last executing test programs:

6m45.413455318s ago: executing program 4 (id=98):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

6m43.990782881s ago: executing program 4 (id=100):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x9)
socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
close(r4)
socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

6m43.011238598s ago: executing program 4 (id=104):
syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/684], 0x5, 0x1a9, &(0x7f0000000180)="$eJzsVb1qG0EQ/vbudKdLEVIHQYqokIpIp1MS0iVVUJknCBHSJRE5JbFOYEuokCu9hxu9iN/BhY0b2WAMLuTerNnd2fUZ2RiMwD/sB6dvZr6Z3b0VN/M728gCABfLSQdfIOHiJfYZgwfgDVOxr4HiU19xjfwTT3GV4jvEB8TZaPynnabJQBhFkGEiazHWv+KjNL7fKvHgZikE7n3jIKxKJfOnhqs5OnTHFsffVNrD36o1nrFx5X7ednAme9nectIRxg8AnHMuYl31sHyOC2A3l/Pakw9zwU2OaH7CEQn1Yf9/PRuN3/X67TD5lfyN4+bH6H0UfYjrP3tpEqlfltvCoY9FcBWA6KlhTi8AOKQG+wIGPf2R6aORzvK1fq45V97iGhzmmVrNRdJELfV2RuVS25zSJIC4mLI8tQf5Si0wuOQ0dI3K5nBQlEKt8y/tzsAg5goPgGgOz6zRWKCgHVFqnKT5aaqPPSMuE7eI58QLYj2z9Czy5ApH5FWmgI+t9nA4aIiQskwsNrH4ldnZoV3P/fzLAaUAFhYWFhYWFhZPDJcBAAD//3TkUUc=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

6m42.182672936s ago: executing program 4 (id=107):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000280))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

6m38.413062054s ago: executing program 4 (id=120):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0)
getresgid(0x0, 0x0, &(0x7f00000016c0))
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000380), 0x4)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76)
getpid()
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
shutdown(0xffffffffffffffff, 0x1)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x84}], 0x1, 0x3ff)
listen(0xffffffffffffffff, 0xda90)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}], {0x95, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

6m37.27071701s ago: executing program 4 (id=124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)

6m37.067519012s ago: executing program 32 (id=124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)

15.52264307s ago: executing program 5 (id=1093):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffff)

14.546495336s ago: executing program 5 (id=1094):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x89}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x880)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)

13.778824571s ago: executing program 5 (id=1095):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x89}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x880)
r7 = socket(0x10, 0x3, 0x6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000000340)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x9, 0xd73, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @private=0xa010102}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x318, 0x0, [], "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"}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0]}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x2, 0x3, 0x1, 0x0, 0x7, 0x80}, 0x1, {0x395}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x40, 0x3, 0x1, 0x0, 0x1, 0x8}, 0x2, {0xb, 0x40, 0x3, 0x11, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x2, "4483496842106eb0672b8808a32f1163ea3e9305330cdca8ecf53f4206fa169a2b1646692d670301009004d742fd186360cd9ab3625dfeeac1676e5efe29afac72ce4d30c9791fcf4621eda1589c020ee3ce4a9acbfbb0ac3d5c6b95fb7a6fd894b54efb645b1ca161b8cc95d183c9a56825a00dcbae59172a9a4b082f8d0cb11d7b3bc842a4d04d60b41b1f220e3f125e7b25538bc20f3862ccb45a5476768ff33f1ca2e97271f9564dafa52b56210c4a0dac4681763345976b6042e85a94c4cf9c2f97d93b0ab4dd8ae79b039e35603aec2fcc0507315b2681466c1853e08c1e0be60e138b77c5d3da7e3c1d02dad9f12262697ee2909f9a20d6640ae700ff3ff8e6817a6af47ffafa78d00fafde1362c28db7cd28dba139d99509365b6fba3dacdd06fa8aab9e19f5fdd6647c93eec737a4e0ef15e81bc6e82f3d6ce98182fd7acf234539a7f51ad027325e85c3f685033296300bb3a947acc20f7372e9e9917af66fb1d3c4a51fb9e1428ac90c1c4155f82dc89186ecde53da90aaa47e1993f8da2d2b3b3914e0e81efecd5e08e0a14e2a3bbbee1e0f57d7943d1a0aa518ec8b7f0b150cae352c438835f01fa0486c1b0f9f7e0b2a1396a73b86ade4ee9dbaa243243159d2a5fc8090b8e02d7500d73b5762ff6b4850d3334d59429435abb790aef3e3bfc1e0b83428fad654591c5ce1947f0ec206e846583fc121e1c98cf5e483af54c98c82165ffb85593361930f0379a01c5774f46f26b4760c490bcad03a1007ba5b4bd8d0cd39ee9502dc2d5b686eb6c4d709abb41e4993453eb001db73da04ef1138835791ac88407c50e5681cb0fafa185cba18acd4e55a2337087acf6b74a79ebc1bd5d0b4653e85d6d327257f2a7c8d7cb09b5efbe83da163383387be2695cc93867ce22b1c8ec308dee72eab3c8b2a26fb7b4e461d287d0a7aafee7ef3b4dabe64314578ecd91d1888e637254b07c6b8eb9198d984af60f735febb1674fb9bad8ccc623d0d09768957c25aaf0ed28a71fc404788bf45eddf937c12049a07d0b8a805ef52706781a79427dde339b5f3f724ad6d8f7c704ce34c5c79847df17fbc5d36f5fd6a1742ed1499a12b0526880f24ed76a1e3e0eef831303f9b52dc270b517e57c2b71442aa45b7ff07160febb6715a173a5142768ffb39417682423c9cdd85325a66962018a1243ddc58e77fb0d2a32ef5b770407c90dd4f9d2a65ee9857b4917de39539379aca0787399d823ff5f56ad9ebc0ad3f1380052c7ab5272c96a699346064d0902b6fd767ae3c7de8596eac2097060f460658b652f176321f40cba380a5a2eb73907de185aeff68840611f355ec5ec306a903dda6d61ecb6bd8a573da644dbc7c388af6e9df0582878bdfa6f3e8b187901d4f9c88db4a0c9f51e55e46561e4dcd80e1a64ec08925e01080992c6d7a0d9a941fa6e8f9466428246735a27f9b119550676b1803891c935204717bab4e06dfa8b6dcc65c5ff92d0ba47e2e821156eed06d87a29bbe2577df85cbb1044c4aee62d665f2ead5d0cc6fa6821110a69b92ebddcec085454924e335c4f47c4860ac0d86a8ed30227401c7319fb44fead1d38c9456efb982dae2087d6907892da00307d4db0f4194e85b0fc32e586fee9ddb9b7ceebbf151bed2e0b4ef2c799f14d26b9f4adb57bf740140ea1b34601457f5ae2209b14c09d2ec37eda088dbc9daf3ee5fe9562c4dbc8459d6c659947135972ecf830722649b7c0736a15c1705b1f4afbf491d7eac9809046e0ac382abba65774cfad9130570081aa02c7c6ed329c87c6f5f9a029b478a1156f885068a929680cb45f2efc0fe50babc41ba51df9346930c7ee0149e36a85fb5427e8522d85da20365eb98e6d0f56e522d3e746ff0e96be37122aa6c76cd7cced73b1886f3de153fba9fa8ddccf579dc35ff825d8ae8ee64614bb20501a65bd9332e0bbe357446afb1ad14b83198ef3dd382943de30303cc2fa9cce08d2c615f40201cccd8e6bb07dbf11e2d4a5ab626fe809be57d9815ddf270fd2dee9c57130f56c39ab7b6f6a87ba3c3d77046a46ee0d2a4a090e7d2fdbf33173ba12aa1c96a831e140074bef5e622f3af8db179c4b0b11a41b1491733fbfdbc49913122a06a01c0e895dd648727f759fb94f278b08ea2ca91f2c0be2e9eeb4f4625b1d4be21d11e5946b9465ef40e996b204e9b04ace4e4c9913c995e711c10bb2bd6f52e97a5070d5ccbd18af55ee59626c18806a82a300db2f6ac3f8c4135a58522dbcd99835cc23d71ca123132abd04c874e16fb45b6252088febc28b4e50d06f15caf7eb59b93f2da505a7d65d5cf9854abcc55de7d129ede2a22750d0c0de63d3d6e6c5593ea2bb3708b6fcb67f2586db12d11446d67ba3abd20fac6c6eff9ba0039380e2636786876e39d78b54752d2d11b078b9e2346c53c9f96acc537d8377843222fbd76741d7b29ed79b6f11ea9a80ad0f4b1be180849990428b6db0b9c75a71d1f9fb71d4cc505eeed4f7b1b71e511cde4a1d5bb017caf627eb6cdfdd4dc93e5efb62187a0e2c7e0ebf522325d9e7447fc9bf94d34192fb4215c55ef7924625e40561960bf0b1c659480ac37330d968aafabb9020b8b1aa7730a7ea02a3093ca2ad6ea732a42a718a046a6ada0c207490756858bbae02aac34cdf35b5dde469b01d048bca15343ae1874e45dc0ad9e69d0952eda86e6cf3a91040b77f809ed4bda00557040e18f0e0df3dd0355906aace1c584d49796e1ad1937dec0d53b896929cb6146d07a77bfa3a493e473963639ba6bb01f67cdd82f507db7edadab044a1349d4978c74ed4daa65f7cfc8754bc6b76da07a78e9abd2ba5a431e7f09e82bedc089a5d30f258a23550136c2c37328b8051d503329b776ec1a3d177384f468917e598bb1aaf75226552614a142bd668a904708599ea1fbf827964dd42608f765119b6e0b2a0051a8d1e907693ed4137882086278f2071a22dd11dd5ad377984a9741966792b211016f9f7018dbbe3594bcc8aa3259e19268e66c58815ee3d967619d3fd118d538469fed41f7628a2b80cb618455ffc45fbfd4a0bb52ef454471def1f9ab11db2e20282bcdfffeb2187be8b34b1d806ed044b379ffde2229ed08a402f59ea9c81458ea84650eeb36ce1f4febe9448da32ba4b0aa84412214ebd44e5e8b70c14a3d041f160b997a00e2c725e8b2c2afe9fa5ab84b350c36e1a15aa29954ea03597639acb3b1cfad1a2d98557bc462f309ec50124fbb36fcfb824eef7d86c717c7302c336c0fe98f8c7f06b4c51ec75140a3185d2e5d8de565ed2300046583838c1bb1ea4540f5dff7fca92429a3b7a42f290884dc867d115bf4b3309f55277ee1f4699df983c36ca15c3a2052421216f530c8cf6c734dabc0adecb543688dfa3acc888b19caf7f6a5e07460aed25900cdf6959c8f676559c0ca82992c2090726459e06c0bd3c8e979f4ef2ae0fd84c5b84f399fc955fd92c8dcee665bde8ec4980e17eb601ac2e56b30448e2fbcd5c855fce14b45e2445487389f670b8c3c883cbc9f880d6b32df8ce4800228e57140fcdc4210970e1586c5dbe31d96299452bef6ee37bba1c577e2c367de7630ebccb1"}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040))
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)

