last executing test programs:

26.43363373s ago: executing program 2 (id=1039):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

24.877789884s ago: executing program 2 (id=1043):
syz_open_dev$tty1(0xc, 0x4, 0x4)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)

23.625545108s ago: executing program 2 (id=1046):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

22.558187995s ago: executing program 2 (id=1051):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)="3d45687851a0c759b5d6f914c6aa", 0xe}, {0x0}], 0x2)

22.253645606s ago: executing program 2 (id=1053):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x2, @generic=0xfd, 0x83, 0x7, 0x2})

22.073434732s ago: executing program 2 (id=1055):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setitimer(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
userfaultfd(0x80801)
mq_open(&(0x7f0000000080)='\x8a\x97\xefB-\xc3\x00l)\x17\xa7\xed\x88u\xd5\x89\x13\xbd^f*\xcd\x15<\x0e\xf9N\ak\xa2+\xf7)\xb5\x144\x05{o\x04J\x01\t[U\x14\x1d0!.\x8b\xa2\x1b\xae\x96\x1f\x83\x96M\x81\xd0T\xcd\xce;\x87c\xb0\xf82#[\xbd\xc9/*\a\x81$W\xbf$\x8b\xea\xa7o[\xa3k\v\xe2\x05', 0x2, 0xa, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r2, 0x7, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x4006})
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

21.298084959s ago: executing program 1 (id=1057):
syz_open_dev$tty1(0xc, 0x4, 0x4)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6})
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)

20.145665959s ago: executing program 1 (id=1059):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB='4\x00z'], 0x114}, 0x1, 0x0, 0x0, 0x20040054}, 0x800)

19.899215288s ago: executing program 1 (id=1061):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
syz_clone3(&(0x7f0000000480)={0x10000000, &(0x7f0000000100), &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58)
getpgrp(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_type(r5, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)

17.879284748s ago: executing program 1 (id=1064):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

17.008143688s ago: executing program 1 (id=1067):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x20000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7, 0xcae, 0x6, 0x1b, 0x7, 0x3420df9d, 0xfffffffc}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
getdents64(r2, &(0x7f0000001f00)=""/4111, 0x100f)
unshare(0x20060400)
fsync(0xffffffffffffffff)

15.302374188s ago: executing program 4 (id=1071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB='4\x00z'], 0x114}, 0x1, 0x0, 0x0, 0x20040054}, 0x800)

14.996377608s ago: executing program 4 (id=1074):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
syz_clone3(&(0x7f0000000480)={0x10000000, &(0x7f0000000100), &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58)
getpgrp(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_type(r5, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)

13.596819867s ago: executing program 0 (id=1075):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0)
r3 = syz_io_uring_setup(0x3af6, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000000))
kcmp(r0, r0, 0x4, r2, r3)
r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
socket(0x400000000010, 0x3, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])

11.514111229s ago: executing program 0 (id=1077):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

10.716503707s ago: executing program 4 (id=1078):
syz_open_dev$tty1(0xc, 0x4, 0x4)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x5)

10.377814228s ago: executing program 0 (id=1080):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x400000)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4c3})
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r4 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000240)='wchan\x00')
pread64(r5, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009)

10.096212558s ago: executing program 4 (id=1081):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x9, 0x3, "f4f03b0200"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @remote, 0x7}, 0x1c, &(0x7f0000000f00)}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.491916514s ago: executing program 4 (id=1085):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfea7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xa)
open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100))
r2 = syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x20000)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0x1, 0x14, 0x19, "981dfe1404ea1234275704afed730428df8208a7c9b3be966a82ea28b7f307e69b054b0cb5d6966e64512dba391b82c6ba86117bcb0fac71f4d84f5f54297589", "0b0800b5f40e155c7b772ff3beb84c47828a6403bed6f41cc070c1f408000d71", [0x6]})

6.505201113s ago: executing program 32 (id=1055):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setitimer(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
userfaultfd(0x80801)
mq_open(&(0x7f0000000080)='\x8a\x97\xefB-\xc3\x00l)\x17\xa7\xed\x88u\xd5\x89\x13\xbd^f*\xcd\x15<\x0e\xf9N\ak\xa2+\xf7)\xb5\x144\x05{o\x04J\x01\t[U\x14\x1d0!.\x8b\xa2\x1b\xae\x96\x1f\x83\x96M\x81\xd0T\xcd\xce;\x87c\xb0\xf82#[\xbd\xc9/*\a\x81$W\xbf$\x8b\xea\xa7o[\xa3k\v\xe2\x05', 0x2, 0xa, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r2, 0x7, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x4006})
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5.720152051s ago: executing program 3 (id=1092):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

4.685540217s ago: executing program 3 (id=1093):
syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020)

3.981327591s ago: executing program 3 (id=1094):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@numtail}, {@utf8}, {@shortname_mixed}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@fat=@nfs}, {@fat=@showexec}, {@utf8no}, {@shortname_win95}, {@fat=@discard}, {@rodir}, {@shortname_win95}, {@utf8}, {@rodir}, {}, {@shortname_winnt}, {@rodir}]}, 0x0, 0x2d0, &(0x7f0000000500)="$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")
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$sock(r2, &(0x7f0000000480)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x40, 0x4}, 0x80, 0x0}, 0x8)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)

3.257554687s ago: executing program 4 (id=1095):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(r0, 0x0, 0x8410)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0)

2.987790026s ago: executing program 3 (id=1096):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003080)=@deltaction={0x7c, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20000084)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000ac0), 0x1, 0x8802)
ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$tcp_congestion(r4, &(0x7f00000005c0)='bbr\x00', 0x4)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0)

2.614993629s ago: executing program 1 (id=1097):
setresgid(0xee00, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x2dc2, 0xfffb)

2.539104501s ago: executing program 3 (id=1098):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, 0x0, 0x20000010)

2.196264443s ago: executing program 0 (id=1099):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x404400, 0x192)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x45, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01"})
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc020000000000000000"], 0x10c}}, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0)

1.201652318s ago: executing program 3 (id=1100):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

999.792625ms ago: executing program 0 (id=1101):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
socket(0x21, 0x80000, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc)
mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x2000001, 0x4010933, r0, 0xb4b40000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="84010000190001002bbd7000fbdbdf251d010900500012800c00bf00fffffeffffffffff3e005f800400760008006000", @ANYRES32=0x0, @ANYBLOB="a46187f01f81b121004a6c80a289d58e0d8772881e793bb0ac04598a3dade204b9982996a709a945e70aeff89a410000200106801c01a98018013e801401a0801001ed800c016d800801d18004011280fd00cd8042110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b48b9212b07ca7b4686a2a55f4f80cbea3f494421c794c12d35f89faffe1de6605dfada605ad7c5d1212f30e4f92cf2ae0e57c77aa34e47801d546b04458c2f6011fb906b6ed5217cb687ba"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
socket(0xa, 0x3, 0xff)
sendfile(r1, r2, 0x0, 0x20fffe85)

0s ago: executing program 0 (id=1102):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

kernel console output (not intermixed with test programs):

