last executing test programs:

8.714961504s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={0x0, r0}, 0x10)
socket(0x0, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
open$dir(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_usb_connect(0x0, 0x57, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff00052406000105240000000d240f010000000000f2ff000006241a"], 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xd5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x7f, 0x0, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x1ff, 0xe0, 0x1, {0x22, 0xe79}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9c, 0xdb}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x0, 0x9}}]}}}]}}]}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x0, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

8.582640323s ago: executing program 4:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1ff, 0x83a02)
write$P9_RWRITE(r1, &(0x7f00000002c0)={0xb}, 0xfa4)

8.497044108s ago: executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VNI={0x8}]}, 0x24}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0xf40, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x2001095, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x800734, &(0x7f00000002c0)={[{@grpid}, {@discard}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@journal_checksum}]}, 0x1, 0x499, &(0x7f00000004c0)="$eJzs3E1sVEUcAPD/e/3gQ6AVEQVBqmhs/GhpQeXgRaOJJpqY6KEePNS2ELRQQ9dECNFqDB4NiXfi0cSjF296U08mXvFuSIgSI8hpzXv7tnRfu6WF7S7Q3y/Z7sy+aWf++97Mzs50N4B1ayD7kURsiYgLEdFXyzYWGKjdXb18ZuK/y2cmkqhW3/oryctduXxmol60/nv3FJnBNCL9IikqaTR76vQH49PTUyeL/HDl+IfDs6dOP3Ps+PjRqaNTJ0YPHz50cOT550afbUmcWVxXdn8ys2fXq++ce2Ni7Nx7v3yXtXfn3uxo1/U4elpSXW4gC/zvaq587PHWVXNb2LognXTnd9//27HWsFJdEdFdXPYXoi+6onv+WF+88nlHGwesqey1aUPzw3NV4C6WRKdbAHRG/YU+e/9bv7Vp6nFbuPRi7Q1QFvfV4lY70h1pUaaFSwKLDETE2Ny189ktSuspAABr4cds/vP0UvO/NHYuKLet2EPpj4h7I2J7RNwXETsi4v6IvOwDEfHgKusvbw0tnv+kF28qsBXK5n8vFHtbjfO/+uwv+ruK3NY8/p7kyLHpqQPFczIYPRuy/Mgydfz08u9fNTu2cP43Vl+IK+aCRTuS8pbc5HhlvFWT0kufRezuXir+ZH4nIKt8V0TsXt2f3lZPHHvy2z3NCjXEP3ftfFb/WEP8y+heXYOWUv0m4ona+Z+LUvzx2nxquf3J4Y0xPXVguH5VLPbrb2ffbFb/LcXfAtn539x4/ZdK9P2TLNyvnV19HWf/+LLpe5obx59e7C4tUGfXf2/ydr5n3Vs89vF4pXJyJKI3eT3Pzz++sVI5OXr9d/Nyo9fLZ/EP7m+8/us9f3txn8X/UERkF/HeiHg4IvYVbX8kIh6NiP3LxP/zS4+9v+L4323/+Z9ccvybH3L6G8//6hNJ4/C1QDUbWldw/g/lqcHikXz8u4FyK9ImDbyV5w4AAADuFGlEbIkkHZpPp+nQUO1/+HfE5nR6Zrby1JGZj05M1j4j0B89aX2lq2/BeuhIMlf8xVq+vuRSP36wWDf+umtTnh+amJme7GDcQK2fL9X/M392lQpfy/9haFMn2gmskRbsowF3qHL/TzvUDqD9yv1/X4faAbSf+T+sXzfo/73tagfQfkv1/09L+fJeAHB3MP+H9Uv/h/Wraf9f5psBgbuD139Yl5b78P4PN/+R/04lspHsNmhGexPVvsXfd7D2iWj2lQqnTvdEROefFolbSnR6ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiN/wMAAP//WqnoaA==")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
prctl$PR_SET_SECUREBITS(0x1c, 0x10)
setresuid(0x0, 0xffffffffffffffff, 0xee00)
getresuid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0)
setresuid(0x0, r2, 0xffffffffffffffff)
getresuid(&(0x7f0000000000), 0x0, &(0x7f00000001c0))
setresuid(0x0, r2, r2)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0)
pwritev2(r4, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001440)="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", 0x9fe}, {&(0x7f0000000100)="26885ef7c635fa1234e5c4d57af85d50b94f568acb60d6071402c534aea257f882affeed2ec3e2887ab66526e7", 0x2d}, {&(0x7f0000000580)="8e3dd372577d9a3c16d6af580e2bcba9f19661192925b2e000e01558dbd986a9f889c9d606db1aaeb32381006b48", 0x2e}], 0x3, 0x0, 0x0, 0x4000005}, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)

8.450140315s ago: executing program 0:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000840)="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", 0x789}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
sendto(r0, &(0x7f0000000180)="c4", 0x1, 0x40028c1, 0x0, 0x0)

8.289204907s ago: executing program 4:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x29a, 0x0, 0xa9aaaa0a)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0x90002000})
syz_emit_ethernet(0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb6e0800450000680000000000059078ac1414000a0101004404c0038917ce00000000ac1414bbac1e4001ac141400000000008323b77f0000010a0101017f000001ffffffffac1414307f0000017f0000017f000001000000000000b3f43f2d719aa74b48f41bbd02177088702764cc5aed4bc23de1f741e5d4b0b524b8d80eccacf4d7404aec45e8cfd83b616c577c5ba9b0a24b48725320215651d3023a227fb0fcd903c1e9489f75859becb701dafd0063a577b3c0826c1dac826e161589464930757d0ae1236489712d53dfc7741ce501f02175730327cf2df2766a5dd7f95d40874856434fc6a8d54be0bee6942498483bc428bffc72f98ee4a9a3f576d9084b7a0f6b41e7893a13d16294c36b8cbd1af8e4e04ace80eaeca6b4091f18bd310b03376071ce94733c29222c7e6aa46d47e5df2044354f989ffa5ff31bdbdf0651dad8ff7946ce64", @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000001})

8.094769354s ago: executing program 2:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000))

7.817822711s ago: executing program 0:
quotactl$Q_SYNC(0x0, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000001800)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028f0003010000000904000000010100000a24010000000201"], 0x0)

7.198411696s ago: executing program 3:
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
timer_create(0x0, 0x0, &(0x7f0000000140))
clock_gettime(0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
timer_gettime(0x0, 0x0)

6.942871886s ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0x0, &(0x7f00000009c0)={0x81}, 0x0)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x4a, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88caffff0000000000", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

6.273125541s ago: executing program 4:
mlockall(0x3)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
close(r2)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$KIOCSOUND(r2, 0x541b, 0x0)

6.213954643s ago: executing program 0:
mlockall(0x3)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00')
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
setxattr$incfs_id(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)

6.187489754s ago: executing program 2:
lseek(0xffffffffffffffff, 0x7fff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="bf8500000000000004002b8008001b"], 0x2c}}, 0x0)

4.939250014s ago: executing program 1:
mlockall(0x1)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r1, r0, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)

3.872750528s ago: executing program 2:
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000440)=""/247, 0x26)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x840000088}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc058534b, &(0x7f0000000100)={{}, {0x0, 0x5}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc08c5335, &(0x7f0000000180))
tkill(r0, 0x7)