10.51689534s ago: executing program 3 (id=1109):
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4010, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$eJzs3cuOHFcZB/CvL9NzSeJYEYqMxWLiQEgI8d2GcIvDggUsQEJZY2syiQwOINsgEll4Ii8QG+ARYJMNi7wCD5BnQDwAluyssiAUqplz7Jpyj3sGz3R1z/n9pHHVV6dr+pT/U1PdU1V9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIH/7gp2d6EXH5t2nB0YinYxDRj1iu69WoZy7lxw8j4lhsNsfzETFYjKjX3/zn2YjzEfHJkYh792+t1YvP7rIfF07fvP75j77/zz/8+c6xn7/9s4/a7T/5wrmP/3g74uiPX//489v7s+0AAABQiqqqql56m388vb/vd90pAGAq8vG/SvJytVqtVu9r/af+Xh7/9FNd91d9SOumarzbzSIiNprr1K8ZnI4HgDmzEZ913QU6JP+iDSPiqa47Acy0Xtcd4EDcu39rrZfy7TWPB6tb7fnvlNvy3+g9uL9jp+kk7WtMpvXzdScG8dwO/VmeUh9mSc6/387/8lb7KD3uoPOflp3yH23d+lScnP+gnX/Ltvz/EhFzm39/bP6lyvkP95L/xmCO93/5AwAAAABw+OW//x/t+Pzv4pNvyq487vzv6pT6AAAAAAAAAAD77UnH/3vA+H8AAAAws+r36rW/Hnm4bKfPYquXv9WLeKb1eKAwq40PBwQAAAAAAAAAAAAApmMYsZKu61+IiGdWVqqqqr+a2vVePen686707YeSdf1LHgAAtnxypHUvfy9iKSLeSp/1t7CyslJVS8sr1Uq1vJhfz44Wl6rlxvvaPK2XLY528YJ4OKrqb7bUWK9p0vvlSe3t71c/16ga7KJj09Fh4AAQEVtHo3uOSIdMVT0bXb/KYT7Y/w8f+z+70fXPKQAAAHDwqqqqeunjvI+nc/79rjsFAExFPv63zwuo1Wp1MfWnWwtnpj9q9QHWTdV4t5tFRGw016lfMxiOHwDmzEZ81nUX6JD8izaMiGNddwKYab2uO8CBuHf/1lov5dtrHg9Wt9rztSDb8t/oba6X1x83naR9jcm0fr7uxCCe26E/z0+pD7Mk599v5395qz0P8X/Q+U/LTvnX23m0g/50Lec/aOffcnjy74/Nv1Q5/+Ge8h/IHwAAAAAAZlj++/9R53/zJgMAAAAAAADA3Ll3/9Zavu81n///0pjH9Zpz7v88NHL+vV3n7/7fwyTn32/n37ogZ9CYv/vmw/w/vX9r7aOb//5ins58/guDUf3cC73+YJiu+akW3omrcS3W4/Qjjx9uaz/zSPvCtvazE9rPPdI+qtuXc/vJWItfxbV4+0H74oQLo5YmtFcT2nP+A/t/kXL+w8ZXnf9Kau+1prW7H/Yf2e+b03HPc+nv/3np0b1r+u7E4MG2NdXbd6KD/mz+nzw1it/cWL9+8ndXbt68fibSZNvSs5Em+yznv5C+cv4vv7jVnn/vN/fXux+O9pz/rLgTwx3zf7ExX2/vK1PuWxdy/qP0lfPPR6Dx+/8857/z/v9qB/0BAAAAAAAAAAAAAACAx6mqavMW0UsRcTHd/9PVvZkAwHTl43+V5OVqtVqtVqsPX91UjfdGs4iIfzTXqV8z/H7cNwMAZtl/I+JfXXeCzsi/YPnz/urpl7vuDDBVN97/4BdXrl1bv36j654AAAAAAAAAAP+vPP7namP8583rgFrjRm8b//XNWJ3b8T/7o8HmWOdpg16Ix4//fSIeP/73cMLzLUxoH01oX5zQvjShfeyNHg05/xdSxjn/42nDShr/9eUO+tO1nP+JNNZzzv+rrcc186/+Ns/597flf+rme78+deP9D167+t6Vd9ffXf/lmdMXz5+7cP7chQun3rl6bf301r8d9vhg5fzz2NeuAy1Lzj9nLv+y5Py/kmr5lyXn/1Kq5V+WnH9+vSf/suT883sf+Zcl5/9KquVflpz/11It/7Lk/F9NtfzLkvP/eqrlX5ac/2upln9Zcv4nUy3/suT8T6Va/mXJ+eczXPIvS84/X9kg/7Lk/M+mWv5lyfmfS7X8y5LzP59q+Zcl538h1fIvS87/YqrlX5ac/zdSLf+y5Py/mWr5lyXn/3qq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1fIvS87/jVTLvywPP//fzJ5nVmajG2bM7P9M17+ZAAAAAAAAAAAAAIC2aVxO3PU2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9e4uRq77vAH72Zq8NATfciQO2uRlY2F3fwCEGk4SUkl4oCWnTkhrHXptNfKt3l5tQ2RTaEgWpSO0DfWiaRGkUqa1AVaSmEo2QGql9a54a8RK1Uh78AJWDkkqpAludOf//3zOzszPrtcc7c87ng+yfd+fMzH/OnJmd76LvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUG/zx6f+bCDLsvxP7a8NWXZx/u912d78y/ldq71CAAAA4Fy9V/v77y9N39i7jDPVbfNv1/3HdxcWFhayL7x76v2/WFhIJ2zKsqG1WVY7Lfr3X/x8oX6b4IVsdGCw7uvBDlc/1OH04Q6nj3Q4fU2H09d2OH20w+mLdsAi64rfx9Qu7MbaPzcUuzS7PBupnXZji3O9MLB2cDD+LqdmoHaehZFD2XR2JJvKJhadZ6D2X5a9sTm/rgezeF2Ddde1Mcuy0z997kBcw0DYxzdmDVdWU3/fvXN/tundnz534Nuzb1/TanbcDYtWmmVbt+TrfDHLzvy6KhvI1qZ9Etc5WLfOjS3WOdSwzoHa+fJ/N6/z9DLXGW/3aFjnD9usc2P43tM3ZFk2ny25TbMXssFsfdO1pv09WhwR+WXkd+UHs+GzOk42L+M4yc/zkxsaj5PmYzLu/81hnwwvsYb6u+OdL69ZtN9Xepzkt7oXjtX8sh/Or3R0tP5Xqw3Har7NczctfQy0vO9aHAPpWK47BrZ0OgYG1wzVjoHBM2ve0nAMTC46z2A2ULuuUze1PwbGZ4+eGJ955tk7po/uPzx1eOrY5MSuHdt37ti+c+f4oekjUxPF32e3S/vI+mwwHYNbwnNNPAZvadq2/pBc+Mb5exyM9sjjIL/tn7k5X9DFg9kSx3i+zYtbz/1xkH7u1z0OhuseBy2fU1s8DoaX8TjItzm9dXk/M4fr/rRaQ7eeCzfUHQOr+fMwv87Hbl36uXBjWNdLt53tz8OhRcdAvFkD4bGXfye93hu9O+yXxcfFtfkJF63J5mamTt759P7Z2ZOTWRgXxGV191Xz8bK+7jZli46XwbM+Xvb+3S9vvrbF9zeEfTV6e/v7Kt9mx1j7+6r27N56fzZ8d1sWxnl2ofdnq59m+f5MWaLN/sy3efGOc38tmHJJ3fPfSKfnv6GR4eL5byjtjZGG57/Fd81QbWVZdvqO5T3/jYQ/F/r57/Ieef7L99Vjd7Y/BvJtXho/22NguO3z3w1hDoT13BoSw2hd7n+/dvp8cZjW3Zcdj5vh4ZFw3AzHa2w8brYvOk9+afl1b51Y2XGz9YbG+6rhdUsJj5t8X/3lRPvjJt/mzclzf+5YF/9Z99yxptMxMDK0Jl/vSDoIiue7hXXxGLgzO5Adz45kB9N58ns5v66xbcs7BtaEPxf6uePqHjkG8n316rb2x0C+zQ+2n9/XTlvDd9I2da+dmn+/sFTmv3b4zOU177bznfnzdX5iR/vfDeXbvL3jbHNG+/10e/jORS32U/PjZ6lj+mB2YfbT1WGdR3a2/91Uvs3lu5Z5PO3Nsuytybdqv+8Kv9/9x7n//G7D731b/U75rcm3Hhp/5Edns34AAFbu/drf82uK15p1/8d6Of//HwAAAOgLMfcPhpnI/wAAAFAaMfcPhZnI/wAAAFAaMfcPh5lUJP8/cffu1957PkvvBrgQxNPjbnj43mK72PGeD19vWjgj//7HvjXy2leeX951D2ZZ9suHPtRy+yfujesqnIjr/Ejj9xe5+vplXf/jj57Zrv79E07vLi4/3p7lHgaxq/zG+Lba5W56ZrI233woq81H5l96obj84uu4/antxfZ/Hd60ZO+hgYbzbw3ruTHMTeE9ZR7ee2Y/5DOe77WN1/3rZZ89c33xfANbLqndzFf/qLjc+B5Rr1xWbB9v91Lr/5evfue1fPunb2q9/ucHW6//VLjcn4T5iz3F9vX7/Ct16/+TsP54ffF8d37z+y3X//pVxfavh+Pi62E2r//+P//we63ur3g9e+8pzhevf+J/d9TOFy8vXn7z+kefn2zYH82X/+a7xeXsefJnQ/Xbx+/H64kev6fx+B4I929DjzzLsu/8adawn7OPFuf756b1x8s7cU/r9d/etM4TA9fXzn/m9mxouF1f+9ttLW9vXM/ef9jQcHteeSDsv3fHf5Bf7qlHwvEYTv+/HxaX1/xepq8/0Ph8E7f/+obicRsvb7xp/a80rX/++nzfdV7/g+8W63/9vrUN69/7yXA8PVjMTus//DeXNpz/G98u7o+TT40dOz4zN32wbq/WP47Xjq5bf9HFH7jk0vBc2vz1vuOzT0yd3DSxaSLLNvXhWwZ2e/3fDPN/ijF//q+h8KOfFcfdy58qfm7d8vPi61fC9x8P92f8+fi1vxppOF6b7/f5+4p5ruu/Laxjua766n9fv6wNT33+jbl/+uO3m18XxNtz4orR2u17dfOVtdMG3ixOb36+6uS/rmh8XP94eKI2vxf260J4Z+YtVxbX13z58b1JXv508fiNr+Ti+bOm9xPZMNR4O851/T8Or2O+f3Xj8188Pr73fNO7OW/IBvIlzIfnh2y+OD1uFff3y6evbHl98X14svlrzmaZS5p5Zmb8yPSxuafHZ6dmZsdnnnl239Hjc8dm99Xeu3TfFzud/8zje33t8X1wateOrPZoP16MLlvt9Z949MDBuyZuPjh1aP/codlHT0ydPHxgZubA1MGZm/cfOjT1VKfzTx/cM7lt9/a7to0dnj645+7du7fvHps+djxfRrGoDnZNfGns2Ml9tbPM7Nmxe3Lnzh0TY0ePH5zac9fExNhcp/PXfjaN5ed+cuzk1JH9s9NHp8Zmpp+d2jO5e9eubR3f/fHoiUMzm8ZPzh0bn5uZOjle3JZNs7Vv5z/7Op2fapg5Hp7vmgyEV+efu31Xen/c3Le+vORFFZs0vjzN3gnvBRV/vnX6Oub+kTCTiuR/AAAAqIKY+8Mb/585Qf4HAACA0oi5f22YifwPAAAApRFz/2iYSUXyv/6//r/+v/6//r/+fzfp/+v/t6P/r//fz+vX/9f/p7Ne6//H3L8uyyqZ/wEAAKAKYu5fH2Yi/wMAAEBpxNx/UZiJ/A8AAAClEXP/xWEm1cj/I83/1P/X/9f/r+//x231/zP9f/3/FdL/1/9vR/9f/7+f19+D/f91+v/0ml7r/8fc/4Ewk2rkfwAAAKiEmPsvCTOR/wEAAKA0Yu6/NMxE/gcAAIDSiLl/Q5hJRfK/z//X/9f/9/n/+v/6/92k/6//347+v/5/P6+/B/v/Pv+fntNr/f+Y+38lzKQi+R8AAACqIOb+D4aZyP8AAABQGjH3XxZmIv8DAABAacTcf3mYSUXyv/6//r/+v/6//r/+fzfp/+v/t6P/r//fz+vX/9f/p7Ne6//H3H9FmElF8j8AAABUQcz9V4aZyP8AAABQGjH3XxVmIv8DAABAacTcf3WYSUXyv/6//r/+v/6//r/+fzfp/+v/t6P/r//fz+vX/9f/p7Ne6//H3H9NmElF8j8AAABUQcz914aZyP8AAABQGjH3fyjMRP4HAACA0oi5f2OYSUXyv/6//r/+v/6//r/+fzf1V/9/cMlT9P8L+v+N9P/1//X/9f9pr9f6/zH3fzjMpCL5HwAAAKog5v7rwkzkfwAAACiNmPuvDzOR/wEAAKA0Yu7fFGZSkfyv/6//r/+v/6//r//fTf3V/1+a/n9B/7+R/r/+v/6//j/t9Vr/P+b+zWEmFcn/AAAAUAUx928JM5H/AQAAoDRi7r8hzET+BwAAgNKIuf/GMJOK5H/9f/1//X/9f/1//f9u0v/X/29H/1//v5/Xr/+/vP7/mk4XRKn1Wv8/5v6bwkwqkv8BAACgCmLuvznMRP4HAACA0oi5/5YwE/kfAAAASiPm/q1hJhXJ//r/+v/6//r/+v/6/92k/7/s/v+6laxL/7+g/78yq92f7/f16//7/H8667X+f8z9t4aZVCT/AwAAQBXE3H9bmIn8DwAAAKURc//tYSbyPwAAAJRGzP1jYSYVyf/6//r/+v/6//r/+v/dVNb+f3oe9fn/+v/6//r/+v/6/yyp1/r/MfffEWZSkfwPAAAAVRBz/51hJvI/AAAAlEbM/eNhJvI/AAAAlEbM/RNhJhXJ//r/+v/6//r/+v/6/91U1v5/Fz7/f0Xr1/8v6P+vzGr35/t9/fr/+v901mv9/5j7J8NMKpL/AQAAoApi7t8WZiL/AwAAQGnE3L89zET+BwAAgNKIuX9HmElF8r/+v/6//r/+v/6//n836f/r/7ej/6//38/r1//X/6fRYIvv9Vr/P+b+nWEmFcn/AAAAUAUx9+8KM5H/AQAAoDRi7r8rzET+BwAAgNKIuf/uMJOK5H/9f/1//X/9/97t/zdev/6//n8r+v/6/5n+/4qtdn++39ev/6//T2fnt/9/6Tn3/2Pu3x1mUpH8DwAAAFUQc/9HwkzkfwAAACiNmPvvCTOR/wEAAKCvtPocwijm/o+GmVQk/+v/l73/v7BW/1//v3/7/437U/9f/78V/X/9/0z/f8VWuz/f7+vX/9f/p7Pz2/9f9PL0rPv/MffvCTOpSP4HAACAKoi5/94wE/kfAAAASiPm/vvCTOR/AAAAKI2Y+/eGmVQk/+v/l73/33uf/z+Q6f/r/xf0//X/zwf9f/3/TP9/xVbanw8vW/T/e6j/nx9D+v/0ol7r/8fcf3+YSUXyPwAAAFRBzP0fCzOR/wEAAKA0Yu7/eJiJ/A8AAAClEXP/J8JMKpL/9f/1/33+v/6//r/+fzfp/+v/t6P/35/9/0j/v3f6/z7/n17Va/3/mPsfCDOpSP4HAACAKoi5/5NhJvI/AAAAlEbM/b8aZiL/AwAAQGnE3P9gmElF8r/+v/6//r/+v/6//n836f/r/7ej/6//38/r1//X/6ezXuv/x9z/a2EmFcn/AAAAUAUx9z8UZiL/AwAAQGnE3P+pMBP5HwAAAEoj5v5fDzOpSP7X/78w/f/BdPn6//r/+v/6//r/55P+v/5/pv+/Yqvdn+/39ev/6//TWa/1/2Pu/40wk4rkfwAAAKiCmPt/M8xE/gcAAIDSiLn/t8JM5H8AAAAojZj7Hw4zqUj+1//3+f/6//r/Pdv/H27cn/r/+v+t6P/r/2f6/yu22v35fl+//r/+P531Wv8/5v7fDjOpSP4HAACAKoi5/5EwE/kfAAAASiPm/k+Hmcj/AAAAUBox938mzKQi+V//X/9f/1//v2f7/037U/9f/78V/X/9/0z/f8VWuz/f7+vX/9f/p7Ne6//H3P9omElF8j8AAABUQcz9nw0zkf8BAACgNGLu/50wE/kfAAAASiPm/t8NM6lI/tf/1//X/9f/1//X/+8m/f/F/f/8OWw1+/9rlrOh/v+y6P/r/+v/6//TXq/1/2Pu/1yYSUXyPwAAAFRBzP2/F2Yi/wMAAEBpxNz/+2Em8j8AAACURsz9j4WZVCT/6//r/+v/6//r/+v/d5P+v8//b0f/X/+/n9ev/6//T2e91v+Puf/zYSYVyf8AAABQBTH3/0GYifwPAAAApRFz/74wE/kfAAAASiPm/sfDTCqS//X/9f/1//X/9f/1/7tJ/1//vx39f/3/fl6//r/+P531Wv8/5v79YSYVyf8AAABQBTH3fyHMRP4HAACA0oi5/0CYifwPAAAApRFz/8Ewk4rkf/1//X/9f/1//X/9/27S/9f/b0f/X/+/n9ev/6//T2e91v+PuX8qzKQi+R8AAACqIOb+Q2Em8j8AAACURsz9h8NM5H8AAAAojZj7nwgzqUj+1//X/9f/1//X/9f/7yb9f/3/dvT/9f/7ef36//r/dNZr/f+Y+6fDTCqS/wEAAKAKYu7/YpiJ/A8AAAClEXP/l8JM5H8AAAAojZj7j4SZVCT/6//r/+v/l7D/P6z/n+n/9wz9f/3/dvT/9f/7ef36//r/dNZr/f+Y+4+GmVQk/wMAAEAVxNx/LMxE/gcAAIDSiLn/eJiJ/A8AAAClEXP/iTCTiuR//X/9f/3/Evb/ff5/jf5/b9D/1/9vR/9f/7+f16//r/9PZ73W/4+5/w/DTCqS/wEAAKAKYu4/GWYi/wMAAEBpxNw/E2Yi/wMAAEBpxNw/G2ZSkfyv/6//r/+v/6//r//fTfr/+v/t6P/r//fz+vX/9f/prNf6/zH3z4WZVCT/AwAAQBXE3P9kmIn8DwAAAKURc/9TYSby//+zd5+7YtxFH8ePn+hRQAhxLVwBl8A18IZroPcWeu+9995777333iEQOgSkIDgzE8D2rm3OcnZnPp83I8DEf/lIiX6KvloAAABoI3f/3eKWIftf/6//1//vpv8/7fz0//p//f9V0f/r/0/0/9fsvPv5o79f/6//Z93e+v/c/XePW4bsfwAAAJggd/894hb7HwAAANrI3X/PuMX+BwAAgDZy998rbhmy//X/+n/9/276f9//z59rx/7/wq2/rf7/bOn/9f8n+v9rdt79/NHfr//X/7Nub/1/7v57xy1D9j8AAABMkLv/PnGL/Q8AAABt5O6/b9xi/wMAAEAbufvvF7cM2f/6f/2//l//r//3/f8t6f/1/0v0//r/I79f/6//Z93e+v/c/fePW4bsfwAAAJggd/8D4hb7HwAAANrI3f/AuMX+BwAAgDZy9z8obhmy//X/+n/9v/5f/6//35L+X/+/RP+v/z/y+/X/+n/W7a3/z93/4LhlyP4HAACACXL3PyRusf8BAACgjdz9D41b7H8AAABoI3f/w+KWIftf/6//1//r//X/+v8t6f/1/0v0//r/I79f/6//Z93m/f+db/jnvdL+P3f/DXHLkP0PAAAAE+Tuf3jcYv8DAABAG7n7HxG32P8AAADQRu7+R8YtQ/b/Jfr/6070/0P7/1su6P/1//vs/2+Ov8vo//X/F9P/6/9P9P/X7PL9/JX9Sej/9f/6f9Zs3v+v9P7/+Z9z9z8qbhmy/wEAAGCC3P2PjlvsfwAAAGgjd/9j4hb7HwAAANrI3f/YuGXI/vf9f/3/WX7/P/+6+v9T+n/f/9f/6//1/8s27P/vmn+Y+v/LO+9+/ujvX+r/73QF79f/M8He+v/c/Y+LW4bsfwAAAJggd//j4xb7HwAAANrI3f+EuMX+BwAAgDZy9z8xbhmy//X/+v+z7P/HfP//tqf/f/3/v79H/6//vxT9v/5/ie//6/+P/H7f/9f/s25v/X/u/ifFLUP2PwAAAEyQu//JcYv9DwAAAG3k7n9K3GL/AwAAQBu5+58atwzZ//p//b/+3/f//6v+/zr9v/5/mf5f/79E/6//P/L79f/6f9btrf/P3f+0uGXI/gcAAIAJcvc/PW6x/wEAAKCN3P3PiFvsfwAAAGgjd/8z45Yh+1//r//X/+v/ff9f/78l/X+7/v+C/v9W+n/9v/5f/8+yvfX/ufufFbcM2f8AAAAwQe7+Z8ct9j8AAAC0kbv/OXGL/Q8AAABt5O5/btwyZP/r//X/+n/9v/5f/78l/X+7/t/3//+F/l//r//X/7Nsb/1/7v7nxS1D9j8AAABMkLv/+XGL/Q8AAABt5O5/Qdxi/wMAAEAbuftfGLcM2f/6f/2//l//r//X/29J/6//X6L/v3T/f5vL/H76/329/2z6//zp6//paW/9f+7+F8UtQ/Y/AAAATJC7/8Vxi/0PAAAAbeTuf0ncYv8DAABAG7n7Xxq3DNn/l+v/b7rd6f+u/78y+v9Lv1//r//X/+v/9f/6/yX6f9//P/L7ff9f/8+6vfX/uftfFrcM2f8AAAAwQe7+l8ct9j8AAAC0kbv/FXGL/Q8AAABt5O5/ZdwyZP/7/r/+X/+v/9f/6/+3pP/X/y85UP9//aX+S/2//l//r/9n2d76/9z9r4pbhux/AAAAmCB3/6vjFvsfAAAA2sjd/5q4xf4HAACANnL3vzZuGbL/9f/6/3Pv//9P/5/0//Fz1f/r/6+C/l//f+L7/9fsvPv5o79f/6//Z93e+v/c/a+LW4bsfwAAAJggd//r4xb7HwAAANrI3f+GuMX+BwAAgDZy978xbhmy//X/+v9z7/99/7/o/+Pnqv/X/18F/b/+/0T/f83Ou58/+vv1//p/1u2t/8/d/6a4Zcj+BwAAgAly9785brH/AQAAoI3c/W+JW+x/AAAAaCN3/1vjliH7X/+v/9f/6//1//r/Len/9f9L9P/6/yO/X/+v/2fd3vr/3P1vi1uG7H8AAACYIHf/2+MW+x8AAADayN3/jrjF/gcAAIA2cve/M24Zsv/1/0fv/+9yY7xA/6//1//r/3dJ/6//X6L/1/8f+f36f/0/6/bW/+fuf1fcMmT/AwAAwAS5+98dt9j/AAAA0Ebu/vfELfY/AAAAtJG7/71xy5D9P6P///+Lflmf/t/3//X/+n/9/77p//X/S/T/+v8jv1//r/9n3d76/9z974tbhux/AAAAmCB3//vjFvsfAAAA2sjd/4G4xf4HAACANnL3fzBuGbL/Z/T/F9P/nzrz/v+WO+j/9f9F/6//P9H/6/9X6P/1/0d+f+v+/8KJ/p8zsbf+P3f/h+KWIfsfAAAAJsjd/+G4xf4HAACANnL3fyRusf8BAACgjdz9H40b7nj783vS/5T+X//v+//6f/2//n9L+n/9/xL9v/7/yO9v3f/7/j9nZG/9f+7+j8Ut/v0/AAAAtJG7/+Nxi/0PAAAAbeTu/0TcYv8DAABAG7n7Pxm3DNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/H/n9+n/9P+v21v/n7v9U3DJk/wMAAMAEufs/HbfY/wAAANBG7v7PxC32PwAAALSRu/+zccuQ/a//1//r//X/+n/9/5b0//r/Jfp//f+R36//1/+zbm/9f+7+z8UtQ/Y/AAAATJC7//Nxi/0PAAAAbeTu/0LcYv8DAABAG7n7vxi3DNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/H/n9+n/9P+v21v/n7v9S3DJk/wMAAMAEufu/HLfY/wAAANBG7v6vxC32PwAAALSRu/+rccuQ/d+5/1/6Zfr/U/p//f+J/l//vzH9v/5/if5f/3/k9+v/9f+s21v/n7v/a3HLkP0PAAAAE+Tu/3rcYv8DAABAG7n7vxG32P8AAADQRu7+b8YtQ/Z/5/5/if7/lP5f/3+i/9f/b0z/r/9fov/X/x/5/fp//T/r9tb/5+7/VtwyZP8DAADABLn7vx232P8AAADQRu7+78Qt9j8AAAC0kbv/u3HLkP2v/9f/6//1//p//f+W9P/6/yX6f/3/kd+v/9f/s25v/X/u/u/FLUP2PwAAAEyQu//7cYv9DwAAAG3k7v9B3GL/AwAAQBu5+38YtwzZ//p//b/+X/+v/9f/b0n/r/9fov/X/x/5/fp//T/r9tb/5+7/UdwyZP8DAADABLn7fxy32P8AAADQRu7+n8Qt9j8AAAC0kbv/p3HLkP2v/9f/6//1//p//f+Wxvb///jHqv5/lf5f/3/k9+v/9f+s21v/n7v/Z3HLkP0PAAAAE+Tu/3ncYv8DAABAG7n7fxG32P8AAADQRu7+X8YtQ/a//l//r//X/+v/9f9bGtv/+/7/FdH/6/+P/H79v/6fdXvr/3P33xi3DNn/AAAAMEHu/l/FLfY/AAAAtJG7/9dxi/0PAAAAbeTuvyluGbL/9f/6/5b9//X6f/2//n8v9P/6/yX6f/3/kd+v/9f/s25v/X/u/t/ELUP2PwAAAEyQu/+3cYv9DwAAAG3k7v9d3GL/AwAAQBu5+38ftwzZ//p//X/L/t/3//X/+v/d0P/r/5fo//X/R36//l//z7q99f+5+/8QtwzZ/wAAADBB7v4/xi32PwAAALSRu/9PcYv9DwAAAG3k7v9z3DJk/+v/9f/6f/2//l//vyX9v/5/if5f/3/k9+v/9f+s21v/n7v/L3HLkP0PAAAAE+Tuvzlusf8BAACgjdz9f41b7H8AAABoI3f/3+KWIftf/6//1//r//X/+v8t6f/1/0v0//r/I79f/6//Z93e+v/c/X8PAAD//0WUJn8=")
r1 = fanotify_init(0x4, 0x1)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0)
fanotify_mark(r1, 0x61, 0x40000028, r2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_emit_vhci(0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@getlink={0x44, 0x12, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_WEIGHT={0x8, 0xf, 0x2}, @IFLA_PHYS_PORT_ID={0x5, 0x22, "8f"}, @IFLA_ADDRESS={0xa, 0x1, @link_local}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$vsock_stream(r3, 0x0, 0x0)
listen(0xffffffffffffffff, 0x4)
truncate(&(0x7f0000000040)='./file1\x00', 0x40006)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10042, 0x0)
sendfile(r8, r8, 0x0, 0x1000000000007)