71.884219][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.894994][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.902206][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.917434][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.934303][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.943724][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.951036][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.960526][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.968931][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.977670][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.990596][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.005662][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[   72.021843][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   72.034210][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.044515][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.053390][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.063002][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.074290][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.124622][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.135511][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.167748][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.184076][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.193429][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.203076][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.212820][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.222092][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.229261][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.237902][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.246951][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.255336][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.262495][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.270592][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.279462][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.288220][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.297137][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.305494][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.312628][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.320776][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.330119][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.340293][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.349668][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.360222][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.369014][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.376078][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.387704][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.397196][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.405890][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.414120][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.422446][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.440392][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.449964][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.460250][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.476627][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[   72.476651][ T4284] Bluetooth: hci3: command 0x041b tx timeout
[   72.482869][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[   72.495370][ T4287] Bluetooth: hci1: command 0x041b tx timeout
[   72.496490][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[   72.524727][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.541589][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.560783][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.574655][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.621153][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.634178][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.643206][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.654617][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.665342][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.674760][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.684487][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.693540][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.713983][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.727980][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.744409][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.752998][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.761760][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.775441][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.784479][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.793852][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.807875][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.824908][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.840885][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.895882][ T4282] 8021q: adding VLAN 0 to HW filter on device team0
[   72.920261][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.929986][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.978393][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.997609][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.026934][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.034099][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.058234][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.067335][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.092375][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.099624][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.132083][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.141598][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.182007][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.200508][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.215217][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.225661][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.240996][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.266132][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.282973][ T4268] device veth0_vlan entered promiscuous mode
[   73.296681][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.305176][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.317256][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.327393][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.347143][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.381405][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.404313][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.417698][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.425836][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.444300][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.459450][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.486991][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.503517][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.513883][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.530775][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.542086][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.580250][ T4268] device veth1_vlan entered promiscuous mode
[   73.588448][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.598965][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.610352][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.618818][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.632664][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.648974][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.672772][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.684225][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.692325][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.718672][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.758091][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.769535][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.779197][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.795063][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.818509][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.828667][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.857848][ T4277] device veth0_vlan entered promiscuous mode
[   73.873037][ T4268] device veth0_macvtap entered promiscuous mode
[   73.889376][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.902671][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.912051][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.922719][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.932352][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.954778][ T4277] device veth1_vlan entered promiscuous mode
[   73.971821][ T4268] device veth1_macvtap entered promiscuous mode
[   73.994978][ T4274] device veth0_vlan entered promiscuous mode
[   74.010590][ T4274] device veth1_vlan entered promiscuous mode
[   74.025555][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.035647][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.044527][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.053305][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.062004][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.070485][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.081150][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.089321][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.097737][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.106040][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.129515][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.143404][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.169327][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.189002][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.207555][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.222611][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.233398][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.250750][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.264028][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.284618][ T4277] device veth0_macvtap entered promiscuous mode
[   74.298527][ T4269] device veth0_vlan entered promiscuous mode
[   74.313149][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.329232][ T4277] device veth1_macvtap entered promiscuous mode
[   74.339234][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.356966][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.365284][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.375352][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.403195][ T4269] device veth1_vlan entered promiscuous mode
[   74.428069][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.438704][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.449278][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.467701][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.488810][ T4274] device veth0_macvtap entered promiscuous mode
[   74.505604][ T4274] device veth1_macvtap entered promiscuous mode
[   74.514279][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.525613][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.535041][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.544288][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.556776][ T4286] Bluetooth: hci0: command 0x040f tx timeout
[   74.567463][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[   74.567484][ T4284] Bluetooth: hci1: command 0x040f tx timeout
[   74.573660][ T4286] Bluetooth: hci3: command 0x040f tx timeout
[   74.579736][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[   74.633641][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.658388][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.678096][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.716051][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.729055][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.740315][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.751112][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.764612][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.772557][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.781410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.790166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.801229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.810235][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.819882][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.828883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.838399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.849981][ T4269] device veth0_macvtap entered promiscuous mode
[   74.869147][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.882579][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.901081][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.908875][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.919560][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.929837][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.940418][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.951741][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.968821][ T4269] device veth1_macvtap entered promiscuous mode
[   74.978466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.987719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.996442][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.005049][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.014529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.025939][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.035966][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.045183][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.054193][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.086071][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.095524][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.105209][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.114249][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.142870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.153301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.178727][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.190531][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.201708][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.213126][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.223284][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.233816][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.246076][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.285947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.300099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.311764][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.324092][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.334588][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.346774][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.358286][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.369154][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.380987][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.418939][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.429825][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.439985][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.451231][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.460490][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.469917][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.479052][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.488034][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.497424][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.506309][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.533409][ T4282] device veth0_vlan entered promiscuous mode
[   75.553961][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.570066][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.591444][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.615558][ T4282] device veth1_vlan entered promiscuous mode