3.514328901s ago: executing program 2:
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
mlockall(0x1)
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCBRADDBR(r0, 0x5452, &(0x7f0000000000)='xfrm0\x00')

3.480207103s ago: executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ppoll(&(0x7f00000002c0)=[{r0, 0x4004}], 0x1, 0x0, 0x0, 0x0)

3.304828717s ago: executing program 3:
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000001100)=""/4096)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setgid(0x0)

2.185229618s ago: executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0)

2.025140874s ago: executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020)

1.963120596s ago: executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080))
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eb72e1ec31e5dbf8ad3dd59be93e80eb335058ac98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0000c4cf9785f3f531abc19bc1548fa5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922b80000000000000016b6a5798955796aea325770d6ccc93a9090093b2c7bad114fcbc67036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c0335cc4e3eb756e0855bd2a8d6bf9f6ba8a1344694fe2cd6a732df1e88139990e892138a7f307dba1e58cfc6c3da0703a1c006f1207177a7f30f785b339a7e4532e8a8e8bbd3604fe63d80fabbe5771b53745ae7195c21ea29321cae0ad5f4d37dfd3531886bce26cfaa541b9591b00e0aa156e2186426bf84d65df3df264b5f12f516bf55446a56dee9485d7b77d6a31d8a3184826db1d165d48d858297cc31783070d59afb4cd142034f81a7346c154bc0a6106786195c273115c42489863d95268f69e88b2aaac0befcce1e89e50b99332bd00a65bbb8813d844a65bda2f2fe0ab210e6f867250870fbe900e10aacac6bc7968f79882fc2c880446a144219afa2bb748550d0b93a"], 0x1, 0x552e, &(0x7f0000002480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x40004)

1.826079411s ago: executing program 0:
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x12c)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2})
ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x3)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x2000)

1.753096305s ago: executing program 1:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0xc0, 0x2}, {0x3}}]}}, 0xf)

1.625822942s ago: executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = fcntl$dupfd(r1, 0x0, r0)
r3 = accept$inet(r2, 0x0, 0x0)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
dup3(r4, r3, 0x0)

1.425729063s ago: executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x97a811b044943472, 0x0)

1.234837049s ago: executing program 1:
prlimit64(0x0, 0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000100)={[{@compress_force}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd}, {@noenospc_debug}]}, 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x1eb142, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x40c007})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000180)=ANY=[], 0x2f)

446.039884ms ago: executing program 3:
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r2, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
close(r3)
rt_sigreturn()
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r4=>0x0})
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, r4+60000000}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x230003, 0x0, 0x0, 0x0, &(0x7f0000000140))
futex(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0)

162.063543ms ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ppoll(&(0x7f00000002c0)=[{r0, 0x4004}], 0x1, 0x0, 0x0, 0x0)

127.22276ms ago: executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59)
sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0xffffffffffffff71}}], 0x1, 0x0, 0x0)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r2 = socket(0x1, 0x3, 0x0)
recvfrom$inet_nvme(r2, &(0x7f00000000c0)=""/95, 0x5f, 0x0, 0x0, 0x0)

118.09031ms ago: executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x2)
ioctl$UI_DEV_CREATE(r0, 0x5501)

0s ago: executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0)
rmdir(&(0x7f0000000100)='./file0\x00')

kernel console output (not intermixed with test programs):