9.448008022s ago: executing program 5 (id=1111):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x4, 0xa4})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x291, 0x0, 0xfffffffffffffff9}]})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
connect$inet6(r9, 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xa}}}, 0x24}}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000002900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x30, 0x10}], 0x1, 0x40840)
syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98000282901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0)

9.15077333s ago: executing program 1 (id=1112):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x400000000010, 0x3, 0x9)
socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
close(r3)
socket(0x10, 0x803, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

8.946674152s ago: executing program 3 (id=1113):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
pread64(r0, 0x0, 0x0, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

8.122415939s ago: executing program 1 (id=1116):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x0, {0x0, 0x80000001, 0x5}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc810, &(0x7f0000000200)=ANY=[], 0x11, 0x6b8, &(0x7f0000000c40)="$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")
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYBLOB="0c000280060012"], 0x24}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x1000, 0x103)

7.232879561s ago: executing program 2 (id=1117):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r3 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0)

6.963563666s ago: executing program 1 (id=1118):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

5.958921944s ago: executing program 2 (id=1119):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(r4, 0x0, 0x0)
writev(r4, 0x0, 0x0)

5.958357094s ago: executing program 3 (id=1120):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
fcntl$getflags(0xffffffffffffffff, 0x401)
r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f0705"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000000)="93", 0xf5)

4.894627836s ago: executing program 2 (id=1121):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x89}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x880)
r7 = socket(0x10, 0x3, 0x6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000000340)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x9, 0xd73, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @private=0xa010102}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x318, 0x0, [], "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"}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0]}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x2, 0x3, 0x1, 0x0, 0x7, 0x80}, 0x1, {0x395}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x40, 0x3, 0x1, 0x0, 0x1, 0x8}, 0x2, {0xb, 0x40, 0x3, 0x11, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x2, "4483496842106eb0672b8808a32f1163ea3e9305330cdca8ecf53f4206fa169a2b1646692d670301009004d742fd186360cd9ab3625dfeeac1676e5efe29afac72ce4d30c9791fcf4621eda1589c020ee3ce4a9acbfbb0ac3d5c6b95fb7a6fd894b54efb645b1ca161b8cc95d183c9a56825a00dcbae59172a9a4b082f8d0cb11d7b3bc842a4d04d60b41b1f220e3f125e7b25538bc20f3862ccb45a5476768ff33f1ca2e97271f9564dafa52b56210c4a0dac4681763345976b6042e85a94c4cf9c2f97d93b0ab4dd8ae79b039e35603aec2fcc0507315b2681466c1853e08c1e0be60e138b77c5d3da7e3c1d02dad9f12262697ee2909f9a20d6640ae700ff3ff8e6817a6af47ffafa78d00fafde1362c28db7cd28dba139d99509365b6fba3dacdd06fa8aab9e19f5fdd6647c93eec737a4e0ef15e81bc6e82f3d6ce98182fd7acf234539a7f51ad027325e85c3f685033296300bb3a947acc20f7372e9e9917af66fb1d3c4a51fb9e1428ac90c1c4155f82dc89186ecde53da90aaa47e1993f8da2d2b3b3914e0e81efecd5e08e0a14e2a3bbbee1e0f57d7943d1a0aa518ec8b7f0b150cae352c438835f01fa0486c1b0f9f7e0b2a1396a73b86ade4ee9dbaa243243159d2a5fc8090b8e02d7500d73b5762ff6b4850d3334d59429435abb790aef3e3bfc1e0b83428fad654591c5ce1947f0ec206e846583fc121e1c98cf5e483af54c98c82165ffb85593361930f0379a01c5774f46f26b4760c490bcad03a1007ba5b4bd8d0cd39ee9502dc2d5b686eb6c4d709abb41e4993453eb001db73da04ef1138835791ac88407c50e5681cb0fafa185cba18acd4e55a2337087acf6b74a79ebc1bd5d0b4653e85d6d327257f2a7c8d7cb09b5efbe83da163383387be2695cc93867ce22b1c8ec308dee72eab3c8b2a26fb7b4e461d287d0a7aafee7ef3b4dabe64314578ecd91d1888e637254b07c6b8eb9198d984af60f735febb1674fb9bad8ccc623d0d09768957c25aaf0ed28a71fc404788bf45eddf937c12049a07d0b8a805ef52706781a79427dde339b5f3f724ad6d8f7c704ce34c5c79847df17fbc5d36f5fd6a1742ed1499a12b0526880f24ed76a1e3e0eef831303f9b52dc270b517e57c2b71442aa45b7ff07160febb6715a173a5142768ffb39417682423c9cdd85325a66962018a1243ddc58e77fb0d2a32ef5b770407c90dd4f9d2a65ee9857b4917de39539379aca0787399d823ff5f56ad9ebc0ad3f1380052c7ab5272c96a699346064d0902b6fd767ae3c7de8596eac2097060f460658b652f176321f40cba380a5a2eb73907de185aeff68840611f355ec5ec306a903dda6d61ecb6bd8a573da644dbc7c388af6e9df0582878bdfa6f3e8b187901d4f9c88db4a0c9f51e55e46561e4dcd80e1a64ec08925e01080992c6d7a0d9a941fa6e8f9466428246735a27f9b119550676b1803891c935204717bab4e06dfa8b6dcc65c5ff92d0ba47e2e821156eed06d87a29bbe2577df85cbb1044c4aee62d665f2ead5d0cc6fa6821110a69b92ebddcec085454924e335c4f47c4860ac0d86a8ed30227401c7319fb44fead1d38c9456efb982dae2087d6907892da00307d4db0f4194e85b0fc32e586fee9ddb9b7ceebbf151bed2e0b4ef2c799f14d26b9f4adb57bf740140ea1b34601457f5ae2209b14c09d2ec37eda088dbc9daf3ee5fe9562c4dbc8459d6c659947135972ecf830722649b7c0736a15c1705b1f4afbf491d7eac9809046e0ac382abba65774cfad9130570081aa02c7c6ed329c87c6f5f9a029b478a1156f885068a929680cb45f2efc0fe50babc41ba51df9346930c7ee0149e36a85fb5427e8522d85da20365eb98e6d0f56e522d3e746ff0e96be37122aa6c76cd7cced73b1886f3de153fba9fa8ddccf579dc35ff825d8ae8ee64614bb20501a65bd9332e0bbe357446afb1ad14b83198ef3dd382943de30303cc2fa9cce08d2c615f40201cccd8e6bb07dbf11e2d4a5ab626fe809be57d9815ddf270fd2dee9c57130f56c39ab7b6f6a87ba3c3d77046a46ee0d2a4a090e7d2fdbf33173ba12aa1c96a831e140074bef5e622f3af8db179c4b0b11a41b1491733fbfdbc49913122a06a01c0e895dd648727f759fb94f278b08ea2ca91f2c0be2e9eeb4f4625b1d4be21d11e5946b9465ef40e996b204e9b04ace4e4c9913c995e711c10bb2bd6f52e97a5070d5ccbd18af55ee59626c18806a82a300db2f6ac3f8c4135a58522dbcd99835cc23d71ca123132abd04c874e16fb45b6252088febc28b4e50d06f15caf7eb59b93f2da505a7d65d5cf9854abcc55de7d129ede2a22750d0c0de63d3d6e6c5593ea2bb3708b6fcb67f2586db12d11446d67ba3abd20fac6c6eff9ba0039380e2636786876e39d78b54752d2d11b078b9e2346c53c9f96acc537d8377843222fbd76741d7b29ed79b6f11ea9a80ad0f4b1be180849990428b6db0b9c75a71d1f9fb71d4cc505eeed4f7b1b71e511cde4a1d5bb017caf627eb6cdfdd4dc93e5efb62187a0e2c7e0ebf522325d9e7447fc9bf94d34192fb4215c55ef7924625e40561960bf0b1c659480ac37330d968aafabb9020b8b1aa7730a7ea02a3093ca2ad6ea732a42a718a046a6ada0c207490756858bbae02aac34cdf35b5dde469b01d048bca15343ae1874e45dc0ad9e69d0952eda86e6cf3a91040b77f809ed4bda00557040e18f0e0df3dd0355906aace1c584d49796e1ad1937dec0d53b896929cb6146d07a77bfa3a493e473963639ba6bb01f67cdd82f507db7edadab044a1349d4978c74ed4daa65f7cfc8754bc6b76da07a78e9abd2ba5a431e7f09e82bedc089a5d30f258a23550136c2c37328b8051d503329b776ec1a3d177384f468917e598bb1aaf75226552614a142bd668a904708599ea1fbf827964dd42608f765119b6e0b2a0051a8d1e907693ed4137882086278f2071a22dd11dd5ad377984a9741966792b211016f9f7018dbbe3594bcc8aa3259e19268e66c58815ee3d967619d3fd118d538469fed41f7628a2b80cb618455ffc45fbfd4a0bb52ef454471def1f9ab11db2e20282bcdfffeb2187be8b34b1d806ed044b379ffde2229ed08a402f59ea9c81458ea84650eeb36ce1f4febe9448da32ba4b0aa84412214ebd44e5e8b70c14a3d041f160b997a00e2c725e8b2c2afe9fa5ab84b350c36e1a15aa29954ea03597639acb3b1cfad1a2d98557bc462f309ec50124fbb36fcfb824eef7d86c717c7302c336c0fe98f8c7f06b4c51ec75140a3185d2e5d8de565ed2300046583838c1bb1ea4540f5dff7fca92429a3b7a42f290884dc867d115bf4b3309f55277ee1f4699df983c36ca15c3a2052421216f530c8cf6c734dabc0adecb543688dfa3acc888b19caf7f6a5e07460aed25900cdf6959c8f676559c0ca82992c2090726459e06c0bd3c8e979f4ef2ae0fd84c5b84f399fc955fd92c8dcee665bde8ec4980e17eb601ac2e56b30448e2fbcd5c855fce14b45e2445487389f670b8c3c883cbc9f880d6b32df8ce4800228e57140fcdc4210970e1586c5dbe31d96299452bef6ee37bba1c577e2c367de7630ebccb1"}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040))
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)

4.536723367s ago: executing program 0 (id=1122):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
getrandom(&(0x7f0000000280)=""/4096, 0x1000, 0x0)

4.380273496s ago: executing program 0 (id=1123):
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4010, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$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")
r1 = fanotify_init(0x4, 0x1)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0)
fanotify_mark(r1, 0x61, 0x40000028, r2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_emit_vhci(0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@getlink={0x44, 0x12, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_WEIGHT={0x8, 0xf, 0x2}, @IFLA_PHYS_PORT_ID={0x5, 0x22, "8f"}, @IFLA_ADDRESS={0xa, 0x1, @link_local}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$vsock_stream(r3, 0x0, 0x0)
listen(0xffffffffffffffff, 0x4)
truncate(&(0x7f0000000040)='./file1\x00', 0x40006)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10042, 0x0)
sendfile(r8, r8, 0x0, 0x1000000000007)

4.224059005s ago: executing program 5 (id=1124):
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000580)="53807a552564029134cd11068d423216e03f43cd996c33b3dc0d59665cebd9aa6ecffbcaef83d586e99c00655f01c0edab0702df4b3171c395c4a9aa0537237ac547b1b5644fde7c6fc13eaa8076dedf74d65561face3e8400255ffb524ed7", 0x5f}], 0x3, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x14, &(0x7f00000001c0), 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x1c}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x1)
write$tun(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1a6)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)

3.589511992s ago: executing program 2 (id=1125):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000006c0))

3.537027405s ago: executing program 1 (id=1126):
rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000100)={[0x3f7]}, 0x0, 0x0, 0x8)
tkill(r0, 0x7)

3.45229067s ago: executing program 1 (id=1127):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f556234701", 0xd0}], 0x1, &(0x7f0000000b40)}}], 0x1, 0x4000081)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.43935607s ago: executing program 0 (id=1128):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x3)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000021c0)={r2, 0x13})

3.353408736s ago: executing program 2 (id=1129):
syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x8d, 0x32, 0xd5, 0x8, 0x5ef, 0x8884, 0xd3dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x35, 0xe8, 0x9, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xc0, 0x6, 0xd7, 0x52}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0xa, 0x2, 0x0)
inotify_init()
socket$inet_sctp(0x2, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x85b8, 0x10100, 0x1, 0x1ad}, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3.083128062s ago: executing program 0 (id=1130):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r3 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0)

2.889797142s ago: executing program 3 (id=1131):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(r4, 0x0, 0x0)
writev(r4, 0x0, 0x0)

1.810731415s ago: executing program 3 (id=1132):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$eJzs3U1rE0Ecx/HfbJImtqVuH0QQT9WCJ+nDRbwUJO/AiydRmwjFUEErqCf1LL4A730LvgCPnsSz4K0nX0BukZmdNZtkN5uGppuk3w8kbLrzn4fsbGf+KSUCcGk9qP852Tu1DyOVVJJ0Xwok1aSypGu6XntzdHx43Go2hlVUchH2YRRFmoEyB0fNtFAb5yK80L4qazn5M0xG7bc+FN0HFM/d/SkCqervTne+duE9m4zLPulNW2291UrR/QAAFMuv/4Ff55f9/j0IpC2/7Peu/zO+gLaL7sCEfc85n1j/XZbVMfb6XnWnuvmeS+HKqvigk73TtLoWc9paUDSzejaYJi+rdH0Jrjw/bDXvHrxsNQJ90r5X6RbbcM+NaOrG4pzWHn8crHrT56Yj5pfJ2s5myY2hYsewm+x/osj6ObboM+7ht6b5YX6axybUVzX+7//KHWMvk7tSYd+Vivq/nV2jG+WCXKmMUa66Rm74FkYZZUkZGYniGbXadwHDvH66qLW+qGh0OzlR66lRuzlRG/1R3dmcHTlp5ot5ZDb1V99UT+z/A/tub2mUO9OWcSX9zBg6nrIrGbrZGc/Pm6klg3FHhDF81jPd08rrd+9fPG21mq/m9sDeiYOn7AoyLT28+IN4EkxLf+b2wL7JhbQerzvj15P9q4OP5edH96KfMZBJMC/svstE+V8iX9l2mzX7FPbu06vJ2E5e5YkadzJygzX3vJidwfUwLr9ZSvnr4mCLQ3OuW3ek26O0GAl9P6fP/jhBpq5fesLn/wAAAAAAAAAAAAAAAAAAALPm/P7loKasU0WPEQAAAAAAAAAAAAAAAAAAAACAWZfy/b/VQr//96GiV3z/LzBx/wIAAP//nY5x9w==")
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
socket$can_bcm(0x1d, 0x2, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002)
close(r0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

1.744614479s ago: executing program 1 (id=1133):
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000001c0)={&(0x7f0000000340)=[{0x3a4, 0x1, 0x0, 0x0}], 0x1})

1.047533119s ago: executing program 0 (id=1134):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

1.008696062s ago: executing program 3 (id=1135):
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
syz_open_procfs$userns(r3, &(0x7f0000000580))
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']})
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}})
syz_clone(0x1100000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0)

936.594146ms ago: executing program 5 (id=1136):
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4010, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$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")
r1 = fanotify_init(0x4, 0x1)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0)
fanotify_mark(r1, 0x61, 0x40000028, r2, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "b4b3ca39f1e34108acedf05c999388af", 0x5}}}, 0x1a)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x4)
shutdown(r3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10042, 0x0)

494.819211ms ago: executing program 0 (id=1137):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x5)
io_submit(0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x2c}}, 0x0)

0s ago: executing program 2 (id=1138):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

kernel console output (not intermixed with test programs):