[   75.714254][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.725515][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.728860][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.741948][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.758869][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.784114][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.800826][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.811469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.820838][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.828948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.837850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.861892][ T4282] device veth0_macvtap entered promiscuous mode
[   75.897445][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.912453][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.926010][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.945839][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.954772][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.963323][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.007146][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.013654][ T4282] device veth1_macvtap entered promiscuous mode
[   76.021551][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.105267][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.115733][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.165272][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.187882][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.195966][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.245420][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.245977][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   76.270040][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.514620][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.623193][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.637277][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[   76.637412][ T4284] Bluetooth: hci3: command 0x0419 tx timeout
[   76.643698][ T4278] Bluetooth: hci1: command 0x0419 tx timeout
[   76.650196][ T4284] Bluetooth: hci2: command 0x0419 tx timeout
[   76.656332][ T4286] Bluetooth: hci0: command 0x0419 tx timeout
[   76.662835][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.679040][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.690508][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.701751][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.711919][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.722823][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.741316][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.756395][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.833142][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.097372][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.137772][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.154602][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.165898][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.186255][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.196738][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.226346][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.256399][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.276041][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.300054][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.315695][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.325700][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.344699][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.346811][ T4370] Bluetooth: MGMT ver 1.22
[   77.367150][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.376048][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.392557][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.417693][ T4370] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[   77.656462][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.664353][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.685195][ T4376] loop2: detected capacity change from 0 to 512
[   77.728252][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.900294][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.908832][ T4376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   77.927076][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.958128][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.142965][ T4277] EXT4-fs (loop2): unmounting filesystem.
[   78.258466][ T4390] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   81.683440][   T14] cfg80211: failed to load regulatory.db
[   81.757889][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'.
[   81.863614][ T4430] loop4: detected capacity change from 0 to 128
[   82.251278][ T4430] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[   82.290166][ T4430] FAT-fs (loop4): Filesystem has been set read-only
[   82.384799][ T4434] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.378616][ T4437] Bluetooth: hci0: invalid length 0, exp 2 for type 19
[   83.464215][ T4454] loop3: detected capacity change from 0 to 4096
[   83.480624][ T4453] loop4: detected capacity change from 0 to 4096
[   83.523772][ T4454] ntfs3: Unknown parameter 'nocase'
[   83.641349][ T4383] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   84.057633][ T4462] capability: warning: `syz.1.28' uses 32-bit capabilities (legacy support in use)
[   84.128159][ T4282] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[   84.134857][ T4282] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   85.722815][ T4456] loop2: detected capacity change from 0 to 40427
[   85.824157][ T4458] loop0: detected capacity change from 0 to 40427
[   85.833465][ T4456] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value
[   85.927349][ T4458] F2FS-fs (loop0): build fault injection attr: rate: 174, type: 0x3ffff
[   86.206530][   T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   86.294338][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'.
[   86.416430][   T27] usb 5-1: Using ep0 maxpacket: 32
[   86.438271][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12408, setting to 64
[   86.489722][   T27] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[   86.519528][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.545140][   T27] usb 5-1: Product: syz
[   86.568678][   T27] usb 5-1: Manufacturer: syz
[   86.589853][   T27] usb 5-1: SerialNumber: syz
[   86.632069][   T27] usb 5-1: config 0 descriptor??
[   86.700718][ T4486] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   86.732477][   T27] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   87.348476][ T4466] usb 5-1: Failed to submit usb control message: -71
[   87.350388][   T14] usb 5-1: USB disconnect, device number 2
[   87.355846][ T4466] usb 5-1: unable to send the bmi data to the device: -71
[   87.376340][ T4497] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure
[   87.404722][ T4466] usb 5-1: unable to get target info from device
[   87.418986][ T4492] loop0: detected capacity change from 0 to 32768
[   87.424071][ T4502] 8021q: VLANs not supported on ipvlan0
[   87.429955][ T4500] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET)
[   87.452549][ T4492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.37 (4492)
[   87.457373][ T4466] usb 5-1: could not get target info (-71)
[   87.506449][ T4492] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.522950][ T4466] usb 5-1: could not probe fw (-71)
[   87.574909][ T4492] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   87.606455][ T4492] BTRFS info (device loop0): using free space tree
[   87.783850][ T4514] tipc: Started in network mode
[   87.791773][ T4514] tipc: Node identity bbbbbb01, cluster identity 4711
[   87.799916][ T4514] tipc: Enabled bearer <eth:rose0>, priority 10
[   88.044348][ T4523] ubi31: attaching mtd0
[   88.057214][ T4492] BTRFS info (device loop0): enabling ssd optimizations
[   88.127880][   T93] block nbd1: Attempted send on invalid socket
[   88.134384][   T93] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   88.149115][   T93] block nbd1: Attempted send on invalid socket
[   88.155503][   T93] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   88.178805][ T4523] ubi31: scanning is finished
[   88.183633][ T4523] ubi31: empty MTD device detected
[   88.568653][ T4523] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   88.638895][ T4268] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.657199][ T4523] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   88.694248][ T4523] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   88.742230][ T4523] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   88.756970][ T4536] loop3: detected capacity change from 0 to 2048
[   88.775157][ T4523] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   88.794286][ T4523] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   88.892302][ T4523] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2397584943
[   88.907058][ T4523] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   89.034272][ T4533] ubi31: background thread "ubi_bgt31d" started, PID 4533
[   89.045688][ T4549] tipc: Node number set to 3149642497
[   89.119602][ T4553] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.208540][ T4507] loop2: detected capacity change from 0 to 32768
[   89.376618][ T4507] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.42 (4507)
[   89.833066][ T4544] Can't find ip_set type hash:ip,port,ne
[   89.907960][ T4507] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   89.938983][ T4507] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   89.986016][ T4553] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   90.010981][ T4507] BTRFS info (device loop2): setting nodatasum
[   90.035851][ T4507] BTRFS info (device loop2): using free space tree
[   90.077194][ T4553] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[   90.118283][ T4555] loop0: detected capacity change from 0 to 128
[   90.134715][ T4555] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[   90.144727][ T4555] FAT-fs (loop0): Filesystem has been set read-only
[   90.282718][ T4553] Remounting filesystem read-only
[   90.360146][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   90.360771][ T4383] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   90.974216][ T4507] BTRFS error (device loop2): open_ctree failed: -12
[   90.998332][ T4538] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4538)
[   91.206344][ T4317] usb 5-1: Using ep0 maxpacket: 16
[   91.278019][ T4317] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   93.811320][ T4317] usb 5-1: config 0 has no interface number 0
[   93.826797][ T4317] usb 5-1: string descriptor 0 read error: -71
[   93.833260][ T4317] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   93.843949][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.854281][ T4317] usb 5-1: config 0 descriptor??
[   93.861653][ T4317] usb 5-1: can't set config #0, error -71
[   93.869532][ T4317] usb 5-1: USB disconnect, device number 3
[   95.566269][ T4617] netlink: 76 bytes leftover after parsing attributes in process `syz.4.62'.
[   96.389587][ T4619] Can't find ip_set type hash:ip,port,ne
[   99.101523][ T4651] input: syz0 as /devices/virtual/input/input5
[   99.395091][ T4632] loop1: detected capacity change from 0 to 32768
[   99.465842][ T4632] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   99.489129][ T4632] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   99.505441][ T4632] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   99.530852][ T4632] BTRFS info (device loop1): use zstd compression, level 3
[   99.542174][ T4632] BTRFS info (device loop1): using free space tree
[   99.768032][ T4680] process 'syz.3.79' launched './file0' with NULL argv: empty string added
[   99.788887][ T4632] BTRFS error (device loop1): open_ctree failed: -12
[   99.851582][ T4383] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (4383)
[   99.936528][ T4257] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  100.106384][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  100.246232][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  100.266217][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[  100.276215][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[  100.286214][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[  100.296210][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  100.306212][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  100.316210][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  100.326210][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  100.336212][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  100.366370][ T4257] usb 3-1: Using ep0 maxpacket: 32
[  100.377552][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12408, setting to 64
[  100.428498][ T4257] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  100.482443][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.506333][ T4257] usb 3-1: Product: syz
[  100.566442][ T4317] usb 4-1: Using ep0 maxpacket: 32
[  100.577091][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.610749][ T4317] usb 4-1: config 0 has no interfaces?
[  100.644821][ T4317] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  100.673890][ T4257] usb 3-1: Manufacturer: syz
[  100.678650][ T4257] usb 3-1: SerialNumber: syz
[  100.721830][ T4257] usb 3-1: config 0 descriptor??
[  100.730184][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.216212][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  101.416279][ T4317] usb 4-1: Product: syz
[  101.420525][ T4317] usb 4-1: Manufacturer: syz
[  101.425167][ T4317] usb 4-1: SerialNumber: syz
[  101.448141][ T4317] usb 4-1: config 0 descriptor??
[  101.512532][ T4257] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  101.527880][   T46] usb 3-1: Failed to submit usb control message: -71
[  101.534844][   T46] usb 3-1: unable to send the bmi data to the device: -71
[  101.546011][ T4257] usb 3-1: USB disconnect, device number 2
[  101.553761][   T46] usb 3-1: unable to get target info from device
[  101.569832][   T46] usb 3-1: could not get target info (-71)
[  101.575949][   T46] usb 3-1: could not probe fw (-71)
[  101.698613][ T4695] binder: 4693:4695 ioctl c0306201 0 returned -14
[  101.721701][ T4695] binder: 4693:4695 ioctl 4018620d 0 returned -22
[  101.795673][ T4696] netlink: 96 bytes leftover after parsing attributes in process `syz.0.84'.
[  102.885800][ T4708] Zero length message leads to an empty skb
[  103.044413][ T4707] input: syz0 as /devices/virtual/input/input6
[  104.071630][ T4317] usb 4-1: USB disconnect, device number 2
[  104.463818][ T4727] netlink: 196 bytes leftover after parsing attributes in process `syz.1.96'.
[  104.527505][ T4727] netlink: 48 bytes leftover after parsing attributes in process `syz.1.96'.
[  105.413201][ T4744] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  106.418773][ T4728] loop3: detected capacity change from 0 to 32768
[  106.617443][ T4728] XFS (loop3): Mounting V5 Filesystem
[  106.632761][ T4757] input: syz0 as /devices/virtual/input/input7
[  106.782205][ T4728] XFS (loop3): Ending clean mount
[  107.145994][ T4728] syz.3.97 (4728) used greatest stack depth: 20784 bytes left
[  107.168045][ T4274] XFS (loop3): Unmounting Filesystem
[  107.915123][ T4791] loop3: detected capacity change from 0 to 512
[  107.945539][ T4791] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.971441][ T4791] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  108.221576][ T4791] EXT4-fs (loop3): 1 truncate cleaned up
[  108.234160][ T4791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  109.438527][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  115.011820][ T4879] syz.1.143 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  115.135972][ T4879] Illegal XDP return value 4294967274 on prog  (id 3) dev N/A, expect packet loss!
[  115.152127][ T4879] ubi: mtd0 is already attached to ubi31
[  116.876963][ T4886] loop2: detected capacity change from 0 to 40427
[  116.934190][ T4886] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  116.942529][ T4886] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  116.967416][ T4886] F2FS-fs (loop2): invalid crc value
[  117.176041][ T4886] F2FS-fs (loop2): Found nat_bits in checkpoint
[  117.307502][ T4886] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  117.314790][ T4886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  118.206313][ T4351] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  118.398133][ T4351] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  118.413567][ T4351] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.454794][ T4351] usb 1-1: config 0 has no interfaces?