 0 to 4096
[  144.230473][ T6543] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  144.252106][ T6543] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  144.278194][ T6546] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.316169][ T6445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.338684][ T6251] udevd[6251]: incorrect nilfs2 checksum on /dev/loop3
[  144.404946][ T6445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.599423][ T6316] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  144.664389][ T6445] team0: Port device team_slave_0 added
[  144.712676][ T6316] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  144.742999][ T6316] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  144.775920][ T6445] team0: Port device team_slave_1 added
[  144.806196][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.813257][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.841236][ T6445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.854655][ T6316] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  144.865893][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.873768][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.902168][ T6445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.931547][ T6553] dvmrp8: entered allmulticast mode
[  145.018102][ T5246] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  145.038682][ T6559] 9pnet_fd: Insufficient options for proto=fd
[  145.076655][ T6445] hsr_slave_0: entered promiscuous mode
[  145.105141][ T6445] hsr_slave_1: entered promiscuous mode
[  145.112480][ T6445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.122579][ T6445] Cannot create hsr debugfs directory
[  145.173290][ T6563] binder: BINDER_SET_CONTEXT_MGR already set
[  145.180945][ T6563] binder: 6562:6563 ioctl 4018620d 20000040 returned -16
[  145.217617][ T5246] usb 1-1: Using ep0 maxpacket: 32
[  145.243917][ T5246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  145.291072][ T5246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  145.337679][ T5246] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  145.346761][ T5246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.392265][ T5246] usb 1-1: config 0 descriptor??
[  145.419883][ T6554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  145.434896][ T5246] hub 1-1:0.0: USB hub found
[  145.444045][ T6521] chnl_net:caif_netlink_parms(): no params data found
[  145.530496][   T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.661704][ T5246] hub 1-1:0.0: 2 ports detected
[  145.682515][   T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.707657][ T5123] Bluetooth: hci3: command tx timeout
[  145.811841][   T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.874152][ T6566] loop3: detected capacity change from 0 to 32768
[  145.886455][ T6566] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6566)
[  145.913962][ T6566] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.934209][ T6566] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  145.943510][ T6566] BTRFS info (device loop3): using free-space-tree
[  145.950999][ T5123] Bluetooth: hci0: command tx timeout
[  146.002225][   T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.066748][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.097638][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.104897][ T6521] bridge_slave_0: entered allmulticast mode
[  146.139401][ T6521] bridge_slave_0: entered promiscuous mode
[  146.236838][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.244713][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.253987][ T6521] bridge_slave_1: entered allmulticast mode
[  146.270136][ T6521] bridge_slave_1: entered promiscuous mode
[  146.402976][ T6566] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  146.446984][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.520394][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.628127][ T5987] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.734837][ T6521] team0: Port device team_slave_0 added
[  146.752712][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.870185][ T6521] team0: Port device team_slave_1 added
[  146.879376][   T62] bridge_slave_1: left allmulticast mode
[  146.885094][   T62] bridge_slave_1: left promiscuous mode
[  146.912311][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.955947][   T62] bridge_slave_0: left allmulticast mode
[  146.971121][   T62] bridge_slave_0: left promiscuous mode
[  146.983293][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.147800][ T5246] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  147.148639][ T5170] usb 1-1: USB disconnect, device number 3
[  147.675227][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.694101][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.716904][   T62] bond0 (unregistering): Released all slaves
[  147.792400][ T6316] 8021q: adding VLAN 0 to HW filter on device team0
[  147.945165][ T6600] loop3: detected capacity change from 0 to 40427
[  147.969448][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.984130][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.995430][ T6600] F2FS-fs (loop3): Found nat_bits in checkpoint
[  148.028190][ T5123] Bluetooth: hci0: command tx timeout
[  148.071528][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.085198][ T6600] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  148.125897][ T5987] syz-executor.3: attempt to access beyond end of device
[  148.125897][ T5987] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  148.148563][ T5987] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  148.208938][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.216110][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.257862][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.265034][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.291792][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.306367][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.340767][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.540984][ T6521] hsr_slave_0: entered promiscuous mode
[  148.554323][ T6521] hsr_slave_1: entered promiscuous mode
[  148.568156][ T6521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.577094][ T6521] Cannot create hsr debugfs directory
[  148.683691][   T62] hsr_slave_0: left promiscuous mode
[  148.696793][   T62] hsr_slave_1: left promiscuous mode
[  148.713922][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.721619][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.737651][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.745692][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.749496][ T6607] loop0: detected capacity change from 0 to 40427
[  148.783943][ T6607] F2FS-fs (loop0): Found nat_bits in checkpoint
[  148.785090][   T62] veth1_macvtap: left promiscuous mode
[  148.813650][   T62] veth0_macvtap: left promiscuous mode
[  148.825115][   T62] veth1_vlan: left promiscuous mode
[  148.831135][   T62] veth0_vlan: left promiscuous mode
[  148.875657][ T6607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.489103][   T62] team0 (unregistering): Port device team_slave_1 removed
[  149.535209][   T62] team0 (unregistering): Port device team_slave_0 removed
[  149.712414][ T6619] loop0: detected capacity change from 0 to 40427
[  149.766225][ T6619] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.847866][ T6619] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.945235][ T6113] syz-executor.0: attempt to access beyond end of device
[  149.945235][ T6113] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  149.964619][ T6113] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  150.107570][ T5123] Bluetooth: hci0: command tx timeout
[  150.262064][ T6445] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.285726][ T6445] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.343771][ T6316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.367839][ T6316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.399759][ T6445] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.418824][ T6445] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  150.520291][ T6633] loop0: detected capacity change from 0 to 256
[  150.532660][ T6633] exfat: Unknown parameter ''
[  150.580958][ T6251] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  150.762947][ T6639] 9pnet_fd: Insufficient options for proto=fd
[  151.031946][ T6649] binder: BINDER_SET_CONTEXT_MGR already set
[  151.051166][ T6649] binder: 6648:6649 ioctl 4018620d 20000040 returned -16
[  151.145144][ T6445] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.188901][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.288965][ T6445] 8021q: adding VLAN 0 to HW filter on device team0
[  151.348518][  T783] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.355680][  T783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.422748][ T6659] loop3: detected capacity change from 0 to 2048
[  151.455341][  T783] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.462746][  T783] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.481705][ T6659] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled
[  151.555586][ T6659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.751933][ T6521] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  151.779980][ T6521] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  151.814823][ T6521] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  151.871150][ T6521] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  152.215516][ T6316] veth0_vlan: entered promiscuous mode
[  152.292856][ T6316] veth1_vlan: entered promiscuous mode
[  152.329367][ T6445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.383468][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.409896][ T6654] loop0: detected capacity change from 0 to 32768
[  152.443924][ T6521] 8021q: adding VLAN 0 to HW filter on device team0
[  152.452903][ T6654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6654)
[  152.511388][ T6654] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.518788][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.522731][ T6654] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  152.528643][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.537546][ T6654] BTRFS info (device loop0): using free-space-tree
[  152.702635][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.709844][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.788160][ T6316] veth0_macvtap: entered promiscuous mode
[  152.828542][ T6665] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 96: padding at end of block bitmap is not set
[  152.923659][ T6445] veth0_vlan: entered promiscuous mode
[  152.940696][ T6316] veth1_macvtap: entered promiscuous mode
[  153.026138][ T6445] veth1_vlan: entered promiscuous mode
[  153.053799][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.088246][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.106076][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.134984][ T6654] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  153.147752][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.169168][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.221070][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.256109][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.284716][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.314678][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.347016][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.386078][ T6316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.410981][ T6316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.429303][ T6316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.443233][ T6316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.487906][ T6113] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.636360][ T6445] veth0_macvtap: entered promiscuous mode
[  153.724360][ T6445] veth1_macvtap: entered promiscuous mode
[  153.876911][ T5987] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir852345002/syzkaller.C5pWG3/28/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  153.965424][ T5987] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  154.029520][ T6521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.051075][ T5987] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir852345002/syzkaller.C5pWG3/28/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  154.091447][ T3924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.109258][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.125175][ T3924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.125978][ T5987] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  154.154885][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.165602][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.182440][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.195283][ T5987] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir852345002/syzkaller.C5pWG3/28/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  154.209748][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.235967][ T5987] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  154.263493][ T5987] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir852345002/syzkaller.C5pWG3/28/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  154.270623][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.298647][ T5987] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 34: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  154.328938][ T5987] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor.3: path /root/syzkaller-testdir852345002/syzkaller.C5pWG3/28/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  154.341029][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.479927][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.511177][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.547665][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.590521][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.609458][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.621713][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.637885][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.708513][ T6445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.719972][ T6445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.731194][ T6445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.740567][ T6445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.773651][ T3924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.791619][ T3924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.816870][ T6521] veth0_vlan: entered promiscuous mode