121.004967][ T4997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'.
[  122.121911][ T5004] loop0: detected capacity change from 0 to 4096
[  122.190460][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.208012][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.285526][ T4809] device veth0_vlan entered promiscuous mode
[  122.309093][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.353000][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.410018][ T4809] device veth1_vlan entered promiscuous mode
[  122.435467][ T5004] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  122.464671][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.577951][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.587356][ T5014] loop2: detected capacity change from 0 to 4096
[  122.590444][ T5004] ntfs3: loop0: Failed to load $Extend.
[  122.631852][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  122.637790][ T5014] ntfs3: Bad value for 'gid'
[  122.772950][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  122.781934][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  122.791207][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  122.815653][ T4809] device veth0_macvtap entered promiscuous mode
[  122.834795][ T4985] loop3: detected capacity change from 0 to 32768
[  122.869086][ T4809] device veth1_macvtap entered promiscuous mode
[  122.910738][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.144878][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.156358][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.271890][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.451962][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.553778][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.638064][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.706919][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.744646][ T4809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.753344][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  123.787550][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  123.796354][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  123.836152][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  123.858496][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.870603][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.969714][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.008905][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.387820][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.407436][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.422385][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.436633][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.964842][ T4809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.021347][ T4809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.093094][ T4809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.141628][ T4809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.193292][ T4809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.295633][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.306018][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.561568][ T4520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.614331][ T4520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.657948][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.658022][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.680379][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.724964][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.101811][ T5061] loop5: detected capacity change from 0 to 4096
[  127.855357][ T5056] loop2: detected capacity change from 0 to 32768
[  128.051786][ T4332] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (4332)
[  130.154582][ T5097] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  131.848005][ T5126] loop5: detected capacity change from 0 to 4096
[  131.929095][ T5126] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  131.953515][ T5132] loop2: detected capacity change from 0 to 64
[  132.006642][ T5126] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  132.026707][ T5126] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  132.096774][ T5126] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  132.241421][ T5126] ntfs: volume version 3.1.
[  132.426889][ T5126] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  132.496780][ T5126] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  132.806346][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  132.816881][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  133.043247][ T5125] loop0: detected capacity change from 0 to 32768
[  133.813709][ T5152] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  133.840217][ T5152] CIFS: Unable to determine destination address
[  135.064749][ T5160] loop2: detected capacity change from 0 to 2048
[  135.408126][ T5164] loop5: detected capacity change from 0 to 32768
[  136.301142][ T5164] XFS (loop5): Mounting V5 Filesystem
[  136.462063][ T5164] XFS (loop5): Ending clean mount
[  136.468712][ T5192] netlink: 36 bytes leftover after parsing attributes in process `syz.1.190'.
[  137.028593][ T5190] loop2: detected capacity change from 0 to 2048
[  137.148077][ T5190] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  137.237340][ T5190] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  137.312701][ T4809] XFS (loop5): Unmounting Filesystem
[  137.622848][ T5190] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  137.863372][ T5190] UDF-fs: Scanning with blocksize 512 failed
[  138.111495][ T5190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.440006][ T5205] loop0: detected capacity change from 0 to 4096
[  139.900796][ T5225] loop5: detected capacity change from 0 to 64
[  143.440461][ T5265] netlink: 36 bytes leftover after parsing attributes in process `syz.2.206'.
[  144.650774][ T5282] loop5: detected capacity change from 0 to 64
[  146.284954][ T5302] overlayfs: failed to resolve './bus': -2
[  148.359257][ T5321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.218'.
[  149.252082][ T5332] loop0: detected capacity change from 0 to 8192
[  149.304172][ T5332] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  149.339869][ T5332] REISERFS (device loop0): using ordered data mode
[  149.384829][ T5334] loop3: detected capacity change from 0 to 8192
[  149.392641][ T5332] reiserfs: using flush barriers
[  149.407783][ T5332] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  149.424512][ T5332] REISERFS (device loop0): checking transaction log (loop0)
[  149.441909][ T5332] REISERFS (device loop0): Using r5 hash to sort names
[  149.457760][ T5332] REISERFS (device loop0): using 3.5.x disk format
[  149.473145][ T5332] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  149.505999][ T5334] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  149.580528][ T5334] REISERFS (device loop3): using ordered data mode
[  149.646809][ T5334] reiserfs: using flush barriers
[  149.692780][ T5334] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  150.166405][ T5334] REISERFS (device loop3): checking transaction log (loop3)
[  150.299552][ T5334] REISERFS (device loop3): Using r5 hash to sort names
[  150.635415][ T5334] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  151.199607][ T5355] loop2: detected capacity change from 0 to 64
[  153.478418][ T5384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.232'.
[  155.042721][ T4292] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  155.317896][ T4292] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  155.782496][ T5389] loop3: detected capacity change from 0 to 4096
[  156.286781][ T4380] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  156.535314][ T5389] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  156.747000][ T4380] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.847953][ T4380] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  157.033093][ T5389] ntfs3: loop3: Failed to load $Extend.
[  157.217259][ T4380] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  157.292236][ T4380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.456242][ T4380] usb 6-1: Product: syz
[  157.555168][ T4380] usb 6-1: Manufacturer: syz
[  157.643921][ T4380] usb 6-1: SerialNumber: syz
[  157.911716][ T4380] usb 6-1: config 0 descriptor??
[  157.956396][ T5396] fido_id[5396]: Failed to read report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0001/report_descriptor': No such device
[  158.148765][ T4380] usb 6-1: can't set config #0, error -71
[  159.973182][ T4380] usb 6-1: USB disconnect, device number 2
[  161.389828][ T5430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'.
[  162.534853][ T4228] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  163.938159][ T4228] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  164.460516][ T4387] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  165.270746][ T5477] loop3: detected capacity change from 0 to 4096
[  166.229903][ T4387] usb 1-1: device not accepting address 2, error -71
[  166.243332][ T5477] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  166.267462][ T5477] ntfs3: loop3: Failed to load $Extend.
[  168.852517][ T1325] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  169.030410][ T1325] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  169.636299][ T4380] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  170.506809][ T4380] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.365555][ T4380] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  171.645685][ T5562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.266'.
[  171.736614][ T4380] usb 6-1: string descriptor 0 read error: -71
[  171.742897][ T4380] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  171.757609][ T4380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.818693][ T4380] usb 6-1: config 0 descriptor??
[  171.853702][ T4380] usb 6-1: can't set config #0, error -71
[  171.917966][ T4380] usb 6-1: USB disconnect, device number 3
[  172.014110][ T5545] fido_id[5545]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  172.222364][ T5567] loop1: detected capacity change from 0 to 4096
[  172.339389][ T5567] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  172.415342][ T5567] ntfs3: loop1: Failed to load $Extend.
[  175.907553][ T4380] Bluetooth: hci1: command 0x0406 tx timeout
[  175.908639][ T4531] Bluetooth: hci3: command 0x0406 tx timeout
[  175.913624][ T4380] Bluetooth: hci0: command 0x0406 tx timeout
[  175.975363][ T4380] Bluetooth: hci2: command 0x0406 tx timeout
[  176.677811][ T4292] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  176.825933][ T4292] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  177.546737][ T4380] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  177.966961][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.047785][ T4380] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  178.366906][ T4380] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  178.438953][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.590198][ T4380] usb 1-1: Product: syz
[  178.665397][ T4380] usb 1-1: Manufacturer: syz
[  178.753479][ T4380] usb 1-1: SerialNumber: syz
[  179.000196][ T4380] usb 1-1: config 0 descriptor??
[  180.317324][ T4380] usb 1-1: USB disconnect, device number 4
[  182.557986][    C0] hrtimer: interrupt took 62858 ns
[  183.314852][ T5703] loop1: detected capacity change from 0 to 64
[  187.247664][ T4292] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  187.461384][ T4292] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  188.006757][ T4380] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  188.446704][ T4380] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.484515][ T4380] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  188.693492][ T4380] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  188.728352][ T4380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.865815][ T4380] usb 4-1: Product: syz
[  188.870629][ T4380] usb 4-1: Manufacturer: syz
[  188.875981][ T4380] usb 4-1: SerialNumber: syz
[  188.883110][ T4380] usb 4-1: config 0 descriptor??
[  188.906714][ T4380] usb 4-1: can't set config #0, error -71
[  188.918654][ T4380] usb 4-1: USB disconnect, device number 2
[  193.021099][ T4292] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  195.484792][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  195.505352][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  195.587124][ T4292] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  196.476990][ T5797] fido_id[5797]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  197.063466][ T5809] loop0: detected capacity change from 0 to 64
[  197.757736][ T5796] loop1: detected capacity change from 0 to 40427
[  198.221499][ T5796] F2FS-fs (loop1): invalid crc value
[  198.724599][ T5796] F2FS-fs (loop1): Found nat_bits in checkpoint
[  198.865966][ T5796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  200.881247][ T5835] loop3: detected capacity change from 0 to 32768
[  204.926924][ T5885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.331'.
[  205.802487][ T5894] loop1: detected capacity change from 0 to 64
[  206.266755][ T4191] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  207.126902][ T4191] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  207.140928][ T4191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.343992][ T4191] usb 6-1: Product: syz
[  207.354194][ T4191] usb 6-1: Manufacturer: syz
[  207.376666][ T4191] usb 6-1: SerialNumber: syz
[  207.384279][ T4191] usb 6-1: config 0 descriptor??
[  207.596748][ T4387] Bluetooth: hci4: command 0x0405 tx timeout
[  207.667374][ T4191] usb-storage 6-1:0.0: USB Mass Storage device detected
[  209.628795][ T5937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.346'.
[  209.969201][ T4531] usb 6-1: USB disconnect, device number 4
[  210.445786][ T5945] loop2: detected capacity change from 0 to 1024
[  210.568521][ T5945] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  210.606166][ T5945] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.002775][ T5950] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.350: Freeing blocks not in datazone - block = 0, count = 16
[  211.491781][ T4303] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:10: bg 0: block 112: padding at end of block bitmap is not set
[  211.615580][ T4303] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  211.657433][ T4303] EXT4-fs (loop2): This should not happen!! Data will be lost
[  211.657433][ T4303] 
[  211.678537][ T4303] EXT4-fs (loop2): Total free blocks count 0
[  211.684574][ T4303] EXT4-fs (loop2): Free/Dirty block details
[  211.726693][ T4303] EXT4-fs (loop2): free_blocks=16
[  211.731828][ T4303] EXT4-fs (loop2): dirty_blocks=16
[  211.754405][ T4303] EXT4-fs (loop2): Block reservation details
[  211.792466][ T4303] EXT4-fs (loop2): i_reserved_data_blocks=1
[  212.191907][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  213.046906][ T4228] usb 4-1: config 0 has no interfaces?
[  213.727147][ T4228] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  213.796291][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  213.936660][ T4228] usb 4-1: Product: syz
[  213.940889][ T4228] usb 4-1: Manufacturer: syz
[  213.975091][ T4228] usb 4-1: config 0 descriptor??
[  214.174973][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'.
[  214.253223][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'.
[  214.302069][ T5219] usb 4-1: USB disconnect, device number 3
[  214.505938][ T5976] loop0: detected capacity change from 0 to 32768
[  216.885422][ T1111] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  217.024793][ T1111] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  217.446769][ T1111] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  217.846963][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.920441][ T1111] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  218.216881][ T1111] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  218.279333][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.428347][ T1111] usb 4-1: Product: syz
[  218.495736][ T1111] usb 4-1: Manufacturer: syz
[  218.562225][ T1111] usb 4-1: SerialNumber: syz
[  218.723902][ T1111] usb 4-1: config 0 descriptor??
[  220.632245][ T1111] usb 4-1: USB disconnect, device number 4
[  221.685625][ T6030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'.
[  221.870525][ T6037] loop3: detected capacity change from 0 to 128
[  221.902449][ T6037] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  221.915260][ T6037] hpfs: filesystem error: improperly stopped
[  221.921428][ T6037] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  221.930863][ T6037] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  222.106591][ T4531] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  222.403216][ T6044] loop2: detected capacity change from 0 to 128
[  222.492127][ T6044] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  222.553144][ T6044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.626753][ T4531] usb 6-1: config 0 has no interfaces?
[  223.095945][ T4531] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  223.111485][ T4531] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  223.119896][ T4531] usb 6-1: Product: syz
[  223.124078][ T4531] usb 6-1: Manufacturer: syz
[  223.131982][ T4531] usb 6-1: config 0 descriptor??
[  223.432204][ T6034] netlink: 36 bytes leftover after parsing attributes in process `syz.5.374'.
[  224.052378][ T1111] usb 6-1: USB disconnect, device number 5
[  226.164702][   T21] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  226.288705][   T21] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  226.514320][ T6085] loop5: detected capacity change from 0 to 128
[  226.736676][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  226.849356][ T6085] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  227.039428][ T6085] hpfs: filesystem error: improperly stopped
[  227.133511][ T6085] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  227.166867][   T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.248747][   T21] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  227.283734][ T6085] hpfs: You really don't want any checks? You are crazy...
[  227.389790][ T6085] hpfs: hpfs_map_sector(): read error
[  227.461268][ T6085] hpfs: code page support is disabled
[  227.547565][ T6085] hpfs: hpfs_map_4sectors(): unaligned read
[  227.596985][   T21] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  227.643026][ T6085] hpfs: hpfs_map_4sectors(): unaligned read
[  227.653631][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.741047][ T6085] hpfs: filesystem error: unable to find root dir
[  227.776140][   T21] usb 2-1: Product: syz
[  227.864751][   T21] usb 2-1: Manufacturer: syz
[  227.958611][   T21] usb 2-1: SerialNumber: syz
[  228.128705][   T21] usb 2-1: config 0 descriptor??
[  229.638455][   T21] usb 2-1: USB disconnect, device number 2
[  231.832071][ T6113] loop5: detected capacity change from 0 to 1024
[  231.952413][ T6113] EXT4-fs (loop5): Ignoring removed orlov option
[  232.073397][ T6113] EXT4-fs (loop5): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback.
[  232.292810][ T5219] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  232.637704][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  232.696974][ T5219] usb 1-1: config 0 has no interfaces?
[  233.176811][ T5219] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  233.186078][ T5219] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  233.201366][ T5219] usb 1-1: Product: syz
[  234.716300][ T4228] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  234.826080][ T4228] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  235.068693][ T5219] usb 1-1: Manufacturer: syz
[  235.075501][ T5219] usb 1-1: config 0 descriptor??
[  235.099315][ T5219] usb 1-1: can't set config #0, error -71
[  235.116864][ T5219] usb 1-1: USB disconnect, device number 5
[  235.506661][ T4228] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  236.259900][ T6145] tipc: Started in network mode
[  236.264842][ T6145] tipc: Node identity fac0976be83e, cluster identity 4711
[  236.338274][ T6145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.447236][ T4228] usb 4-1: device not accepting address 5, error -71
[  236.606919][ T6144] tipc: Resetting bearer <eth:syzkaller0>
[  236.715084][ T6144] tipc: Disabling bearer <eth:syzkaller0>
[  238.496710][ T5219] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  238.514343][ T6188] loop3: detected capacity change from 0 to 128
[  238.524185][ T6187] loop1: detected capacity change from 0 to 64
[  238.906775][ T5219] usb 1-1: config 0 has no interfaces?
[  239.019478][ T4228] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  239.101506][ T4228] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  239.496813][ T1111] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  239.836986][ T5219] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  239.846217][ T5219] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  239.896969][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.954163][ T1111] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  240.227024][ T1111] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  240.271792][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.384883][ T1111] usb 4-1: Product: syz
[  240.436850][ T1111] usb 4-1: Manufacturer: syz
[  240.516146][ T1111] usb 4-1: SerialNumber: syz
[  240.655419][ T1111] usb 4-1: config 0 descriptor??
[  242.396659][ T5219] usb 1-1: Product: syz
[  242.400782][ T1111] usb 4-1: USB disconnect, device number 7
[  242.404401][ T5219] usb 1-1: Manufacturer: syz
[  242.414297][ T5219] usb 1-1: config 0 descriptor??
[  242.436624][ T5219] usb 1-1: can't set config #0, error -71
[  242.452655][ T5219] usb 1-1: USB disconnect, device number 6
[  243.251966][ T6205] loop0: detected capacity change from 0 to 32768
[  243.417409][ T6205] (syz.0.417,6205,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  243.466958][ T6205] (syz.0.417,6205,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  244.225993][ T6205] JBD2: Ignoring recovery information on journal
[  244.373136][ T6205] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  245.748519][ T6232] loop3: detected capacity change from 0 to 8192
[  246.038829][ T1111] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  246.071101][ T6232] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  246.692943][ T6232] REISERFS (device loop3): using ordered data mode
[  246.756317][ T4187] ocfs2: Unmounting device (7,0) on (node local)
[  246.795511][ T1111] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  246.835870][ T6232] reiserfs: using flush barriers
[  246.926901][ T4228] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  246.987571][ T6232] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  247.327050][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.477046][ T6232] REISERFS (device loop3): checking transaction log (loop3)
[  247.496604][ T4228] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  247.542324][ T6232] REISERFS (device loop3): Using r5 hash to sort names