[  118.474681][ T4351] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  118.513154][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.573758][ T4351] usb 1-1: config 0 descriptor??
[  118.775324][ T4914] binder_alloc: 4913: pid 4913 spamming oneway? 2 buffers allocated for a total size of 5120
[  118.826582][ T4914] binder_alloc: 4913: pid 4913 spamming oneway? 3 buffers allocated for a total size of 5128
[  119.083360][ T4351] usb 1-1: USB disconnect, device number 2
[  119.123468][ T4906] loop4: detected capacity change from 0 to 40427
[  119.226310][ T4906] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  119.246372][ T4906] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  119.510663][ T4906] F2FS-fs (loop4): Found nat_bits in checkpoint
[  119.925782][ T4906] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  119.950275][ T4906] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  120.498297][ T4939] wlan1 speed is unknown, defaulting to 1000
[  120.504893][ T4939] wlan1 speed is unknown, defaulting to 1000
[  120.519838][ T4939] wlan1 speed is unknown, defaulting to 1000
[  120.545868][ T4939] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  120.582490][ T4939] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.721786][ T4939] wlan1 speed is unknown, defaulting to 1000
[  120.734689][ T4939] wlan1 speed is unknown, defaulting to 1000
[  120.746116][ T4939] wlan1 speed is unknown, defaulting to 1000
[  120.757108][ T4939] wlan1 speed is unknown, defaulting to 1000
[  120.767448][ T4939] wlan1 speed is unknown, defaulting to 1000
[  122.076179][    C0] sched: RT throttling activated
[  122.200945][ T4951] netlink: 72 bytes leftover after parsing attributes in process `syz.3.169'.
[  123.550771][ T4968] binder: 4965:4968 ioctl c00c6211 0 returned -14
[  123.806032][ T4969] loop0: detected capacity change from 0 to 32768
[  123.965311][ T4974] loop1: detected capacity change from 0 to 32768
[  123.979100][ T4969] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.174 (4969)
[  123.985505][ T4974] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  123.999859][ T4974] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  124.004686][ T4969] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  124.017541][ T4969] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  124.026345][ T4969] BTRFS info (device loop0): enabling disk space caching
[  124.033423][ T4969] BTRFS info (device loop0): force clearing of disk cache
[  124.040829][ T4969] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  124.050315][ T4969] BTRFS info (device loop0): use zstd compression, level 3
[  124.057540][ T4969] BTRFS info (device loop0): disk space caching is enabled
[  124.629073][ T4980] ubi: mtd0 is already attached to ubi31
[  125.713080][ T4974] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  125.727377][ T4351] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  125.735865][ T4351] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  125.878158][ T4969] BTRFS info (device loop0): enabling ssd optimizations
[  125.896736][ T4969] BTRFS info (device loop0): rebuilding free space tree
[  125.924924][ T4969] BTRFS info (device loop0): disabling free space tree
[  125.932014][ T4969] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  125.942778][ T4969] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  126.195958][ T4351] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 460ms
[  126.514369][ T4351] gfs2: fsid=syz:syz.0: jid=0: Done
[  126.546943][ T4974] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  126.561516][ T4974] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  126.991452][ T4268] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  128.508219][ T5029] binder_alloc: 5026: pid 5026 spamming oneway? 2 buffers allocated for a total size of 5120
[  128.546110][ T5029] binder_alloc: 5026: pid 5026 spamming oneway? 3 buffers allocated for a total size of 5128
[  129.059160][   T26] audit: type=1326 audit(1775100298.168:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.4.192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb30e19c819 code=0x0
[  129.099400][ T5044] loop1: detected capacity change from 0 to 16
[  129.121273][ T5044] erofs: (device loop1): mounted with root inode @ nid 36.
[  129.396042][ T5053] input: syz0 as /devices/virtual/input/input10
[  129.717387][ T5062] binder_alloc: 5060: pid 5060 spamming oneway? 2 buffers allocated for a total size of 5120
[  129.741217][ T5062] binder_alloc: 5060: pid 5060 spamming oneway? 3 buffers allocated for a total size of 5128
[  129.826880][ T5042] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  130.818659][ T5082] loop3: detected capacity change from 0 to 64
[  131.102339][ T5086] input: syz0 as /devices/virtual/input/input11
[  132.878544][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.884990][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.336947][ T5103] binder_alloc: 5102: pid 5102 spamming oneway? 2 buffers allocated for a total size of 5120
[  133.365074][ T5103] binder_alloc: 5102: pid 5102 spamming oneway? 3 buffers allocated for a total size of 5128
[  133.584821][ T5111] loop2: detected capacity change from 0 to 64
[  135.105750][   T52] block nbd2: Attempted send on invalid socket
[  135.112340][   T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  135.123869][   T52] block nbd2: Attempted send on invalid socket
[  135.130193][   T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  138.511817][ T5146] binder_alloc: 5145: binder_alloc_buf, no vma
[  138.940172][ T5151] loop4: detected capacity change from 0 to 64
[  140.027133][ T5165] ubi: mtd0 is already attached to ubi31
[  141.508183][ T5177] binder_alloc: 5176: pid 5176 spamming oneway? 2 buffers allocated for a total size of 5120
[  141.852334][ T5184] loop4: detected capacity change from 0 to 64
[  142.285761][ T5192] loop4: detected capacity change from 0 to 64
[  143.697396][ T5209] loop3: detected capacity change from 0 to 128
[  143.996498][ T5209] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  144.548064][ T5212] ubi: mtd0 is already attached to ubi31
[  145.426389][ T5209] FAT-fs (loop3): Filesystem has been set read-only
[  147.215828][ T5228] binder_alloc: 5227: pid 5227 spamming oneway? 2 buffers allocated for a total size of 5120
[  148.428411][ T5239] loop4: detected capacity change from 0 to 64
[  150.654649][ T4278] Bluetooth: hci0: unexpected event for opcode 0x2035
[  152.489118][ T5253] ubi: mtd0 is already attached to ubi31
[  155.290273][ T5263] binder: 5262:5263 ioctl c0306201 0 returned -14
[  155.291931][ T5266] binder: 5262:5266 ioctl 4018620d 0 returned -22
[  156.395294][ T5266] binder: 5262:5266 ioctl c0306201 200000001440 returned -11
[  156.403665][ T5266] netlink: 96 bytes leftover after parsing attributes in process `syz.3.271'.
[  157.978694][ T5288] loop4: detected capacity change from 0 to 128
[  158.266746][ T5288] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  158.889645][ T5288] FAT-fs (loop4): Filesystem has been set read-only
[  161.604287][ T5315] xt_hashlimit: size too large, truncated to 1048576
[  165.057933][ T5332] binder: 5323:5332 ioctl c0306201 0 returned -14
[  165.076557][ T5332] binder: 5323:5332 ioctl 4018620d 0 returned -22
[  165.153094][ T5334] netlink: 96 bytes leftover after parsing attributes in process `syz.4.285'.
[  165.840773][   T52] block nbd0: Attempted send on invalid socket
[  165.847573][   T52] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  165.997075][   T52] block nbd0: Attempted send on invalid socket
[  166.003292][   T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  166.418440][ T5344] loop4: detected capacity change from 0 to 128
[  166.796460][ T5344] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  166.810511][ T5344] FAT-fs (loop4): Filesystem has been set read-only
[  169.298828][ T5361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.298'.
[  172.948963][ T5390] loop4: detected capacity change from 0 to 128
[  173.361194][ T5390] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  173.506309][ T5390] FAT-fs (loop4): Filesystem has been set read-only
[  174.144490][ T5401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.311'.
[  175.417145][ T5410] loop4: detected capacity change from 0 to 128
[  175.425578][ T5410] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  175.435704][ T5410] FAT-fs (loop4): Filesystem has been set read-only
[  176.686341][ T4383] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  176.818176][ T5420] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  178.571558][ T5439] loop3: detected capacity change from 0 to 128
[  178.971517][ T5439] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  178.971562][ T5439] FAT-fs (loop3): Filesystem has been set read-only
[  180.540306][ T5448] loop3: detected capacity change from 0 to 40427
[  180.574943][ T5448] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  180.582811][ T5448] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  180.592417][ T5448] F2FS-fs (loop3): invalid crc value
[  180.642144][ T5452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'.
[  180.678914][ T5448] F2FS-fs (loop3): Found nat_bits in checkpoint
[  180.813099][ T5448] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  180.820363][ T5448] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  182.319109][ T5345] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  182.439537][ T5345] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  182.990237][ T5472] loop1: detected capacity change from 0 to 128
[  183.083928][ T5472] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  183.096537][ T5472] FAT-fs (loop1): Filesystem has been set read-only
[  183.301158][ T5471] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  184.276271][ T4351] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  184.349559][ T5481] loop2: detected capacity change from 0 to 128
[  184.371399][ T5481] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  184.371422][ T5481] FAT-fs (loop2): Filesystem has been set read-only
[  184.458015][ T4351] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.041831][ T4351] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  185.090728][ T5492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'.
[  185.101414][ T4351] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  185.132560][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.166006][ T4351] usb 1-1: Product: syz
[  185.184546][ T4351] usb 1-1: Manufacturer: syz
[  185.195553][ T4351] usb 1-1: SerialNumber: syz
[  185.233895][ T4351] usb 1-1: config 0 descriptor??
[  186.563632][ T4351] usb 1-1: USB disconnect, device number 3
[  187.053593][ T5506] loop4: detected capacity change from 0 to 512
[  187.147325][ T5506] EXT4-fs: Ignoring removed nomblk_io_submit option
[  187.217748][ T5506] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  187.252393][ T5506] EXT4-fs (loop4): 1 truncate cleaned up
[  187.261214][ T5506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  187.947309][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  188.424301][ T5527] input: syz0 as /devices/virtual/input/input15
[  188.503870][ T5529] loop2: detected capacity change from 0 to 128
[  188.578215][ T5529] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  188.588594][ T5529] FAT-fs (loop2): Filesystem has been set read-only
[  189.116953][ T5535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'.
[  190.762690][ T5553] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  190.810743][ T5557] loop3: detected capacity change from 0 to 512
[  190.848600][ T5557] EXT4-fs: Ignoring removed nomblk_io_submit option
[  190.907414][ T5557] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  190.965453][ T5557] EXT4-fs (loop3): 1 truncate cleaned up
[  191.000354][ T5557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  191.262908][ T5564] input: syz0 as /devices/virtual/input/input16
[  191.276910][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  191.283382][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  191.290596][ T4286] Bluetooth: hci3: command 0x0406 tx timeout
[  191.297018][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  191.805677][ T5552] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  191.878212][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  192.435991][ T5562] loop0: detected capacity change from 0 to 128
[  192.444988][ T5562] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  192.455015][ T5562] FAT-fs (loop0): Filesystem has been set read-only
[  192.528950][ T4349] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  192.767648][ T5573] loop3: detected capacity change from 0 to 128
[  192.930071][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  192.942390][ T5573] FAT-fs (loop3): Filesystem has been set read-only
[  194.980095][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.989260][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  195.920939][ T5600] binder: 5598:5600 ioctl c0306201 0 returned -14
[  195.942253][ T5600] binder: 5598:5600 ioctl 4018620d 0 returned -22
[  196.625468][ T5606] input: syz0 as /devices/virtual/input/input17
[  196.694676][ T5596] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  197.320278][ T5622] random: crng reseeded on system resumption
[  198.676493][ T4287] Bluetooth: hci0: unexpected event for opcode 0x0000
[  198.906669][ T5629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.381'.
[  201.076318][ T4549] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  201.276365][ T4549] usb 2-1: Using ep0 maxpacket: 32
[  201.296438][ T4549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  201.316707][ T4549] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  201.326458][ T4549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.334582][ T4549] usb 2-1: Product: syz
[  201.339066][ T4549] usb 2-1: Manufacturer: syz
[  201.343938][ T4549] usb 2-1: SerialNumber: syz
[  201.410754][ T4549] usb 2-1: config 0 descriptor??
[  201.582791][ T4549] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  201.716919][ T4422] usb 2-1: Failed to submit usb control message: -71
[  201.717131][ T4549] usb 2-1: USB disconnect, device number 2
[  201.724081][ T4422] usb 2-1: unable to send the bmi data to the device: -71
[  201.738290][ T4422] usb 2-1: unable to get target info from device
[  201.744648][ T4422] usb 2-1: could not get target info (-71)
[  201.750556][ T4422] usb 2-1: could not probe fw (-71)
[  203.173887][ T5656] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  203.484138][ T5672] netlink: 76 bytes leftover after parsing attributes in process `syz.2.394'.
[  207.622953][ T5714] loop1: detected capacity change from 0 to 512
[  207.700210][ T5714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  207.889542][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  208.385372][ T5712] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  210.814988][ T5751] binder_alloc: 5750: binder_alloc_buf, no vma
[  210.889423][ T5753] binder_alloc: 5750: binder_alloc_buf, no vma
[  211.337489][ T5760] loop1: detected capacity change from 0 to 32768
[  211.382761][ T5764] netlink: 76 bytes leftover after parsing attributes in process `syz.4.425'.
[  214.041936][ T5774] read_mapping_page failed!
[  214.109007][ T5761] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  218.540942][ T5811] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  222.022191][ T5831] loop0: detected capacity change from 0 to 32768
[  222.073563][ T5831] (syz.0.448,5831,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.126993][ T5831] (syz.0.448,5831,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.216958][ T5831] JBD2: Ignoring recovery information on journal
[  222.558349][ T5852] loop2: detected capacity change from 0 to 128
[  222.925256][ T5831] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  222.946477][ T5852] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  222.977275][ T5852] FAT-fs (loop2): Filesystem has been set read-only
[  223.509128][ T4268] ocfs2: Unmounting device (7,0) on (node local)
[  223.512883][ T5859] loop2: detected capacity change from 0 to 128
[  223.602657][ T5859] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  223.613163][ T5859] FAT-fs (loop2): Filesystem has been set read-only