[  154.873232][ T6730] loop0: detected capacity change from 0 to 32768
[  154.937322][ T6730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6730)
[  154.980920][ T6521] veth1_vlan: entered promiscuous mode
[  155.024360][ T6730] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.062899][ T6730] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  155.119854][ T6730] BTRFS info (device loop0): using free-space-tree
[  155.293958][ T3924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.358106][ T3924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.392449][ T6521] veth0_macvtap: entered promiscuous mode
[  155.415400][ T5987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.442130][ T6521] veth1_macvtap: entered promiscuous mode
[  155.725043][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.779229][ T6730] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  155.849163][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.868539][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.935472][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.002031][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.034203][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.057436][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.067285][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.083567][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.139438][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.158181][ T3924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.166041][ T3924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.188066][ T6113] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.239774][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.286793][ T6790] binder: BINDER_SET_CONTEXT_MGR already set
[  156.333043][ T6790] binder: 6789:6790 ioctl 4018620d 20000040 returned -16
[  156.356771][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.399437][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.437485][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.477509][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.507901][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.538763][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.577581][ T6521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.614406][ T6521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.668396][ T6797] binder: BINDER_SET_CONTEXT_MGR already set
[  156.668683][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.674410][ T6797] binder: 6796:6797 ioctl 4018620d 20000040 returned -16
[  156.718521][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  156.735878][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  156.744759][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  156.758581][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  156.761004][ T6521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.778285][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  156.779214][ T6803] 9pnet_fd: Insufficient options for proto=fd
[  156.800886][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  156.874727][ T6521] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.893181][ T6521] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.937157][ T6521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.053074][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.184505][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.533633][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.553103][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.600870][   T35] bridge_slave_1: left allmulticast mode
[  157.606766][   T35] bridge_slave_1: left promiscuous mode
[  157.613004][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.625036][   T35] bridge_slave_0: left allmulticast mode
[  157.636032][   T35] bridge_slave_0: left promiscuous mode
[  157.642094][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.097356][ T6823] loop1: detected capacity change from 0 to 32768
[  158.144121][ T6823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6823)
[  158.158874][   T35] dvmrp8 (unregistering): left allmulticast mode
[  158.202214][ T6823] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.218881][ T6823] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  158.244336][ T6823] BTRFS info (device loop1): using free-space-tree
[  158.718100][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.759679][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.783170][   T35] bond0 (unregistering): Released all slaves
[  158.801540][ T6823] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  158.856415][ T6833] loop4: detected capacity change from 0 to 32768
[  158.926409][ T5123] Bluetooth: hci4: command tx timeout
[  158.977922][ T6833] BTRFS: device /dev/loop4 (7:4) using temp-fsid 8b68730a-350f-43bf-902f-43776a6147a4
[  159.034750][ T6833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6833)
[  159.050410][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.082901][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.114729][ T6829] loop0: detected capacity change from 0 to 40427
[  159.133369][ T6833] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.144758][ T6445] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.167538][ T6833] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  159.196134][ T6833] BTRFS info (device loop4): using free-space-tree
[  159.209232][ T6829] F2FS-fs (loop0): Found nat_bits in checkpoint
[  159.313985][ T6798] chnl_net:caif_netlink_parms(): no params data found
[  159.537981][ T6829] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  160.095298][ T6833] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  160.278175][   T35] hsr_slave_0: left promiscuous mode
[  160.330132][   T35] hsr_slave_1: left promiscuous mode
[  160.339688][ T6316] BTRFS info (device loop4): last unmount of filesystem 8b68730a-350f-43bf-902f-43776a6147a4
[  160.364060][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.405725][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.495631][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.533150][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.602459][ T6913] binder: BINDER_SET_CONTEXT_MGR already set
[  160.605677][   T35] veth1_macvtap: left promiscuous mode
[  160.628482][ T6913] binder: 6911:6913 ioctl 4018620d 20000040 returned -16
[  160.637952][   T35] veth0_macvtap: left promiscuous mode
[  160.667993][   T35] veth1_vlan: left promiscuous mode
[  160.676515][   T35] veth0_vlan: left promiscuous mode
[  160.756098][ T6919] 9pnet_fd: Insufficient options for proto=fd
[  160.988545][ T5123] Bluetooth: hci4: command tx timeout
[  161.650354][ T6895] loop2: detected capacity change from 0 to 40427
[  161.698601][ T6895] F2FS-fs (loop2): Found nat_bits in checkpoint
[  161.812445][ T6923] loop0: detected capacity change from 0 to 32768
[  161.831195][ T6923] btrfs: Unknown parameter 'appraise'
[  161.836820][ T6895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  162.055636][ T6521] syz-executor.2: attempt to access beyond end of device
[  162.055636][ T6521] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  162.081117][ T6521] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  162.089252][   T35] team0 (unregistering): Port device team_slave_1 removed
[  162.174083][   T35] team0 (unregistering): Port device team_slave_0 removed
[  162.871290][ T6940] loop0: detected capacity change from 0 to 32768
[  162.899144][ T6940] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6940)
[  162.961024][ T6940] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  162.985569][ T6940] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  163.007135][ T6940] BTRFS info (device loop0): using free-space-tree
[  163.067572][ T5123] Bluetooth: hci4: command tx timeout
[  163.194632][ T6966] loop2: detected capacity change from 0 to 512
[  163.202852][ T6966] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.211315][ T6966] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  163.229821][ T6966] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  163.260409][ T6966] EXT4-fs (loop2): orphan cleanup on readonly fs
[  163.279798][ T6113] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.305322][ T6966] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0
[  163.328984][ T6966] EXT4-fs (loop2): Remounting filesystem read-only
[  163.340292][ T6966] Quota error (device loop2): write_blk: dquota write failed
[  163.351091][ T6966] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  163.375301][ T6966] EXT4-fs (loop2): 1 orphan inode deleted
[  163.439574][ T6966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.475839][ T6912] dvmrp8: entered allmulticast mode
[  163.514384][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.554660][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.563174][ T6798] bridge_slave_0: entered allmulticast mode
[  163.601240][ T6798] bridge_slave_0: entered promiscuous mode
[  163.609880][ T6521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.624752][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.672409][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.706150][ T6798] bridge_slave_1: entered allmulticast mode
[  163.733699][   T29] audit: type=1326 audit(1717270192.885:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587ee7cee9 code=0x7ffc0000
[  163.769172][ T6798] bridge_slave_1: entered promiscuous mode
[  163.811537][ T6971] wireguard: wg1: Could not create IPv6 socket
[  163.841907][   T29] audit: type=1326 audit(1717270192.885:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587ee7cee9 code=0x7ffc0000
[  163.903205][   T29] audit: type=1326 audit(1717270192.895:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587ee7cee9 code=0x7ffc0000
[  163.908314][ T6974] loop4: detected capacity change from 0 to 4096
[  163.932432][   T29] audit: type=1326 audit(1717270192.895:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587ee7cee9 code=0x7ffc0000
[  163.932481][   T29] audit: type=1326 audit(1717270192.895:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587ee7cee9 code=0x7ffc0000
[  164.047169][ T6974] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  164.060867][ T6974] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  164.069051][   T29] audit: type=1326 audit(1717270192.895:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f587ee7a667 code=0x7ffc0000
[  164.090878][ T6980] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.122617][ T6798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.136393][ T6982] 9pnet_fd: Insufficient options for proto=fd
[  164.155930][   T29] audit: type=1326 audit(1717270192.895:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f587ee40329 code=0x7ffc0000
[  164.199719][ T6798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.234520][   T29] audit: type=1326 audit(1717270192.895:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587ee7cee9 code=0x7ffc0000
[  164.348337][ T6798] team0: Port device team_slave_0 added
[  164.385805][ T6798] team0: Port device team_slave_1 added
[  164.482221][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.506069][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.573479][ T6798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.615383][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.637168][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.699210][ T6798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.874724][ T6798] hsr_slave_0: entered promiscuous mode
[  164.899831][ T6798] hsr_slave_1: entered promiscuous mode
[  164.900824][ T6997] loop1: detected capacity change from 0 to 256
[  164.914500][ T6798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.936193][ T6798] Cannot create hsr debugfs directory
[  164.987082][ T6997] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  165.147588][ T5123] Bluetooth: hci4: command tx timeout
[  165.164546][ T6979] loop2: detected capacity change from 0 to 32768
[  165.200746][ T6979] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6979)
