220][   T13]  ? __lock_acquire+0xab9/0xd20
[  943.287266][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.287300][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.287335][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  943.287363][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  943.287391][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  943.287425][   T13]  process_scheduled_works+0xae1/0x17b0
[  943.287504][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  943.287547][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.287590][   T13]  worker_thread+0x8a0/0xda0
[  943.287665][   T13]  kthread+0x711/0x8a0
[  943.287707][   T13]  ? __pfx_worker_thread+0x10/0x10
[  943.287738][   T13]  ? __pfx_kthread+0x10/0x10
[  943.287770][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.287805][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  943.287828][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  943.287857][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  943.287881][   T13]  ? __pfx_kthread+0x10/0x10
[  943.287919][   T13]  ret_from_fork+0x3fc/0x770
[  943.287952][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  943.287991][   T13]  ? __switch_to_asm+0x39/0x70
[  943.288023][   T13]  ? __switch_to_asm+0x33/0x70
[  943.288054][   T13]  ? __pfx_kthread+0x10/0x10
[  943.288093][   T13]  ret_from_fork_asm+0x1a/0x30
[  943.288154][   T13]  </TASK>
[  943.288165][   T13] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  943.882802][T30784] loop6: detected capacity change from 0 to 32768
[  944.128490][T30811] loop7: detected capacity change from 0 to 4096
[  944.452981][T30820] Invalid logical block size (-2147483648)
[  944.731427][T30835] loop9: detected capacity change from 0 to 512
[  944.789382][T30835] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.10222: bad orphan inode 11862016
[  944.893570][T30835] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  944.929286][T30835] ext4 filesystem being mounted at /1080/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  945.128338][T15672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  945.140385][T30857] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«=
[  945.146356][T30857] [U] J"—e:ÀÆ"


[  945.963130][T22407] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  946.012382][T30899] netlink: 'syz.2.10253': attribute type 61 has an invalid length.
[  946.165844][T22407] usb 1-1: Using ep0 maxpacket: 8
[  946.189008][T22407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  946.215942][T22407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  946.238335][T22407] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  946.259766][T22407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.317017][T22407] usb 1-1: config 0 descriptor??
[  946.412213][T30874] loop9: detected capacity change from 0 to 32768
[  946.468581][T30874] jfs_lookup: iget failed on inum 4
[  946.487905][T30874] jfs_lookup: iget failed on inum 4
[  946.573410][   T10] kernel write not supported for file /binder/transactions (pid: 10 comm: kworker/0:1)
[  946.779384][T22407] uclogic 0003:2179:0053.0087: interface is invalid, ignoring
[  947.006841][   T10] usb 1-1: USB disconnect, device number 42
[  947.763491][T30956] netlink: 240 bytes leftover after parsing attributes in process `syz.9.10281'.
[  947.808192][T30950] loop6: detected capacity change from 0 to 4096
[  947.874689][T30957] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  947.958905][T30960] loop0: detected capacity change from 0 to 512
[  948.026411][T30960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  948.032506][T30964] netlink: 'syz.9.10284': attribute type 153 has an invalid length.
[  948.043525][T30960] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  948.167259][T30960] EXT4-fs error (device loop0): ext4_empty_dir:3078: inode #12: comm syz.0.10283: Directory hole found for htree leaf block 0
[  948.259462][T26155] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  948.439690][T30976] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  949.134691][T30970] loop6: detected capacity change from 0 to 32768
[  949.259727][T30970] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  949.494858][T26144] ocfs2: Unmounting device (7,6) on (node local)
[  949.628635][T31012] loop9: detected capacity change from 0 to 512
[  949.674528][T31012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  949.850162][T15672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.040833][T31023] loop0: detected capacity change from 0 to 512
[  950.112637][T31030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10313'.
[  950.123312][T31023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  950.192672][T31023] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  950.224333][    C0] vkms_vblank_simulate: vblank timer overrun
[  950.372864][T31035] netlink: 428 bytes leftover after parsing attributes in process `syz.9.10314'.
[  950.390060][T31023] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 3: comm syz.0.10311: lblock 8 mapped to illegal pblock 3 (length 26)
[  950.411256][T31023] EXT4-fs (loop0): Remounting filesystem read-only
[  950.443036][T31035] netlink: 104 bytes leftover after parsing attributes in process `syz.9.10314'.
[  950.481259][T26155] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.599537][T31010] loop7: detected capacity change from 0 to 40427
[  950.632184][T31010] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  950.647926][T31010] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  950.671668][T31010] F2FS-fs (loop7): invalid crc value
[  950.875141][T31059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10325'.
[  950.917310][T31010] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  950.925555][T22439] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  950.957323][T31010] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  951.011527][   T30] audit: type=1800 audit(1753101380.772:388): pid=31010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10304" name="bus" dev="loop7" ino=10 res=0 errno=0
[  951.032069][    C0] vkms_vblank_simulate: vblank timer overrun
[  951.127377][T22439] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  951.177832][T22439] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  951.202959][T22439] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  951.212567][T22439] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.236730][T31044] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  951.256028][T22439] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  951.534987][T31044] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5)
[  951.541629][T31044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  951.561181][T31044] vhci_hcd vhci_hcd.0: Device attached
[  951.570099][T31078] vhci_hcd: connection closed
[  951.570304][   T13] vhci_hcd: stop threads
[  951.612979][   T13] vhci_hcd: release socket
[  951.620683][   T13] vhci_hcd: disconnect device
[  951.647392][   T10] usb 10-1: USB disconnect, device number 30
[  951.672567][T31085] program syz.2.10336 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  951.688627][T31084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10335'.
[  952.112533][T31100] ALSA: mixer_oss: invalid OSS volume '¥¬T¶½
ø¿'
[  952.733270][T31121] loop0: detected capacity change from 0 to 1764
[  952.821927][T31127] netlink: 'syz.4.10355': attribute type 9 has an invalid length.
[  952.891218][T31127] netlink: 146708 bytes leftover after parsing attributes in process `syz.4.10355'.
[  953.078807][T31135] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  953.388253][T31149] loop9: detected capacity change from 0 to 256
[  953.402281][T31149] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  953.419236][T31149] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  953.450954][T31149] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  953.894623][T19013] Bluetooth: hci5: command 0x0405 tx timeout
[  954.044846][T22407] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  954.066634][T31153] loop0: detected capacity change from 0 to 32768
[  954.123882][T31153] ERROR: (device loop0): dbAllocAG: unable to allocate blocks
[  954.123882][T31153] 
[  954.145250][T31153] jfs_create: dtInsert returned -EIO
[  954.150856][T31153] ERROR: (device loop0): jfs_create: 
[  954.150856][T31153] 
[  954.212517][T22407] usb 5-1: Using ep0 maxpacket: 16
[  954.225396][T22407] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  954.240689][T22407] usb 5-1: config 1 has no interface number 0
[  954.250328][T22407] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  954.263048][T22407] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  954.274729][T22407] usb 5-1: config 1 interface 105 has no altsetting 0
[  954.291444][T31171] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  954.301674][T22407] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  954.312785][T31171] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  954.326712][T22407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.335422][T22407] usb 5-1: Product: syz
[  954.360031][T22407] usb 5-1: Manufacturer: syz
[  954.387279][T22407] usb 5-1: SerialNumber: syz
[  954.405123][T31163] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  954.417417][T31163] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  954.468903][T31175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10380'.
[  954.479149][T31175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10380'.
[  954.854017][T31163] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  954.872980][T31163] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  954.949842][T31194] netlink: 48 bytes leftover after parsing attributes in process `syz.9.10389'.
[  955.020233][   T30] audit: type=1326 audit(1753101384.782:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31196 comm="syz.9.10391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2884d8e9a9 code=0x0
[  955.072202][ T6071] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  955.233699][ T6071] usb 3-1: Using ep0 maxpacket: 32
[  955.241097][ T6071] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  955.251005][ T6071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.262204][ T6071] usb 3-1: config 0 descriptor??
[  955.299762][T22407] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  955.312392][T22407] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  955.325380][T22407] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  955.351780][T22407] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, de:fa:12:dd:4d:f0
[  955.367476][T22407] usb 5-1: USB disconnect, device number 54
[  955.375505][T22407] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  955.454268][T22407] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  955.469179][T22407] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  955.478902][T22407] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  955.489886][ T6071] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  955.515241][ T6071] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  955.535443][ T6071] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  955.549913][ T6071] usb 3-1: media controller created
[  955.578940][ T6071] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  955.584693][T31200] loop7: detected capacity change from 0 to 2048
[  955.604784][T31200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  955.691043][ T6071] az6027: usb out operation failed. (-71)
[  955.712605][ T6071] az6027: usb out operation failed. (-71)
[  955.718379][ T6071] stb0899_attach: Driver disabled by Kconfig
[  955.753960][ T6071] az6027: no front-end attached
[  955.753960][ T6071] 
[  955.776978][ T6071] az6027: usb out operation failed. (-71)
[  955.791303][ T6071] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  955.801279][ T6071] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45
[  955.817397][ T6071] dvb-usb: schedule remote query interval to 400 msecs.
[  955.841092][ T6071] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  955.863612][ T6071] usb 3-1: USB disconnect, device number 45
[  956.018876][ T6071] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  956.081179][T31216] loop9: detected capacity change from 0 to 128
[  956.283550][T31220] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  956.292617][T31220] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  956.301354][T31220] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  956.310643][T31220] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  956.703152][T31235] loop7: detected capacity change from 0 to 1024
[  956.731020][T31235] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  956.761051][T31235] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  956.806501][T31235] EXT4-fs (loop7): orphan cleanup on readonly fs
[  956.844817][T31235] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz.7.10409: Invalid inode table block 0 in block_group 0
[  956.910246][T31235] EXT4-fs (loop7): Remounting filesystem read-only
[  956.931222][T31235] Quota error (device loop7): write_blk: dquota write failed
[  956.994324][T31235] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  957.025268][T31235] EXT4-fs (loop7): 1 truncate cleaned up
[  957.057790][T31235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  957.114000][T31248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10415'.
[  957.143868][T31248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10415'.
[  957.172614][T31235] EXT4-fs (loop7): shut down requested (1)
[  957.200947][T31252] loop9: detected capacity change from 0 to 64
[  957.230165][T31252] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing
[  957.284464][T25804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.402904][T22407] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  957.553966][T19010] Bluetooth: hci2: link tx timeout
[  957.560595][T19010] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  957.579312][T19013] Bluetooth: hci2: link tx timeout
[  957.585612][T22407] usb 1-1: Using ep0 maxpacket: 32
[  957.591612][T19013] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  957.599588][T19013] Bluetooth: hci2: link tx timeout
[  957.605380][T19013] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  957.615222][T31262] loop7: detected capacity change from 0 to 128
[  957.616320][T22407] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  957.633086][T22407] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  957.643435][T22407] usb 1-1: config 0 interface 0 has no altsetting 0
[  957.651882][T22407] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  957.661876][T22407] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  957.670254][T22407] usb 1-1: Product: syz
[  957.679073][T22407] usb 1-1: config 0 descriptor??