[  247.712618][ T6232] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  247.766927][ T4228] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  247.819690][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.184123][ T4228] usb 2-1: Product: syz
[  248.189902][ T4228] usb 2-1: Manufacturer: syz
[  248.194573][ T4228] usb 2-1: SerialNumber: syz
[  248.217264][ T4228] usb 2-1: config 0 descriptor??
[  248.332148][ T6263] loop2: detected capacity change from 0 to 1024
[  248.981143][ T6265] loop0: detected capacity change from 0 to 16
[  249.045730][ T4228] usb 2-1: USB disconnect, device number 3
[  249.112655][ T6265] erofs: (device loop0): mounted with root inode @ nid 36.
[  249.157248][ T6265] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89
[  249.302939][ T4202] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868]
[  249.376761][ T6265] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096]
[  249.616764][   T26] audit: type=1800 audit(1770055823.683:4): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.431" name="file2" dev="loop0" ino=89 res=0 errno=0
[  252.542624][ T6276] loop0: detected capacity change from 0 to 32768
[  252.782434][ T6276] XFS (loop0): Mounting V5 Filesystem
[  253.137560][ T6276] XFS (loop0): Ending clean mount
[  254.160438][ T4187] XFS (loop0): Unmounting Filesystem
[  254.172331][ T6320] loop2: detected capacity change from 0 to 16
[  254.439104][ T6293] loop3: detected capacity change from 0 to 32768
[  254.638070][ T6320] erofs: (device loop2): mounted with root inode @ nid 36.
[  254.660744][ T6320] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89
[  254.686943][ T4202] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868]
[  254.732718][ T6320] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096]
[  254.778887][   T26] audit: type=1800 audit(1770055828.833:5): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.446" name="file2" dev="loop2" ino=89 res=0 errno=0
[  255.976247][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  255.985487][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  258.791227][ T6349] loop0: detected capacity change from 0 to 4096
[  258.997052][ T6349] NILFS (loop0): invalid segment: Checksum error in segment payload
[  259.046461][ T6349] NILFS (loop0): trying rollback from an earlier position
[  259.112499][ T6349] NILFS (loop0): recovery complete
[  259.147987][ T6355] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.029241][ T6360] loop0: detected capacity change from 0 to 512
[  260.396728][ T6360] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  260.470036][ T6360] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  260.536766][ T6360] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  260.616742][ T6360] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal
[  261.237968][ T6375] loop2: detected capacity change from 0 to 512
[  261.311727][ T6375] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  261.600183][ T6375] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  262.083622][ T6365] loop1: detected capacity change from 0 to 32768
[  262.112252][ T6386] block device autoloading is deprecated and will be removed.
[  264.977561][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'.
[  267.215605][ T6434] loop5: detected capacity change from 0 to 4096
[  268.572273][ T6445] loop3: detected capacity change from 0 to 8192
[  268.635078][ T6447] loop2: detected capacity change from 0 to 4096
[  268.702177][ T6447] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  268.783542][ T6445] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.088790][ T6447] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  269.247457][ T6447] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  269.669561][ T6447] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  269.697610][ T6447] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  269.808527][ T6447] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  269.843329][ T6447] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  270.021797][ T6447] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  270.106621][ T6447] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  270.213929][ T6447] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  270.293530][ T6447] ntfs: volume version 3.1.
[  270.769659][ T6470] loop3: detected capacity change from 0 to 8192
[  270.848823][ T6470] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  270.879780][ T6470] REISERFS (device loop3): using ordered data mode
[  270.886414][ T6470] reiserfs: using flush barriers
[  270.964097][ T6470] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  271.042478][ T6470] REISERFS (device loop3): checking transaction log (loop3)
[  271.095070][ T6470] REISERFS (device loop3): Using r5 hash to sort names
[  271.161077][ T6470] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  272.176784][ T6467] loop1: detected capacity change from 0 to 32768
[  272.367719][ T6482] loop3: detected capacity change from 0 to 1024
[  272.547652][ T6482] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  272.566773][ T6482] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.693995][ T6482] EXT4-fs error (device loop3): ext4_free_blocks:6234: comm syz.3.491: Freeing blocks not in datazone - block = 0, count = 16
[  272.880255][  T145] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set
[  272.900419][ T6490] loop0: detected capacity change from 0 to 512
[  272.906828][ T6479] loop2: detected capacity change from 0 to 40427
[  272.936292][  T145] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  272.949735][ T6479] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x1ffff
[  272.989861][  T145] EXT4-fs (loop3): This should not happen!! Data will be lost
[  272.989861][  T145] 
[  273.166570][  T145] EXT4-fs (loop3): Total free blocks count 0
[  273.172617][  T145] EXT4-fs (loop3): Free/Dirty block details
[  273.231386][ T6490] EXT4-fs (loop0): Ignoring removed nobh option
[  274.858755][ T6490] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  274.950242][  T145] EXT4-fs (loop3): free_blocks=16
[  275.194300][  T145] EXT4-fs (loop3): dirty_blocks=16
[  275.621432][  T145] EXT4-fs (loop3): Block reservation details
[  275.660850][  T145] EXT4-fs (loop3): i_reserved_data_blocks=1
[  276.001814][ T6505] loop1: detected capacity change from 0 to 8192
[  276.007139][ T6490] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6
[  276.252914][ T6505] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  276.262315][ T6505] REISERFS (device loop1): using ordered data mode
[  276.810081][ T6505] reiserfs: using flush barriers
[  277.325814][ T6505] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  277.429662][ T6505] REISERFS (device loop1): checking transaction log (loop1)
[  277.599219][ T6515] loop3: detected capacity change from 0 to 4096
[  278.638055][ T6505] REISERFS (device loop1): Using tea hash to sort names
[  278.709861][ T6505] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  279.166856][ T6530] loop5: detected capacity change from 0 to 1024
[  279.357608][ T6530] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  279.446800][ T6530] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.657576][ T6533] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  281.462810][ T6530] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: comm syz.5.505: lblock 0 mapped to illegal pblock 0 (length 1)
[  281.485343][ T6530] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.505: lblock 0 mapped to illegal pblock 0 (length 1)
[  281.701135][ T6530] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.505: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  282.518407][ T6548] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: comm syz.5.505: lblock 0 mapped to illegal pblock 0 (length 1)
[  282.654994][ T6548] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.505: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  282.823467][ T6558] loop0: detected capacity change from 0 to 256
[  282.850464][ T6548] EXT4-fs error (device loop5) in ext4_setattr:5626: Corrupt filesystem
[  284.190211][ T6558] FAT-fs (loop0): Directory bread(block 64) failed
[  284.248109][ T6558] FAT-fs (loop0): Directory bread(block 65) failed
[  284.294269][ T6558] FAT-fs (loop0): Directory bread(block 66) failed
[  284.321599][ T6558] FAT-fs (loop0): Directory bread(block 67) failed
[  284.341983][ T6558] FAT-fs (loop0): Directory bread(block 68) failed
[  284.372256][ T6558] FAT-fs (loop0): Directory bread(block 69) failed
[  284.402688][ T6558] FAT-fs (loop0): Directory bread(block 70) failed
[  284.443815][ T6558] FAT-fs (loop0): Directory bread(block 71) failed
[  284.450645][ T6558] FAT-fs (loop0): Directory bread(block 72) failed
[  284.461316][ T6558] FAT-fs (loop0): Directory bread(block 73) failed
[  284.482408][ T6571] loop1: detected capacity change from 0 to 256
[  284.505090][ T6556] loop3: detected capacity change from 0 to 32768
[  284.571161][ T6573] loop5: detected capacity change from 0 to 256
[  284.598010][ T6571] exfat: Deprecated parameter 'utf8'
[  284.611424][ T6573] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  284.675278][ T6573] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  284.713197][ T6571] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  284.745995][ T6573] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d)
[  285.387374][ T6569] loop2: detected capacity change from 0 to 32768
[  286.330539][ T6569] XFS (loop2): Mounting V5 Filesystem
[  286.883145][ T6569] XFS (loop2): Ending clean mount
[  287.045645][ T4184] XFS (loop2): Unmounting Filesystem
[  287.468345][ T6579] loop3: detected capacity change from 0 to 32768
[  287.533406][ T6579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.519 (6579)
[  287.591110][ T6579] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  287.606729][ T6579] BTRFS info (device loop3): turning on flush-on-commit
[  287.616970][ T6579] BTRFS info (device loop3): use zlib compression, level 3
[  287.657714][ T6579] BTRFS info (device loop3): disabling free space tree
[  287.696643][ T6579] BTRFS info (device loop3): enabling disk space caching
[  287.703733][ T6579] BTRFS info (device loop3): setting nodatasum
[  287.744244][ T6579] BTRFS info (device loop3): turning off barriers
[  287.775994][ T6579] BTRFS info (device loop3): enabling ssd optimizations
[  287.797258][ T6579] BTRFS info (device loop3): turning on async discard
[  287.816786][ T6579] BTRFS info (device loop3): force clearing of disk cache
[  287.837066][ T6579] BTRFS info (device loop3): turning off async discard
[  287.844029][ T6579] BTRFS info (device loop3): disk space caching is enabled
[  287.876569][ T6579] BTRFS info (device loop3): has skinny extents
[  288.010112][ T6588] loop1: detected capacity change from 0 to 32768
[  288.136722][ T4383] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  288.148310][ T6610] loop5: detected capacity change from 0 to 32768
[  288.527034][ T4383] usb 3-1: config 0 has no interfaces?
[  288.635920][ T6588] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  288.744740][ T4383] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  288.813672][ T4383] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  288.822590][ T6588] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  288.905509][ T4383] usb 3-1: Product: syz
[  288.944035][ T4383] usb 3-1: Manufacturer: syz
[  289.007661][ T4383] usb 3-1: config 0 descriptor??
[  289.069605][ T6588] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  289.149038][ T6642] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  289.150293][ T6579] BTRFS error (device loop3): open_ctree failed: -12
[  289.156222][ T6642] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  289.166936][ T6610] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.525 (6610)
[  289.571164][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'.
[  289.895215][ T6642] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 738ms
[  289.908399][ T6642] gfs2: fsid=syz:syz.0: jid=0: Done
[  289.915261][ T6588] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  289.969321][ T6642] usb 3-1: USB disconnect, device number 2
[  289.980773][ T4332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4332)
[  290.016755][ T6610] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  290.053741][ T6588] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  290.053951][ T6610] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  290.147452][ T6610] BTRFS info (device loop5): use zstd compression, level 3
[  290.744271][ T6610] BTRFS info (device loop5): using free space tree
[  290.787997][ T6610] BTRFS info (device loop5): has skinny extents
[  294.053664][ T6610] BTRFS error (device loop5): open_ctree failed: -12
[  295.143965][ T6709] loop3: detected capacity change from 0 to 128
[  295.250840][ T6709] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  295.284739][ T6709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  295.338965][ T6713] loop0: detected capacity change from 0 to 1024
[  295.472216][ T6713] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  295.474286][ T6718] loop1: detected capacity change from 0 to 1024
[  295.489403][ T6698] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  295.584037][ T6713] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.266759][ T6717] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  296.290185][ T6718] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  296.425105][ T6718] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.496860][ T6698] usb 3-1: config 0 has no interfaces?
[  296.836674][ T6698] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  297.298109][ T6698] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  297.492177][ T6721] loop5: detected capacity change from 0 to 32768
[  297.509202][ T6698] usb 3-1: Product: syz
[  297.513439][ T6698] usb 3-1: Manufacturer: syz
[  297.545992][ T6698] usb 3-1: config 0 descriptor??
[  298.024584][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.543'.
[  298.674262][   T21] usb 3-1: USB disconnect, device number 3
[  298.992145][ T6753] loop5: detected capacity change from 0 to 128
[  299.280667][ T6753] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  299.352727][ T6753] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.474749][ T6768] team0: Port device team_slave_0 removed
[  300.575628][ T6773] loop1: detected capacity change from 0 to 1024
[  301.202279][ T6773] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  301.548657][ T6781] loop2: detected capacity change from 0 to 1024
[  301.598860][ T6773] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.709157][ T6781] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  301.727955][ T6781] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.937254][ T6785] loop5: detected capacity change from 0 to 1024
[  302.790046][ T4584] hfsplus: b-tree write err: -5, ino 4
[  303.926762][ T6813] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  304.919555][ T6800] loop2: detected capacity change from 0 to 32768
[  305.044393][ T6800] JBD2: Ignoring recovery information on journal
[  305.106200][ T6806] loop5: detected capacity change from 0 to 32768
[  305.216683][ T6821] syz.3.569 (6821) used greatest stack depth: 19856 bytes left
[  305.361708][ T6800] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  305.378748][ T6827] loop0: detected capacity change from 0 to 512
[  305.386241][ T6824] loop3: detected capacity change from 0 to 1024
[  305.663383][ T6827] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  305.701224][ T6824] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  305.760170][ T6827] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  305.811969][ T6824] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.888001][ T6827] EXT4-fs (loop0): 1 truncate cleaned up
[  305.932790][ T6827] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,usrjquota="init_itable,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback.
[  305.943532][ T6782] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  306.049143][ T6834] loop1: detected capacity change from 0 to 1024
[  306.100280][ T4184] ocfs2: Unmounting device (7,2) on (node local)
[  306.310743][ T6840] EXT4-fs error (device loop3): ext4_free_blocks:6234: comm syz.3.571: Freeing blocks not in datazone - block = 0, count = 16
[  306.382191][ T6834] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  306.481661][ T6834] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.028748][ T6846] loop2: detected capacity change from 0 to 64
[  308.656591][ T6698] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  308.724689][ T6865] loop0: detected capacity change from 0 to 4096
[  308.850182][ T6871] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  308.941038][ T6873] loop2: detected capacity change from 0 to 7
[  308.972960][ T6873] Dev loop2: unable to read RDB block 7
[  309.000238][ T6873]  loop2: AHDI p1 p2 p3
[  309.004490][ T6873] loop2: partition table partially beyond EOD, truncated
[  309.049818][ T6851] loop3: detected capacity change from 0 to 32768
[  309.081102][ T6873] loop2: p1 start 1601398130 is beyond EOD, truncated
[  309.116302][ T6873] loop2: p2 start 1702059890 is beyond EOD, truncated
[  309.135778][ T6851] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.577 (6851)
[  309.186991][ T6698] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  309.226931][ T6698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.237076][ T6698] usb 2-1: Product: syz
[  309.241273][ T6698] usb 2-1: Manufacturer: syz
[  309.256140][ T6698] usb 2-1: SerialNumber: syz
[  309.288741][ T6851] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  309.300410][ T6698] usb 2-1: config 0 descriptor??
[  309.316656][ T6851] BTRFS info (device loop3): using free space tree
[  309.329221][ T6851] BTRFS info (device loop3): has skinny extents
[  309.429213][ T6868] loop5: detected capacity change from 0 to 32768
[  309.577059][ T6698] usb-storage 2-1:0.0: USB Mass Storage device detected
[  309.770938][ T6880] loop0: detected capacity change from 0 to 4096
[  310.964313][ T6851] BTRFS error (device loop3): open_ctree failed: -12
[  311.015863][ T6698] usb 2-1: USB disconnect, device number 4
[  312.360268][ T6908] loop2: detected capacity change from 0 to 64
[  312.498482][ T6908] hfs: unable to locate alternate MDB
[  312.504272][ T6908] hfs: continuing without an alternate MDB
[  312.530964][ T6912] loop3: detected capacity change from 0 to 1024
[  312.619972][ T6916] loop5: detected capacity change from 0 to 512
[  312.627392][ T6915] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  312.664880][ T6915] VFS: Can't find a romfs filesystem on dev nullb0.
[  312.664880][ T6915] 
[  312.701902][ T6912] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  312.747144][ T6916] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  312.851148][ T6905] loop1: detected capacity change from 0 to 32768
[  312.858736][ T6912] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.888079][ T6916] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.586: corrupted in-inode xattr
[  313.153762][ T6916] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.586: couldn't read orphan inode 15 (err -117)
[  314.522787][ T6916] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,inode_readahead_blks=0x0000000000000001,grpid,noload,delalloc,max_batch_time=0x0000000000000001,discard,discard,nomblk_io_submit,init_itable=0x0000000000000fff,nodiscard,sysvgroups,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  314.721816][ T6905] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  314.756434][ T6932] loop0: detected capacity change from 0 to 1024
[  314.796947][ T6905] BTRFS info (device loop1): enabling disk space caching
[  314.810987][ T6905] BTRFS info (device loop1): force clearing of disk cache
[  314.828853][ T6905] BTRFS info (device loop1): disk space caching is enabled
[  314.860446][ T6905] BTRFS info (device loop1): has skinny extents
[  314.884910][ T6932] EXT4-fs (loop0): Ignoring removed orlov option
[  315.011117][ T6932] EXT4-fs (loop0): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback.
[  315.197410][ T6946] loop5: detected capacity change from 0 to 4096
[  315.251998][ T4294] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  315.866826][ T4294] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  315.883452][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.938643][ T4294] usb 4-1: Product: syz
[  315.945084][ T4294] usb 4-1: Manufacturer: syz
[  315.950969][ T4294] usb 4-1: SerialNumber: syz
[  315.973240][ T4294] usb 4-1: config 0 descriptor??
[  316.036255][ T4349] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by udevd (4349)
[  316.048591][ T6905] BTRFS error (device loop1): open_ctree failed: -12
[  316.247133][ T4294] usb-storage 4-1:0.0: USB Mass Storage device detected
[  317.837943][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  317.845397][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  317.862278][ T4294] usb 4-1: USB disconnect, device number 8
[  318.078176][ T6986] loop2: detected capacity change from 0 to 2048
[  318.151033][ T6986]  loop2: p2 < > p3 < >
[  318.172741][ T6986] loop2: partition table partially beyond EOD, truncated
[  318.216635][ T6986] loop2: p2 start 4278190080 is beyond EOD, truncated
[  318.349308][ T6988] loop1: detected capacity change from 0 to 4096
[  318.378757][ T6988] __ntfs_warning: 10 callbacks suppressed
[  318.378776][ T6988] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  318.389350][ T5918] udevd[5918]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  318.425360][ T6990] loop3: detected capacity change from 0 to 1024
[  318.561488][ T6988] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  318.612536][ T6988] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  318.653275][ T6990] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  318.698990][ T6990] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.714086][ T6988] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  318.760835][ T6988] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  318.871563][ T6982] loop0: detected capacity change from 0 to 40427
[  318.903898][ T6984] loop5: detected capacity change from 0 to 32768
[  318.911150][ T6988] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  318.938064][ T6982] F2FS-fs (loop0): invalid crc value
[  318.961426][ T6988] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  318.996904][ T6988] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  319.006517][ T6988] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  319.018277][ T6982] F2FS-fs (loop0): Found nat_bits in checkpoint
[  319.029469][ T6988] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  319.104210][ T7000] EXT4-fs error (device loop3): ext4_free_blocks:6234: comm syz.3.608: Freeing blocks not in datazone - block = 0, count = 16
[  319.421546][ T6988] ntfs: volume version 3.1.
[  319.525707][ T7002] loop2: detected capacity change from 0 to 512
[  319.617987][ T6982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  320.353614][ T7002] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  320.401730][ T7002] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 3: comm syz.2.609: lblock 0 mapped to illegal pblock 3 (length 1)