[  165.204884][ T6984] loop0: detected capacity change from 0 to 32768
[  165.237949][ T6979] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.281292][ T6979] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  165.296469][ T6984] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  165.334589][ T6979] BTRFS info (device loop2): using free-space-tree
[  165.424462][ T7029] 9pnet_fd: Insufficient options for proto=fd
[  165.429275][ T6984] XFS (loop0): Ending clean mount
[  165.543958][ T7037] loop1: detected capacity change from 0 to 512
[  165.591326][ T7037] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino
[  165.628861][ T7037] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[  165.653449][ T7037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.655119][ T7038] loop4: detected capacity change from 0 to 4096
[  165.691615][ T7038] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  165.711005][ T7038] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  165.752848][ T6113] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  165.770044][ T7042] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.832112][ T6445] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.888904][ T6521] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.942791][ T6798] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  165.980267][ T6798] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  166.029911][ T6798] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  166.069012][ T7044] Driver unsupported XDP return value 0 on prog  (id 37) dev N/A, expect packet loss!
[  166.088818][ T6798] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  166.340934][ T7050] loop1: detected capacity change from 0 to 2048
[  166.405611][ T7050] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled
[  166.461335][ T6798] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.514587][ T7050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.535832][ T6798] 8021q: adding VLAN 0 to HW filter on device team0
[  166.573012][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.580235][ T5246] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.608530][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.615674][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.676497][ T6798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.156601][ T6798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.223935][ T7083] loop0: detected capacity change from 0 to 4096
[  167.267280][ T7083] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  167.288263][ T6798] veth0_vlan: entered promiscuous mode
[  167.317835][ T6798] veth1_vlan: entered promiscuous mode
[  167.334817][ T7083] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  167.413429][ T6798] veth0_macvtap: entered promiscuous mode
[  167.436928][ T7090] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.461590][ T7090] IPVS: length: 143 != 24
[  167.468382][ T6798] veth1_macvtap: entered promiscuous mode
[  167.499855][   T62] ntfs3: loop0: ino=5, "/" ntfs3_write_inode failed, -22.
[  167.533837][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.577468][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.587324][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.623860][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.654298][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.676138][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.696022][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.717572][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.748544][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.791193][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.825121][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.856303][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.892318][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.920078][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.951851][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.973726][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.995424][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.020341][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.048473][ T6798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.057207][ T6798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.069056][ T6798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.080171][ T6798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.089184][ T7050] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 96: padding at end of block bitmap is not set
[  168.215011][ T6445] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir4155283462/syzkaller.QUBetv/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  168.320048][ T6445] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  168.344322][ T7088] loop4: detected capacity change from 0 to 40427
[  168.386554][ T7088] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  168.399136][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.406967][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.425777][ T6445] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir4155283462/syzkaller.QUBetv/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  168.437529][ T7088] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  168.500791][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.516093][ T6445] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  168.523287][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.565462][ T7088] F2FS-fs (loop4): Found nat_bits in checkpoint
[  168.582369][ T6445] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir4155283462/syzkaller.QUBetv/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  168.643386][ T7088] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  168.650641][ T7088] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  168.661863][ T6445] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  168.701809][ T7099] f2fs_ckpt-7:4: attempt to access beyond end of device
[  168.701809][ T7099] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  168.735250][ T7099] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  168.740549][ T7104] loop3: detected capacity change from 0 to 256
[  168.759488][ T7104] exfat: Unknown parameter ''
[  168.762789][ T6445] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir4155283462/syzkaller.QUBetv/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  168.798542][ T6445] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 34: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  168.861128][ T6445] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor.1: path /root/syzkaller-testdir4155283462/syzkaller.QUBetv/12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  168.886578][ T7092] loop2: detected capacity change from 0 to 40427
[  168.923170][ T7092] F2FS-fs (loop2): Found nat_bits in checkpoint
[  169.101595][ T7092] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  169.659056][  T783] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  169.671336][ T6445] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.761480][ T1268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.886602][  T783] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  169.927509][  T783] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  169.967145][  T783] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  169.987875][  T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.022454][ T7130] loop2: detected capacity change from 0 to 256
[  170.037872][ T7118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  170.043029][ T1268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.090348][ T7130] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  170.224605][ T1268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.354365][ T1268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.416355][ T7134] Bluetooth: MGMT ver 1.23
[  170.544834][ T7133] loop2: detected capacity change from 0 to 1024
[  170.648415][ T1268] bridge_slave_1: left allmulticast mode
[  170.654248][ T1268] bridge_slave_1: left promiscuous mode
[  170.670494][ T1268] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.693062][ T7120] loop0: detected capacity change from 0 to 32768
[  170.709955][ T1268] bridge_slave_0: left allmulticast mode
[  170.715658][ T1268] bridge_slave_0: left promiscuous mode
[  170.729107][ T7120] XFS: noikeep mount option is deprecated.
[  170.749203][ T1268] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.803070][ T7120] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  170.871899][ T7120] XFS (loop0): Ending clean mount
[  170.872338][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  170.889924][ T7120] XFS (loop0): Quotacheck needed: Please wait.
[  170.897974][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  170.907131][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  170.909376][  T783] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  170.929252][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  170.942814][    T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  170.954599][    T8] XFS (loop0): Unmount and run xfs_repair
[  170.960952][   T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  170.968904][    T8] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  170.977157][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  170.978354][  T783] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5
[  170.985149][    T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  171.002823][    T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  171.011955][    T8] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  171.020998][    T8] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  171.030968][    T8] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  171.041504][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.056043][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.065160][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.078146][   T51] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  171.134566][ T7127] loop4: detected capacity change from 0 to 40427
[  171.169073][ T2909] hfsplus: b-tree write err: -5, ino 4
[  171.171746][  T783] usb 4-1: USB disconnect, device number 4
[  171.174599][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  171.197242][ T7127] F2FS-fs (loop4): Found nat_bits in checkpoint
[  171.208468][ T7120] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  171.309963][   T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  171.319572][   T53] Bluetooth: hci0: Injecting HCI hardware error event
[  171.328723][ T5123] Bluetooth: hci0: hardware error 0x00
[  171.401410][ T7127] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  171.519646][ T6316] syz-executor.4: attempt to access beyond end of device
[  171.519646][ T6316] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  171.536892][ T6316] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  171.537127][ T1268] dvmrp8 (unregistering): left allmulticast mode
[  171.551202][ T7153] loop2: detected capacity change from 0 to 256
[  171.552486][ T7153] exfat: Unknown parameter ''
[  171.578664][  T783] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  171.597577][  T783] XFS (loop0): Unmount and run xfs_repair
[  171.607464][  T783] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  171.614870][  T783] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  171.675682][  T783] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  171.714307][  T783] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  171.737586][  T783] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  171.757557][  T783] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  171.766460][  T783] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.805234][  T783] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.837621][  T783] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.854147][ T2909] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  171.902552][ T2909] XFS (loop0): page discard on page ffffea0001740900, inode 0x426, pos 4096.
[  171.904983][ T7155] loop2: detected capacity change from 0 to 4096
[  171.936967][  T783] loop0: writeback error on inode 1062, offset 0, sector 4488
[  171.948508][ T7155] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  171.961608][  T783] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  171.980906][  T783] XFS (loop0): Unmount and run xfs_repair
[  171.986796][  T783] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  171.987867][ T7155] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  172.002358][  T783] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  172.016438][  T783] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  172.026827][  T783] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  172.037243][  T783] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  172.046455][  T783] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  172.055596][  T783] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.073504][  T783] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.082733][ T7158] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.099205][  T783] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.114892][   T62] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  172.128935][   T62] XFS (loop0): page discard on page ffffea0001739880, inode 0x426, pos 8192.