[  957.734802][T31262] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  957.748989][T31262] ext4 filesystem being mounted at /332/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  957.804323][T31262] fscrypt (loop7, inode 12): Unsupported log2_data_unit_size in encryption policy: 227
[  957.868084][T25804] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  958.119125][T22407] hid (null): unknown global tag 0xe
[  958.159239][T22407] waterforce 0003:1044:7A4D.0088: unknown global tag 0xe
[  958.194194][T22407] waterforce 0003:1044:7A4D.0088: item 0 2 1 14 parsing failed
[  958.224781][T22407] waterforce 0003:1044:7A4D.0088: hid parse failed with -22
[  958.252909][T22407] waterforce 0003:1044:7A4D.0088: probe with driver waterforce failed with error -22
[  958.333954][ T6071] usb 1-1: USB disconnect, device number 43
[  958.499594][T31282] loop7: detected capacity change from 0 to 1024
[  958.523155][T31282] EXT4-fs: Ignoring removed oldalloc option
[  958.532370][T31282] EXT4-fs: Ignoring removed orlov option
[  958.560260][T31282] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  958.605731][T31282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  958.770946][T25804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.048984][ T5931] kernel write not supported for file /stat (pid: 5931 comm: kworker/0:5)
[  959.652680][T19013] Bluetooth: hci2: command 0x0406 tx timeout
[  959.915217][T31331] syzkaller1: tun_chr_ioctl cmd 1074025677
[  959.921369][T31331] syzkaller1: linktype set to 780
[  959.974933][T31333] loop6: detected capacity change from 0 to 128
[  960.000457][T31333] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  960.047262][T31333] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  960.642689][T22407] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  960.818776][T22407] usb 10-1: Using ep0 maxpacket: 16
[  960.836673][T22407] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  960.877216][T22407] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  960.903239][T22407] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.923782][T22407] usb 10-1: config 0 descriptor??
[  961.362536][T22407] mcp2221 0003:04D8:00DD.0089: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0
[  961.658984][T31379] loop7: detected capacity change from 0 to 4096
[  961.738742][T31382] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  961.742606][T19013] Bluetooth: hci2: command 0x0406 tx timeout
[  961.751721][T31381] program syz.0.10477 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  961.809621][T22407] usb 10-1: USB disconnect, device number 31
[  961.867754][T31373] loop6: detected capacity change from 0 to 32768
[  961.921355][T31373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10473 (31373)
[  961.976034][T31373] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  961.996899][T31373] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  962.009230][T31373] BTRFS info (device loop6): using free-space-tree
[  962.164382][T31406] loop7: detected capacity change from 0 to 1024
[  962.202595][   T30] audit: type=1800 audit(1753101391.952:390): pid=31406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10481" name="file1" dev="loop7" ino=20 res=0 errno=0
[  962.253060][T31373] BTRFS info (device loop6): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  962.509088][T26144] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  962.521602][T31401] overlayfs: failed to resolve './file0': -2
[  963.410122][T31413] loop7: detected capacity change from 0 to 32768
[  963.561309][T31413] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  963.651928][T31413] XFS (loop7): Ending clean mount
[  963.669642][T31413] XFS (loop7): Quotacheck needed: Please wait.
[  963.716197][T31413] XFS (loop7): Quotacheck: Done.
[  963.961085][T31450] loop0: detected capacity change from 0 to 2048
[  963.992596][T31451] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  964.092283][T25804] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  965.388694][T31459] loop0: detected capacity change from 0 to 32768
[  965.414725][T31459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10501 (31459)
[  965.461475][T31459] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  965.485079][T31459] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  965.508466][T31459] BTRFS info (device loop0): using free-space-tree
[  965.625786][T31459] BTRFS info (device loop0): rebuilding free space tree
[  966.016274][T26155] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  966.172659][T22425] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  966.342585][T22425] usb 3-1: Using ep0 maxpacket: 32
[  966.383494][T22425] usb 3-1: config 0 interface 0 has no altsetting 0
[  966.417455][T22425] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  966.438315][T22425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.458672][T22425] usb 3-1: Product: syz
[  966.484439][T22425] usb 3-1: Manufacturer: syz
[  966.510628][T22425] usb 3-1: SerialNumber: syz
[  966.537006][T22425] usb 3-1: config 0 descriptor??
[  966.600885][T31511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10519'.
[  966.841804][T31526] loop0: detected capacity change from 0 to 64
[  966.906681][T31526] hfs: request for non-existent node 56 in B*Tree
[  966.918410][T31526] hfs: request for non-existent node 56 in B*Tree
[  966.926679][T31526] hfs: request for non-existent node 57 in B*Tree
[  966.956953][T31526] hfs: request for non-existent node 57 in B*Tree
[  966.979588][T22425] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  966.997294][T31526] hfs: request for non-existent node 58 in B*Tree
[  967.015897][T31526] hfs: request for non-existent node 58 in B*Tree
[  967.030928][T31526] hfs: request for non-existent node 59 in B*Tree
[  967.045802][T31526] hfs: request for non-existent node 59 in B*Tree
[  967.381050][T22425] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  967.462546][T22425] usb 3-1: USB disconnect, device number 46
[  967.882559][T31545] program syz.7.10534 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  967.910507][T31547] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10535'.
[  968.478423][T31568] mkiss: ax0: crc mode is auto.
[  968.661587][T31576] atomic_op ffff88807735f198 conn xmit_atomic 0000000000000000
[  968.902920][T31582] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  968.903595][T31585] loop6: detected capacity change from 0 to 63
[  968.950242][T31585] Buffer I/O error on dev loop6, logical block 0, async page read
[  968.989196][T31590] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  969.023106][T31590] Buffer I/O error on dev loop6, logical block 1, lost async page write
[  969.096348][T31590] Buffer I/O error on dev loop6, logical block 2, lost async page write
[  969.134626][T31590] Buffer I/O error on dev loop6, logical block 3, lost async page write
[  969.193584][T31590] Buffer I/O error on dev loop6, logical block 4, lost async page write
[  969.237019][T31590] Buffer I/O error on dev loop6, logical block 5, lost async page write
[  969.255222][T31590] Buffer I/O error on dev loop6, logical block 6, lost async page write
[  969.593228][T31613] loop7: detected capacity change from 0 to 128
[  969.632769][T22439] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  969.667082][T31613] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  969.742523][T31613] ext4 filesystem being mounted at /353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  969.822760][T22439] usb 10-1: Using ep0 maxpacket: 16
[  969.876840][T22439] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  969.898660][T22439] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  969.925233][T22439] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  969.945824][T22439] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  969.967834][T22439] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  970.004341][T25804] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  970.011023][T22439] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  970.032221][T22439] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  970.081088][T22439] usb 10-1: Manufacturer: syz
[  970.112536][T22439] usb 10-1: config 0 descriptor??
[  970.120208][T31629] loop0: detected capacity change from 0 to 512
[  970.136699][T31629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  970.166599][T31629] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.10571: invalid block
[  970.194602][T31629] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10571: invalid indirect mapped block 4294967295 (level 1)
[  970.221785][T31629] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10571: invalid indirect mapped block 4294967295 (level 1)
[  970.240510][T31629] EXT4-fs (loop0): 2 truncates cleaned up
[  970.249262][T31629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  970.292365][T31629] EXT4-fs (loop0): shut down requested (2)
[  970.358423][T26155] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.472499][T22439] rc_core: IR keymap rc-hauppauge not found
[  970.478470][T22439] Registered IR keymap rc-empty
[  970.513069][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  970.535895][T31603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.556218][T31603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.572576][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  970.603757][T22439] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  970.621617][   T30] audit: type=1326 audit(1753101400.382:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31639 comm="syz.0.10574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x0
[  970.634563][T31641] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10575'.
[  970.664802][T22439] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input46
[  970.711012][   T30] audit: type=1326 audit(1753101400.422:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31639 comm="syz.0.10574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x0
[  970.743666][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  970.791062][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  970.849494][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  970.894501][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  970.953598][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  970.998014][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  971.082554][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  971.123051][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  971.147528][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  971.192234][T22439] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  971.225068][T22439] mceusb 10-1:0.0: Registered  with mce emulator interface version 1
[  971.267934][T22439] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  971.298263][T22439] usb 10-1: USB disconnect, device number 32
[  971.853603][T31669] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10587'.
[  971.863943][T31671] loop7: detected capacity change from 0 to 64
[  972.386876][T31681] loop7: detected capacity change from 0 to 4096
[  972.410770][T31681] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  973.086277][T31679] loop9: detected capacity change from 0 to 32768
[  973.102406][   T30] audit: type=1326 audit(1753101402.862:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.4.10600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[  973.122430][T31679] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.10592 (31679)
[  973.180747][T31679] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  973.182320][   T30] audit: type=1326 audit(1753101402.862:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.4.10600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[  973.232400][T31679] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm
[  973.252599][   T30] audit: type=1326 audit(1753101402.862:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.4.10600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[  973.255968][T31679] BTRFS info (device loop9): using free-space-tree
[  973.330330][   T30] audit: type=1326 audit(1753101402.862:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.4.10600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[  973.363549][   T30] audit: type=1326 audit(1753101402.902:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.4.10600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[  973.409428][   T30] audit: type=1326 audit(1753101402.902:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.4.10600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[  973.437845][   T30] audit: type=1326 audit(1753101402.902:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.4.10600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[  973.462863][   T30] audit: type=1326 audit(1753101402.902:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.4.10600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[  973.853214][T22424] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  974.022182][T22424] usb 5-1: Using ep0 maxpacket: 8
[  974.029746][T22424] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  974.043906][T22424] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  974.071650][T22424] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  974.106899][T22424] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  974.137995][T22424] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  974.161969][T22424] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  974.185425][T22424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.345892][T15672] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  974.432591][T22424] usb 5-1: GET_CAPABILITIES returned 0
[  974.446455][T22424] usbtmc 5-1:16.0: can't read capabilities
[  974.655894][T22424] usb 5-1: USB disconnect, device number 55
[  974.830943][T31733] loop0: detected capacity change from 0 to 32768
[  974.911424][T31733] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  974.945602][T31733] XFS (loop0): Ending clean mount
[  975.083681][T26155] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  975.602538][T22424] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  975.782599][T22424] usb 5-1: Using ep0 maxpacket: 32
[  975.798666][T22424] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  975.811034][T22424] usb 5-1: config 0 has no interface number 0
[  975.826623][T22424] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  975.838982][T22424] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  975.856216][T22424] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  975.867888][T22424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.893355][T31783] netlink: 'syz.2.10630': attribute type 8 has an invalid length.
[  975.924850][T22424] usb 5-1: config 0 descriptor??
[  976.377926][T31798] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10638'.
[  976.403080][T31798] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10638'.
[  976.471426][T31803] netem: change failed
[  976.559305][T22424] uclogic 0003:28BD:0094.008A: pen parameters not found
[  976.568266][T22424] uclogic 0003:28BD:0094.008A: interface is invalid, ignoring
[  976.592625][T22424] usb 5-1: USB disconnect, device number 56
[  976.820998][T31815] loop7: detected capacity change from 0 to 256
[  976.821573][T31816] netlink: 'syz.2.10646': attribute type 21 has an invalid length.
[  976.834010][T31815] exfat: Deprecated parameter 'utf8'
[  976.836091][T31816] netlink: 'syz.2.10646': attribute type 6 has an invalid length.
[  976.850813][T31816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10646'.