[  320.593882][ T7002] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.609: error -117 reading directory block
[  320.621354][ T4187] attempt to access beyond end of device
[  320.621354][ T4187] loop0: rw=2049, want=45104, limit=40427
[  321.535000][ T7015] loop5: detected capacity change from 0 to 4096
[  321.801245][ T7012] loop3: detected capacity change from 0 to 32768
[  327.051790][ T7070] loop2: detected capacity change from 0 to 2048
[  327.632317][ T7070] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none.
[  328.149905][ T7072] loop1: detected capacity change from 0 to 4096
[  328.188016][ T7072] __ntfs_error: 10 callbacks suppressed
[  328.188034][ T7072] ntfs: (device loop1): parse_options(): Unrecognized mount option sho·kw_sys_files.
[  328.497500][ T7072] ntfs: (device loop1): parse_options(): Unrecognized mount option fmas.
[  328.571267][ T7072] ntfs: (device loop1): parse_options(): Invalid errors option argument: 64gid=
[  329.300947][ T7088] loop3: detected capacity change from 0 to 1024
[  329.426306][ T7093] loop0: detected capacity change from 0 to 256
[  329.437320][ T7088] overlayfs: filesystem on './file0' not supported
[  329.560309][ T7093] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  329.604778][ T4278] hfsplus: b-tree write err: -5, ino 4
[  329.640114][ T7093] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  329.661240][ T7093] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  330.754083][ T7102] loop3: detected capacity change from 0 to 8192
[  331.164903][ T7102] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  331.316384][ T7102] REISERFS (device loop3): using ordered data mode
[  331.483084][ T7102] reiserfs: using flush barriers
[  331.566726][ T7102] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  331.706142][ T7102] REISERFS (device loop3): checking transaction log (loop3)
[  331.766409][ T7102] REISERFS (device loop3): Using r5 hash to sort names
[  331.787257][ T7102] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  333.795395][ T7121] loop1: detected capacity change from 0 to 16
[  335.474699][ T7126] loop5: detected capacity change from 0 to 128
[  335.958608][ T7132] loop1: detected capacity change from 0 to 2048
[  338.225836][ T7130] loop0: detected capacity change from 0 to 4096
[  338.469757][ T7132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  338.506358][ T7143] loop5: detected capacity change from 0 to 64
[  339.300934][   T26] audit: type=1800 audit(1770055913.363:6): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.648" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  340.164032][ T7163] loop0: detected capacity change from 0 to 1024
[  340.406807][ T4380] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  341.264650][ T7167] loop3: detected capacity change from 0 to 16
[  341.391133][ T7167] erofs: (device loop3): mounted with root inode @ nid 36.
[  341.409879][ T7167] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89
[  341.434022][ T4199] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868]
[  341.559554][ T7167] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096]
[  341.580117][   T26] audit: type=1800 audit(1770055915.643:7): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.658" name="file2" dev="loop3" ino=89 res=0 errno=0
[  341.918018][ T7170] binder: 7169:7170 ioctl c0306201 2000000003c0 returned -14
[  342.467762][ T4380] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  342.478107][ T4380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.486146][ T4380] usb 3-1: Product: syz
[  342.490430][ T4380] usb 3-1: Manufacturer: syz
[  342.495062][ T4380] usb 3-1: SerialNumber: syz
[  342.779215][ T4380] usb 3-1: config 0 descriptor??
[  342.910447][ T7176] loop3: detected capacity change from 0 to 256
[  343.017124][ T4380] usb-storage 3-1:0.0: USB Mass Storage device detected
[  344.113864][ T4380] usb 3-1: USB disconnect, device number 4
[  345.058405][ T7190] loop1: detected capacity change from 0 to 4096
[  345.367910][ T7195] loop2: detected capacity change from 0 to 32768
[  345.391520][ T7195] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.666 (7195)
[  345.519489][ T7195] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  345.619911][ T7195] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  345.685859][ T7195] BTRFS info (device loop2): use zstd compression, level 3
[  345.856395][ T7195] BTRFS info (device loop2): using free space tree
[  346.718947][ T7179] loop5: detected capacity change from 0 to 32768
[  346.728711][ T7195] BTRFS info (device loop2): has skinny extents
[  347.962833][ T7211] loop5: detected capacity change from 0 to 4096
[  348.416681][ T7195] BTRFS error (device loop2): open_ctree failed: -12
[  348.942899][ T7233] IPv6: NLM_F_REPLACE set, but no existing node found!
[  349.845414][ T7215] loop1: detected capacity change from 0 to 32768
[  349.913569][ T7215] XFS (loop1): Mounting V5 Filesystem
[  350.081979][ T7215] XFS (loop1): Ending clean mount
[  350.189586][ T6087] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  350.263500][ T4185] XFS (loop1): Unmounting Filesystem
[  350.447486][ T7236] loop2: detected capacity change from 0 to 32768
[  350.807552][ T6087] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  350.971230][ T6087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.008678][ T6087] usb 1-1: Product: syz
[  351.043515][ T6087] usb 1-1: Manufacturer: syz
[  351.072644][ T6087] usb 1-1: SerialNumber: syz
[  351.098668][ T7258] loop3: detected capacity change from 0 to 1024
[  351.115862][ T5219] Bluetooth: hci4: command 0x0405 tx timeout
[  351.133909][ T6087] usb 1-1: config 0 descriptor??
[  351.273095][ T7258] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpjquota=,bsddf,,errors=continue. Quota mode: none.
[  351.447287][ T6087] usb-storage 1-1:0.0: USB Mass Storage device detected
[  351.515945][ T7267] tmpfs: Bad value for 'mpol'
[  352.454372][ T6087] usb 1-1: USB disconnect, device number 7
[  352.716395][ T7278] loop1: detected capacity change from 0 to 4096
[  354.264223][ T7278] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  354.607073][ T7294] loop3: detected capacity change from 0 to 4096
[  354.893972][ T7294] ntfs: volume version 3.1.
[  354.940013][ T4185] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  356.805254][ T7304] loop2: detected capacity change from 0 to 32768
[  357.832785][ T7333] loop2: detected capacity change from 0 to 64
[  358.700563][ T7342] loop2: detected capacity change from 0 to 64
[  358.846550][ T6697] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  359.457151][ T6697] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  359.483155][ T6697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.546305][ T6697] usb 1-1: Product: syz
[  359.577108][ T6697] usb 1-1: Manufacturer: syz
[  359.601802][ T6697] usb 1-1: SerialNumber: syz
[  359.680575][ T6697] usb 1-1: config 0 descriptor??
[  359.937104][ T6697] usb-storage 1-1:0.0: USB Mass Storage device detected
[  360.141744][ T6698] usb 1-1: USB disconnect, device number 8
[  360.696625][ T4650] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  360.771430][ T7363] loop1: detected capacity change from 0 to 32768
[  361.526604][ T4650] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  361.565811][ T4650] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  361.585042][ T4650] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  361.601937][ T4650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.647014][ T7365] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  362.200121][ T7380] loop1: detected capacity change from 0 to 4096
[  362.261134][ T7380] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  362.305794][ T7380] ntfs3: loop1: Failed to load $Extend.
[  363.836833][ T4650] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  364.090187][ T4650] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input7
[  365.348696][ T4650] usb 6-1: USB disconnect, device number 6
[  365.410826][ T7412] loop5: detected capacity change from 0 to 64
[  365.586851][ T4383] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  365.726592][ T6697] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  366.146786][ T4383] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  366.146822][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.146844][ T4383] usb 1-1: Product: syz
[  366.146860][ T4383] usb 1-1: Manufacturer: syz
[  366.146875][ T4383] usb 1-1: SerialNumber: syz
[  366.315748][ T6697] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  366.330669][ T6697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.347411][ T6697] usb 4-1: Product: syz
[  366.361015][ T6697] usb 4-1: Manufacturer: syz
[  366.368302][ T6697] usb 4-1: SerialNumber: syz
[  366.387188][ T6697] usb 4-1: config 0 descriptor??
[  366.505832][ T7431] loop2: detected capacity change from 0 to 4096
[  366.588632][ T7431] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  366.687821][ T6697] usb-storage 4-1:0.0: USB Mass Storage device detected
[  366.731897][ T7431] ntfs3: loop2: Failed to load $Extend.
[  366.858686][ T4383] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  367.050607][ T6697] usb 4-1: USB disconnect, device number 9
[  367.066303][ T4383] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  367.084608][ T4383] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  367.094872][ T4383] lan78xx: probe of 1-1:1.0 failed with error -71
[  367.275030][ T4383] usb 1-1: USB disconnect, device number 9
[  368.841191][ T4383] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  369.146529][ T5219] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  369.226800][ T4383] usb 4-1: config 0 has no interfaces?
[  369.348889][ T4383] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  369.376169][ T4383] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  369.394678][ T4383] usb 4-1: Product: syz
[  369.414951][ T4383] usb 4-1: Manufacturer: syz
[  369.434379][ T4383] usb 4-1: config 0 descriptor??
[  369.511068][ T7484] loop0: detected capacity change from 0 to 64
[  369.577937][ T5219] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping
[  369.594245][ T5219] usb 3-1: config 0 interface 0 has no altsetting 0
[  369.766391][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'.
[  369.819604][ T4383] usb 4-1: USB disconnect, device number 10
[  369.989632][ T5219] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  370.013003][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  370.022224][ T5219] usb 3-1: Product: syz
[  370.026603][ T5219] usb 3-1: Manufacturer: syz
[  370.031509][ T5219] usb 3-1: SerialNumber: syz
[  370.125466][ T5219] usb 3-1: config 0 descriptor??
[  370.824722][ T5219] snd-usb-audio: probe of 3-1:0.0 failed with error -22
[  370.892682][ T4332] udevd[4332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.426904][ T4650] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  371.782796][ T5219] usb 3-1: USB disconnect, device number 5
[  372.133314][ T4650] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  372.173477][ T4650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.182144][ T4650] usb 2-1: Product: syz
[  372.186334][ T4650] usb 2-1: Manufacturer: syz
[  372.204987][ T4650] usb 2-1: SerialNumber: syz
[  372.221776][ T4650] usb 2-1: config 0 descriptor??
[  372.467924][ T7525] netlink: 6 bytes leftover after parsing attributes in process `syz.5.747'.
[  372.477525][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  372.485007][ T7525] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  372.486917][ T4650] usb-storage 2-1:0.0: USB Mass Storage device detected
[  372.710282][ T4383] usb 2-1: USB disconnect, device number 5
[  372.826769][ T5219] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  373.011726][ T4650] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  373.338629][ T7542] loop1: detected capacity change from 0 to 64
[  374.347057][ T5219] usb 6-1: config 0 has no interfaces?
[  374.527675][ T4650] usb 3-1: config 0 has no interfaces?
[  374.627106][ T5219] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  374.646710][ T5219] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  374.678942][ T5219] usb 6-1: Product: syz
[  374.683155][ T5219] usb 6-1: Manufacturer: syz
[  374.706890][ T4650] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  375.119318][ T5219] usb 6-1: config 0 descriptor??
[  375.125977][ T4650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.134896][ T4650] usb 3-1: Product: syz
[  375.141606][ T4650] usb 3-1: Manufacturer: syz
[  375.146249][ T4650] usb 3-1: SerialNumber: syz
[  375.154382][ T4650] usb 3-1: config 0 descriptor??
[  375.369050][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'.
[  375.385758][ T5219] usb 6-1: USB disconnect, device number 7
[  375.456635][ T6643] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  375.483593][ T4650] usb 3-1: USB disconnect, device number 6
[  375.986763][ T6643] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  376.016669][ T6643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.057810][ T6643] usb 4-1: Product: syz
[  376.079673][ T6643] usb 4-1: Manufacturer: syz
[  376.114459][ T6643] usb 4-1: SerialNumber: syz
[  376.141925][ T6643] usb 4-1: config 0 descriptor??
[  376.220241][ T7573] loop2: detected capacity change from 0 to 1024
[  376.329922][ T7573] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  376.373405][ T7573] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.446628][ T4383] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  376.622079][ T7557] device syzkaller1 entered promiscuous mode
[  376.717929][ T7578] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.762: Freeing blocks not in datazone - block = 0, count = 16
[  377.017443][ T4383] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  377.060791][ T4383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.196784][ T6643] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32
[  377.206626][ T6643] usb 4-1: Firmware version (0.0) predates our first public release.
[  377.216682][ T6643] usb 4-1: Please update to version 0.2 or newer
[  377.223225][ T4383] usb 6-1: Product: syz
[  377.252780][ T4383] usb 6-1: Manufacturer: syz
[  377.258005][ T4383] usb 6-1: SerialNumber: syz
[  377.275343][ T4300] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 112: padding at end of block bitmap is not set
[  377.302800][ T4300] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  377.302875][ T4300] EXT4-fs (loop2): This should not happen!! Data will be lost
[  377.302875][ T4300] 
[  377.302893][ T4300] EXT4-fs (loop2): Total free blocks count 0
[  377.302909][ T4300] EXT4-fs (loop2): Free/Dirty block details
[  377.302926][ T4300] EXT4-fs (loop2): free_blocks=16
[  377.302943][ T4300] EXT4-fs (loop2): dirty_blocks=16
[  377.302958][ T4300] EXT4-fs (loop2): Block reservation details
[  377.302972][ T4300] EXT4-fs (loop2): i_reserved_data_blocks=1
[  377.575819][ T6643] usb 4-1: Firmware: build Gó™
[  377.586831][ T4383] usb 6-1: config 0 descriptor??
[  377.617443][ T6643] usb 4-1: atusb_probe: initialization failed, error = -32
[  377.650378][ T6643] atusb: probe of 4-1:0.0 failed with error -32
[  377.840148][ T7588] loop1: detected capacity change from 0 to 64
[  378.577187][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  378.584165][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  378.899630][ T4383] usb-storage 6-1:0.0: USB Mass Storage device detected
[  379.014285][ T4383] usb 6-1: USB disconnect, device number 8
[  379.109090][ T4380] usb 4-1: USB disconnect, device number 11
[  379.147942][ T7602] loop1: detected capacity change from 0 to 1024
[  379.416611][ T7610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.770'.
[  380.136489][ T7602] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  380.166646][ T7602] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  380.281435][ T7614] device syzkaller0 entered promiscuous mode
[  381.491099][ T7634] loop2: detected capacity change from 0 to 64
[  382.242115][ T4249] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  382.978339][ T7648] loop1: detected capacity change from 0 to 1024
[  383.006981][ T4249] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  383.016276][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.025218][ T4249] usb 6-1: Product: syz
[  383.029780][ T4249] usb 6-1: Manufacturer: syz
[  383.034424][ T4249] usb 6-1: SerialNumber: syz
[  383.346671][ T7652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.782'.
[  383.777485][ T4249] usb 6-1: config 0 descriptor??
[  383.979213][ T7654] netlink: 68 bytes leftover after parsing attributes in process `syz.2.783'.
[  384.021367][ T6087] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  384.238236][ T7648] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  384.257498][ T4249] usb-storage 6-1:0.0: USB Mass Storage device detected
[  384.328545][ T7648] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.639554][ T6087] usb 1-1: Using ep0 maxpacket: 32
[  384.660891][ T4249] usb 6-1: USB disconnect, device number 9
[  385.176803][ T6087] usb 1-1: config 0 has an invalid interface number: 23 but max is 0
[  385.202126][ T6087] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  385.223155][ T6087] usb 1-1: config 0 has no interface number 0
[  385.233008][ T6087] usb 1-1: config 0 interface 23 altsetting 2 has an invalid endpoint with address 0x80, skipping
[  385.254866][ T6087] usb 1-1: config 0 interface 23 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  385.276709][ T7676] loop2: detected capacity change from 0 to 1024
[  385.282144][ T6087] usb 1-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1143, setting to 64
[  385.315755][ T6087] usb 1-1: config 0 interface 23 altsetting 2 has an invalid endpoint with address 0x1E, skipping
[  385.336491][ T6087] usb 1-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[  385.356841][ T6087] usb 1-1: config 0 interface 23 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  385.386697][ T6087] usb 1-1: config 0 interface 23 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 15
[  385.411932][ T7676] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  385.416549][ T6087] usb 1-1: config 0 interface 23 has no altsetting 0
[  385.436744][ T6087] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[  385.445818][ T6087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.470081][ T7676] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.487523][ T6087] usb 1-1: config 0 descriptor??
[  385.507330][ T7644] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  385.766937][ T6087] usb 1-1: string descriptor 0 read error: -71
[  385.769152][ T6087] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[  385.769246][ T6087] gspca_mr97310a: reg write [21] error -8
[  385.769293][ T6087] mr97310a: probe of 1-1:0.23 failed with error -8
[  385.790602][ T6087] usb 1-1: USB disconnect, device number 10
[  385.899955][ T7686] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.791: Freeing blocks not in datazone - block = 0, count = 16
[  385.907115][ T4249] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  386.233541][ T7688] loop0: detected capacity change from 0 to 64
[  386.486705][ T4249] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  386.486738][ T4249] usb 2-1: config 0 has no interface number 0
[  386.527158][ T4424] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:11: bg 0: block 112: padding at end of block bitmap is not set
[  386.527859][ T4424] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  386.527890][ T4424] EXT4-fs (loop2): This should not happen!! Data will be lost
[  386.527890][ T4424] 
[  386.527907][ T4424] EXT4-fs (loop2): Total free blocks count 0
[  386.527923][ T4424] EXT4-fs (loop2): Free/Dirty block details
[  386.527939][ T4424] EXT4-fs (loop2): free_blocks=16
[  386.527956][ T4424] EXT4-fs (loop2): dirty_blocks=16
[  386.527971][ T4424] EXT4-fs (loop2): Block reservation details
[  386.527985][ T4424] EXT4-fs (loop2): i_reserved_data_blocks=1
[  387.756619][ T4380] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  387.816953][ T4249] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  387.816987][ T4249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.817009][ T4249] usb 2-1: Product: syz
[  387.817023][ T4249] usb 2-1: Manufacturer: syz
[  387.817037][ T4249] usb 2-1: SerialNumber: syz
[  387.819374][ T4249] usb 2-1: config 0 descriptor??
[  387.996549][ T4380] usb 3-1: Using ep0 maxpacket: 8
[  388.116867][ T4380] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  388.125316][ T4249] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  388.140871][ T4380] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  388.158935][ T4249] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  388.172850][ T4380] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  388.216886][ T4380] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  388.229820][ T4249] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  388.230359][ T4249] usb 2-1: media controller created
[  388.273301][ T7698] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'.
[  388.476489][ T4249] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  388.956909][ T4249] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  389.027308][ T4380] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  389.036819][ T4380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.058921][ T4249] usb 2-1: USB disconnect, device number 6
[  389.326713][ T4380] usb 3-1: GET_CAPABILITIES returned 0
[  389.332362][ T4380] usbtmc 3-1:16.0: can't read capabilities
[  390.637675][ T4242] usb 3-1: USB disconnect, device number 7
[  390.718916][ T7724] loop0: detected capacity change from 0 to 1024
[  391.237749][ T7724] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  391.446742][ T4380] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  392.167896][ T7724] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.193257][ T7744] loop2: detected capacity change from 0 to 64
[  392.406652][ T4380] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  392.503335][ T7747] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  392.547049][ T4380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.555203][ T4380] usb 4-1: Product: syz
[  392.559956][ T4380] usb 4-1: Manufacturer: syz
[  392.564574][ T4380] usb 4-1: SerialNumber: syz
[  392.571701][ T4380] usb 4-1: config 0 descriptor??
[  393.589626][ T4380] usb-storage 4-1:0.0: USB Mass Storage device detected
[  393.913487][ T4380] usb 4-1: USB disconnect, device number 12
[  396.673013][ T7786] loop5: detected capacity change from 0 to 1024
[  396.812469][ T7786] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  396.829780][ T7786] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  397.286568][ T6698] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  397.326733][ T4242] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  397.586772][ T6698] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  397.686776][ T6698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  397.705558][ T6698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  397.717162][ T4242] usb 1-1: config 0 has no interfaces?