[  172.146134][ T5164] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  172.181805][ T5164] XFS (loop0): Unmount and run xfs_repair
[  172.204761][ T5164] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  172.218658][ T5164] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  172.227903][ T5164] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  172.237731][ T1268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.246392][ T5164] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  172.258192][ T5164] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  172.271741][ T5164] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  172.273578][ T1268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.283693][ T5164] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.325039][ T1268] bond0 (unregistering): Released all slaves
[  172.338445][ T5164] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.352440][ T5164] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.407062][   T62] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  172.439794][   T62] XFS (loop0): page discard on page ffffea00016cf900, inode 0x426, pos 16384.
[  172.503633][    T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  172.528928][    T8] XFS (loop0): Unmount and run xfs_repair
[  172.557492][    T8] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  172.564919][    T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  172.596621][    T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  172.626710][    T8] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  172.635962][    T8] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  172.645428][    T8] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  172.654438][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.665985][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.689879][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.705550][   T62] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  172.722234][   T62] XFS (loop0): page discard on page ffffea0001651800, inode 0x426, pos 32768.
[  172.748612][    T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  172.763607][ T7172] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  172.789435][ T7172] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  172.809016][    T8] XFS (loop0): Unmount and run xfs_repair
[  172.842119][    T8] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  172.867510][    T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  172.891009][    T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  172.907849][ T7181] loop2: detected capacity change from 0 to 64
[  172.922390][    T8] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  172.956987][    T8] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  172.983169][    T8] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  173.020109][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.040171][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.054224][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.065306][   T62] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  173.077051][   T53] Bluetooth: hci3: command tx timeout
[  173.138694][ T1268] hsr_slave_0: left promiscuous mode
[  173.146553][   T62] XFS (loop0): page discard on page ffffea0001746800, inode 0x426, pos 65536.
[  173.172285][ T1268] hsr_slave_1: left promiscuous mode
[  173.193390][ T1268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.198424][    T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  173.205468][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.227614][    T8] XFS (loop0): Unmount and run xfs_repair
[  173.233386][    T8] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  173.244080][ T1268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.252179][    T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  173.262173][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.277611][    T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  173.317428][    T8] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  173.326398][    T8] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  173.343209][ T1268] veth1_macvtap: left promiscuous mode
[  173.357020][ T1268] veth0_macvtap: left promiscuous mode
[  173.358856][    T8] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  173.372910][ T1268] veth1_vlan: left promiscuous mode
[  173.383556][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.387686][ T5123] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  173.400373][ T1268] veth0_vlan: left promiscuous mode
[  173.426802][ T7188] loop2: detected capacity change from 0 to 64
[  173.433158][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.462916][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.510812][   T62] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  173.540182][   T62] XFS (loop0): page discard on page ffffea00016a6000, inode 0x426, pos 131072.
[  173.571637][ T5243] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  173.614172][ T5243] XFS (loop0): Unmount and run xfs_repair
[  173.627156][ T5243] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  173.657662][ T5243] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  173.666567][ T5243] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  173.687493][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  173.704291][ T5243] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  173.727490][ T5243] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  173.736723][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.757513][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.771980][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.784010][ T7179] loop3: detected capacity change from 0 to 40427
[  173.791306][   T62] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  173.814513][   T62] XFS (loop0): page discard on page ffffea0001709000, inode 0x426, pos 262144.
[  173.841787][    T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  173.885822][ T7179] F2FS-fs (loop3): Found nat_bits in checkpoint
[  173.886510][ T7183] loop4: detected capacity change from 0 to 32768
[  173.892633][    T8] XFS (loop0): Unmount and run xfs_repair
[  173.914423][    T8] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  173.933679][ T7183] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7183)
[  173.940554][ T7198] loop2: detected capacity change from 0 to 1024
[  173.956285][    T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  173.971606][ T7198] hfsplus: unable to parse mount options
[  173.984899][    T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  173.985459][ T7183] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.005798][    T8] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  174.017125][ T7179] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  174.017291][    T8] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  174.027280][ T7183] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  174.056314][    T8] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  174.084665][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.112173][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.137075][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.152960][   T62] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  174.194204][   T62] XFS (loop0): page discard on page ffffea000166a000, inode 0x426, pos 524288.
[  174.210640][    T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  174.222014][ T7183] BTRFS info (device loop4): rebuilding free space tree
[  174.226176][    T8] XFS (loop0): Unmount and run xfs_repair
[  174.236053][    T8] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  174.244041][    T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  174.253215][    T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  174.262422][    T8] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  174.272393][    T8] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  174.282439][    T8] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  174.291638][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.300859][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.310967][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.320113][   T62] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  174.331699][   T62] XFS (loop0): page discard on page ffffea0001658000, inode 0x426, pos 1048576.
[  174.341980][ T5119] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  174.393882][ T5119] XFS (loop0): Unmount and run xfs_repair
[  174.417506][ T5119] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  174.436556][ T5119] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  174.459394][ T5119] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  174.484652][ T5119] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  174.490297][ T7183] BTRFS info (device loop4): disabling free space tree
[  174.505121][ T5119] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  174.518888][ T7183] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  174.522714][ T5119] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  174.529413][ T7183] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  174.543237][ T5119] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.563871][ T5119] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.573097][ T5119] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.592799][   T62] XFS (loop0): page discard on page ffffea00015a8000, inode 0x426, pos 2097152.
[  174.609824][ T5119] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  174.629930][ T5119] XFS (loop0): Unmount and run xfs_repair
[  174.635831][ T5119] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  174.650591][ T5119] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  174.663083][ T5119] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  174.682534][ T5119] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  174.695889][ T5119] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  174.711382][ T5119] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  174.724727][ T5119] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.738452][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  174.740302][ T5119] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.754694][ T7183] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  174.757002][ T5119] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.775031][ T5164] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  174.786276][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  174.805845][ T5164] XFS (loop0): Unmount and run xfs_repair
[  174.816863][ T5164] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  174.826284][ T5164] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  174.842110][ T5164] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  174.851417][ T5164] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  174.864345][ T5164] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  174.873317][ T5164] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  174.888184][ T5164] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.897080][ T5164] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.906149][ T5164] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.926425][ T5119] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  174.933410][ T1268] team0 (unregistering): Port device team_slave_1 removed
[  174.938613][ T5119] XFS (loop0): Unmount and run xfs_repair
[  174.950786][ T5119] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  174.958554][ T5119] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  174.967634][ T5119] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  174.976744][ T5119] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  174.985991][ T5119] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  174.995313][ T5119] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  175.004361][ T5119] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.014472][ T5119] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.019486][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.025418][ T5119] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.044403][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  175.054533][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.056238][ T5119] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  175.079719][ T5119] XFS (loop0): Unmount and run xfs_repair
[  175.081026][    T8] usb 4-1: config 0 descriptor??
[  175.092677][ T1268] team0 (unregistering): Port device team_slave_0 removed
[  175.108801][ T5119] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  175.116225][ T5119] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  175.125941][ T5119] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  175.143446][ T5119] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  175.157652][ T5123] Bluetooth: hci3: command tx timeout