[  976.858462][T31815] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d)
[  977.358683][T31838] loop6: detected capacity change from 0 to 1024
[  977.375433][T31838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  977.721055][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  977.721077][   T30] audit: type=1326 audit(1753101407.482:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  977.797596][   T30] audit: type=1326 audit(1753101407.482:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  977.861381][T26144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.861754][   T30] audit: type=1326 audit(1753101407.532:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  977.937556][   T30] audit: type=1326 audit(1753101407.532:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  977.985818][   T30] audit: type=1326 audit(1753101407.532:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  978.060060][   T30] audit: type=1326 audit(1753101407.532:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  978.135509][   T30] audit: type=1326 audit(1753101407.532:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  978.207506][   T30] audit: type=1326 audit(1753101407.532:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  978.280795][   T30] audit: type=1326 audit(1753101407.552:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31849 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0198e9a9 code=0x7ffc0000
[  978.365650][   T30] audit: type=1326 audit(1753101407.562:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31851 comm="syz.7.10661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e019c1265 code=0x7ffc0000
[  978.430001][T31848] loop0: detected capacity change from 0 to 32768
[  978.438626][T31848] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10660 (31848)
[  978.464247][T31864] xt_NFQUEUE: number of queues (40923) out of range (got 106454)
[  978.490960][T31848] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  978.507552][T31848] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  978.517833][T31848] BTRFS info (device loop0): using free-space-tree
[  978.844612][T31885] 8021q: adding VLAN 0 to HW filter on device bond1
[  978.979842][T31848] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512
[  979.095075][T31893] netlink: 'syz.9.10672': attribute type 10 has an invalid length.
[  979.105129][T26155] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  979.124329][T31893] syz_tun: left allmulticast mode
[  979.142195][T31893] bridge0: port 3(syz_tun) entered disabled state
[  979.361042][T31898] loop6: detected capacity change from 0 to 128
[  979.419620][T31898] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  979.438963][T31898] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  979.464408][T31898] EXT4-fs warning (device loop6): ext4_group_extend:1862: can't shrink FS - resize aborted
[  979.565510][T26144] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  979.796729][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10679'.
[  979.931484][T31911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10680'.
[  980.866567][T31907] loop6: detected capacity change from 0 to 40427
[  980.899869][T31907] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  980.925113][T31907] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  980.978241][T31942] loop9: detected capacity change from 0 to 512
[  980.991295][T31907] F2FS-fs (loop6): invalid crc value
[  980.998020][T31942] EXT4-fs: Ignoring removed nomblk_io_submit option
[  981.071586][T31942] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  981.116885][T31942] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002]
[  981.183194][T31942] EXT4-fs (loop9): orphan cleanup on readonly fs
[  981.189800][T31942] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  981.252400][T31942] EXT4-fs (loop9): Cannot turn on quotas: error -22
[  981.260477][T31942] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10695: bg 0: block 40: padding at end of block bitmap is not set
[  981.337056][T31942] EXT4-fs (loop9): Remounting filesystem read-only
[  981.363615][T31907] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  981.381109][T31907] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  981.392192][T31942] EXT4-fs (loop9): 1 truncate cleaned up
[  981.399790][T31942] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  981.608137][T31957] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  981.674478][T31956] pim6reg0: tun_chr_ioctl cmd 1074812118
[  982.029896][T31968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  983.546555][T31995] bond0: entered promiscuous mode
[  983.562181][T31995] bond_slave_0: entered promiscuous mode
[  983.572527][T31995] bond_slave_1: entered promiscuous mode
[  983.587896][T31995] macvlan1: entered promiscuous mode
[  983.608472][T31995] hsr1: entered promiscuous mode
[  984.324860][T32003] ALSA: mixer_oss: invalid OSS volume ''
[  984.400372][T32006] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10722'.
[  984.596542][T32010] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10725'.
[  984.844486][T31975] loop0: detected capacity change from 0 to 40427
[  984.886144][T32020] program syz.7.10728 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  984.897416][T31975] F2FS-fs (loop0): build fault injection rate: 690
[  984.922466][T31975] F2FS-fs (loop0): Image doesn't support compression
[  984.948709][T31975] F2FS-fs (loop0): Image doesn't support compression
[  984.964088][T22424] hid-generic 0003:0004:0000.008B: unknown main item tag 0x0
[  984.971547][T22424] hid-generic 0003:0004:0000.008B: unknown main item tag 0x0
[  984.974758][T31975] F2FS-fs (loop0): invalid crc value
[  985.062782][T22424] hid-generic 0003:0004:0000.008B: unknown main item tag 0x0
[  985.095410][T22424] hid-generic 0003:0004:0000.008B: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  985.217714][T32034] loop6: detected capacity change from 0 to 1024
[  985.305570][T31975] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  985.428799][   T59] hfsplus: b-tree write err: -5, ino 4
[  986.203467][T32066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10750'.
[  986.263366][T32065] loop7: detected capacity change from 0 to 2048
[  986.333717][T32065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  986.528218][T32078] loop0: detected capacity change from 0 to 128
[  986.529798][T25804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  986.555228][T32078] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  986.593056][T32078] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  986.768314][T32085] loop7: detected capacity change from 0 to 1024
[  986.845270][T32085] hfsplus: trying to free free bnode 0(1)
[  986.911288][   T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  986.943026][T22424] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  986.978554][   T59] hfsplus: b-tree write err: -5, ino 4
[  987.142568][T22424] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  987.154251][T22424] usb 3-1: config 0 has no interface number 0
[  987.160538][T22424] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  987.185899][T22424] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  987.213395][T32095] loop0: detected capacity change from 0 to 1024
[  987.231874][T22424] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  987.250070][T32095] hfsplus: request for non-existent node 33554434 in B*Tree
[  987.260271][T32095] hfsplus: request for non-existent node 33554434 in B*Tree
[  987.286580][T32095] hfsplus: request for non-existent node 33554434 in B*Tree
[  987.294866][T22424] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  987.315616][T32095] hfsplus: request for non-existent node 33554434 in B*Tree
[  987.323276][T22424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.333638][T22424] usb 3-1: config 0 descriptor??
[  987.353789][T32096] hfsplus: request for non-existent node 33554434 in B*Tree
[  987.361119][T32096] hfsplus: request for non-existent node 33554434 in B*Tree
[  987.428417][   T59] hfsplus: request for non-existent node 33554434 in B*Tree
[  987.459842][   T59] hfsplus: request for non-existent node 33554434 in B*Tree
[  987.607871][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10765'.
[  987.643281][   T13] bridge_slave_1: left allmulticast mode
[  987.655217][   T13] bridge_slave_1: left promiscuous mode
[  987.661160][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.734782][   T13] bridge_slave_0: left promiscuous mode
[  987.752679][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.913468][T32108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10768'.
[  987.944237][T32108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10768'.
[  987.994545][T32106] block nbd0: server does not support multiple connections per device.
[  988.020412][T22424] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.008C/input/input47
[  988.023362][T32106] block nbd0: shutting down sockets
[  988.142993][T22424] uclogic 0003:28BD:0042.008C: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1
[  988.179405][T22424] usb 3-1: USB disconnect, device number 47
[  988.326453][T18360] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  988.448252][T32104] loop0: detected capacity change from 0 to 32768
[  988.524035][ T6071] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  988.534636][T32104] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  988.644709][   T30] kauditd_printk_skb: 71 callbacks suppressed
[  988.644730][   T30] audit: type=1800 audit(1753101418.412:486): pid=32104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10766" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  988.737686][ T6071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  988.775781][ T6071] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  988.801261][ T6071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.826581][ T6071] usb 5-1: config 0 descriptor??
[  988.868806][T32112] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  988.928219][T26155] ocfs2: Unmounting device (7,0) on (node local)
[  989.303318][ T6071] smartjoyplus 0003:0B43:0003.008D: unknown main item tag 0x0
[  989.347294][ T6071] smartjoyplus 0003:0B43:0003.008D: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.4-1/input0
[  989.378273][ T6071] smartjoyplus 0003:0B43:0003.008D: no output reports found
[  989.517143][T22424] usb 5-1: USB disconnect, device number 57
[  989.776447][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.795103][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.814154][   T13] bond0 (unregistering): Released all slaves
[  990.021649][T19013] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  990.050583][T19013] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  990.076112][T19013] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  990.088970][T19013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  990.097094][T19013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  990.130513][T32130] loop0: detected capacity change from 0 to 32768
[  990.179842][   T30] audit: type=1800 audit(1753101419.942:487): pid=32130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10779" name="file1" dev="loop0" ino=4 res=0 errno=0
[  990.181090][T32130] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  990.181090][T32130] 
[  990.285261][T32130] ERROR: (device loop0): remounting filesystem as read-only
[  990.293072][T32130] xtLookup: xtSearch returned -5
[  990.298199][T32130] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt
[  990.298199][T32130] 
[  990.333249][   T13] bond1 (unregistering): Released all slaves
[  990.383696][T32128] team0: No ports can be present during mode change
[  990.574576][   T13] tipc: Left network mode
[  990.703137][T32136] loop7: detected capacity change from 0 to 4096
[  990.739563][T32136] NILFS (loop7): invalid segment: Checksum error in segment payload
[  990.786503][T32136] NILFS (loop7): trying rollback from an earlier position
[  990.846212][T32136] NILFS (loop7): recovery complete
[  990.882619][T32147] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  991.091057][T32152] loop0: detected capacity change from 0 to 8
[  991.159881][T32152] SQUASHFS error: Failed to read block 0x2d7: -5
[  991.199572][T32152] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  991.464631][   T13] hsr_slave_0: left promiscuous mode
[  991.504153][   T13] hsr_slave_1: left promiscuous mode
[  991.522708][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  991.532454][T32162] Bluetooth: MGMT ver 1.23
[  991.581467][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  991.777596][T32168] loop7: detected capacity change from 0 to 2048
[  991.798867][T32168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  992.132761][T19010] Bluetooth: hci0: command tx timeout
[  992.409041][T32181] loop6: detected capacity change from 0 to 1024
[  992.433647][T32181] EXT4-fs: inline encryption not supported
[  992.450764][T32181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  992.544358][T32181] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.10800: Allocating blocks 257-513 which overlap fs metadata
[  992.564486][T32181] EXT4-fs (loop6): Remounting filesystem read-only
[  992.657055][T26144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  992.780973][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  992.791002][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  993.108235][   T13] team0 (unregistering): Port device team_slave_1 removed
[  993.210618][   T13] team0 (unregistering): Port device team_slave_0 removed
[  994.224704][T19010] Bluetooth: hci0: command tx timeout
[  994.326073][T32131] chnl_net:caif_netlink_parms(): no params data found
[  994.478584][T32206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10810'.
[  994.500023][T32206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10810'.
[  994.756408][T32217] loop0: detected capacity change from 0 to 4096
[  994.803817][T32217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  995.007932][T26155] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  995.046813][T32131] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.076443][T32131] bridge0: port 1(bridge_slave_0) entered disabled state
[  995.095188][T32131] bridge_slave_0: entered allmulticast mode
[  995.111302][T32131] bridge_slave_0: entered promiscuous mode
[  995.120580][T32232] loop6: detected capacity change from 0 to 64
[  995.164921][T32131] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.190111][T32131] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.229302][T32131] bridge_slave_1: entered allmulticast mode
[  995.279813][T32131] bridge_slave_1: entered promiscuous mode
[  995.340826][   T13] IPVS: stop unused estimator thread 0...