[  397.743394][ T6698] usb 3-1: config 0 interface 0 has no altsetting 0
[  397.846791][ T6698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  397.866022][ T6698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  397.877932][ T4242] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  397.892780][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.906540][ T4242] usb 1-1: Product: syz
[  397.910751][ T4242] usb 1-1: Manufacturer: syz
[  397.915566][ T6698] usb 3-1: config 0 interface 0 has no altsetting 0
[  397.922795][ T4242] usb 1-1: SerialNumber: syz
[  397.930864][ T4242] usb 1-1: config 0 descriptor??
[  398.002292][ T6698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.021694][ T6698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.049300][ T6698] usb 3-1: config 0 interface 0 has no altsetting 0
[  398.126811][ T6698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.136902][ T6698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.157571][ T6698] usb 3-1: config 0 interface 0 has no altsetting 0
[  398.256748][ T6698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.275934][ T4242] usb 1-1: USB disconnect, device number 11
[  398.286051][ T6698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.303806][ T4249] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  398.332329][ T6698] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.206957][ T4249] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  399.211020][ T6698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.217348][ T4249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.233618][ T4249] usb 2-1: Product: syz
[  399.238172][ T4249] usb 2-1: Manufacturer: syz
[  399.242900][ T4249] usb 2-1: SerialNumber: syz
[  399.257592][ T4249] usb 2-1: config 0 descriptor??
[  399.265444][ T6698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.292988][ T6698] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.436965][ T6698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.457127][ T6698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.510248][ T6698] usb 3-1: config 0 interface 0 has no altsetting 0
[  400.247276][ T4249] usb-storage 2-1:0.0: USB Mass Storage device detected
[  400.256651][ T6698] usb 3-1: unable to read config index 7 descriptor/start: -71
[  400.284933][ T6698] usb 3-1: can't read configurations, error -71
[  400.462381][ T4249] usb 2-1: USB disconnect, device number 7
[  400.905991][ T7837] loop3: detected capacity change from 0 to 1024
[  401.438794][ T7837] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  401.463832][ T7837] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.698242][ T7844] loop5: detected capacity change from 0 to 4096
[  404.569878][ T6698] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  405.534132][ T6697] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  406.191433][ T6698] usb 3-1: device not accepting address 10, error -71
[  406.428419][ T4249] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  407.806552][ T6697] usb 2-1: device not accepting address 8, error -71
[  409.231773][ T4249] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  409.249460][ T7910] loop1: detected capacity change from 0 to 4096
[  409.313981][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.331035][ T7924] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  409.356738][ T4249] usb 6-1: Product: syz
[  409.376700][ T4249] usb 6-1: Manufacturer: syz
[  409.381380][ T4249] usb 6-1: SerialNumber: syz
[  409.427603][ T4249] usb 6-1: config 0 descriptor??
[  409.453077][ T4249] usb 6-1: can't set config #0, error -71
[  409.656032][ T4249] usb 6-1: USB disconnect, device number 10
[  413.735777][ T7958] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  414.126566][ T5219] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  415.146664][ T5219] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  415.453492][ T7982] loop1: detected capacity change from 0 to 4096
[  416.827683][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.974070][ T5219] usb 3-1: Product: syz
[  416.980216][ T5219] usb 3-1: Manufacturer: syz
[  416.984934][ T5219] usb 3-1: SerialNumber: syz
[  417.013421][ T5219] usb 3-1: config 0 descriptor??
[  417.860639][ T5219] usb 3-1: can't set config #0, error -71
[  419.173795][ T5219] usb 3-1: USB disconnect, device number 12
[  420.910499][ T8025] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  425.568990][ T8067] loop3: detected capacity change from 0 to 64
[  426.476465][ T8072] loop2: detected capacity change from 0 to 1024
[  426.574816][ T8072] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  426.706830][ T8072] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.978589][ T8076] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.903: Freeing blocks not in datazone - block = 0, count = 16
[  428.039989][ T4302] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:9: bg 0: block 112: padding at end of block bitmap is not set
[  428.135028][ T8085] netlink: 'syz.1.906': attribute type 6 has an invalid length.
[  428.149420][ T4302] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  428.232682][ T4302] EXT4-fs (loop2): This should not happen!! Data will be lost
[  428.232682][ T4302] 
[  428.266182][ T4302] EXT4-fs (loop2): Total free blocks count 0
[  428.287682][ T4302] EXT4-fs (loop2): Free/Dirty block details
[  428.293626][ T4302] EXT4-fs (loop2): free_blocks=16
[  428.336759][ T4302] EXT4-fs (loop2): dirty_blocks=16
[  428.341928][ T4302] EXT4-fs (loop2): Block reservation details
[  428.380989][ T4302] EXT4-fs (loop2): i_reserved_data_blocks=1
[  428.506778][ T6642] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  429.406508][ T6642] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  429.449383][ T6642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.235575][ T6642] usb 2-1: Product: syz
[  430.241183][ T6642] usb 2-1: Manufacturer: syz
[  430.245914][ T6642] usb 2-1: SerialNumber: syz
[  430.254597][ T6642] usb 2-1: config 0 descriptor??
[  430.320558][ T6642] gspca_main: sunplus-2.14.0 probing 055f:c230
[  430.324200][ T8113] loop2: detected capacity change from 0 to 1024
[  431.474352][ T8113] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  431.496740][ T8113] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.593778][ T6642] gspca_sunplus: reg_r err -71
[  431.599302][ T6642] sunplus: probe of 2-1:0.0 failed with error -71
[  431.750934][ T6642] usb 2-1: USB disconnect, device number 10
[  431.783309][ T8130] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.915: Freeing blocks not in datazone - block = 0, count = 16
[  432.168043][ T4533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:13: bg 0: block 112: padding at end of block bitmap is not set
[  432.191010][ T4533] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  432.203808][ T4533] EXT4-fs (loop2): This should not happen!! Data will be lost
[  432.203808][ T4533] 
[  432.214534][ T4533] EXT4-fs (loop2): Total free blocks count 0
[  432.223084][ T4533] EXT4-fs (loop2): Free/Dirty block details
[  432.229971][ T4533] EXT4-fs (loop2): free_blocks=16
[  432.236686][ T4533] EXT4-fs (loop2): dirty_blocks=16
[  432.241910][ T4533] EXT4-fs (loop2): Block reservation details
[  432.248401][ T4533] EXT4-fs (loop2): i_reserved_data_blocks=1
[  432.677465][ T8138] loop2: detected capacity change from 0 to 4096
[  432.762589][ T8138] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  432.814559][ T8138] ntfs3: loop2: Failed to load $Extend.
[  435.220256][ T8178] loop0: detected capacity change from 0 to 64
[  435.460351][ T8151] loop3: detected capacity change from 0 to 32768
[  435.571300][ T8151] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  435.632462][ T8151] BTRFS info (device loop3): enabling disk space caching
[  435.682275][ T8151] BTRFS info (device loop3): force clearing of disk cache
[  435.756988][ T8151] BTRFS info (device loop3): disk space caching is enabled
[  435.764300][ T8151] BTRFS info (device loop3): has skinny extents
[  436.014497][ T8151] BTRFS error (device loop3): open_ctree failed: -12
[  436.103072][ T7988] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (7988)
[  436.330889][ T8199] netlink: 'syz.3.934': attribute type 3 has an invalid length.
[  436.391763][ T8199] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  436.646683][ T4531] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  436.781721][ T8205] loop3: detected capacity change from 0 to 4096
[  436.891316][ T8205] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  436.963707][ T8205] ntfs3: loop3: Failed to load $Extend.
[  439.976659][ T4531] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  439.990068][ T4531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.008141][ T4531] usb 2-1: Product: syz
[  440.009268][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  440.012596][ T4531] usb 2-1: Manufacturer: syz
[  440.020154][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  440.023527][ T4531] usb 2-1: SerialNumber: syz
[  440.436547][ T4531] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  440.507031][ T4531] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  440.557433][ T4531] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  440.570535][ T4531] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  440.581334][ T4531] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  440.590881][ T4531] lan78xx: probe of 2-1:1.0 failed with error -71
[  440.628727][ T4531] usb 2-1: USB disconnect, device number 11
[  440.956605][ T4242] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  441.336787][ T4242] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  441.355441][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.516887][ T4242] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  441.567288][ T4242] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  441.613643][ T4242] usb 3-1: Manufacturer: syz
[  441.648069][ T4242] usb 3-1: config 0 descriptor??
[  441.777878][ T8231] loop1: detected capacity change from 0 to 32768
[  441.835994][ T8231] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  441.860828][ T8231] BTRFS info (device loop1): enabling disk space caching
[  441.872905][ T8234] mmap: syz.3.945 (8234) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  441.911451][ T8231] BTRFS info (device loop1): force clearing of disk cache
[  441.932169][ T8231] BTRFS info (device loop1): disk space caching is enabled
[  441.950223][ T8231] BTRFS info (device loop1): has skinny extents
[  441.990567][ T4242] rc_core: IR keymap rc-hauppauge not found
[  442.000754][ T4242] Registered IR keymap rc-empty
[  442.033718][ T4242] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  442.084435][ T4242] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8
[  443.086487][    C0] igorplugusb 3-1:0.0: Error: urb status = -32
[  443.137919][ T4531] usb 3-1: USB disconnect, device number 13
[  443.188247][ T8231] BTRFS info (device loop1): enabling ssd optimizations
[  443.242230][ T8231] BTRFS info (device loop1): clearing free space tree
[  443.260147][ T8231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  443.326272][ T8231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  443.497919][ T8231] BTRFS info (device loop1): checking UUID tree
[  443.836928][ T8271] loop3: detected capacity change from 0 to 4096
[  444.546703][ T8280] loop5: detected capacity change from 0 to 64
[  444.647988][ T8271] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  444.713979][ T8271] ntfs3: loop3: Failed to load $Extend.
[  449.066498][ T1325] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  449.201471][ T8316] loop3: detected capacity change from 0 to 32768
[  449.262385][ T8316] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.961 (8316)
[  449.289466][ T8316] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  449.300635][ T8316] BTRFS info (device loop3): enabling disk space caching
[  449.309295][ T8316] BTRFS info (device loop3): force clearing of disk cache
[  449.321458][ T8316] BTRFS info (device loop3): disk space caching is enabled
[  449.330360][ T8316] BTRFS info (device loop3): has skinny extents
[  449.806868][ T8340] netlink: 'syz.1.967': attribute type 8 has an invalid length.
[  449.912614][ T1325] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  449.943052][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.963748][ T8316] BTRFS info (device loop3): enabling ssd optimizations
[  449.973056][ T8316] BTRFS info (device loop3): clearing free space tree
[  449.992318][ T8316] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  450.036368][ T1325] usb 6-1: Product: syz
[  450.042653][ T1325] usb 6-1: Manufacturer: syz
[  450.047666][ T8316] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  450.147910][ T1325] usb 6-1: SerialNumber: syz
[  450.162522][ T8316] BTRFS info (device loop3): checking UUID tree
[  450.174039][ T1325] usb 6-1: config 0 descriptor??
[  450.210965][ T8316] BTRFS warning (device loop3): failed to start uuid_rescan task
[  450.234223][ T8316] BTRFS warning (device loop3): failed to check the UUID tree: -4
[  450.441619][ T1325] usb-storage 6-1:0.0: USB Mass Storage device detected
[  450.455749][ T8363] netlink: 'syz.1.970': attribute type 16 has an invalid length.
[  450.537254][ T6641] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  451.505128][ T1325] usb 6-1: USB disconnect, device number 11
[  452.065398][ T6641] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  452.147186][ T8316] BTRFS error (device loop3): open_ctree failed: -4
[  452.425914][ T6641] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  453.626621][ T6641] usb 3-1: device descriptor read/all, error -71
[  454.074953][ T8376] loop0: detected capacity change from 0 to 32768
[  454.157138][ T8394] device syz_tun entered promiscuous mode
[  454.166357][ T8394] device vlan2 entered promiscuous mode
[  455.783817][ T6641] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  456.416976][ T6641] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  456.453688][ T6641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.487377][ T6641] usb 1-1: Product: syz
[  456.491597][ T6641] usb 1-1: Manufacturer: syz
[  456.536703][ T6641] usb 1-1: SerialNumber: syz
[  456.641210][ T8428] device syzkaller0 entered promiscuous mode
[  456.818461][ T8418] loop3: detected capacity change from 0 to 32768
[  456.847236][ T8418] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.985 (8418)
[  457.272293][ T8418] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  457.286898][ T6641] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  457.298532][ T8418] BTRFS info (device loop3): enabling disk space caching
[  457.305604][ T8418] BTRFS info (device loop3): force clearing of disk cache
[  457.333160][ T8418] BTRFS info (device loop3): disk space caching is enabled
[  457.369062][ T8418] BTRFS info (device loop3): has skinny extents
[  457.629919][ T8418] BTRFS info (device loop3): enabling ssd optimizations
[  457.646347][ T8418] BTRFS info (device loop3): clearing free space tree
[  457.655692][ T8418] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  457.666314][ T8418] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  457.687876][ T8418] BTRFS info (device loop3): checking UUID tree
[  458.936844][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.997'.
[  459.106773][ T6641] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71
[  459.256577][ T6641] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  459.316054][ T6641] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  460.106189][ T8472] loop3: detected capacity change from 0 to 32768
[  460.116565][ T6641] lan78xx: probe of 1-1:1.0 failed with error -71
[  460.128073][ T6641] usb 1-1: USB disconnect, device number 12
[  461.361483][ T8504] loop3: detected capacity change from 0 to 4096
[  461.477945][ T8504] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  461.549203][ T8504] ntfs3: loop3: Failed to load $Extend.
[  462.758091][ T8502] loop1: detected capacity change from 0 to 32768
[  462.908388][ T8532] loop5: detected capacity change from 0 to 1024
[  463.224979][ T8502] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1004 (8502)
[  463.618722][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  463.672013][ T8502] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  463.734529][ T8502] BTRFS info (device loop1): enabling disk space caching
[  463.744214][ T8502] BTRFS info (device loop1): force clearing of disk cache
[  463.752949][ T8502] BTRFS info (device loop1): disk space caching is enabled
[  463.770478][ T8502] BTRFS info (device loop1): has skinny extents
[  464.721467][ T8502] BTRFS error (device loop1): open_ctree failed: -12
[  465.866714][ T8581] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1018'.
[  466.315208][ T8568] loop1: detected capacity change from 0 to 32768
[  466.502003][ T8591] loop2: detected capacity change from 0 to 1024
[  467.437436][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'.
[  469.062202][ T8600] loop3: detected capacity change from 0 to 32768
[  469.131015][ T8600] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1024 (8600)
[  469.184533][ T8600] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  469.207204][ T8600] BTRFS info (device loop3): enabling disk space caching
[  469.214934][ T8600] BTRFS info (device loop3): force clearing of disk cache
[  469.227876][ T8600] BTRFS info (device loop3): disk space caching is enabled
[  469.244748][ T8600] BTRFS info (device loop3): has skinny extents
[  469.251612][ T6087] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  469.477467][ T8600] BTRFS info (device loop3): enabling ssd optimizations
[  469.516951][ T6087] usb 3-1: Using ep0 maxpacket: 16
[  469.537786][ T8600] BTRFS info (device loop3): clearing free space tree
[  469.545857][ T8600] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  469.626557][ T8600] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  469.627535][ T6087] usb 3-1: too many configurations: 123, using maximum allowed: 8
[  469.727887][ T8600] BTRFS info (device loop3): checking UUID tree
[  469.736777][ T6087] usb 3-1: config 0 has no interfaces?
[  469.858898][ T6087] usb 3-1: config 0 has no interfaces?
[  469.966910][ T6087] usb 3-1: config 0 has no interfaces?
[  470.066766][ T6087] usb 3-1: config 0 has no interfaces?
[  470.173892][ T6087] usb 3-1: config 0 has no interfaces?
[  470.260959][ T6087] usb 3-1: config 0 has no interfaces?
[  470.356959][ T6087] usb 3-1: config 0 has no interfaces?
[  470.447428][ T6087] usb 3-1: config 0 has no interfaces?
[  470.526807][ T6087] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  470.566590][ T6087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  470.603620][ T6087] usb 3-1: SerialNumber: syz
[  470.715327][ T6087] usb 3-1: config 0 descriptor??
[  471.798306][ T8669] loop3: detected capacity change from 0 to 1024
[  472.546513][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'.
[  472.990294][ T8677] loop3: detected capacity change from 0 to 1024
[  473.112579][ T8677] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  473.158912][ T8677] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.850444][ T8661] usb 3-1: USB disconnect, device number 16
[  474.055808][ T8684] loop1: detected capacity change from 0 to 4096
[  474.162501][ T8684] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  474.285855][ T8684] ntfs3: loop1: Failed to load $Extend.
[  475.616551][   T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  475.811573][ T8703] loop5: detected capacity change from 0 to 32768
[  475.916483][   T21] usb 2-1: Using ep0 maxpacket: 32
[  476.791727][   T21] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  476.826482][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.876691][ T8680] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  476.941956][ T8722] loop5: detected capacity change from 0 to 1024
[  477.670887][   T21] usb 2-1: Product: syz
[  477.675328][   T21] usb 2-1: Manufacturer: syz
[  477.680322][   T21] usb 2-1: SerialNumber: syz
[  477.688383][   T21] usb 2-1: config 0 descriptor??
[  477.713887][ T8706] loop2: detected capacity change from 0 to 32768
[  477.736343][   T21] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  477.745632][   T21] dvb-usb: bulk message failed: -22 (4/0)
[  477.753314][   T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  477.763660][   T21] dvb-usb: bulk message failed: -22 (5/0)
[  477.769702][   T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  477.773528][ T8706] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1043 (8706)
[  477.782476][   T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  477.816713][   T21] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  477.825463][   T21] usb 2-1: media controller created
[  477.859806][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  477.876023][   T21] usb 2-1: selecting invalid altsetting 3
[  477.884009][   T21] ttusb2: set interface to alts=3 failed
[  477.896065][ T8706] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  477.917600][ T8706] BTRFS info (device loop2): enabling disk space caching
[  477.924716][ T8706] BTRFS info (device loop2): force clearing of disk cache
[  477.953139][ T8710] dvb-usb: bulk message failed: -22 (7/0)
[  477.976889][ T8710] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  478.016926][ T8706] BTRFS info (device loop2): disk space caching is enabled
[  478.037676][ T8710] ttusb2: i2c transfer failed.
[  478.096170][   T21] DVB: Unable to find symbol tda10086_attach()
[  478.104930][ T8706] BTRFS info (device loop2): has skinny extents
[  478.115134][   T21] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  478.186779][   T21] dvb-usb: bulk message failed: -22 (4/0)
[  478.192748][   T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  478.251644][   T21] dvb-usb: bulk message failed: -22 (5/0)
[  478.276711][   T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  478.307922][ T8706] BTRFS error (device loop2): open_ctree failed: -12
[  478.321481][   T21] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  478.351231][   T21] usb 2-1: USB disconnect, device number 12
[  478.451645][   T21] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  479.171817][ T7988] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (7988)
[  479.376489][ T6087] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  479.416959][ T8762] loop5: detected capacity change from 0 to 4096
[  479.498015][ T8762] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  479.580411][ T8762] ntfs3: loop5: Failed to load $Extend.
[  479.889418][ T6087] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  479.998708][ T6087] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  480.148346][ T6087] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  480.246504][ T6087] usb 2-1: config 220 has no interface number 2
[  480.286724][ T6087] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  480.506270][ T6087] usb 2-1: config 220 interface 0 has no altsetting 0