[  225.758524][ T5866] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  226.803356][ T5885] loop4: detected capacity change from 0 to 128
[  227.127140][ T5885] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  227.175321][ T5885] FAT-fs (loop4): Filesystem has been set read-only
[  227.572840][ T5889] loop4: detected capacity change from 0 to 128
[  228.028778][ T5889] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  228.056480][ T5889] FAT-fs (loop4): Filesystem has been set read-only
[  228.956422][ T4540] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  229.126419][ T4540] usb 1-1: device descriptor read/64, error -71
[  229.457866][ T4540] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  229.617103][ T4540] usb 1-1: device descriptor read/64, error -71
[  229.685252][ T5907] loop1: detected capacity change from 0 to 128
[  229.747603][ T4540] usb usb1-port1: attempt power cycle
[  230.023725][ T5907] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  230.034754][ T5907] FAT-fs (loop1): Filesystem has been set read-only
[  230.356366][ T5915] xt_hashlimit: size too large, truncated to 1048576
[  231.716046][ T4540] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  232.439154][ T4540] usb 1-1: device descriptor read/8, error -71
[  233.815842][ T5930] loop4: detected capacity change from 0 to 128
[  233.828878][ T5930] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  233.839002][ T5930] FAT-fs (loop4): Filesystem has been set read-only
[  233.869446][ T5922] loop3: detected capacity change from 0 to 128
[  233.877236][ T5922] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  233.887690][ T5922] FAT-fs (loop3): Filesystem has been set read-only
[  233.933601][ T5647] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  234.309653][ T5941] loop3: detected capacity change from 0 to 512
[  234.477074][ T5941] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.511743][ T5941] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  234.609907][ T5941] EXT4-fs (loop3): 1 truncate cleaned up
[  234.662472][ T5941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  235.152782][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  235.684517][ T5955] loop3: detected capacity change from 0 to 32768
[  235.709062][ T5955] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.486 (5955)
[  235.726945][ T5955] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  235.737253][ T5955] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  235.746053][ T5955] BTRFS info (device loop3): enabling disk space caching
[  235.753187][ T5955] BTRFS info (device loop3): force clearing of disk cache
[  235.760496][ T5955] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  235.770018][ T5955] BTRFS info (device loop3): use zstd compression, level 3
[  235.777605][ T5955] BTRFS info (device loop3): disk space caching is enabled
[  236.345692][ T5955] BTRFS info (device loop3): enabling ssd optimizations
[  236.353658][ T5955] BTRFS info (device loop3): rebuilding free space tree
[  236.366999][ T5955] BTRFS info (device loop3): disabling free space tree
[  236.376506][ T5955] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  236.386729][ T5955] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  236.487568][ T5976] xt_hashlimit: size too large, truncated to 1048576
[  238.367832][ T4274] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  239.186326][ T4549] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  239.242453][ T5986] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  239.346360][ T4549] usb 4-1: device descriptor read/64, error -71
[  239.616210][ T4549] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  239.776330][ T4549] usb 4-1: device descriptor read/64, error -71
[  239.907458][ T4549] usb usb4-port1: attempt power cycle
[  240.012930][ T6007] loop1: detected capacity change from 0 to 128
[  240.316820][ T4549] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  240.369281][ T4549] usb 4-1: device descriptor read/8, error -71
[  240.646340][ T4549] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  240.679368][ T4549] usb 4-1: device descriptor read/8, error -71
[  240.756730][ T6007] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  240.783725][ T6007] FAT-fs (loop1): Filesystem has been set read-only
[  240.797188][ T4549] usb usb4-port1: unable to enumerate USB device
[  240.906691][ T6010] loop2: detected capacity change from 0 to 128
[  241.029766][ T6010] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  241.053895][ T6010] FAT-fs (loop2): Filesystem has been set read-only
[  243.201573][ T6036] loop1: detected capacity change from 0 to 32768
[  243.218810][ T6036] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.507 (6036)
[  243.242849][ T6036] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  243.253097][ T6036] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  243.261925][ T6036] BTRFS info (device loop1): enabling disk space caching
[  243.268968][ T6036] BTRFS info (device loop1): force clearing of disk cache
[  243.276081][ T6036] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  243.285586][ T6036] BTRFS info (device loop1): use zstd compression, level 3
[  243.292899][ T6036] BTRFS info (device loop1): disk space caching is enabled
[  243.844811][ T6036] BTRFS info (device loop1): enabling ssd optimizations
[  243.854815][ T6036] BTRFS info (device loop1): rebuilding free space tree
[  243.871337][ T6036] BTRFS info (device loop1): disabling free space tree
[  243.878333][ T6036] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  243.888081][ T6036] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  244.199308][ T4269] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  244.539037][ T6068] loop2: detected capacity change from 0 to 128
[  244.591103][ T4383] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop1 scanned by udevd (4383)
[  244.852172][ T6068] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  244.862531][ T6068] FAT-fs (loop2): Filesystem has been set read-only
[  245.359019][ T6071] loop0: detected capacity change from 0 to 128
[  245.705268][ T6071] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  245.855010][ T6071] FAT-fs (loop0): Filesystem has been set read-only
[  245.910729][   T93] block nbd4: Attempted send on invalid socket
[  245.917164][   T93] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  245.927171][   T93] block nbd4: Attempted send on invalid socket
[  245.933375][   T93] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  246.894326][ T6085] loop2: detected capacity change from 0 to 128
[  247.230320][ T6085] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  247.316288][ T6085] FAT-fs (loop2): Filesystem has been set read-only
[  247.789988][ T6090] loop1: detected capacity change from 0 to 128
[  248.055882][ T6090] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  248.257675][ T6090] FAT-fs (loop1): Filesystem has been set read-only
[  249.006222][ T6108] loop2: detected capacity change from 0 to 128
[  249.351518][ T6108] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  249.394439][ T6108] FAT-fs (loop2): Filesystem has been set read-only
[  250.023329][   T93] block nbd0: Attempted send on invalid socket
[  250.029709][   T93] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  250.039616][   T93] block nbd0: Attempted send on invalid socket
[  250.045963][   T93] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  250.423448][ T6127] loop0: detected capacity change from 0 to 128
[  250.728551][ T6114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  250.758804][ T6127] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  251.347891][ T6127] FAT-fs (loop0): Filesystem has been set read-only
[  252.637525][ T6138] loop0: detected capacity change from 0 to 128
[  252.729099][ T6147] loop1: detected capacity change from 0 to 128
[  252.922271][ T6143] loop4: detected capacity change from 0 to 128
[  252.930655][ T6147] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  252.933383][ T6143] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  252.950945][ T6143] FAT-fs (loop4): Filesystem has been set read-only
[  252.958704][ T6147] FAT-fs (loop1): Filesystem has been set read-only
[  253.160458][ T6138] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  253.173829][ T6138] FAT-fs (loop0): Filesystem has been set read-only
[  254.211123][ T6158] binder: 6156:6158 ioctl c0306201 0 returned -14
[  254.225339][ T6158] binder: 6156:6158 ioctl 4018620d 0 returned -22
[  254.233672][ T6158] binder: 6156:6158 ioctl c0306201 200000001440 returned -11
[  254.244348][ T6158] netlink: 96 bytes leftover after parsing attributes in process `syz.0.538'.
[  255.253268][   T93] block nbd2: Attempted send on invalid socket
[  255.259764][   T93] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  255.269359][   T93] block nbd2: Attempted send on invalid socket
[  255.275543][   T93] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  255.656342][ T6172] loop0: detected capacity change from 0 to 128
[  255.778333][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.808044][ T6172] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  255.819360][ T6172] FAT-fs (loop0): Filesystem has been set read-only
[  255.844194][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.056424][ T6160] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  257.024704][ T6190] loop1: detected capacity change from 0 to 128
[  257.386640][ T6190] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  257.427021][ T6190] FAT-fs (loop1): Filesystem has been set read-only
[  258.299966][ T6198] netlink: 76 bytes leftover after parsing attributes in process `syz.1.552'.
[  258.688061][ T6200] loop4: detected capacity change from 0 to 128
[  259.132973][ T6200] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  259.166415][ T6200] FAT-fs (loop4): Filesystem has been set read-only
[  259.260460][ T6208] binder: 6204:6208 ioctl c0306201 0 returned -14
[  259.278869][ T6208] binder: 6204:6208 ioctl 4018620d 0 returned -22
[  259.287582][ T6208] binder: 6204:6208 ioctl c0306201 200000001440 returned -11
[  259.298927][ T6208] netlink: 96 bytes leftover after parsing attributes in process `syz.1.553'.
[  260.793378][ T6219] loop1: detected capacity change from 0 to 128
[  260.802004][ T6219] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  260.812344][ T6219] FAT-fs (loop1): Filesystem has been set read-only
[  260.860242][ T4383] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  261.590152][ T6222] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  262.286565][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  262.514768][ T6233] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  262.637166][    T7] usb 3-1: Using ep0 maxpacket: 32
[  262.645975][    T7] usb 3-1: config index 0 descriptor too short (expected 30768, got 27)
[  262.698198][    T7] usb 3-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  263.619758][    T7] usb 3-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[  263.717367][    T7] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  263.732146][    T7] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  263.837389][ T6249] loop4: detected capacity change from 0 to 128
[  264.249347][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.256484][ T6249] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  264.257514][    T7] usb 3-1: Product: syz
[  264.272371][    T7] usb 3-1: Manufacturer: syz
[  264.282407][    T7] usb 3-1: SerialNumber: syz
[  264.306328][ T6249] FAT-fs (loop4): Filesystem has been set read-only
[  264.513458][    T7] usb 3-1: USB disconnect, device number 3
[  267.408135][ T6272] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  267.906044][ T6287] loop0: detected capacity change from 0 to 128
[  268.296430][ T6287] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  268.414776][ T6287] FAT-fs (loop0): Filesystem has been set read-only
[  268.981788][ T6291] loop4: detected capacity change from 0 to 128
[  268.996743][ T6291] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  269.006949][ T6291] FAT-fs (loop4): Filesystem has been set read-only
[  272.057405][ T6316] loop1: detected capacity change from 0 to 128
[  272.426444][ T6316] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  272.456940][ T6316] FAT-fs (loop1): Filesystem has been set read-only
[  273.153487][ T6332] loop4: detected capacity change from 0 to 128
[  273.494211][ T6318] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  273.536403][ T6332] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  273.569048][ T6332] FAT-fs (loop4): Filesystem has been set read-only
[  275.017980][ T6346] loop2: detected capacity change from 0 to 128
[  275.524318][ T6349] binder: 6343:6349 ioctl c0306201 0 returned -14
[  275.540266][ T6349] binder: 6343:6349 ioctl 4018620d 0 returned -22
[  275.606060][ T6350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.594'.
[  275.824118][ T6346] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  275.855266][ T6346] FAT-fs (loop2): Filesystem has been set read-only
[  277.410330][ T6367] loop4: detected capacity change from 0 to 128
[  277.806542][ T6367] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  277.842437][ T6367] FAT-fs (loop4): Filesystem has been set read-only
[  278.477429][ T6377] loop0: detected capacity change from 0 to 128
[  278.896024][ T6377] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  278.920005][ T6377] FAT-fs (loop0): Filesystem has been set read-only
[  279.062392][ T6383] netlink: 76 bytes leftover after parsing attributes in process `syz.4.606'.
[  279.079085][ T6372] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  282.354679][   T52] block nbd1: Attempted send on invalid socket
[  282.361512][   T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  282.371702][   T52] block nbd1: Attempted send on invalid socket
[  282.378152][   T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  282.852975][ T6417] loop1: detected capacity change from 0 to 128
[  282.910321][ T6417] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  282.921083][ T6417] FAT-fs (loop1): Filesystem has been set read-only
[  283.536295][ T4257] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  283.736234][ T4257] usb 1-1: Using ep0 maxpacket: 32
[  283.746568][ T4257] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  283.946902][ T6425] loop4: detected capacity change from 0 to 128
[  284.362225][ T4257] usb 1-1: too many endpoints for config 0 interface 0 altsetting 48: 120, using maximum allowed: 30
[  284.386437][ T6425] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  284.404177][ T4257] usb 1-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120
[  284.444880][ T4257] usb 1-1: config 0 interface 0 has no altsetting 0
[  284.470279][ T4257] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  284.500173][ T6425] FAT-fs (loop4): Filesystem has been set read-only
[  284.508886][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.536528][ T4257] usb 1-1: Product: syz
[  284.540875][ T4257] usb 1-1: Manufacturer: syz
[  284.545873][ T4257] usb 1-1: SerialNumber: syz
[  284.634871][ T4257] usb 1-1: config 0 descriptor??
[  284.921879][ T4257] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  284.936148][ T5345] usb 1-1: Failed to submit usb control message: -71
[  284.961357][ T5345] usb 1-1: unable to send the bmi data to the device: -71
[  284.986590][ T4257] usb 1-1: USB disconnect, device number 8
[  285.135072][ T5345] usb 1-1: unable to get target info from device
[  285.142064][ T5345] usb 1-1: could not get target info (-71)
[  285.148354][ T5345] usb 1-1: could not probe fw (-71)
[  286.190831][ T6436] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  286.315580][ T6443] loop3: detected capacity change from 0 to 512
[  286.347764][ T6443] EXT4-fs: Ignoring removed nomblk_io_submit option
[  286.458002][ T6447] loop1: detected capacity change from 0 to 128
[  286.877015][ T6447] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  286.890452][ T6443] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  287.726737][ T6447] FAT-fs (loop1): Filesystem has been set read-only
[  287.773029][ T6443] EXT4-fs (loop3): 1 truncate cleaned up