[  995.557215][T32131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  995.626213][T32131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  995.795025][T32131] team0: Port device team_slave_0 added
[  995.835665][T32131] team0: Port device team_slave_1 added
[  995.994579][T32131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  996.032219][T32131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  996.102142][T32131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  996.124408][T32131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  996.131415][T32131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  996.242767][T32131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.292318][T19010] Bluetooth: hci0: command tx timeout
[  996.315482][T32242] loop6: detected capacity change from 0 to 32768
[  996.379415][T32242] XFS: attr2 mount option is deprecated.
[  996.433293][T32242] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  996.470157][T32242] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  996.633656][T32242] XFS (loop6): Ending clean mount
[  996.670293][T32242] XFS (loop6): Quotacheck needed: Please wait.
[  996.708048][T32131] hsr_slave_0: entered promiscuous mode
[  996.719949][T32131] hsr_slave_1: entered promiscuous mode
[  996.768131][T32242] XFS (loop6): Quotacheck: Done.
[  996.781012][T32274] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  996.789963][T32274] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  996.902763][T32260] loop7: detected capacity change from 0 to 32768
[  996.937419][T32260] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.10842 (32260)
[  996.980371][T26144] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  997.049531][T32260] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  997.099151][T32260] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  997.142147][T32260] BTRFS info (device loop7): using free-space-tree
[  997.813640][ T6071] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  997.839887][T25804] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  997.998282][ T6071] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  998.017457][ T6071] usb 1-1: config 0 has no interface number 0
[  998.061452][ T6071] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  998.084012][ T6071] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  998.094929][ T6071] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  998.127001][ T6071] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  998.148860][ T6071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.243065][ T6071] usb 1-1: config 0 descriptor??
[  998.377640][T19013] Bluetooth: hci0: command tx timeout
[  998.540653][T32131] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  998.633097][T32131] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  998.656749][T32131] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  998.706570][T32131] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  998.879407][ T6071] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.008E/input/input49
[  998.953615][ T6071] uclogic 0003:28BD:0042.008E: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1
[  998.991374][ T6071] usb 1-1: USB disconnect, device number 44
[  998.998177][T32318] loop7: detected capacity change from 0 to 32768
[  999.041524][T32131] 8021q: adding VLAN 0 to HW filter on device bond0
[  999.088205][T32318] find_entry called with index = 0
[  999.109747][T32318] read_mapping_page failed!
[  999.119832][T32131] 8021q: adding VLAN 0 to HW filter on device team0
[  999.132244][T32318] ERROR: (device loop7): txCommit: 
[  999.132244][T32318] 
[  999.152656][T32318] ERROR: (device loop7): remounting filesystem as read-only
[  999.176689][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.184005][ T7063] bridge0: port 1(bridge_slave_0) entered forwarding state
[  999.239730][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.247032][ T7063] bridge0: port 2(bridge_slave_1) entered forwarding state
[  999.371194][T32131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  999.424806][T19013] Bluetooth: hci6: command 0x1003 tx timeout
[  999.431848][T19010] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  999.492832][T32131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1000.200668][T32131] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1000.466570][T32131] veth0_vlan: entered promiscuous mode
[ 1000.509474][T32131] veth1_vlan: entered promiscuous mode
[ 1000.666301][T32131] veth0_macvtap: entered promiscuous mode
[ 1000.701103][T32131] veth1_macvtap: entered promiscuous mode
[ 1000.775994][T32131] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1000.839065][T32131] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1000.871786][T32131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.911343][T32131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.942059][T32131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.967263][T32354] loop6: detected capacity change from 0 to 32768
[ 1000.974159][T32131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.111885][T32354] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1001.231299][   T30] audit: type=1800 audit(1753101430.992:488): pid=32354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10859" name="file1" dev="loop6" ino=17058 res=0 errno=0
[ 1001.261350][ T7063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1001.322543][ T7063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.442270][T26410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1001.482609][T26410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.622766][T26144] ocfs2: Unmounting device (7,6) on (node local)
[ 1001.646890][T32361] loop0: detected capacity change from 0 to 40427
[ 1001.669470][T32361] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1001.709734][T32361] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1001.785258][T32361] F2FS-fs (loop0): invalid crc value
[ 1001.795220][T32374] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1001.806550][T32374] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1001.955458][T32383] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1001.962761][T32383] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1002.007321][T32361] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1002.031983][T32361] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1002.382096][ T5931] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1002.563896][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1002.584596][ T5931] usb 2-1: config 0 has no interface number 0
[ 1002.590925][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1002.648346][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1002.699500][ T5931] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1002.749012][ T5931] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 1002.763699][T32402] overlayfs: failed to resolve './file0': -2
[ 1002.778399][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.813204][ T5931] usb 2-1: config 0 descriptor??
[ 1003.352529][T32396] loop6: detected capacity change from 0 to 32768
[ 1003.421402][   T30] audit: type=1800 audit(1753101433.182:489): pid=32396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10875" name="file1" dev="loop6" ino=4 res=0 errno=0
[ 1003.441992][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1003.475368][T32396] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1003.475368][T32396] 
[ 1003.479393][ T5931] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.008F/input/input50
[ 1003.527000][T32396] ERROR: (device loop6): remounting filesystem as read-only
[ 1003.554637][T32396] xtLookup: xtSearch returned -5
[ 1003.561092][ T5931] uclogic 0003:28BD:0042.008F: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1
[ 1003.562154][T32396] ERROR: (device loop6): xtTruncate: XT_GETPAGE: xtree page corrupt
[ 1003.562154][T32396] 
[ 1003.645157][T32423] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1003.656190][ T5931] usb 2-1: USB disconnect, device number 12
[ 1003.683627][T32423] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1003.830551][T32425] loop0: detected capacity change from 0 to 1024
[ 1003.890405][   T30] audit: type=1800 audit(1753101433.652:490): pid=32425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10888" name="file1" dev="loop0" ino=20 res=0 errno=0
[ 1004.154809][T32429] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1004.161345][T32429] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1004.246875][T32433] pim6reg0: tun_chr_ioctl cmd 1074812118
[ 1004.686195][T32441] loop0: detected capacity change from 0 to 4096
[ 1005.031903][T32441] overlayfs: upper fs does not support tmpfile.
[ 1005.060269][T32441] overlayfs: workdir/#14 already exists
[ 1005.079088][T32457] loop1: detected capacity change from 0 to 64
[ 1005.368478][T32438] loop7: detected capacity change from 0 to 32768
[ 1005.453409][T32466] loop0: detected capacity change from 0 to 4096
[ 1005.466286][T32438] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1005.524366][T32472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1005.564720][   T30] audit: type=1800 audit(1753101435.332:491): pid=32438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10894" name="file1" dev="loop7" ino=17058 res=0 errno=0
[ 1005.586826][T22425] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1005.772297][T22425] usb 5-1: Using ep0 maxpacket: 32
[ 1005.820888][T22425] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1005.856364][T22425] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1005.869170][T22425] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[ 1005.889630][T25804] ocfs2: Unmounting device (7,7) on (node local)
[ 1005.909507][T22425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.961811][T22425] usb 5-1: config 0 descriptor??
[ 1006.225339][T32459] loop6: detected capacity change from 0 to 32768
[ 1006.276679][T32459] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1006.387282][T32459] XFS (loop6): Ending clean mount
[ 1006.409455][T22425] logitech 0003:046D:C50C.0090: unexpected long global item
[ 1006.436978][T32459] XFS (loop6): Quotacheck needed: Please wait.
[ 1006.450559][T22425] logitech 0003:046D:C50C.0090: parse failed
[ 1006.492626][T22425] logitech 0003:046D:C50C.0090: probe with driver logitech failed with error -22
[ 1006.604631][T32459] XFS (loop6): Quotacheck: Done.
[ 1006.625652][T22395] usb 5-1: USB disconnect, device number 58
[ 1006.701804][T26144] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1006.935331][T32512] loop1: detected capacity change from 0 to 1024
[ 1007.061250][T32512] hfsplus: bad catalog entry type
[ 1007.154971][   T13] hfsplus: b-tree write err: -5, ino 4
[ 1007.240754][T32519] loop7: detected capacity change from 0 to 4096
[ 1007.622432][T22395] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1007.792332][T22395] usb 2-1: Using ep0 maxpacket: 32
[ 1007.822572][T22395] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1007.864419][T22395] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1007.899975][T22395] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1007.923120][T22395] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1007.962166][T22395] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 1007.991515][T22395] usb 2-1: Product: syz
[ 1008.017017][T22395] usb 2-1: config 0 descriptor??
[ 1008.489028][T22395] hid (null): unknown global tag 0xe
[ 1008.508714][T22395] waterforce 0003:1044:7A4D.0091: unknown global tag 0xe
[ 1008.542796][T22395] waterforce 0003:1044:7A4D.0091: item 0 2 1 14 parsing failed
[ 1008.571552][T22395] waterforce 0003:1044:7A4D.0091: hid parse failed with -22
[ 1008.611469][T22395] waterforce 0003:1044:7A4D.0091: probe with driver waterforce failed with error -22
[ 1008.739712][   T10] usb 2-1: USB disconnect, device number 13
[ 1008.821873][T32535] loop7: detected capacity change from 0 to 32768
[ 1009.239571][T32535] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[ 1009.239610][T32535]   allowing incompatible features above 0.0: (unknown version)
[ 1009.239627][T32535]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1009.462106][T32535] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[ 1009.487008][T32535] bcachefs (loop7): initializing new filesystem
[ 1009.535378][T32541] loop0: detected capacity change from 0 to 32768
[ 1009.565947][T32561] tipc: Started in network mode
[ 1009.571452][T32535] bcachefs (loop7): going read-write
[ 1009.578102][T32561] tipc: Node identity type_len, cluster identity 4711
[ 1009.604143][T32561] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1009.664079][T32535] bcachefs (loop7): marking superblocks
[ 1009.686773][T32541] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1009.732937][T32535] bcachefs (loop7): initializing freespace
[ 1009.777716][T32535] bcachefs (loop7): done initializing freespace
[ 1009.794627][T32535] bcachefs (loop7): reading snapshots table
[ 1009.800703][T32535] bcachefs (loop7): reading snapshots done
[ 1009.841978][T32574] mkiss: ax0: crc mode is auto.
[ 1009.926377][T32535] bcachefs (loop7): done starting filesystem
[ 1010.029829][T32541] XFS (loop0): Ending clean mount
[ 1010.088257][T32541] XFS (loop0): Quotacheck needed: Please wait.
[ 1010.184016][T32586] loop6: detected capacity change from 0 to 63
[ 1010.191066][T32586] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1010.229599][T32586] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1010.249264][T32586] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1010.268563][T32587] Buffer I/O error on dev loop6, logical block 0, lost async page write
[ 1010.272802][T25804] bcachefs (loop7): shutting down
[ 1010.280702][T32586]  loop6: unable to read partition table
[ 1010.282854][T25804] bcachefs (loop7): going read-only
[ 1010.289086][T32587] Buffer I/O error on dev loop6, logical block 1, lost async page write
[ 1010.310074][T32586] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1010.319763][T32541] XFS (loop0): Quotacheck: Done.