[  480.513957][ T6087] usb 2-1: config 220 interface 76 has no altsetting 0
[  480.521303][ T6087] usb 2-1: config 220 interface 1 has no altsetting 0
[  480.666923][ T8772] loop0: detected capacity change from 0 to 1024
[  480.767080][ T6087] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  481.015249][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.345893][ T6087] usb 2-1: Product: syz
[  481.376691][ T6087] usb 2-1: Manufacturer: syz
[  481.381346][ T6087] usb 2-1: SerialNumber: syz
[  481.842797][ T8763] loop2: detected capacity change from 0 to 32768
[  481.850140][ T6087] usb 2-1: selecting invalid altsetting 0
[  481.868694][ T6087] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  481.927040][ T6087] usb 2-1: No valid video chain found.
[  481.985824][ T8779] xt_CT: No such helper "pptp"
[  482.113834][ T6087] usb 2-1: selecting invalid altsetting 0
[  482.241877][ T6087] usbtest: probe of 2-1:220.1 failed with error -22
[  482.557929][ T6087] usb 2-1: USB disconnect, device number 13
[  484.126530][ T6087] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  484.596571][ T6640] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  484.621281][ T8802] loop5: detected capacity change from 0 to 32768
[  484.646685][ T6087] usb 3-1: Using ep0 maxpacket: 8
[  485.146740][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  485.166465][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  485.196461][ T6087] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  485.206194][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  485.219025][ T6087] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  485.229778][ T6087] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  485.240026][ T6087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.251278][ T6087] usb 3-1: config 0 descriptor??
[  485.283286][ T8800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  485.456761][ T6640] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  485.478728][ T6640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.531917][ T6640] usb 2-1: Product: syz
[  485.542044][ T6640] usb 2-1: Manufacturer: syz
[  485.556456][ T6640] usb 2-1: SerialNumber: syz
[  485.574317][ T6640] usb 2-1: config 0 descriptor??
[  485.638802][ T6640] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  485.669843][ T6640] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  485.736965][ T6640] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  485.757480][ T6640] usb 2-1: media controller created
[  485.777437][ T6640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  485.844793][ T8809] dvb-usb: bulk message failed: -22 (7/0)
[  485.961970][ T6640] DVB: Unable to find symbol mt352_attach()
[  486.048073][ T6640] DVB: Unable to find symbol nxt6000_attach()
[  486.054198][ T6640] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  486.086650][ T8659] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  486.128223][ T6640] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14
[  486.166181][ T6640] dvb-usb: schedule remote query interval to 1000 msecs.
[  486.182478][ T6640] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  486.199081][ T8825] loop0: detected capacity change from 0 to 32768
[  486.205768][ T6640] dvb-usb: bulk message failed: -22 (7/0)
[  486.218757][ T6640] dvb-usb: bulk message failed: -22 (7/0)
[  486.269298][ T6640] usb 2-1: USB disconnect, device number 14
[  486.450351][ T8659] usb 4-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x93, skipping
[  486.493776][ T8659] usb 4-1: config 0 interface 0 has no altsetting 0
[  486.504463][ T6640] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  486.667208][ T8659] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  486.698790][ T8659] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  486.724545][ T8659] usb 4-1: Product: syz
[  486.738281][ T8659] usb 4-1: Manufacturer: syz
[  486.754797][ T8659] usb 4-1: SerialNumber: syz
[  486.799227][ T8659] usb 4-1: config 0 descriptor??
[  486.833458][ T4292] usb 3-1: USB disconnect, device number 17
[  486.847591][ T8829] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  486.929842][ T8659] snd-usb-audio: probe of 4-1:0.0 failed with error -22
[  487.072271][ T7988] udevd[7988]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  487.241805][ T6087] usb 4-1: USB disconnect, device number 13
[  487.426813][ T6640] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  487.837491][ T6640] usb 2-1: config 0 has an invalid interface number: 148 but max is 0
[  487.878884][ T6640] usb 2-1: config 0 has no interface number 0
[  487.885076][ T6640] usb 2-1: config 0 interface 148 has no altsetting 0
[  487.917380][ T8847] device syzkaller0 entered promiscuous mode
[  488.087199][ T6640] usb 2-1: New USB device found, idVendor=0451, idProduct=5053, bcdDevice=9b.91
[  488.106890][ T6640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.286484][ T6640] usb 2-1: Product: syz
[  488.291891][ T6640] usb 2-1: Manufacturer: syz
[  488.297133][ T6640] usb 2-1: SerialNumber: syz
[  488.304787][ T6640] usb 2-1: config 0 descriptor??
[  488.363634][ T8857] loop2: detected capacity change from 0 to 1024
[  488.375074][ T6640] ti_usb_3410_5052 2-1:0.148: TI USB 3410 1 port adapter converter detected
[  488.402718][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1085'.
[  488.433297][ T6640] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  488.588781][ T6640] usb 2-1: USB disconnect, device number 15
[  488.623463][ T6640] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  488.644251][ T6640] ti_usb_3410_5052 2-1:0.148: device disconnected
[  488.756491][ T1325] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  489.186780][ T1325] usb 1-1: config index 0 descriptor too short (expected 63186, got 210)
[  489.195288][ T1325] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[  489.238369][ T8876] device syzkaller0 entered promiscuous mode
[  489.255824][ T1325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.391727][ T1325] usb 1-1: config 0 has no interface number 0
[  489.477842][ T1325] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  489.656213][ T8874] loop2: detected capacity change from 0 to 32768
[  489.671284][ T1325] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  490.634866][ T1325] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  491.271322][ T1325] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  491.281000][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.349542][ T1325] usb 1-1: config 0 descriptor??
[  491.376600][ T1325] usb 1-1: can't set config #0, error -71
[  491.401400][ T1325] usb 1-1: USB disconnect, device number 13
[  491.484096][ T8897] device syzkaller0 entered promiscuous mode
[  491.552980][ T8904] program syz.2.1098 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  491.989172][ T8913] loop2: detected capacity change from 0 to 1024
[  492.076965][ T6965] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  492.111734][ T8915] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  492.586763][ T6965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  492.642297][ T6965] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  493.508692][ T6965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.325080][ T6965] usb 2-1: config 0 descriptor??
[  494.387311][ T8912] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  494.859292][ T6965] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  494.896524][ T6965] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  494.903459][ T6965] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  494.944077][ T6965] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  494.972266][ T6965] elan 0003:04F3:0755.000D: unknown main item tag 0x0
[  495.031435][ T6965] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  495.103897][ T6965] usb 2-1: USB disconnect, device number 16
[  495.289247][ T8940] fido_id[8940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  495.428578][ T8932] loop2: detected capacity change from 0 to 32768
[  495.573978][ T8938] loop3: detected capacity change from 0 to 32768
[  496.103792][ T4191] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  496.416708][ T8954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  496.435565][    C1] vkms_vblank_simulate: vblank timer overrun
[  496.523408][ T4191] usb 1-1: Using ep0 maxpacket: 8
[  496.837689][ T4191] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  496.946432][ T4191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.084784][ T4191] usb 1-1: Product: syz
[  497.123531][ T4191] usb 1-1: Manufacturer: syz
[  497.583998][ T8968] loop1: detected capacity change from 0 to 1024
[  497.837871][ T4191] usb 1-1: SerialNumber: syz
[  497.855362][ T4191] usb 1-1: config 0 descriptor??
[  497.952367][ T8970] loop2: detected capacity change from 0 to 1024
[  497.961416][ T4191] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  498.287117][ T8970] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  498.313911][ T8970] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.556522][ T6965] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  499.273788][ T6965] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  499.396773][ T4235] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  499.676861][ T4235] usb 4-1: Using ep0 maxpacket: 8
[  499.826883][ T4235] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  499.844430][ T4235] usb 4-1: config 0 has no interface number 0
[  499.884849][ T4235] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  499.939645][ T4235] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  499.991778][ T4235] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0xC5, skipping
[  500.069102][ T6965] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  500.078486][ T4235] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  500.079112][ T6965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.120354][ T6965] usb 2-1: config 0 descriptor??
[  500.136977][ T8976] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  500.167632][ T6965] hub 2-1:0.0: bad descriptor, ignoring hub
[  500.173603][ T6965] hub: probe of 2-1:0.0 failed with error -5
[  500.188816][ T6965] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  500.266648][ T4235] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  500.284042][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.292637][ T4235] usb 4-1: Product: syz
[  500.304623][ T4235] usb 4-1: Manufacturer: syz
[  500.309809][ T4235] usb 4-1: SerialNumber: syz
[  500.323075][ T4235] usb 4-1: config 0 descriptor??
[  500.377744][ T4235] iowarrior 4-1:0.186: no interrupt-in endpoint found
[  500.496868][ T4191] gspca_sonixj: reg_r err -71
[  500.556754][ T4191] sonixj: probe of 1-1:0.0 failed with error -71
[  500.589636][ T4191] usb 1-1: USB disconnect, device number 14
[  501.018160][ T8994] loop0: detected capacity change from 0 to 32768
[  501.156524][ T6965] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  501.446984][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  501.453319][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  501.620297][   T23] usb 2-1: USB disconnect, device number 17
[  501.737042][ T6965] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  501.746165][ T6965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.757152][ T6965] usb 6-1: Product: syz
[  501.761362][ T6965] usb 6-1: Manufacturer: syz
[  501.766003][ T6965] usb 6-1: SerialNumber: syz
[  501.795064][ T6965] usb 6-1: config 0 descriptor??
[  501.966511][   T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  502.014398][ T9016] loop0: detected capacity change from 0 to 1024
[  502.056925][ T6965] usb-storage 6-1:0.0: USB Mass Storage device detected
[  502.083309][ T9016] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  502.106729][ T9016] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  502.152569][ T8659] usb 4-1: USB disconnect, device number 14
[  502.216668][   T23] usb 3-1: Using ep0 maxpacket: 8
[  502.262274][ T4191] usb 6-1: USB disconnect, device number 12
[  503.264115][ T9026] loop3: detected capacity change from 0 to 64
[  503.276808][   T23] usb 3-1: config 0 has an invalid interface number: 3 but max is 0
[  503.284849][   T23] usb 3-1: config 0 has no interface number 0
[  503.996676][ T8974] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  504.050044][   T23] usb 3-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=d3.dd
[  504.060116][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.068665][   T23] usb 3-1: Product: syz
[  504.072856][   T23] usb 3-1: Manufacturer: syz
[  504.078042][   T23] usb 3-1: SerialNumber: syz
[  504.087548][   T23] usb 3-1: config 0 descriptor??
[  504.267792][ T9041] loop2: detected capacity change from 0 to 7
[  504.332484][ T9010] udc-core: couldn't find an available UDC or it's busy
[  504.354452][ T9010] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  504.375134][ T7989]  loop2:
[  504.378300][ T7989] loop2: partition table partially beyond EOD, truncated
[  504.410101][ T9041]  loop2:
[  504.413327][ T9041] loop2: partition table partially beyond EOD, truncated
[  504.584010][   T23] usb 3-1: USB disconnect, device number 18
[  504.964474][ T9037] loop5: detected capacity change from 0 to 32768
[  506.077209][ T4199] ==================================================================
[  506.085778][ T4199] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90
[  506.093631][ T4199] Read of size 1 at addr ffff8880792ea40a by task kworker/u5:5/4199
[  506.101636][ T4199] 
[  506.103995][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:5 Not tainted syzkaller #0
[  506.111557][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  506.121637][ T4199] Workqueue: hci0 hci_rx_work
[  506.126354][ T4199] Call Trace:
[  506.129648][ T4199]  <TASK>
[  506.132597][ T4199]  dump_stack_lvl+0x188/0x250
[  506.137301][ T4199]  ? show_regs_print_info+0x20/0x20
[  506.142525][ T4199]  ? load_image+0x400/0x400
[  506.147056][ T4199]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  506.152549][ T4199]  ? mutex_lock_io_nested+0x60/0x60
[  506.157868][ T4199]  print_address_description+0x60/0x2d0
[  506.163534][ T4199]  ? hci_le_meta_evt+0x1324/0x3c90
[  506.168727][ T4199]  kasan_report+0xdf/0x130
[  506.173157][ T4199]  ? hci_le_meta_evt+0x1324/0x3c90
[  506.178269][ T4199]  hci_le_meta_evt+0x1324/0x3c90
[  506.183216][ T4199]  ? hci_remote_host_features_evt+0x280/0x280
[  506.189320][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  506.194944][ T4199]  ? mark_lock+0x94/0x320
[  506.199261][ T4199]  ? mutex_unlock+0x10/0x10
[  506.203770][ T4199]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  506.209743][ T4199]  ? lock_chain_count+0x20/0x20
[  506.214586][ T4199]  ? __rwlock_init+0x140/0x140
[  506.219342][ T4199]  hci_event_packet+0xe48/0x1370
[  506.224281][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  506.229483][ T4199]  ? rcu_lock_release+0x20/0x20
[  506.234337][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  506.239527][ T4199]  hci_rx_work+0x255/0xa10
[  506.243975][ T4199]  process_one_work+0x85f/0x1010
[  506.248912][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  506.254539][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  506.259835][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  506.264853][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  506.270392][ T4199]  ? wq_worker_running+0x97/0x170
[  506.275405][ T4199]  worker_thread+0xaa6/0x1290
[  506.280090][ T4199]  kthread+0x436/0x520
[  506.284146][ T4199]  ? rcu_lock_release+0x20/0x20
[  506.288984][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  506.293569][ T4199]  ret_from_fork+0x1f/0x30
[  506.297991][ T4199]  </TASK>
[  506.301004][ T4199] 
[  506.303315][ T4199] Allocated by task 9050:
[  506.307634][ T4199]  __kasan_kmalloc+0xb5/0xf0
[  506.312233][ T4199]  __alloc_skb+0x22c/0x750
[  506.316649][ T4199]  vhci_write+0xbc/0x450
[  506.320886][ T4199]  vfs_write+0x745/0xd60
[  506.325110][ T4199]  ksys_write+0x152/0x260
[  506.329424][ T4199]  do_syscall_64+0x4c/0xa0
[  506.333849][ T4199]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  506.339733][ T4199] 
[  506.342049][ T4199] Last potentially related work creation:
[  506.347752][ T4199]  kasan_save_stack+0x35/0x60
[  506.352425][ T4199]  kasan_record_aux_stack+0xb8/0x100
[  506.357698][ T4199]  call_rcu+0x189/0x950
[  506.361840][ T4199]  sctp_association_free+0x69d/0x7e0
[  506.367114][ T4199]  sctp_do_sm+0x3725/0x55f0
[  506.371606][ T4199]  sctp_primitive_ABORT+0x94/0xc0
[  506.376619][ T4199]  sctp_close+0x2d1/0x910
[  506.380947][ T4199]  inet_release+0x139/0x180
[  506.385438][ T4199]  sock_close+0xd5/0x240
[  506.389666][ T4199]  __fput+0x234/0x930
[  506.393649][ T4199]  task_work_run+0x125/0x1a0
[  506.398227][ T4199]  exit_to_user_mode_loop+0x10f/0x130
[  506.403586][ T4199]  exit_to_user_mode_prepare+0xee/0x180
[  506.409125][ T4199]  syscall_exit_to_user_mode+0x16/0x40
[  506.414574][ T4199]  do_syscall_64+0x58/0xa0
[  506.418978][ T4199]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  506.424861][ T4199] 
[  506.427175][ T4199] The buggy address belongs to the object at ffff8880792ea000
[  506.427175][ T4199]  which belongs to the cache kmalloc-1k of size 1024
[  506.441239][ T4199] The buggy address is located 10 bytes to the right of
[  506.441239][ T4199]  1024-byte region [ffff8880792ea000, ffff8880792ea400)
[  506.455022][ T4199] The buggy address belongs to the page:
[  506.460638][ T4199] page:ffffea0001e4ba00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x792e8
[  506.470776][ T4199] head:ffffea0001e4ba00 order:3 compound_mapcount:0 compound_pincount:0
[  506.479116][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  506.487092][ T4199] raw: 00fff00000010200 ffffea00017c2e00 0000000700000007 ffff888016c41dc0
[  506.495675][ T4199] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  506.504261][ T4199] page dumped because: kasan: bad access detected
[  506.510699][ T4199] page_owner tracks the page as allocated
[  506.516565][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4185, ts 52696928386, free_ts 52682615308
[  506.535057][ T4199]  get_page_from_freelist+0x1bbd/0x1ca0
[  506.540605][ T4199]  __alloc_pages+0x1ee/0x480
[  506.545195][ T4199]  new_slab+0xc0/0x4b0
[  506.549255][ T4199]  ___slab_alloc+0x80a/0xdd0
[  506.553831][ T4199]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  506.559622][ T4199]  __alloc_skb+0x22c/0x750
[  506.564042][ T4199]  inet6_rt_notify+0xdd/0x290
[  506.568710][ T4199]  fib6_add+0x1d4d/0x3d40
[  506.573027][ T4199]  ip6_route_add+0x86/0x130
[  506.577525][ T4199]  addrconf_add_dev+0x295/0x3c0
[  506.582380][ T4199]  addrconf_init_auto_addrs+0x6a0/0xb00
[  506.587919][ T4199]  addrconf_notify+0xa6b/0xf00
[  506.592680][ T4199]  raw_notifier_call_chain+0xcb/0x160
[  506.598051][ T4199]  __dev_notify_flags+0x194/0x300
[  506.603070][ T4199]  dev_change_flags+0xe3/0x1a0
[  506.607849][ T4199]  do_setlink+0xcdb/0x3d60
[  506.612257][ T4199] page last free stack trace:
[  506.616929][ T4199]  free_unref_page_prepare+0x637/0x6c0
[  506.622412][ T4199]  free_unref_page+0x8f/0x2a0
[  506.627078][ T4199]  __unfreeze_partials+0x1a5/0x200
[  506.632179][ T4199]  put_cpu_partial+0x12d/0x190
[  506.636957][ T4199]  qlist_free_all+0x35/0x90
[  506.641449][ T4199]  kasan_quarantine_reduce+0x150/0x160
[  506.647007][ T4199]  __kasan_slab_alloc+0x2f/0xd0
[  506.651878][ T4199]  slab_post_alloc_hook+0x4c/0x380
[  506.657000][ T4199]  __kmalloc_track_caller+0x125/0x330
[  506.662360][ T4199]  kvasprintf+0xe3/0x1a0
[  506.666592][ T4199]  kobject_set_name_vargs+0x5d/0x110
[  506.671864][ T4199]  kobject_init_and_add+0xeb/0x190
[  506.677073][ T4199]  netdev_queue_update_kobjects+0x19c/0x3e0
[  506.682959][ T4199]  netdev_register_kobject+0x273/0x320
[  506.688407][ T4199]  register_netdevice+0x1039/0x16f0
[  506.693600][ T4199]  rtnl_newlink+0x1597/0x1a50
[  506.698272][ T4199] 
[  506.700588][ T4199] Memory state around the buggy address:
[  506.706207][ T4199]  ffff8880792ea300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  506.714270][ T4199]  ffff8880792ea380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  506.722366][ T4199] >ffff8880792ea400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  506.730445][ T4199]                       ^
[  506.734768][ T4199]  ffff8880792ea480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  506.742840][ T4199]  ffff8880792ea500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  506.750887][ T4199] ==================================================================
[  506.758935][ T4199] Disabling lock debugging due to kernel taint
[  506.766709][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  506.773962][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:5 Tainted: G    B             syzkaller #0
[  506.782992][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  506.793057][ T4199] Workqueue: hci0 hci_rx_work
[  506.797778][ T4199] Call Trace:
[  506.801062][ T4199]  <TASK>
[  506.803999][ T4199]  dump_stack_lvl+0x188/0x250
[  506.808689][ T4199]  ? show_regs_print_info+0x20/0x20
[  506.813998][ T4199]  ? load_image+0x400/0x400
[  506.818512][ T4199]  panic+0x2e5/0x810
[  506.822417][ T4199]  ? bpf_jit_dump+0xd0/0xd0
[  506.826979][ T4199]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  506.832959][ T4199]  ? _raw_spin_unlock+0x40/0x40
[  506.837808][ T4199]  ? hci_le_meta_evt+0x1324/0x3c90
[  506.842934][ T4199]  check_panic_on_warn+0x80/0xa0
[  506.848033][ T4199]  ? hci_le_meta_evt+0x1324/0x3c90
[  506.853185][ T4199]  end_report+0x6d/0xf0
[  506.857337][ T4199]  kasan_report+0x102/0x130
[  506.861835][ T4199]  ? hci_le_meta_evt+0x1324/0x3c90
[  506.866974][ T4199]  hci_le_meta_evt+0x1324/0x3c90
[  506.871905][ T4199]  ? hci_remote_host_features_evt+0x280/0x280
[  506.877966][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  506.883591][ T4199]  ? mark_lock+0x94/0x320
[  506.887919][ T4199]  ? mutex_unlock+0x10/0x10
[  506.892462][ T4199]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  506.898465][ T4199]  ? lock_chain_count+0x20/0x20
[  506.903463][ T4199]  ? __rwlock_init+0x140/0x140
[  506.908246][ T4199]  hci_event_packet+0xe48/0x1370
[  506.913216][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  506.918455][ T4199]  ? rcu_lock_release+0x20/0x20
[  506.923340][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  506.928573][ T4199]  hci_rx_work+0x255/0xa10
[  506.933018][ T4199]  process_one_work+0x85f/0x1010
[  506.937972][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  506.943631][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  506.948956][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  506.954013][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  506.959606][ T4199]  ? wq_worker_running+0x97/0x170
[  506.964658][ T4199]  worker_thread+0xaa6/0x1290
[  506.969374][ T4199]  kthread+0x436/0x520
[  506.973480][ T4199]  ? rcu_lock_release+0x20/0x20
[  506.978354][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  506.982971][ T4199]  ret_from_fork+0x1f/0x30
[  506.987508][ T4199]  </TASK>
[  506.990842][ T4199] Kernel Offset: disabled
[  506.995175][ T4199] Rebooting in 86400 seconds..