[  287.780849][ T6443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  288.362144][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  291.486460][ T6474] loop3: detected capacity change from 0 to 128
[  292.076543][ T6474] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  292.111291][ T6474] FAT-fs (loop3): Filesystem has been set read-only
[  292.416508][   T93] block nbd2: Attempted send on invalid socket
[  292.422785][   T93] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  292.432200][   T93] block nbd2: Attempted send on invalid socket
[  292.438495][   T93] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  292.824032][ T6487] loop0: detected capacity change from 0 to 512
[  292.833372][ T6487] EXT4-fs: Ignoring removed nomblk_io_submit option
[  292.842090][ T6487] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  292.906422][ T4257] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  292.922020][ T6487] EXT4-fs (loop0): 1 truncate cleaned up
[  292.949634][ T6487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  293.096243][ T4257] usb 3-1: Using ep0 maxpacket: 32
[  293.127059][ T4257] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  293.159263][ T4257] usb 3-1: too many endpoints for config 0 interface 0 altsetting 48: 120, using maximum allowed: 30
[  293.467536][ T4257] usb 3-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120
[  293.521833][ T6489] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  293.556585][ T4257] usb 3-1: config 0 interface 0 has no altsetting 0
[  293.695342][ T4257] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  293.715153][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.774167][ T4257] usb 3-1: Product: syz
[  293.805677][ T4257] usb 3-1: Manufacturer: syz
[  293.840546][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  293.861194][ T4257] usb 3-1: SerialNumber: syz
[  293.963947][ T4257] usb 3-1: config 0 descriptor??
[  294.286491][ T4257] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  294.307929][ T4356] usb 3-1: Failed to submit usb control message: -71
[  294.341371][ T4356] usb 3-1: unable to send the bmi data to the device: -71
[  294.348815][ T4356] usb 3-1: unable to get target info from device
[  294.355263][ T4356] usb 3-1: could not get target info (-71)
[  294.361411][ T4356] usb 3-1: could not probe fw (-71)
[  294.375975][ T4257] usb 3-1: USB disconnect, device number 4
[  296.161141][ T6527] loop0: detected capacity change from 0 to 128
[  296.237437][ T6527] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  296.251806][ T6527] FAT-fs (loop0): Filesystem has been set read-only
[  298.059608][ T6543] loop4: detected capacity change from 0 to 512
[  298.174842][ T6543] EXT4-fs: Ignoring removed nomblk_io_submit option
[  298.319819][ T6543] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  298.450761][ T6540] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  298.517832][ T6534] loop0: detected capacity change from 0 to 128
[  298.619397][ T6534] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  298.630763][ T6534] FAT-fs (loop0): Filesystem has been set read-only
[  298.775960][ T6543] EXT4-fs (loop4): 1 truncate cleaned up
[  298.807350][ T6543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  299.089708][ T6554] netlink: 248 bytes leftover after parsing attributes in process `syz.2.654'.
[  299.107780][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  300.269226][   T52] block nbd4: Attempted send on invalid socket
[  300.275515][   T52] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  300.296169][   T52] block nbd4: Attempted send on invalid socket
[  300.302975][   T52] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  303.856354][ T6586] ubi: mtd0 is already attached to ubi31
[  304.229837][ T6583] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  304.766027][ T6601] loop4: detected capacity change from 0 to 128
[  304.802767][ T6601] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  304.813007][ T6601] FAT-fs (loop4): Filesystem has been set read-only
[  305.248149][ T6607] loop3: detected capacity change from 0 to 128
[  305.594145][ T6607] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  305.602863][ T6608] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  305.614450][ T6607] FAT-fs (loop3): Filesystem has been set read-only
[  305.758737][ T6612] binder: BINDER_SET_CONTEXT_MGR already set
[  305.783230][ T6606] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  305.824346][ T6612] binder: 6609:6612 ioctl 4018620d 200000000040 returned -16
[  306.183420][   T52] block nbd2: Attempted send on invalid socket
[  306.189918][   T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  306.199717][   T52] block nbd2: Attempted send on invalid socket
[  306.205919][   T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  307.761287][ T6624] ubi: mtd0 is already attached to ubi31
[  308.213328][ T6640] loop1: detected capacity change from 0 to 512
[  308.301336][ T6640] EXT4-fs: Ignoring removed nomblk_io_submit option
[  308.335442][ T6640] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  308.673467][ T6654] loop4: detected capacity change from 0 to 128
[  308.982499][ T6640] EXT4-fs (loop1): 1 truncate cleaned up
[  309.016686][ T6640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  309.027445][ T6654] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  309.044733][ T6642] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  309.279224][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  309.290312][ T6654] FAT-fs (loop4): Filesystem has been set read-only
[  309.827228][ T6661] loop1: detected capacity change from 0 to 128
[  310.341937][ T6665] loop2: detected capacity change from 0 to 128
[  310.768601][ T6661] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  310.784316][ T6665] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  310.837696][ T6665] FAT-fs (loop2): Filesystem has been set read-only
[  310.863896][ T6659] binder: BINDER_SET_CONTEXT_MGR already set
[  310.878299][ T6661] FAT-fs (loop1): Filesystem has been set read-only
[  310.969768][ T6659] binder: 6657:6659 ioctl 4018620d 200000000040 returned -16
[  311.450732][ T6676] netlink: 76 bytes leftover after parsing attributes in process `syz.2.690'.
[  311.595597][ T6680] binder: 6677:6680 ioctl c0306201 0 returned -14
[  311.671248][ T6681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.691'.
[  312.807672][ T6688] ubi: mtd0 is already attached to ubi31
[  313.381565][ T6692] binder: BINDER_SET_CONTEXT_MGR already set
[  313.481546][ T6692] binder: 6691:6692 ioctl 4018620d 200000000040 returned -16
[  314.739755][ T6709] loop2: detected capacity change from 0 to 128
[  314.774352][ T6709] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  314.786518][ T6709] FAT-fs (loop2): Filesystem has been set read-only
[  315.076954][ T6698] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  315.887094][ T6714] loop4: detected capacity change from 0 to 128
[  316.146646][ T6714] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  316.577689][ T6714] FAT-fs (loop4): Filesystem has been set read-only
[  316.627040][ T6725] loop2: detected capacity change from 0 to 128
[  316.648904][ T6725] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  316.728110][ T6725] FAT-fs (loop2): Filesystem has been set read-only
[  317.198418][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.204848][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.390952][ T6736] binder: 6734:6736 ioctl c0306201 0 returned -14
[  317.597706][ T6740] netlink: 196 bytes leftover after parsing attributes in process `syz.0.709'.
[  317.628115][ T6741] netlink: 96 bytes leftover after parsing attributes in process `syz.4.706'.
[  318.911286][ T6753] binder: BINDER_SET_CONTEXT_MGR already set
[  318.942358][ T6753] binder: 6751:6753 ioctl 4018620d 200000000040 returned -16
[  319.438791][ T6758] ubi: mtd0 is already attached to ubi31
[  319.685192][ T6752] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  320.830750][ T6768] loop3: detected capacity change from 0 to 128
[  320.909479][ T6768] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  321.006654][ T6768] FAT-fs (loop3): Filesystem has been set read-only
[  321.011976][ T6772] netlink: 76 bytes leftover after parsing attributes in process `syz.4.719'.
[  321.188546][ T6775] loop0: detected capacity change from 0 to 128
[  321.390853][ T6775] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  321.401342][ T6775] FAT-fs (loop0): Filesystem has been set read-only
[  322.029630][ T6787] xt_hashlimit: size too large, truncated to 1048576
[  325.019545][ T6809] ubi: mtd0 is already attached to ubi31
[  325.907998][ T6814] loop0: detected capacity change from 0 to 512
[  326.019763][ T6814] EXT4-fs: Ignoring removed nomblk_io_submit option
[  326.318991][   T52] block nbd2: Attempted send on invalid socket
[  326.325395][   T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  326.335978][   T52] block nbd2: Attempted send on invalid socket
[  326.342367][   T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  326.487462][ T6814] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  326.579833][ T6811] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  326.673246][ T6823] loop1: detected capacity change from 0 to 128
[  326.723331][ T6823] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  326.733740][ T6823] FAT-fs (loop1): Filesystem has been set read-only
[  327.259545][ T6831] netlink: 76 bytes leftover after parsing attributes in process `syz.2.733'.
[  327.365905][ T6814] EXT4-fs (loop0): 1 truncate cleaned up
[  327.390650][ T6596] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  327.404712][ T6832] xt_hashlimit: size too large, truncated to 1048576
[  327.454582][ T6814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  329.239393][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  329.421220][ T6841] binder: 6839:6841 ioctl c0306201 0 returned -14
[  329.432886][ T6841] binder: 6839:6841 ioctl 4018620d 0 returned -22
[  329.499208][ T6842] netlink: 96 bytes leftover after parsing attributes in process `syz.2.736'.
[  330.827025][ T6851] loop0: detected capacity change from 0 to 128
[  331.225729][ T6851] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  332.065879][ T6863] ubi: mtd0 is already attached to ubi31
[  332.616293][ T6851] FAT-fs (loop0): Filesystem has been set read-only
[  333.130861][ T6606] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  333.285153][ T6872] netlink: 76 bytes leftover after parsing attributes in process `syz.2.746'.
[  333.868396][ T6878] xt_hashlimit: size too large, truncated to 1048576
[  334.038995][ T6868] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  334.241020][ T6886] loop1: detected capacity change from 0 to 128
[  334.278850][ T6886] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  334.286182][ T4542] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  334.289091][ T6886] FAT-fs (loop1): Filesystem has been set read-only
[  334.646200][ T4542] usb 1-1: Using ep0 maxpacket: 32
[  334.693089][ T4542] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  334.821141][ T4542] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  334.830373][ T4542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.646451][ T4542] usb 1-1: Product: syz
[  335.650701][ T4542] usb 1-1: Manufacturer: syz
[  335.655424][ T4542] usb 1-1: SerialNumber: syz
[  335.662105][ T4542] usb 1-1: config 0 descriptor??
[  335.687783][ T4542] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  335.746576][ T6606] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  336.684058][ T6402] usb 1-1: Failed to submit usb control message: -71
[  336.691903][    T7] usb 1-1: USB disconnect, device number 9
[  336.699119][ T6402] usb 1-1: unable to send the bmi data to the device: -71
[  336.708527][ T6402] usb 1-1: unable to get target info from device
[  336.725242][ T6402] usb 1-1: could not get target info (-71)
[  336.738668][ T6402] usb 1-1: could not probe fw (-71)
[  336.768142][ T6896] binder: 6893:6896 ioctl c0306201 0 returned -14
[  336.857036][ T6894] binder: 6893:6894 ioctl 4018620d 0 returned -22
[  336.914793][ T6896] netlink: 96 bytes leftover after parsing attributes in process `syz.4.752'.
[  337.709768][ T6905] ubi: mtd0 is already attached to ubi31
[  338.628943][ T6912] netlink: 76 bytes leftover after parsing attributes in process `syz.4.758'.
[  338.966239][   T93] block nbd3: Attempted send on invalid socket
[  338.972562][   T93] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  338.985466][   T93] block nbd3: Attempted send on invalid socket
[  338.991741][   T93] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  339.249383][ T6918] loop2: detected capacity change from 0 to 128
[  339.406182][ T6918] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  339.416455][ T6918] FAT-fs (loop2): Filesystem has been set read-only
[  340.039733][ T6919] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  340.062017][ T6930] xt_hashlimit: size too large, truncated to 1048576
[  342.524582][ T6939] ubi: mtd0 is already attached to ubi31
[  343.069693][ T6941] netlink: 248 bytes leftover after parsing attributes in process `syz.0.766'.
[  343.952079][ T6949] binder: 6947:6949 ioctl c0306201 0 returned -14
[  343.964014][ T6949] binder: 6947:6949 ioctl 4018620d 0 returned -22
[  344.034149][ T6950] netlink: 96 bytes leftover after parsing attributes in process `syz.3.767'.
[  346.202721][ T6962] loop1: detected capacity change from 0 to 128
[  346.741111][ T6963] loop0: detected capacity change from 0 to 128
[  347.136569][ T6962] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  347.147053][ T6963] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  347.190723][ T6962] FAT-fs (loop1): Filesystem has been set read-only
[  347.295302][ T6965] netlink: 76 bytes leftover after parsing attributes in process `syz.3.774'.
[  347.344896][ T6963] FAT-fs (loop0): Filesystem has been set read-only
[  347.711961][ T6969] loop4: detected capacity change from 0 to 128
[  347.737589][ T6969] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  347.747841][ T6969] FAT-fs (loop4): Filesystem has been set read-only
[  349.641700][ T6978] ubi: mtd0 is already attached to ubi31
[  349.705349][ T4542] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  350.006328][ T4542] usb 3-1: Using ep0 maxpacket: 32
[  350.013451][ T4542] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  350.058239][ T4542] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  350.077914][ T4542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.102132][ T4542] usb 3-1: Product: syz
[  350.126741][ T4542] usb 3-1: Manufacturer: syz
[  350.145958][ T4542] usb 3-1: SerialNumber: syz
[  350.176992][ T4542] usb 3-1: config 0 descriptor??
[  350.353180][ T4542] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  350.410834][ T4362] usb 3-1: Failed to submit usb control message: -71
[  350.428936][ T4542] usb 3-1: USB disconnect, device number 5
[  350.438964][ T4362] usb 3-1: unable to send the bmi data to the device: -71
[  350.486215][ T4362] usb 3-1: unable to get target info from device
[  350.492627][ T4362] usb 3-1: could not get target info (-71)
[  350.535308][ T4362] usb 3-1: could not probe fw (-71)
[  351.936729][ T7015] netlink: 76 bytes leftover after parsing attributes in process `syz.2.786'.
[  352.175490][ T7018] loop4: detected capacity change from 0 to 128
[  352.586925][ T7018] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  352.619660][ T7018] FAT-fs (loop4): Filesystem has been set read-only
[  352.747722][ T7021] loop0: detected capacity change from 0 to 128
[  353.158209][ T7021] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  353.228920][ T7021] FAT-fs (loop0): Filesystem has been set read-only
[  354.595631][ T7024] ubi: mtd0 is already attached to ubi31
[  354.668751][ T6606] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  354.991221][ T7032] loop2: detected capacity change from 0 to 128
[  355.175504][ T7032] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  355.188096][ T7032] FAT-fs (loop2): Filesystem has been set read-only
[  357.052226][ T7046] binder: 7041:7046 ioctl c0306201 0 returned -14
[  357.122425][ T7047] netlink: 96 bytes leftover after parsing attributes in process `syz.4.796'.
[  361.757836][ T7059] ubi: mtd0 is already attached to ubi31