[ 1010.327959][T32587] Buffer I/O error on dev loop6, logical block 2, lost async page write
[ 1010.332069][T25804] bcachefs (loop7): finished waiting for writes to stop
[ 1010.358825][T25804] bcachefs (loop7): flushing journal and stopping allocators, journal seq 14
[ 1010.384333][T32587] Buffer I/O error on dev loop6, logical block 3, lost async page write
[ 1010.416486][T32587] Buffer I/O error on dev loop6, logical block 4, lost async page write
[ 1010.435289][T32587] Buffer I/O error on dev loop6, logical block 5, lost async page write
[ 1010.452508][T25804] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 17
[ 1010.465083][T32587] Buffer I/O error on dev loop6, logical block 6, lost async page write
[ 1010.475034][T25804] bcachefs (loop7): clean shutdown complete, journal seq 18
[ 1010.483717][T25804] bcachefs (loop7): marking filesystem clean
[ 1010.508733][T26155] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1010.585752][T25804] bcachefs (loop7): shutdown complete
[ 1010.771424][T32592] tap0: tun_chr_ioctl cmd 2148553947
[ 1011.416450][T22424] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[ 1011.605082][T22424] usb 2-1: config 0 has an invalid interface number: 29 but max is 0
[ 1011.656365][T22424] usb 2-1: config 0 has no interface number 0
[ 1011.695388][T22424] usb 2-1: config 0 interface 29 has no altsetting 0
[ 1011.755475][T22424] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[ 1011.816274][T22424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.868784][T22424] usb 2-1: Product: syz
[ 1011.892327][T22424] usb 2-1: Manufacturer: syz
[ 1011.897234][T22424] usb 2-1: SerialNumber: syz
[ 1011.955269][T22424] usb 2-1: config 0 descriptor??
[ 1012.215205][T22424] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71
[ 1012.241374][T32608] loop0: detected capacity change from 0 to 32768
[ 1012.248368][T22424] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71)
[ 1012.302178][T32629] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10979'.
[ 1012.346804][T22424] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71
[ 1012.356596][T32608] find_entry called with index = 0
[ 1012.366390][T32608] read_mapping_page failed!
[ 1012.379708][T22424] usb 2-1: USB disconnect, device number 14
[ 1012.386374][T32608] ERROR: (device loop0): txCommit: 
[ 1012.386374][T32608] 
[ 1012.404111][T32608] ERROR: (device loop0): remounting filesystem as read-only
[ 1013.143889][   T30] audit: type=1326 audit(1753101442.902:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.212109][   T30] audit: type=1326 audit(1753101442.902:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.301727][T32656] loop1: detected capacity change from 0 to 512
[ 1013.343652][   T30] audit: type=1326 audit(1753101442.902:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.368085][T32656] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1013.398265][T32656] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1013.436370][   T30] audit: type=1326 audit(1753101442.902:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.482496][   T30] audit: type=1326 audit(1753101442.912:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.523550][T32656] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.10980: corrupted in-inode xattr: invalid ea_ino
[ 1013.586640][   T30] audit: type=1326 audit(1753101442.912:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.641261][T32656] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.10980: couldn't read orphan inode 15 (err -117)
[ 1013.679754][T32656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1013.722208][   T30] audit: type=1326 audit(1753101442.912:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.829110][   T30] audit: type=1326 audit(1753101442.932:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.901126][   T30] audit: type=1326 audit(1753101442.932:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1013.933421][T32131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1013.996822][   T30] audit: type=1326 audit(1753101442.932:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32651 comm="syz.2.10977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f244618e9a9 code=0x7ffc0000
[ 1014.253642][T32670] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1014.656098][T32676] tap0: tun_chr_ioctl cmd 2148553947
[ 1014.712501][T32678] loop1: detected capacity change from 0 to 512
[ 1014.747530][T32678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1014.806157][T32678] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1014.951612][T32678] EXT4-fs (loop1): shut down requested (1)
[ 1015.044363][T32131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1015.723440][T32685] loop6: detected capacity change from 0 to 32768
[ 1015.761128][T32685] find_entry called with index = 0
[ 1015.769601][T32685] read_mapping_page failed!
[ 1015.777910][T32685] ERROR: (device loop6): txCommit: 
[ 1015.777910][T32685] 
[ 1015.790621][T32685] ERROR: (device loop6): remounting filesystem as read-only
[ 1016.779066][T32722] loop6: detected capacity change from 0 to 64
[ 1016.790190][T32719] veth1_to_batadv: entered promiscuous mode
[ 1017.032225][ T5931] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1017.045196][T32730] loop6: detected capacity change from 0 to 128
[ 1017.111932][T32730] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1017.186733][T32730] ext4 filesystem being mounted at /400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1017.242307][ T5931] usb 1-1: Using ep0 maxpacket: 16
[ 1017.262712][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1017.282203][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1017.312113][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1017.332630][ T5931] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1017.346022][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1017.375470][ T5931] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1017.385200][ T5931] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1017.410083][ T5931] usb 1-1: Manufacturer: syz
[ 1017.435663][ T5931] usb 1-1: config 0 descriptor??
[ 1017.748308][T26144] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1017.942955][ T5931] rc_core: IR keymap rc-hauppauge not found
[ 1017.952891][ T5931] Registered IR keymap rc-empty
[ 1017.990276][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.010880][T32740] loop6: detected capacity change from 0 to 2048
[ 1018.042192][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.074797][T32744] loop1: detected capacity change from 0 to 128
[ 1018.092704][ T5931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1018.125975][T32740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1018.142814][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52
[ 1018.171368][T32744] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1018.184882][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.194019][T32740] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1018.210701][T32744] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1018.246383][T32744] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop1' because it doesn't have stable inode numbers
[ 1018.282391][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.308693][T32740] fs-verity (loop6, inode 13): Unknown hash algorithm number: 3
[ 1018.319252][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.352348][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.393687][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.454113][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.474745][T32131] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1018.499135][T26144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1018.509663][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.532756][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.572715][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.631677][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1018.686596][ T5931] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[ 1018.711707][ T5931] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1018.750377][ T5931] usb 1-1: USB disconnect, device number 45
[ 1019.612117][ T5931] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1019.684235][T32766] loop1: detected capacity change from 0 to 32768
[ 1019.695196][T32766] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11022 (32766)
[ 1019.718621][T32766] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1019.751464][T32766] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[ 1019.767153][T32766] BTRFS info (device loop1): using free-space-tree
[ 1019.782166][ T5931] usb 1-1: Using ep0 maxpacket: 32
[ 1019.791579][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1019.803495][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1019.810844][ T5931] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[ 1019.821686][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.844534][ T5931] usb 1-1: config 0 descriptor??
[ 1019.903014][T32766] BTRFS info (device loop1): rebuilding free space tree
[ 1020.277501][T32131] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1020.301716][ T5931] logitech 0003:046D:C50C.0092: unexpected long global item
[ 1020.333368][ T5931] logitech 0003:046D:C50C.0092: parse failed
[ 1020.339510][ T5931] logitech 0003:046D:C50C.0092: probe with driver logitech failed with error -22
[ 1020.545062][ T5931] usb 1-1: USB disconnect, device number 46
[ 1021.736225][T22424] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1021.806942][  T359] netlink: 11 bytes leftover after parsing attributes in process `syz.2.11041'.
[ 1021.836845][  T359] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11041'.
[ 1021.924646][T22424] usb 2-1: Using ep0 maxpacket: 32
[ 1021.963665][T22424] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1021.997277][T22424] usb 2-1: config 0 has no interface number 0
[ 1022.020440][T22424] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1022.054941][T22424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.082648][T22424] usb 2-1: Product: syz
[ 1022.102099][T22424] usb 2-1: Manufacturer: syz
[ 1022.107059][T22424] usb 2-1: SerialNumber: syz
[ 1022.137591][T22424] usb 2-1: config 0 descriptor??
[ 1022.179852][T22424] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1022.418888][T22424] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1022.459569][T22424] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1022.672201][  T346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1022.704049][  T346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1022.949945][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1022.950460][ T5931] usb 2-1: USB disconnect, device number 15
[ 1023.001682][ T5931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1023.068647][ T5931] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1023.118843][ T5931] quatech2 2-1:0.51: device disconnected
[ 1023.600650][  T381] loop6: detected capacity change from 0 to 32768
[ 1023.633928][  T396] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1024.508278][  T411] loop6: detected capacity change from 0 to 4096
[ 1024.600558][  T412] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1024.876257][  T403] loop0: detected capacity change from 0 to 32768
[ 1024.920402][  T403] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11064 (403)
[ 1024.987342][  T403] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1025.042748][  T403] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[ 1025.090151][  T403] BTRFS info (device loop0): using free-space-tree
[ 1025.211713][  T403] BTRFS info (device loop0): rebuilding free space tree
[ 1025.242350][ T5931] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1025.465044][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1025.513832][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1025.552960][ T5931] usb 5-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb
[ 1025.596894][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.615312][ T5931] usb 5-1: Product: syz
[ 1025.632208][ T5931] usb 5-1: Manufacturer: syz
[ 1025.659460][ T5931] usb 5-1: SerialNumber: syz
[ 1025.689604][ T5931] usb 5-1: config 0 descriptor??
[ 1025.741181][T26155] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1026.145798][ T5931] snd_usb_podhd 5-1:0.0: Line 6 POD HDDESKTOP found
[ 1026.149276][  T460] syz.2.11080: attempt to access beyond end of device
[ 1026.149276][  T460] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0
[ 1026.340086][ T5931] snd_usb_podhd 5-1:0.0: endpoint not available, using fallback values
[ 1026.394319][ T5931] snd_usb_podhd 5-1:0.0: invalid control EP
[ 1026.412272][ T5931] snd_usb_podhd 5-1:0.0: cannot start listening: -22
[ 1026.436401][ T5931] snd_usb_podhd 5-1:0.0: Line 6 POD HDDESKTOP now disconnected
[ 1026.472584][ T5931] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -22
[ 1026.532339][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1026.582369][T22425] usb 5-1: USB disconnect, device number 59
[ 1026.977295][  T475] loop7: detected capacity change from 0 to 4096
[ 1027.102605][  T480] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1027.283793][  T469] loop1: detected capacity change from 0 to 32768
[ 1027.392762][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1027.392786][   T30] audit: type=1326 audit(1753101457.152:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe216785967 code=0x7ffc0000
[ 1027.432286][  T469] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[ 1027.512840][  T471] loop0: detected capacity change from 0 to 32768
[ 1027.531520][  T469] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1027.609512][   T30] audit: type=1326 audit(1753101457.152:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe21672ab89 code=0x7ffc0000
[ 1027.725868][   T30] audit: type=1326 audit(1753101457.152:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe216785967 code=0x7ffc0000
[ 1027.762248][   T30] audit: type=1326 audit(1753101457.152:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe21672ab89 code=0x7ffc0000
[ 1027.794531][   T30] audit: type=1326 audit(1753101457.152:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe216785967 code=0x7ffc0000
[ 1027.908686][   T30] audit: type=1326 audit(1753101457.152:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe21672ab89 code=0x7ffc0000
[ 1027.930957][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1028.012556][   T30] audit: type=1326 audit(1753101457.202:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe216785967 code=0x7ffc0000
[ 1028.035827][   T30] audit: type=1326 audit(1753101457.212:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe21672ab89 code=0x7ffc0000
[ 1028.076496][   T30] audit: type=1326 audit(1753101457.212:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe216785967 code=0x7ffc0000
[ 1028.082802][  T498] program syz.6.11095 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1028.119988][T32131] ocfs2: Unmounting device (7,1) on (node local)
[ 1028.224773][   T30] audit: type=1326 audit(1753101457.212:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.4.11092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe21672ab89 code=0x7ffc0000
[ 1028.247003][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1028.731589][  T513] ALSA: mixer_oss: invalid OSS volume ''
[ 1028.932504][  T518] netem: change failed
[ 1029.264733][ T5931] hid-generic 0003:0004:0000.0093: unknown main item tag 0x0
[ 1029.282736][ T5931] hid-generic 0003:0004:0000.0093: unknown main item tag 0x0
[ 1029.300378][ T5931] hid-generic 0003:0004:0000.0093: unknown main item tag 0x0
[ 1029.336836][ T5931] hid-generic 0003:0004:0000.0093: hidraw0: USB HID v0.00 Device [syz0] on syz1
[ 1029.639743][  T547] team_slave_0: entered promiscuous mode
[ 1029.645854][  T547] team_slave_1: entered promiscuous mode
[ 1029.987756][  T558] loop7: detected capacity change from 0 to 128
[ 1030.034710][  T558] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1030.126546][  T558] ext4 filesystem being mounted at /437/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1030.182265][T22425] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1030.202142][  T558] EXT4-fs warning (device loop7): ext4_group_extend:1862: can't shrink FS - resize aborted
[ 1030.346689][T25804] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1030.382410][T22425] usb 2-1: Using ep0 maxpacket: 16
[ 1030.401616][T22425] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1030.483760][T22425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1030.524430][T22425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1030.573278][T22425] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1030.626178][T22425] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1030.666546][T22425] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1030.679423][T22425] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1030.717898][T22425] usb 2-1: Manufacturer: syz
[ 1030.745765][T22425] usb 2-1: config 0 descriptor??