[  175.165036][ T5119] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  175.174012][ T5119] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  175.190072][ T5119] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.199266][ T5119] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.208215][ T5119] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.219515][    T8] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  175.230693][    T8] XFS (loop0): Unmount and run xfs_repair
[  175.237779][    T8] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  175.245205][    T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  175.255195][    T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  175.264143][    T8] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  175.273149][    T8] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  175.282174][    T8] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  175.291138][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.304417][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.319295][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.334515][ T7216] IPVS: length: 24 != 6168
[  175.349621][    T8] usb 4-1: USB disconnect, device number 5
[  175.359800][ T5163] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  175.371826][ T5163] XFS (loop0): Unmount and run xfs_repair
[  175.377802][ T5163] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  175.385243][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  175.394463][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  175.405097][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  175.414105][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  175.426332][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  175.442736][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.451803][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.460900][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.473463][ T5163] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  175.484531][ T5163] XFS (loop0): Unmount and run xfs_repair
[  175.490314][ T5163] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  175.497903][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  175.507065][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  175.516148][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  175.525326][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  175.534300][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  175.544419][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.553995][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.564403][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.577733][ T5163] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  175.589176][ T5163] XFS (loop0): Unmount and run xfs_repair
[  175.606054][ T5163] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  175.613690][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  175.627982][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  175.636986][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  175.647352][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  175.656319][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  175.665315][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.674410][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.683460][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.696107][ T5163] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  175.714787][ T5163] XFS (loop0): Unmount and run xfs_repair
[  175.720913][ T5163] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  175.734290][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  175.745359][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  175.754498][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  175.763411][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  175.772330][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  175.781259][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.790240][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.799167][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.826883][ T5163] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  175.840177][ T5163] XFS (loop0): Unmount and run xfs_repair
[  175.847939][ T5163] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  175.855464][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  175.866494][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  175.894318][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  175.904510][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  175.917841][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  175.926744][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.943614][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.971621][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.002907][ T5119] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  176.033171][ T5119] XFS (loop0): Unmount and run xfs_repair
[  176.056553][ T5119] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  176.072936][ T5119] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  176.095544][ T7183] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  176.104436][ T5119] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  176.104463][ T5119] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  176.104479][ T5119] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  176.104494][ T5119] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  176.104509][ T5119] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.104523][ T5119] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.104537][ T5119] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.154759][ T5119] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  176.197252][ T5119] XFS (loop0): Unmount and run xfs_repair
[  176.203328][ T5119] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  176.211425][ T5119] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  176.231812][ T5119] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  176.244528][ T7230] loop2: detected capacity change from 0 to 64
[  176.253141][ T5119] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  176.264723][ T5119] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  176.283834][ T5119] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  176.303308][ T5119] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.313826][ T5119] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.319285][ T6316] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  176.351678][ T7140] chnl_net:caif_netlink_parms(): no params data found
[  176.354015][ T5119] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.372449][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  176.372466][   T29] audit: type=1800 audit(1717270205.545:124): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1952 res=0 errno=0
[  176.422641][ T7230] 9pnet_fd: Insufficient options for proto=fd
[  176.444353][ T5163] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  176.468467][ T5163] XFS (loop0): Unmount and run xfs_repair
[  176.487287][ T5163] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  176.529091][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  176.583915][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  176.597827][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  176.606735][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  176.615993][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  176.624907][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.635103][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.644375][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.678220][ T5163] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  176.702654][ T5163] XFS (loop0): Unmount and run xfs_repair
[  176.722889][ T5163] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  176.730557][ T5163] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  176.739645][ T5163] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  176.768142][ T5163] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  176.777238][ T5163] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  176.807450][ T5163] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  176.832078][ T5163] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.846138][ T5163] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.860093][ T5163] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.876788][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.896150][ T5246] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  176.914146][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.937119][ T5246] XFS (loop0): Unmount and run xfs_repair
[  176.943323][ T7140] bridge_slave_0: entered allmulticast mode
[  176.958260][ T5246] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  176.967296][ T7242] tipc: Can't bind to reserved service type 2
[  176.979749][ T7140] bridge_slave_0: entered promiscuous mode
[  176.998380][ T5246] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  177.011275][ T7140] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.019721][ T5246] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  177.028991][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.036227][ T7140] bridge_slave_1: entered allmulticast mode
[  177.045220][ T5246] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  177.061240][ T7140] bridge_slave_1: entered promiscuous mode
[  177.069135][ T5246] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  177.081118][ T5246] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  177.100601][ T5246] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.112363][ T5246] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.137496][ T5246] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.158598][   T62] xfs_discard_folio: 14 callbacks suppressed
[  177.158616][   T62] XFS (loop0): page discard on page ffffea0001998700, inode 0x426, pos 8404992.
[  177.179687][  T930] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  177.202827][  T930] XFS (loop0): Unmount and run xfs_repair
[  177.209046][  T930] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  177.216632][  T930] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  177.227055][  T930] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  177.236177][ T7140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.236277][ T5123] Bluetooth: hci3: command tx timeout
[  177.251953][  T930] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  177.261215][  T930] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  177.270363][  T930] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  177.280366][  T930] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.289462][  T930] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.296878][ T7140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.298422][  T930] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.316951][   T62] XFS (loop0): page discard on page ffffea00016f9000, inode 0x426, pos 8421376.
[  177.333809][ T5243] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  177.364416][ T5243] XFS (loop0): Unmount and run xfs_repair
[  177.375157][ T5243] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  177.401675][ T5243] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  177.411643][ T5243] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  177.429922][ T7140] team0: Port device team_slave_0 added
[  177.435906][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  177.447271][ T5246] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[  177.457270][ T7140] team0: Port device team_slave_1 added
[  177.464683][ T5243] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  177.483496][ T5243] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  177.496098][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.507887][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.517144][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.527850][   T62] XFS (loop0): page discard on page ffffea000166f400, inode 0x426, pos 8454144.
[  177.540964][ T5243] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  177.552291][ T5243] XFS (loop0): Unmount and run xfs_repair
[  177.554496][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.558256][ T5243] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  177.558280][ T5243] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  177.558296][ T5243] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  177.558310][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  177.558324][ T5243] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  177.558337][ T5243] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  177.558351][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.558365][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.558380][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.558629][   T62] XFS (loop0): page discard on page ffffea0001613800, inode 0x426, pos 8519680.
[  177.571229][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.574941][ T5243] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  177.582334][ T7140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.599322][ T5243] XFS (loop0): Unmount and run xfs_repair
[  177.630877][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.647641][ T5243] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  177.681308][    C1] vkms_vblank_simulate: vblank timer overrun