[  361.878243][ T7066] loop4: detected capacity change from 0 to 128
[  361.954325][ T7066] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  361.964866][ T7066] FAT-fs (loop4): Filesystem has been set read-only
[  362.576593][ T7070] loop2: detected capacity change from 0 to 128
[  362.586834][ T7070] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  362.597313][ T7070] FAT-fs (loop2): Filesystem has been set read-only
[  362.677590][ T6606] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  362.987202][ T7077] xt_hashlimit: size too large, truncated to 1048576
[  363.798851][ T7086] loop2: detected capacity change from 0 to 128
[  363.816510][ T7086] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  363.829632][ T7086] FAT-fs (loop2): Filesystem has been set read-only
[  368.315757][ T7115] loop4: detected capacity change from 0 to 128
[  368.776438][ T7115] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  368.839721][ T7115] FAT-fs (loop4): Filesystem has been set read-only
[  370.400366][ T7125] loop2: detected capacity change from 0 to 128
[  370.408996][ T7125] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  370.418988][ T7125] FAT-fs (loop2): Filesystem has been set read-only
[  370.477360][ T6606] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  372.004969][ T4287] Bluetooth: hci0: unexpected event for opcode 0x0000
[  373.459069][ T7149] netlink: 76 bytes leftover after parsing attributes in process `syz.0.820'.
[  374.119137][ T7170] loop1: detected capacity change from 0 to 128
[  374.132456][ T7170] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  374.142488][ T7170] FAT-fs (loop1): Filesystem has been set read-only
[  375.121600][  T952] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  375.376258][  T952] usb 4-1: Using ep0 maxpacket: 16
[  375.383176][  T952] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  376.423763][  T952] usb 4-1: config 1 has no interface number 0
[  376.468653][  T952] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  376.526311][  T952] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  376.642656][  T952] usb 4-1: config 1 interface 105 has no altsetting 0
[  376.703380][  T952] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  376.722043][  T952] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  376.731342][  T952] usb 4-1: Product: syz
[  376.735779][  T952] usb 4-1: Manufacturer: syz
[  376.745958][  T952] usb 4-1: SerialNumber: syz
[  376.753821][ T7161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  376.766414][ T7161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  376.879829][  T952] aqc111: probe of 4-1:1.105 failed with error -71
[  376.954267][  T952] usb 4-1: USB disconnect, device number 7
[  377.106324][ T7201] netlink: 76 bytes leftover after parsing attributes in process `syz.3.841'.
[  377.444069][ T7206] loop1: detected capacity change from 0 to 764
[  378.637788][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.644250][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.862573][ T7215] loop3: detected capacity change from 0 to 128
[  378.870269][ T7215] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  378.880766][ T7215] FAT-fs (loop3): Filesystem has been set read-only
[  380.831454][ T7238] loop1: detected capacity change from 0 to 32768
[  381.568697][ T7241] read_mapping_page failed!
[  381.942372][ T7245] loop0: detected capacity change from 0 to 256
[  383.235276][ T7245] FAT-fs (loop0): Directory bread(block 64) failed
[  383.276423][ T7245] FAT-fs (loop0): Directory bread(block 65) failed
[  383.405791][ T7245] FAT-fs (loop0): Directory bread(block 66) failed
[  383.446147][ T7245] FAT-fs (loop0): Directory bread(block 67) failed
[  383.453021][ T7245] FAT-fs (loop0): Directory bread(block 68) failed
[  384.848588][ T7245] FAT-fs (loop0): Directory bread(block 69) failed
[  384.866458][ T7245] FAT-fs (loop0): Directory bread(block 70) failed
[  384.873055][ T7245] FAT-fs (loop0): Directory bread(block 71) failed
[  384.930412][ T7245] FAT-fs (loop0): Directory bread(block 72) failed
[  384.956191][ T7245] FAT-fs (loop0): Directory bread(block 73) failed
[  385.938098][ T7274] loop2: detected capacity change from 0 to 128
[  386.164490][ T7274] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  386.176376][ T7274] FAT-fs (loop2): Filesystem has been set read-only
[  386.739026][ T7267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.864'.
[  388.730604][ T7293] binder_alloc: 7291: pid 7291 spamming oneway? 2 buffers allocated for a total size of 5120
[  388.773906][ T7293] binder_alloc: 7291: pid 7291 spamming oneway? 3 buffers allocated for a total size of 5128
[  388.826293][ T4320] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  389.046275][ T4320] usb 2-1: Using ep0 maxpacket: 16
[  389.060686][ T4320] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  389.115307][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.155528][ T4320] usb 2-1: Product: syz
[  389.161060][ T4320] usb 2-1: Manufacturer: syz
[  389.172090][ T4320] usb 2-1: SerialNumber: syz
[  389.191900][ T4320] usb 2-1: config 0 descriptor??
[  389.412394][    T7] usb 2-1: USB disconnect, device number 3
[  390.639836][ T7288] loop2: detected capacity change from 0 to 32768
[  390.705805][ T7288] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  390.767597][ T6606] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  390.952020][ T7313] binder: 7308:7313 ioctl 4018620d 0 returned -22
[  391.020888][ T7315] netlink: 96 bytes leftover after parsing attributes in process `syz.0.880'.
[  392.152489][ T7324] binder_alloc: 7321: pid 7321 spamming oneway? 2 buffers allocated for a total size of 5120
[  392.192756][ T7324] binder_alloc: 7321: pid 7321 spamming oneway? 3 buffers allocated for a total size of 5128
[  392.682490][ T7314] loop3: detected capacity change from 0 to 32768
[  392.682507][ T7334] loop1: detected capacity change from 0 to 128
[  392.762964][ T7314] XFS (loop3): Mounting V5 Filesystem
[  392.775599][ T7334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  392.812167][ T7334] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  392.895850][ T7314] XFS (loop3): Starting recovery (logdev: internal)
[  393.028718][ T7314] XFS (loop3): Ending recovery (logdev: internal)
[  394.498678][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  394.820340][ T7314] syz.3.881 (7314) used greatest stack depth: 20560 bytes left
[  394.855118][ T7330] loop0: detected capacity change from 0 to 32768
[  394.886521][ T4274] XFS (loop3): Unmounting Filesystem
[  394.950164][ T7330] (syz.0.886,7330,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  395.037273][ T7330] (syz.0.886,7330,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  395.133446][ T7330] JBD2: Ignoring recovery information on journal
[  395.279862][ T7371] binder: BINDER_SET_CONTEXT_MGR already set
[  395.288188][ T7330] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  395.316176][ T7371] binder: 7370:7371 ioctl 4018620d 200000000040 returned -16
[  395.473362][ T7330] (syz.0.886,7330,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC.
[  395.536944][ T7330] (syz.0.886,7330,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f
[  395.823482][ T7383] loop4: detected capacity change from 0 to 512
[  395.833601][ T7383] EXT4-fs: Ignoring removed nomblk_io_submit option
[  395.851556][ T7330] (syz.0.886,7330,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  395.872311][ T7383] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  395.886191][ T7330] (syz.0.886,7330,0):ocfs2_quota_read:201 ERROR: status = -5
[  395.958954][ T7383] EXT4-fs (loop4): 1 truncate cleaned up
[  395.964816][ T7383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  395.966117][ T7330] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 4
[  396.146443][ T7330] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  396.216335][ T7330] (syz.0.886,7330,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  396.257958][ T7330] (syz.0.886,7330,1):ocfs2_mknod:314 ERROR: status = -5
[  396.265763][ T7330] (syz.0.886,7330,1):ocfs2_mknod:502 ERROR: status = -5
[  396.420934][ T7389] loop3: detected capacity change from 0 to 4096
[  396.514392][ T7389] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  396.555869][ T4268] ocfs2: Unmounting device (7,0) on (node local)
[  396.595241][ T7368] loop2: detected capacity change from 0 to 32768
[  396.697298][ T7368] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  396.732899][   T26] audit: type=1800 audit(1775100565.828:3): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.901" name="file1" dev="loop3" ino=15 res=0 errno=0
[  396.847676][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  397.317169][ T7397] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  397.467377][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  397.471700][ T6596] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  398.866163][   T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  399.120241][   T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  399.136094][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.144234][   T14] usb 1-1: Product: syz
[  399.148878][   T14] usb 1-1: Manufacturer: syz
[  399.153506][   T14] usb 1-1: SerialNumber: syz
[  399.169989][   T14] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  399.430490][ T7430] loop1: detected capacity change from 0 to 128
[  399.668487][ T7430] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  399.678863][ T7430] FAT-fs (loop1): Filesystem has been set read-only
[  399.928493][   T14] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  400.103617][ T6606] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  401.036312][   T14] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  401.064813][   T14] ath9k_htc: Failed to initialize the device
[  401.140064][   T14] usb 1-1: ath9k_htc: USB layer deinitialized
[  401.330422][  T952] usb 1-1: USB disconnect, device number 10
[  403.029068][ T7455] binder_alloc: 7454: pid 7454 spamming oneway? 2 buffers allocated for a total size of 5120
[  403.174800][ T7442] loop3: detected capacity change from 0 to 32768
[  403.278210][ T7461] loop4: detected capacity change from 0 to 64
[  403.289345][ T7461] hfs: unable to parse mount options
[  403.535743][ T7463] loop4: detected capacity change from 0 to 16
[  403.544359][ T7463] erofs: Unknown parameter 'ÿÿÿÿ0xffffffffffffffffœôS2òç/¾b*üDObêhÄ*w³Rþ
[  403.544359][ T7463] ýß±Ì�ùÀùè™êšçÃZ+'
[  408.049067][ T7485] netlink: 88 bytes leftover after parsing attributes in process `syz.1.928'.
[  408.412210][ T7487] loop2: detected capacity change from 0 to 32768
[  408.467644][ T7487] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  409.528025][ T7503] random: crng reseeded on system resumption
[  409.832602][   T52] block nbd3: Attempted send on invalid socket
[  409.839114][   T52] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.858051][   T93] block nbd3: Attempted send on invalid socket
[  409.864588][   T93] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.078448][ T7516] binder: 7511:7516 ioctl 4018620d 0 returned -22
[  411.144276][ T7517] netlink: 96 bytes leftover after parsing attributes in process `syz.4.938'.
[  411.776516][ T6606] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  413.073562][ T7538] loop2: detected capacity change from 0 to 32768
[  413.092658][ T7538] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  414.662445][ T7545] binder_alloc: 7544: pid 7544 spamming oneway? 2 buffers allocated for a total size of 5120
[  416.668274][ T6606] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  416.743812][ T7560] binder: 7558:7560 ioctl 4018620d 0 returned -22
[  416.812847][ T7561] netlink: 96 bytes leftover after parsing attributes in process `syz.4.951'.
[  419.438867][ T7584] binder_alloc: 7583: pid 7583 spamming oneway? 2 buffers allocated for a total size of 5120
[  419.588596][ T7582] loop0: detected capacity change from 0 to 32768
[  419.595887][ T7582] =======================================================
[  419.595887][ T7582] WARNING: The mand mount option has been deprecated and
[  419.595887][ T7582]          and is ignored by this kernel. Remove the mand
[  419.595887][ T7582]          option from the mount to silence this warning.
[  419.595887][ T7582] =======================================================
[  419.792997][ T7582] JBD2: Ignoring recovery information on journal
[  419.910839][ T7588] loop1: detected capacity change from 0 to 128
[  419.918885][ T7588] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  419.929117][ T7588] FAT-fs (loop1): Filesystem has been set read-only
[  419.968057][ T6596] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  420.555165][ T7582] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  421.204193][ T4268] ocfs2: Unmounting device (7,0) on (node local)
[  421.529044][ T7604] loop1: detected capacity change from 0 to 64
[  421.539812][ T7604] hfs: unable to parse mount options
[  422.436822][ T7608] device syzkaller0 entered promiscuous mode
[  424.872332][ T7628] loop2: detected capacity change from 0 to 764
[  425.520435][ T7631] loop4: detected capacity change from 0 to 128
[  425.569879][ T7631] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  425.580194][ T7631] FAT-fs (loop4): Filesystem has been set read-only
[  425.927556][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'.
[  426.085795][ T7634] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.151557][ T7634] device macvlan2 entered promiscuous mode
[  426.205743][ T7634] device bond1 entered promiscuous mode
[  426.247482][ T7634] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  426.279315][ T7623] loop0: detected capacity change from 0 to 32768
[  426.287411][ T7634] device bond1 left promiscuous mode
[  426.329880][ T7623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.973 (7623)
[  426.404731][ T7623] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  426.472419][ T7623] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  426.522337][ T7623] BTRFS info (device loop0): setting nodatasum
[  426.555234][ T7623] BTRFS info (device loop0): force zlib compression, level 3
[  426.576653][ T7623] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  426.596258][    T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  426.659964][ T7623] BTRFS info (device loop0): use lzo compression, level 0
[  426.668578][ T7623] BTRFS info (device loop0): turning on flush-on-commit
[  426.677188][ T7623] BTRFS info (device loop0): enabling auto defrag
[  426.684475][ T7623] BTRFS info (device loop0): max_inline at 4096
[  426.706453][ T7623] BTRFS info (device loop0): using free space tree
[  426.813518][    T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  427.060525][    T7] usb 5-1: config 0 has no interface number 0
[  427.252748][    T7] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  427.331359][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.350352][    T7] usb 5-1: Product: syz
[  427.360508][    T7] usb 5-1: Manufacturer: syz
[  427.365389][    T7] usb 5-1: SerialNumber: syz
[  427.366873][ T7623] BTRFS info (device loop0): enabling ssd optimizations
[  427.378797][    T7] usb 5-1: config 0 descriptor??
[  427.408238][    T7] usb 5-1: selecting invalid altsetting 1
[  427.425503][    T7] dvb_ttusb_budget: ttusb_init_controller: error
[  427.438772][    T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  428.590823][ T7675] loop1: detected capacity change from 0 to 64
[  428.605147][ T7675] hfs: unable to parse mount options
[  430.672766][    T7] DVB: Unable to find symbol stv0299_attach()
[  430.790074][ T4268] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  430.803498][ T6883] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  431.189530][    T7] DVB: Unable to find symbol tda8083_attach()
[  431.189634][    T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  431.191581][    T7] usb 5-1: USB disconnect, device number 4
[  431.370716][ T7683] loop1: detected capacity change from 0 to 32768
[  433.810019][ T7681] tty tty27: ldisc open failed (-12), clearing slot 26
[  434.586119][ T7702] ubi: mtd0 is already attached to ubi31
[  437.806115][ T4323] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  438.041595][ T4323] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  438.061023][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.106296][ T4323] usb 4-1: Product: syz