[ 1030.818626][  T567] loop6: detected capacity change from 0 to 2048
[ 1030.888146][  T567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1031.172883][T22425] rc_core: IR keymap rc-hauppauge not found
[ 1031.179192][T22425] Registered IR keymap rc-empty
[ 1031.192609][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.208761][  T574] netlink: 'syz.7.11127': attribute type 2 has an invalid length.
[ 1031.228381][  T574] netlink: 'syz.7.11127': attribute type 5 has an invalid length.
[ 1031.242878][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.273884][T26144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1031.283513][T22425] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1031.324614][T22425] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input53
[ 1031.378898][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.462237][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.494588][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.532624][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.559038][  T577] bond0: entered promiscuous mode
[ 1031.564853][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.584793][  T577] bond_slave_0: entered promiscuous mode
[ 1031.602316][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.616792][  T577] bond_slave_1: entered promiscuous mode
[ 1031.646805][  T577] macvlan1: entered promiscuous mode
[ 1031.682619][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.703399][  T577] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 1031.710988][  T577] Cannot create hsr debugfs directory
[ 1031.717084][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.736963][  T577] hsr1: entered promiscuous mode
[ 1031.742633][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.762366][T22425] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1031.804398][T22425] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 1031.853202][T22425] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1031.916370][T22425] usb 2-1: USB disconnect, device number 16
[ 1032.258565][  T597] loop7: detected capacity change from 0 to 512
[ 1032.296024][  T597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1032.341539][  T597] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.11136: invalid block
[ 1032.464017][  T597] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.11136: invalid indirect mapped block 4294967295 (level 1)
[ 1032.540102][  T597] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.11136: invalid indirect mapped block 4294967295 (level 1)
[ 1032.574804][  T607] loop0: detected capacity change from 0 to 1024
[ 1032.597571][  T597] EXT4-fs (loop7): 2 truncates cleaned up
[ 1032.614882][  T597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1032.670576][  T607] hfsplus: trying to free free bnode 0(1)
[ 1032.705752][  T597] EXT4-fs (loop7): shut down requested (2)
[ 1032.817138][  T615] netlink: 'syz.6.11147': attribute type 3 has an invalid length.
[ 1032.884743][T25804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1032.892793][T26410] hfsplus: b-tree write err: -5, ino 4
[ 1032.970399][  T612] loop1: detected capacity change from 0 to 8192
[ 1033.288607][  T625] loop7: detected capacity change from 0 to 4096
[ 1033.919664][  T643] loop7: detected capacity change from 0 to 256
[ 1033.947030][  T643] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1034.012068][  T643] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1034.067089][  T643] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1034.406051][   T30] kauditd_printk_skb: 65 callbacks suppressed
[ 1034.406074][   T30] audit: type=1326 audit(1753101464.172:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=648 comm="syz.4.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[ 1034.518446][   T30] audit: type=1326 audit(1753101464.172:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=648 comm="syz.4.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[ 1034.621225][   T30] audit: type=1326 audit(1753101464.212:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=648 comm="syz.4.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[ 1034.758407][   T30] audit: type=1326 audit(1753101464.212:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=648 comm="syz.4.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[ 1034.827775][   T30] audit: type=1326 audit(1753101464.212:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=648 comm="syz.4.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21678e9a9 code=0x7ffc0000
[ 1035.534993][  T681] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 1035.676661][  T684] loop1: detected capacity change from 0 to 256
[ 1035.716887][  T684] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1035.765512][  T684] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1035.829304][  T686] netlink: 'syz.7.11176': attribute type 10 has an invalid length.
[ 1035.834437][  T684] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1035.968713][  T690] loop0: detected capacity change from 0 to 1024
[ 1036.018941][  T686] syz_tun: entered promiscuous mode
[ 1036.105895][  T686] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1036.575442][  T703] input: syz1 as /devices/virtual/input/input54
[ 1037.003122][  T718] sctp: [Deprecated]: syz.1.11191 (pid 718) Use of int in max_burst socket option.
[ 1037.003122][  T718] Use struct sctp_assoc_value instead
[ 1037.493078][  T732] netlink: 'syz.1.11197': attribute type 25 has an invalid length.
[ 1037.536366][  T732] netlink: 'syz.1.11197': attribute type 8 has an invalid length.
[ 1037.566889][  T732] netlink: 'syz.1.11197': attribute type 1 has an invalid length.
[ 1037.592339][  T732] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11197'.
[ 1037.637441][  T742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11202'.
[ 1037.897916][  T748] tap0: tun_chr_ioctl cmd 2147767521
[ 1038.031020][  T751] loop0: detected capacity change from 0 to 4096
[ 1038.062141][T22439] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1038.235462][T22439] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1038.253373][T22439] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1038.272899][T22439] usb 2-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb
[ 1038.292692][T22439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1038.301088][T22439] usb 2-1: Product: syz
[ 1038.305598][T22439] usb 2-1: Manufacturer: syz
[ 1038.310252][T22439] usb 2-1: SerialNumber: syz
[ 1038.318398][T22439] usb 2-1: config 0 descriptor??
[ 1038.342137][  T734] loop6: detected capacity change from 0 to 32768
[ 1038.350595][  T734] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11198 (734)
[ 1038.369257][  T734] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1038.379855][  T734] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[ 1038.391591][  T734] BTRFS info (device loop6): using free-space-tree
[ 1038.437569][  T734] BTRFS info (device loop6): rebuilding free space tree
[ 1038.758768][T22439] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP found
[ 1038.826614][T26144] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1038.958309][T22439] snd_usb_podhd 2-1:0.0: endpoint not available, using fallback values
[ 1038.983844][T22439] snd_usb_podhd 2-1:0.0: invalid control EP
[ 1039.031775][T22439] snd_usb_podhd 2-1:0.0: cannot start listening: -22
[ 1039.074142][T22439] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP now disconnected
[ 1039.106074][T22439] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22
[ 1039.248160][   T10] usb 2-1: USB disconnect, device number 17
[ 1039.382166][T22395] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[ 1039.537391][  T801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11218'.
[ 1039.573336][T22395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1039.592702][T22395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1039.608103][  T803] netlink: 'syz.6.11215': attribute type 10 has an invalid length.
[ 1039.620668][T22395] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1039.640950][T22395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.685115][T22395] usb 1-1: config 0 descriptor??
[ 1039.794161][  T803] syz_tun: entered promiscuous mode
[ 1039.837360][  T803] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1040.109990][T22395] logitech 0003:046D:C29C.0094: unexpected long global item
[ 1040.120490][T22395] logitech 0003:046D:C29C.0094: parse failed
[ 1040.138634][T22395] logitech 0003:046D:C29C.0094: probe with driver logitech failed with error -22
[ 1040.343808][  T805] loop7: detected capacity change from 0 to 32768
[ 1040.371067][T22425] usb 1-1: USB disconnect, device number 47
[ 1040.728521][  T823] loop1: detected capacity change from 0 to 16
[ 1040.740598][  T823] erofs (device loop1): mounted with root inode @ nid 36.
[ 1040.761740][  T823] erofs (device loop1): corrupted dir block 0 @ nid 46
[ 1040.832282][T22395] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1041.012605][T22395] usb 5-1: Using ep0 maxpacket: 8
[ 1041.034698][T22395] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 1041.062995][T22395] usb 5-1: config 0 has no interface number 0
[ 1041.104683][T22395] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1041.132700][T22395] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1041.173232][T22395] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1041.202234][T22395] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1041.243235][T22395] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1041.288370][  T833] sctp: [Deprecated]: syz.7.11230 (pid 833) Use of int in max_burst socket option.
[ 1041.288370][  T833] Use struct sctp_assoc_value instead
[ 1041.289533][T22395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.338814][T22395] usb 5-1: config 0 descriptor??
[ 1041.373426][T22395] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1041.487230][  T839] loop7: detected capacity change from 0 to 128
[ 1041.500765][  T839] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1041.520918][  T839] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1041.588667][  T838] loop1: detected capacity change from 0 to 4096
[ 1041.624104][T22439] usb 5-1: USB disconnect, device number 60
[ 1041.651182][T22439] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[ 1041.687514][T26410] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1041.951301][  T853] syzkaller0: tun_chr_ioctl cmd 35108
[ 1042.346143][  T867] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[ 1042.352834][  T867] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1042.394718][  T872] loop7: detected capacity change from 0 to 1024
[ 1042.402114][  T867] vhci_hcd vhci_hcd.0: Device attached
[ 1042.416693][T19013] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15
[ 1042.426708][T19013] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1042.444936][  T868] vhci_hcd: connection closed
[ 1042.457662][   T13] vhci_hcd: stop threads
[ 1042.467422][   T13] vhci_hcd: release socket
[ 1042.471973][   T13] vhci_hcd: disconnect device
[ 1042.497087][  T872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1042.624539][  T857] loop1: detected capacity change from 0 to 32768
[ 1042.634566][  T857] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11244 (857)
[ 1042.657884][  T857] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1042.668977][T25804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1042.670206][  T857] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[ 1042.695805][  T857] BTRFS info (device loop1): using free-space-tree
[ 1043.097432][T32131] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1043.170276][  T918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11262'.
[ 1043.362687][  T928] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11266'.
[ 1043.566784][  T939] loop0: detected capacity change from 0 to 128
[ 1043.646642][  T939] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1043.750603][  T939] ext4 filesystem being mounted at /468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1043.782482][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1044.087133][T26155] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1044.094113][  T957] loop7: detected capacity change from 0 to 1024
[ 1044.145343][  T957] EXT4-fs: Ignoring removed oldalloc option
[ 1044.270163][  T957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1044.356128][  T968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11281'.
[ 1044.531028][T25804] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.798559][  T977] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1044.832584][  T975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11284'.
[ 1045.000460][  T991] loop1: detected capacity change from 0 to 128
[ 1045.027433][  T991] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1045.028674][  T960] loop6: detected capacity change from 0 to 32768
[ 1045.044159][  T991] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1045.079207][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1045.143148][  T960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11277 (960)
[ 1045.235789][  T960] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1045.259942][T32131] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1045.267739][  T960] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[ 1045.280141][  T996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11292'.
[ 1045.294699][  T960] BTRFS info (device loop6): using free-space-tree
[ 1045.721434][T26144] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1045.915070][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1045.946850][  T998] loop7: detected capacity change from 0 to 32768
[ 1046.011091][  T998] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[ 1046.011091][  T998] 
[ 1046.112522][  T998] ERROR: (device loop7): remounting filesystem as read-only
[ 1046.119890][  T998] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[ 1046.119890][  T998] 
[ 1046.139238][  T998] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 1046.139238][  T998] 
[ 1046.225056][ T1050] loop0: detected capacity change from 0 to 128
[ 1046.255073][ T1050] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1046.285769][ T1049] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1046.350736][ T1050] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1046.383611][ T1050] ext4 filesystem being mounted at /473/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1046.593187][ T1058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11309'.
[ 1046.671740][   T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1)
[ 1046.746992][T26155] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1047.168911][ T1075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11317'.
[ 1047.515721][ T1088] loop0: detected capacity change from 0 to 8
[ 1047.764146][ T1099] loop1: detected capacity change from 0 to 512
[ 1047.790177][ T1105] loop6: detected capacity change from 0 to 128
[ 1047.804341][ T1099] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[ 1047.806361][ T1106] netlink: 'syz.4.11329': attribute type 3 has an invalid length.
[ 1047.825036][ T1105] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 1047.845158][ T1099] EXT4-fs (loop1): invalid journal inode
[ 1047.857751][ T1099] EXT4-fs (loop1): can't get journal size
[ 1047.892500][ T1106] netlink: 'syz.4.11329': attribute type 3 has an invalid length.
[ 1047.900881][ T1099] EXT4-fs (loop1): 1 truncate cleaned up
[ 1047.914274][ T1099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1047.949672][ T1106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11329'.
[ 1048.018604][ T1105] FAT-fs (loop6): FAT read failed (blocknr 128)
[ 1048.147674][ T1099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11327: bg 0: block 255: padding at end of block bitmap is not set
[ 1048.151487][ T1121] loop0: detected capacity change from 0 to 256
[ 1048.220051][ T1099] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[ 1048.294720][ T1123] netlink: 168 bytes leftover after parsing attributes in process `syz.7.11337'.
[ 1048.404825][T32131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.780452][ T1144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11346'.
[ 1048.821513][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1048.858453][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1048.903203][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1048.920983][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1049.046015][ T1152] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11351'.
[ 1050.401432][ T1164] loop6: detected capacity change from 0 to 32768
[ 1050.454023][T22424] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1050.474314][ T1164] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1050.590712][ T1164] XFS (loop6): Ending clean mount
[ 1050.616456][T22424] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1050.639892][ T1164] XFS (loop6): Quotacheck needed: Please wait.
[ 1050.654710][T22424] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024
[ 1050.708830][T22424] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1050.731291][T22424] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1050.748953][T22424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.766821][ T1189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1050.810309][ T1164] XFS (loop6): Quotacheck: Done.
[ 1050.841276][T22424] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1050.905224][T26144] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1051.140400][ T1213] tap0: tun_chr_ioctl cmd 1074025677
[ 1051.172704][ T1213] tap0: linktype set to 776
[ 1051.214399][T22425] usb 2-1: USB disconnect, device number 18
[ 1051.229285][ T1219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11377'.
[ 1051.292780][ T1224] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11377'.
[ 1051.505066][ T1226] loop6: detected capacity change from 0 to 1024
[ 1051.543880][ T1226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1051.569990][ T1226] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1051.628773][T26144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1051.889646][ T1249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11382'.
[ 1051.952477][   T30] audit: type=1326 audit(1753101481.712:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.082158][   T30] audit: type=1326 audit(1753101481.712:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.166025][   T30] audit: type=1326 audit(1753101481.712:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.237213][   T30] audit: type=1326 audit(1753101481.712:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.315525][   T30] audit: type=1326 audit(1753101481.712:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.368903][   T30] audit: type=1326 audit(1753101481.712:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.385446][ T1263] veth0_to_team: entered promiscuous mode
[ 1052.412063][ T1263] veth0_to_team: entered allmulticast mode
[ 1052.465176][   T30] audit: type=1326 audit(1753101481.752:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.549197][   T30] audit: type=1326 audit(1753101481.752:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.646407][   T30] audit: type=1326 audit(1753101481.752:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.730859][   T30] audit: type=1326 audit(1753101481.752:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1252 comm="syz.0.11387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b58e9a9 code=0x7ffc0000
[ 1052.847852][ T1247] loop7: detected capacity change from 0 to 32768
[ 1052.951585][ T1247] find_entry called with index >= next_index
[ 1052.962966][ T1247] find_entry called with index >= next_index
[ 1052.988743][ T1247] find_entry called with index >= next_index
[ 1053.592164][   T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1053.774175][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1053.812522][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1053.844344][   T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1053.882305][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.943105][   T10] usb 1-1: config 0 descriptor??
[ 1054.221446][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.227986][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.399134][   T10] pyra 0003:1E7D:2CF6.0095: unknown main item tag 0x0
[ 1054.422269][   T10] pyra 0003:1E7D:2CF6.0095: unknown main item tag 0x0
[ 1054.445816][   T10] pyra 0003:1E7D:2CF6.0095: unknown main item tag 0x0
[ 1054.462303][   T10] pyra 0003:1E7D:2CF6.0095: unknown main item tag 0x0
[ 1054.476486][ T1310] loop7: detected capacity change from 0 to 40427
[ 1054.484607][   T10] pyra 0003:1E7D:2CF6.0095: unknown main item tag 0x0
[ 1054.491627][   T10] pyra 0003:1E7D:2CF6.0095: unknown main item tag 0x0
[ 1054.506643][ T1310] F2FS-fs (loop7): invalid crc value
[ 1054.522208][   T10] pyra 0003:1E7D:2CF6.0095: unknown main item tag 0x0
[ 1054.591508][   T10] pyra 0003:1E7D:2CF6.0095: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[ 1054.664773][ T1310] F2FS-fs (loop7): Start checkpoint disabled!
[ 1054.694746][ T1310] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[ 1054.814451][   T10] pyra 0003:1E7D:2CF6.0095: couldn't init struct pyra_device
[ 1054.823446][   T10] pyra 0003:1E7D:2CF6.0095: couldn't install mouse
[ 1054.836798][   T10] pyra 0003:1E7D:2CF6.0095: probe with driver pyra failed with error -71
[ 1054.863337][   T10] usb 1-1: USB disconnect, device number 48
[ 1054.883110][   T59] kworker/u8:4: attempt to access beyond end of device
[ 1054.883110][   T59] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1054.905256][   T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[ 1054.905293][   T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1054.905309][   T59] Workqueue: writeback wb_workfn (flush-7:7)
[ 1054.905349][   T59] Call Trace:
[ 1054.905360][   T59]  <TASK>
[ 1054.905372][   T59]  dump_stack_lvl+0x189/0x250
[ 1054.905411][   T59]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1054.905439][   T59]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1054.905467][   T59]  ? __pfx_queue_work_on+0x10/0x10
[ 1054.905499][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.905529][   T59]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1054.905563][   T59]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1054.905591][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.905619][   T59]  ? f2fs_hw_is_readonly+0x39b/0x470
[ 1054.905652][   T59]  f2fs_handle_critical_error+0x37c/0x540
[ 1054.905688][   T59]  f2fs_write_end_io+0x495/0x810
[ 1054.905718][   T59]  ? blkg_put+0x22/0x240
[ 1054.905776][   T59]  __submit_merged_bio+0x27a/0x6a0
[ 1054.905810][   T59]  __submit_merged_write_cond+0x255/0x530
[ 1054.905862][   T59]  f2fs_write_data_pages+0x261d/0x3000
[ 1054.905936][   T59]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1054.905984][   T59]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1054.906063][   T59]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1054.906108][   T59]  ? trace_f2fs_writepages+0x7f/0x200
[ 1054.906137][   T59]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1054.906184][   T59]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1054.906234][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.906272][   T59]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1054.906303][   T59]  do_writepages+0x32e/0x550
[ 1054.906344][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.906372][   T59]  ? reacquire_held_locks+0x127/0x1d0
[ 1054.906403][   T59]  ? writeback_sb_inodes+0x372/0x1000
[ 1054.906445][   T59]  __writeback_single_inode+0x145/0xff0
[ 1054.906477][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.906504][   T59]  ? do_raw_spin_unlock+0x122/0x240
[ 1054.906545][   T59]  writeback_sb_inodes+0x6b5/0x1000
[ 1054.906605][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.906650][   T59]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1054.906737][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.906766][   T59]  ? rcu_is_watching+0x15/0xb0
[ 1054.906796][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.906836][   T59]  wb_writeback+0x43b/0xaf0
[ 1054.906879][   T59]  ? queue_io+0x321/0x590
[ 1054.906915][   T59]  ? __pfx_wb_writeback+0x10/0x10
[ 1054.906958][   T59]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1054.906991][   T59]  wb_workfn+0x409/0xef0
[ 1054.907039][   T59]  ? __pfx_wb_workfn+0x10/0x10
[ 1054.907073][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.907102][   T59]  ? __lock_acquire+0xab9/0xd20
[ 1054.907144][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.907178][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.907211][   T59]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1054.907235][   T59]  ? process_scheduled_works+0x9ef/0x17b0
[ 1054.907264][   T59]  ? process_scheduled_works+0x9ef/0x17b0
[ 1054.907295][   T59]  process_scheduled_works+0xae1/0x17b0
[ 1054.907362][   T59]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1054.907402][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.907441][   T59]  worker_thread+0x8a0/0xda0
[ 1054.907507][   T59]  kthread+0x711/0x8a0
[ 1054.907548][   T59]  ? __pfx_worker_thread+0x10/0x10
[ 1054.907585][   T59]  ? __pfx_kthread+0x10/0x10
[ 1054.907617][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.907651][   T59]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1054.907674][   T59]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1054.907702][   T59]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1054.907732][   T59]  ? __pfx_kthread+0x10/0x10
[ 1054.907770][   T59]  ret_from_fork+0x3fc/0x770
[ 1054.907802][   T59]  ? __pfx_ret_from_fork+0x10/0x10
[ 1054.907837][   T59]  ? __switch_to_asm+0x39/0x70
[ 1054.907871][   T59]  ? __switch_to_asm+0x33/0x70
[ 1054.907903][   T59]  ? __pfx_kthread+0x10/0x10
[ 1054.907940][   T59]  ret_from_fork_asm+0x1a/0x30
[ 1054.907996][   T59]  </TASK>
[ 1054.908821][   T59] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1055.065268][ T1332] loop6: detected capacity change from 0 to 32768
[ 1055.351323][ T1332] (syz.6.11420,1332,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1055.376740][ T1332] (syz.6.11420,1332,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1055.420284][ T1332] JBD2: Ignoring recovery information on journal
[ 1055.505524][ T1332] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1055.626231][ T1332] 
[ 1055.628629][ T1332] ======================================================
[ 1055.635672][ T1332] WARNING: possible circular locking dependency detected
[ 1055.642697][ T1332] 6.16.0-rc7-syzkaller #0 Not tainted
[ 1055.648094][ T1332] ------------------------------------------------------
[ 1055.655111][ T1332] syz.6.11420/1332 is trying to acquire lock:
[ 1055.661180][ T1332] ffff888033bddc78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_calc_xattr_init+0x20a/0xd80
[ 1055.672142][ T1332] 
[ 1055.672142][ T1332] but task is already holding lock:
[ 1055.679516][ T1332] ffff88807b41a640 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[ 1055.692843][ T1332] 
[ 1055.692843][ T1332] which lock already depends on the new lock.