[  438.110966][ T4323] usb 4-1: Manufacturer: syz
[  438.115691][ T4323] usb 4-1: SerialNumber: syz
[  438.152092][ T4323] usb 4-1: config 0 descriptor??
[  438.373806][ T4323] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  438.427370][ T7717] loop0: detected capacity change from 0 to 32768
[  438.448635][ T7726] binder_alloc: 7725: pid 7725 spamming oneway? 2 buffers allocated for a total size of 5120
[  438.486529][ T7717] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.994 (7717)
[  438.633788][ T7714] syz.4.992 (7714): drop_caches: 2
[  438.652669][ T7717] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  438.722858][ T7717] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  438.762638][ T7717] BTRFS info (device loop0): setting nodatasum
[  438.786393][ T7717] BTRFS info (device loop0): force zlib compression, level 3
[  438.815111][ T7717] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  440.209543][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.212251][ T7717] BTRFS info (device loop0): use lzo compression, level 0
[  440.231050][ T7717] BTRFS info (device loop0): turning on flush-on-commit
[  440.246110][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.252669][ T4323] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110
[  440.316242][ T7717] BTRFS info (device loop0): enabling auto defrag
[  440.323291][ T7717] BTRFS info (device loop0): max_inline at 4096
[  440.366820][ T7717] BTRFS info (device loop0): using free space tree
[  440.469232][ T7717] BTRFS error (device loop0): open_ctree failed: -12
[  440.584028][ T7747] loop1: detected capacity change from 0 to 2048
[  440.693302][ T4588] usb 4-1: USB disconnect, device number 8
[  440.821021][ T7747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  441.401698][ T7763] loop3: detected capacity change from 0 to 128
[  441.514445][ T7766] xt_CT: You must specify a L4 protocol and not use inversions on it
[  442.504058][ T7763] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  442.515462][ T7763] FAT-fs (loop3): Filesystem has been set read-only
[  442.661638][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  443.538798][ T7775] loop4: detected capacity change from 0 to 128
[  443.547368][ T7775] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  443.557501][ T7775] FAT-fs (loop4): Filesystem has been set read-only
[  444.543308][ T7796] xt_hashlimit: size too large, truncated to 1048576
[  444.723696][ T7789] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  446.256451][ T7813] loop3: detected capacity change from 0 to 764
[  446.467616][ T7817] loop2: detected capacity change from 0 to 1024
[  446.590741][ T7817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  446.892426][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  449.311487][ T7850] loop4: detected capacity change from 0 to 512
[  449.476574][ T7850] EXT4-fs: Ignoring removed nomblk_io_submit option
[  449.635762][ T7850] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  449.987082][ T7850] EXT4-fs (loop4): 1 truncate cleaned up
[  450.093592][ T7850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  451.766237][    T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  451.818736][ T7865] loop1: detected capacity change from 0 to 32768
[  451.897965][ T7865] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  451.954051][ T7865] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  451.996246][    T7] usb 3-1: Using ep0 maxpacket: 8
[  452.003284][    T7] usb 3-1: config 65 has too many interfaces: 73, using maximum allowed: 32
[  452.004720][ T7865] BTRFS info (device loop1): enabling disk space caching
[  452.061214][    T7] usb 3-1: config 65 has 3 interfaces, different from the descriptor's value: 73
[  452.078209][ T7865] BTRFS info (device loop1): force clearing of disk cache
[  452.111738][    T7] usb 3-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  452.112966][ T7865] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  452.179365][    T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  452.229346][ T7865] BTRFS info (device loop1): use zstd compression, level 3
[  452.229538][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.267841][ T7865] BTRFS info (device loop1): disk space caching is enabled
[  452.336107][    T7] usb 3-1: Product: syz
[  452.340627][    T7] usb 3-1: Manufacturer: syz
[  452.345230][    T7] usb 3-1: SerialNumber: syz
[  452.486187][ T7865] BTRFS info (device loop1): enabling ssd optimizations
[  452.494304][ T7865] BTRFS info (device loop1): rebuilding free space tree
[  452.659002][ T7865] BTRFS info (device loop1): disabling free space tree
[  452.692062][    T7] snd-usb-audio: probe of 3-1:65.0 failed with error -71
[  452.695929][ T7865] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  452.756314][ T7865] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  452.775789][    T7] usb 3-1: USB disconnect, device number 6
[  453.569042][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  454.150523][ T4269] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  454.425444][ T7907] loop4: detected capacity change from 0 to 512
[  455.336143][ T4315] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  456.086175][ T4315] usb 5-1: Using ep0 maxpacket: 32
[  456.094585][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.131243][ T4315] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  456.151633][ T4315] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  456.173724][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.204042][ T4315] usb 5-1: config 0 descriptor??
[  456.337044][ T7925] loop3: detected capacity change from 0 to 128
[  456.422812][ T7925] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  456.465303][ T7925] FAT-fs (loop3): Filesystem has been set read-only
[  457.364862][ T7930] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  458.161022][ T7956] xt_hashlimit: size too large, truncated to 1048576
[  458.387947][ T4540] usb 5-1: USB disconnect, device number 5
[  459.677102][ T7968] binder: 7967:7968 ioctl 4018620d 0 returned -22
[  461.776512][ T7978] ubi: mtd0 is already attached to ubi31
[  462.384986][ T7983] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  462.893053][ T7993] loop3: detected capacity change from 0 to 1024
[  462.964948][ T7993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  462.986591][ T7993] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.217168][ T7993] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1066: bg 0: block 112: padding at end of block bitmap is not set
[  463.253091][ T7993] EXT4-fs (loop3): Remounting filesystem read-only
[  463.267961][ T7993] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  463.292596][ T7993] EXT4-fs (loop3): Remounting filesystem read-only
[  463.547623][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  464.695772][ T8015] binder: 8014:8015 ioctl 4018620d 0 returned -22
[  468.483302][ T8033] device syzkaller0 entered promiscuous mode
[  468.627073][ T8034] ubi: mtd0 is already attached to ubi31
[  473.890926][ T8073] loop3: detected capacity change from 0 to 764
[  473.911237][ T8060] loop4: detected capacity change from 0 to 32768
[  475.061820][ T8060] JBD2: Ignoring recovery information on journal
[  475.445879][ T8079] binder: BINDER_SET_CONTEXT_MGR already set
[  475.456510][ T8060] JBD2: recovery failed
[  475.518410][ T8060] (syz.4.1085,8060,1):ocfs2_journal_load:1134 ERROR: Failed to load journal!
[  475.532572][ T4410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.560057][ T8079] binder: 8078:8079 ioctl 4018620d 200000000040 returned -16
[  475.600821][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  475.611218][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  475.624180][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  475.633924][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  475.642592][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  475.650421][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  475.657921][ T8060] (syz.4.1085,8060,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5
[  475.667638][ T8060] (syz.4.1085,8060,0):ocfs2_check_volume:2489 ERROR: status = -5
[  475.675708][ T8060] (syz.4.1085,8060,0):ocfs2_mount_volume:1821 ERROR: status = -5
[  475.717880][ T4410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.821127][ T8060] (syz.4.1085,8060,0):ocfs2_fill_super:1176 ERROR: status = -5
[  475.949636][ T4410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.104683][ T8086] loop3: detected capacity change from 0 to 128
[  476.516365][ T8086] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d)
[  476.562776][ T8086] FAT-fs (loop3): Filesystem has been set read-only
[  476.635461][ T8082] wlan1 speed is unknown, defaulting to 1000
[  476.838133][ T4410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.180107][ T8082] chnl_net:caif_netlink_parms(): no params data found
[  477.584094][ T8092] loop1: detected capacity change from 0 to 32768
[  477.637668][ T8092] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1097 (8092)
[  477.652824][ T8092] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  477.663960][ T8092] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  477.672801][ T8092] BTRFS info (device loop1): enabling disk space caching
[  477.679874][ T8092] BTRFS info (device loop1): force clearing of disk cache
[  477.687049][ T8092] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  477.696926][ T8092] BTRFS info (device loop1): use zstd compression, level 3
[  477.704182][ T8092] BTRFS info (device loop1): disk space caching is enabled
[  477.766171][ T4287] Bluetooth: hci2: command 0x0409 tx timeout
[  478.383277][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.389357][ T8107] binder: 8103:8107 ioctl 4018620d 0 returned -22
[  478.458556][ T8114] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1099'.
[  478.479781][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.546291][ T8082] device bridge_slave_0 entered promiscuous mode
[  478.683501][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  478.789276][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.018092][ T8131] loop0: detected capacity change from 0 to 32768
[  479.066304][    T7] usb 5-1: Using ep0 maxpacket: 16
[  479.492752][ T8134] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root
[  479.492752][ T8134] 
[  479.506707][ T8134] ERROR: (device loop0): remounting filesystem as read-only
[  479.517635][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.526693][ T8082] device bridge_slave_1 entered promiscuous mode
[  479.537489][    T7] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  479.573819][ T8092] BTRFS info (device loop1): enabling ssd optimizations
[  479.583384][ T8092] BTRFS info (device loop1): rebuilding free space tree
[  479.598415][ T8092] BTRFS info (device loop1): disabling free space tree
[  479.605454][ T8092] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  479.615462][ T8092] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  479.722973][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.739058][    T7] usb 5-1: Product: syz
[  479.755751][    T7] usb 5-1: Manufacturer: syz
[  479.846171][ T4287] Bluetooth: hci2: command 0x041b tx timeout
[  479.938068][    T7] usb 5-1: SerialNumber: syz
[  479.986929][    T7] usb 5-1: config 0 descriptor??
[  480.015405][ T4268] ------------[ cut here ]------------
[  480.030062][ T4268] kernel BUG at fs/jfs/inode.c:175!
[  480.046331][ T4268] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  480.052571][ T4268] CPU: 1 PID: 4268 Comm: syz-executor Not tainted syzkaller #0
[  480.060244][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  480.070527][ T4268] RIP: 0010:jfs_evict_inode+0x42d/0x430
[  480.076154][ T4268] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 9d aa e6 fe e9 16 fe ff ff e8 83 9f 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff
[  480.095901][ T4268] RSP: 0018:ffffc90003dd7ac0 EFLAGS: 00010293
[  480.102024][ T4268] RAX: ffffffff82ecd50d RBX: ffff88806831bbb0 RCX: ffff88802fead940
[  480.110127][ T4268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88806831bbb0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  480.118324][ T4268] RBP: 0000000000000001 R08: ffffffff90af73bf R09: 1ffffffff215ee77
[  480.126354][ T4268] R10: dffffc0000000000 R11: fffffbfff215ee78 R12: dffffc0000000000
[  480.134382][ T4268] R13: dffffc0000000000 R14: ffff88806831b838 R15: ffff88806831bbd8
[  480.142584][ T4268] FS:  0000555584204500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  480.151571][ T4268] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  480.158207][ T4268] CR2: 00007fcd2dd6e943 CR3: 000000005bb1a000 CR4: 00000000003506e0
[  480.166398][ T4268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  480.174449][ T4268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  480.182561][ T4268] Call Trace:
[  480.185869][ T4268]  <TASK>
[  480.188827][ T4268]  ? evict+0x4c3/0x8d0
[  480.193110][ T4268]  ? jfs_write_inode+0x220/0x220
[  480.198175][ T4268]  evict+0x4c9/0x8d0
[  480.202112][ T4268]  ? proc_nr_inodes+0x2f0/0x2f0
[  480.206996][ T4268]  ? do_raw_spin_unlock+0x11d/0x230
[  480.212326][ T4268]  ? do_raw_spin_unlock+0x11d/0x230
[  480.217550][ T4268]  evict_inodes+0x60c/0x6a0
[  480.222074][ T4268]  ? clear_inode+0x150/0x150
[  480.226790][ T4268]  generic_shutdown_super+0x93/0x340
[  480.232111][ T4268]  kill_block_super+0x7c/0xe0
[  480.236911][ T4268]  deactivate_locked_super+0x93/0xf0
[  480.242326][ T4268]  cleanup_mnt+0x42c/0x4b0
[  480.246788][ T4268]  ? lockdep_hardirqs_on+0x94/0x140
[  480.252038][ T4268]  task_work_run+0x1d0/0x260
[  480.256767][ T4268]  ? task_work_cancel+0x220/0x220
[  480.261917][ T4268]  ? exit_to_user_mode_loop+0x3b/0x110
[  480.267427][ T4268]  exit_to_user_mode_loop+0xe6/0x110
[  480.272876][ T4268]  exit_to_user_mode_prepare+0xee/0x180
[  480.278448][ T4268]  syscall_exit_to_user_mode+0x16/0x40
[  480.283939][ T4268]  do_syscall_64+0x58/0xa0
[  480.288406][ T4268]  ? clear_bhb_loop+0x60/0xb0
[  480.293252][ T4268]  ? clear_bhb_loop+0x60/0xb0
[  480.298056][ T4268]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  480.303973][ T4268] RIP: 0033:0x7fc6bf19da57
[  480.308406][ T4268] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  480.328473][ T4268] RSP: 002b:00007ffe78054268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  480.337024][ T4268] RAX: 0000000000000000 RBX: 00007fc6bf232048 RCX: 00007fc6bf19da57
[  480.345153][ T4268] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe78054320
[  480.353405][ T4268] RBP: 00007ffe78054320 R08: 00007ffe78055320 R09: 00000000ffffffff
[  480.361567][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe780553b0
[  480.369825][ T4268] R13: 00007fc6bf232048 R14: 00000000000751a6 R15: 00007ffe780553f0
[  480.377927][ T4268]  </TASK>
[  480.381101][ T4268] Modules linked in:
[  481.231500][ T4268] ---[ end trace 0000000000000000 ]---
[  481.239279][ T4268] RIP: 0010:jfs_evict_inode+0x42d/0x430
[  481.244918][ T4268] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 9d aa e6 fe e9 16 fe ff ff e8 83 9f 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff
[  481.288874][ T4268] RSP: 0018:ffffc90003dd7ac0 EFLAGS: 00010293
[  481.295079][ T4268] RAX: ffffffff82ecd50d RBX: ffff88806831bbb0 RCX: ffff88802fead940
[  481.333679][ T4268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88806831bbb0
[  481.358040][ T4268] RBP: 0000000000000001 R08: ffffffff90af73bf R09: 1ffffffff215ee77
[  481.360454][ T4542] usb 5-1: USB disconnect, device number 6
[  481.394806][ T4268] R10: dffffc0000000000 R11: fffffbfff215ee78 R12: dffffc0000000000
[  481.405493][ T4268] R13: dffffc0000000000 R14: ffff88806831b838 R15: ffff88806831bbd8
[  481.414008][ T4268] FS:  0000555584204500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  481.423387][ T4268] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  481.430460][ T4268] CR2: 000055b8ff88f560 CR3: 000000005bb1a000 CR4: 00000000003506f0
[  481.440191][ T4268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  481.451282][ T4268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  481.459541][ T4268] Kernel panic - not syncing: Fatal exception
[  481.466208][ T4268] Kernel Offset: disabled
[  481.470533][ T4268] Rebooting in 86400 seconds..