[ 1055.692843][ T1332] 
[ 1055.703259][ T1332] 
[ 1055.703259][ T1332] the existing dependency chain (in reverse order) is:
[ 1055.712299][ T1332] 
[ 1055.712299][ T1332] -> #3 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}:
[ 1055.723254][ T1332]        lock_acquire+0x120/0x360
[ 1055.728295][ T1332]        down_write+0x96/0x1f0
[ 1055.733190][ T1332]        ocfs2_evict_inode+0x153d/0x40e0
[ 1055.738862][ T1332]        evict+0x504/0x9c0
[ 1055.743294][ T1332]        do_unlinkat+0x3a1/0x560
[ 1055.748252][ T1332]        __x64_sys_unlink+0x47/0x50
[ 1055.753590][ T1332]        do_syscall_64+0xfa/0x3b0
[ 1055.758627][ T1332]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.765077][ T1332] 
[ 1055.765077][ T1332] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{4:4}:
[ 1055.775537][ T1332]        lock_acquire+0x120/0x360
[ 1055.780574][ T1332]        down_write+0x96/0x1f0
[ 1055.785470][ T1332]        ocfs2_del_inode_from_orphan+0x134/0x740
[ 1055.791835][ T1332]        ocfs2_dio_end_io+0x479/0x10f0
[ 1055.797464][ T1332]        dio_complete+0x25b/0x790
[ 1055.803005][ T1332]        __blockdev_direct_IO+0x2db6/0x33d0
[ 1055.808939][ T1332]        ocfs2_direct_IO+0x25f/0x2d0
[ 1055.814323][ T1332]        generic_file_direct_write+0x1db/0x3e0
[ 1055.820496][ T1332]        __generic_file_write_iter+0x11d/0x230
[ 1055.826665][ T1332]        ocfs2_file_write_iter+0x157a/0x1d10
[ 1055.832683][ T1332]        iter_file_splice_write+0x93a/0x1000
[ 1055.838697][ T1332]        direct_splice_actor+0x101/0x160
[ 1055.844363][ T1332]        splice_direct_to_actor+0x5a8/0xcc0
[ 1055.850478][ T1332]        do_splice_direct+0x181/0x270
[ 1055.855885][ T1332]        do_sendfile+0x4da/0x7e0
[ 1055.860828][ T1332]        __se_sys_sendfile64+0x13e/0x190
[ 1055.866568][ T1332]        do_syscall_64+0xfa/0x3b0
[ 1055.871645][ T1332]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.878094][ T1332] 
[ 1055.878094][ T1332] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[ 1055.886892][ T1332]        lock_acquire+0x120/0x360
[ 1055.891933][ T1332]        down_write+0x96/0x1f0
[ 1055.896714][ T1332]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[ 1055.903222][ T1332]        ocfs2_truncate_file+0xda0/0x1420
[ 1055.908980][ T1332]        ocfs2_setattr+0x1520/0x1b40
[ 1055.914279][ T1332]        notify_change+0xb36/0xe40
[ 1055.919401][ T1332]        do_truncate+0x1a4/0x220
[ 1055.924595][ T1332]        path_openat+0x306c/0x3830
[ 1055.929710][ T1332]        do_filp_open+0x1fa/0x410
[ 1055.934742][ T1332]        do_sys_openat2+0x121/0x1c0
[ 1055.940059][ T1332]        __x64_sys_creat+0x8f/0xc0
[ 1055.945195][ T1332]        do_syscall_64+0xfa/0x3b0
[ 1055.950224][ T1332]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.956661][ T1332] 
[ 1055.956661][ T1332] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[ 1055.964524][ T1332]        validate_chain+0xb9b/0x2140
[ 1055.969814][ T1332]        __lock_acquire+0xab9/0xd20
[ 1055.975011][ T1332]        lock_acquire+0x120/0x360
[ 1055.980034][ T1332]        down_read+0x46/0x2e0
[ 1055.984720][ T1332]        ocfs2_calc_xattr_init+0x20a/0xd80
[ 1055.990548][ T1332]        ocfs2_mknod+0xc92/0x2050
[ 1055.995571][ T1332]        ocfs2_mkdir+0x191/0x440
[ 1056.000508][ T1332]        vfs_mkdir+0x306/0x510
[ 1056.005294][ T1332]        do_mkdirat+0x247/0x590
[ 1056.010260][ T1332]        __x64_sys_mkdir+0x6c/0x80
[ 1056.015400][ T1332]        do_syscall_64+0xfa/0x3b0
[ 1056.020442][ T1332]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.026860][ T1332] 
[ 1056.026860][ T1332] other info that might help us debug this:
[ 1056.026860][ T1332] 
[ 1056.037097][ T1332] Chain exists of:
[ 1056.037097][ T1332]   &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type] --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5
[ 1056.037097][ T1332] 
[ 1056.055926][ T1332]  Possible unsafe locking scenario:
[ 1056.055926][ T1332] 
[ 1056.063374][ T1332]        CPU0                    CPU1
[ 1056.068733][ T1332]        ----                    ----
[ 1056.074090][ T1332]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[ 1056.081391][ T1332]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]);
[ 1056.091030][ T1332]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[ 1056.100849][ T1332]   rlock(&oi->ip_xattr_sem);
[ 1056.105642][ T1332] 
[ 1056.105642][ T1332]  *** DEADLOCK ***
[ 1056.105642][ T1332] 
[ 1056.113800][ T1332] 3 locks held by syz.6.11420/1332:
[ 1056.118989][ T1332]  #0: ffff88805d61c428 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1056.128257][ T1332]  #1: ffff888033bddf40 (&type->i_mutex_dir_key#16/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470
[ 1056.139017][ T1332]  #2: ffff88807b41a640 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[ 1056.152822][ T1332] 
[ 1056.152822][ T1332] stack backtrace:
[ 1056.158705][ T1332] CPU: 1 UID: 0 PID: 1332 Comm: syz.6.11420 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[ 1056.158732][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1056.158746][ T1332] Call Trace:
[ 1056.158755][ T1332]  <TASK>
[ 1056.158767][ T1332]  dump_stack_lvl+0x189/0x250
[ 1056.158801][ T1332]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1056.158826][ T1332]  ? __pfx__printk+0x10/0x10
[ 1056.158855][ T1332]  ? stack_trace_save+0x9c/0xe0
[ 1056.158889][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.158921][ T1332]  print_circular_bug+0x2ee/0x310
[ 1056.158953][ T1332]  check_noncircular+0x134/0x160
[ 1056.158984][ T1332]  validate_chain+0xb9b/0x2140
[ 1056.159010][ T1332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.159042][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159070][ T1332]  __lock_acquire+0xab9/0xd20
[ 1056.159096][ T1332]  ? ocfs2_calc_xattr_init+0x20a/0xd80
[ 1056.159122][ T1332]  lock_acquire+0x120/0x360
[ 1056.159142][ T1332]  ? ocfs2_calc_xattr_init+0x20a/0xd80
[ 1056.159169][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159196][ T1332]  ? security_inode_init_security+0x35e/0x3f0
[ 1056.159228][ T1332]  down_read+0x46/0x2e0
[ 1056.159256][ T1332]  ? ocfs2_calc_xattr_init+0x20a/0xd80
[ 1056.159283][ T1332]  ocfs2_calc_xattr_init+0x20a/0xd80
[ 1056.159318][ T1332]  ? __pfx_ocfs2_calc_xattr_init+0x10/0x10
[ 1056.159345][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159370][ T1332]  ? ocfs2_init_security_get+0x139/0x1a0
[ 1056.159398][ T1332]  ocfs2_mknod+0xc92/0x2050
[ 1056.159428][ T1332]  ? __pfx_ocfs2_mknod+0x10/0x10
[ 1056.159447][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159471][ T1332]  ? do_raw_spin_unlock+0x122/0x240
[ 1056.159505][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159530][ T1332]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[ 1056.159566][ T1332]  ? __lock_acquire+0xab9/0xd20
[ 1056.159592][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159620][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159647][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159672][ T1332]  ? __lock_acquire+0xab9/0xd20
[ 1056.159698][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159722][ T1332]  ? do_raw_spin_lock+0x121/0x290
[ 1056.159754][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159781][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159805][ T1332]  ? do_raw_spin_unlock+0x122/0x240
[ 1056.159838][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.159863][ T1332]  ? put_pid+0x105/0x160
[ 1056.159896][ T1332]  ocfs2_mkdir+0x191/0x440
[ 1056.159915][ T1332]  ? __pfx_from_kgid+0x10/0x10
[ 1056.159951][ T1332]  ? apparmor_path_mkdir+0x1a7/0x220
[ 1056.159984][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.160011][ T1332]  ? __pfx_ocfs2_mkdir+0x10/0x10
[ 1056.160028][ T1332]  ? HAS_UNMAPPED_ID+0x11a/0x180
[ 1056.160053][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.160077][ T1332]  ? inode_permission+0x149/0x470
[ 1056.160097][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.160121][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.160148][ T1332]  vfs_mkdir+0x306/0x510
[ 1056.160180][ T1332]  do_mkdirat+0x247/0x590
[ 1056.160208][ T1332]  ? __pfx_do_mkdirat+0x10/0x10
[ 1056.160234][ T1332]  ? strncpy_from_user+0x150/0x290
[ 1056.160258][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.160282][ T1332]  ? getname_flags+0x1e5/0x540
[ 1056.160308][ T1332]  __x64_sys_mkdir+0x6c/0x80
[ 1056.160337][ T1332]  do_syscall_64+0xfa/0x3b0
[ 1056.160362][ T1332]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1056.160385][ T1332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.160406][ T1332]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1056.160430][ T1332]  ? exc_page_fault+0x9f/0xf0
[ 1056.160454][ T1332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.160475][ T1332] RIP: 0033:0x7f209638e9a9
[ 1056.160495][ T1332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1056.160514][ T1332] RSP: 002b:00007f20941f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1056.160536][ T1332] RAX: ffffffffffffffda RBX: 00007f20965b5fa0 RCX: 00007f209638e9a9
[ 1056.160553][ T1332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[ 1056.160567][ T1332] RBP: 00007f2096410d69 R08: 0000000000000000 R09: 0000000000000000
[ 1056.160581][ T1332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1056.160595][ T1332] R13: 0000000000000000 R14: 00007f20965b5fa0 R15: 00007ffc5aaca5d8
[ 1056.160620][ T1332]  </TASK>
[ 1056.744019][T26144] ocfs2: Unmounting device (7,6) on (node local)
[ 1056.874801][ T1350] loop7: detected capacity change from 0 to 40427
[ 1056.883083][ T1350] F2FS-fs (loop7): heap/no_heap options were deprecated
[ 1056.891253][ T1350] F2FS-fs (loop7): invalid crc value
[ 1056.930714][ T1350] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1056.956311][ T1350] F2FS-fs (loop7): Stopped filesystem due to reason: 0