[  177.687217][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.755520][ T5246] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  177.759010][ T7140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.819441][ T5246] usb 3-1: string descriptor 0 read error: -22
[  177.825975][ T5246] usb 3-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40
[  177.837729][ T5243] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  177.849285][ T5246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.860322][ T5243] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  177.875113][ T7249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  177.888290][ T5246] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  177.899459][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  177.915629][ T5243] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  177.924937][ T5243] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  177.939690][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.952315][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.957129][ T7140] hsr_slave_0: entered promiscuous mode
[  177.967234][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.979632][   T62] XFS (loop0): page discard on page ffffea000166e000, inode 0x426, pos 8650752.
[  177.991661][ T5243] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  178.004182][ T5243] XFS (loop0): Unmount and run xfs_repair
[  178.004966][ T7140] hsr_slave_1: entered promiscuous mode
[  178.009995][ T5243] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  178.010017][ T5243] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  178.033660][ T7140] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.041023][ T5243] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  178.052368][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  178.056210][ T7140] Cannot create hsr debugfs directory
[  178.078462][ T5243] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  178.087363][ T5243] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  178.109050][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  178.118483][ T5246] usb 3-1: USB disconnect, device number 2
[  178.142479][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.151962][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.161065][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.171771][   T62] XFS (loop0): page discard on page ffffea00015a4000, inode 0x426, pos 8912896.
[  178.192789][ T5243] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  178.218043][ T5243] XFS (loop0): Unmount and run xfs_repair
[  178.228413][ T5243] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  178.243947][ T5243] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  178.270760][ T5243] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  178.278421][ T7269] loop3: detected capacity change from 0 to 1024
[  178.297103][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  178.305347][ T7269] hfsplus: unable to parse mount options
[  178.335775][ T5243] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  178.352848][ T5243] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  178.364221][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.378870][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.391287][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.403549][   T62] XFS (loop0): page discard on page ffffea0001618000, inode 0x426, pos 9437184.
[  178.423522][ T5243] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  178.437225][ T5243] XFS (loop0): Unmount and run xfs_repair
[  178.447070][ T5243] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  178.461776][ T5243] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  178.472925][ T5243] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  178.486553][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  178.496655][ T5243] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  178.514102][ T5243] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  178.524300][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.541078][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.551389][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.564967][   T62] XFS (loop0): page discard on page ffffea00015b0000, inode 0x426, pos 10485760.
[  178.576160][ T5243] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  178.593776][ T5243] XFS (loop0): Unmount and run xfs_repair
[  178.602100][ T5243] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  178.825309][ T5243] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  178.834576][ T5243] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  178.844476][ T5243] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  178.853465][ T5243] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  178.862611][ T5243] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  178.871671][ T5243] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.881450][ T5243] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  179.179259][ T5243] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  179.417729][ T5123] Bluetooth: hci3: command tx timeout
[  179.447829][   T62] XFS (loop0): page discard on page ffffea000170c1c0, inode 0x426, pos 12582912.
[  179.559147][ T6113] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  179.617944][ T6113] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  179.618559][ T7285] binder: BINDER_SET_CONTEXT_MGR already set
[  179.673477][ T7285] binder: 7284:7285 ioctl 4018620d 20000040 returned -16
[  179.786918][ T7140] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  179.877018][ T7140] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  179.926763][ T7275] loop4: detected capacity change from 0 to 32768
[  179.929317][ T7140] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  179.947981][ T7275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7275)
[  179.973477][ T7275] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  179.998771][ T7140] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.017524][ T7275] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  180.192676][ T7140] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.196665][ T7275] BTRFS info (device loop4): rebuilding free space tree
[  180.253083][ T7275] BTRFS info (device loop4): disabling free space tree
[  180.253157][ T7275] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  180.253182][ T7275] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  180.264288][ T7140] 8021q: adding VLAN 0 to HW filter on device team0
[  180.381025][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.388232][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.450147][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.457309][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.551874][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  180.622066][ T7275] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  180.708389][ T7275] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  180.717034][ T7314] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  180.882645][ T7275] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  181.016607][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.027477][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.042608][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.052175][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.058232][ T6316] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  181.074830][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  181.083016][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.295792][ T7294] loop0: detected capacity change from 0 to 40427
[  181.304827][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.402066][ T7140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.428844][ T7294] F2FS-fs (loop0): Found nat_bits in checkpoint
[  181.515922][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.608835][ T7294] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  181.666049][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.761024][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.029062][ T7140] veth0_vlan: entered promiscuous mode
[  182.162955][ T7140] veth1_vlan: entered promiscuous mode
[  182.216290][ T7321] loop2: detected capacity change from 0 to 40427
[  182.296518][ T7321] F2FS-fs (loop2): Found nat_bits in checkpoint
[  182.311550][ T7335] loop0: detected capacity change from 0 to 4096
[  182.315951][ T7324] chnl_net:caif_netlink_parms(): no params data found
[  182.319502][ T7335] ntfs3: Unknown parameter '00000000000000000000005Ĵ��'
[  182.382204][   T11] bridge_slave_1: left allmulticast mode
[  182.390304][   T11] bridge_slave_1: left promiscuous mode
[  182.404760][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.406610][ T7321] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  182.425055][   T11] bridge_slave_0: left allmulticast mode
[  182.433954][   T29] audit: type=1800 audit(1717270211.615:125): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1956 res=0 errno=0
[  182.440001][   T11] bridge_slave_0: left promiscuous mode
[  182.467983][ T7335] loop0: detected capacity change from 0 to 512
[  182.473047][ T7330] loop4: detected capacity change from 0 to 32768
[  182.488190][   T29] audit: type=1800 audit(1717270211.615:126): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1956 res=0 errno=0
[  182.517754][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.534839][ T7330] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  182.541273][   T29] audit: type=1800 audit(1717270211.645:127): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=11 res=0 errno=0
[  182.565238][   T29] audit: type=1800 audit(1717270211.665:128): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=15 res=0 errno=0
[  182.621855][   T29] audit: type=1804 audit(1717270211.685:129): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3905828906/syzkaller.SokFk3/32/file1/file0" dev="loop2" ino=15 res=1 errno=0
[  182.640283][ T7330] XFS (loop4): Ending clean mount
[  182.648410][   T29] audit: type=1804 audit(1717270211.705:130): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3905828906/syzkaller.SokFk3/32/file1/file0" dev="loop2" ino=15 res=1 errno=0
[  182.676377][ T7335] EXT4-fs (loop0): Test dummy encryption mode enabled
[  182.696353][ T6521] syz-executor.2: attempt to access beyond end of device
[  182.696353][ T6521] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  182.714996][ T6521] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  182.723624][ T6521] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  182.730851][ T7335] EXT4-fs error (device loop0): __ext4_iget:4906: inode #11: block 1: comm syz-executor.0: invalid block
[  182.759796][ T7335] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 11 (err -117)
[  182.769835][ T6521] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  182.791906][ T7335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.804272][ T6316] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  183.032097][ T7335] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  183.147740][ T5123] Bluetooth: hci4: command tx timeout
[  183.262475][ T6113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.656533][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.701235][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.728909][   T11] bond0 (unregistering): Released all slaves
[  183.731536][ T5246] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  183.932036][ T5246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  183.973574][ T7384] Bluetooth: MGMT ver 1.23
[  183.982338][ T7140] veth0_macvtap: entered promiscuous mode
[  183.984913][ T5246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  184.022774][ T5246] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  184.051129][ T7385] loop2: detected capacity change from 0 to 1024
[  184.066973][ T5246] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  184.103205][ T5246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.121710][ T5246] usb 5-1: config 0 descriptor??
[  184.129505][ T7366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  184.152330][ T7140] veth1_macvtap: entered promiscuous mode
[  184.266079][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.300201][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.322246][ T7324] bridge_slave_0: entered allmulticast mode
[  184.341387][ T7324] bridge_slave_0: entered promiscuous mode
[  184.373194][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.395305][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.431380][ T7324] bridge_slave_1: entered allmulticast mode
[  184.445576][ T7324] bridge_slave_1: entered promiscuous mode
[  184.607322][ T7324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.643721][ T5246] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[  184.664114][ T5246] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  184.714931][   T11] hsr_slave_0: left promiscuous mode
[  184.734503][   T11] hsr_slave_1: left promiscuous mode
[  184.752645][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.759434][ T5246] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  184.778718][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.792825][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.812769][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.881717][   T11] veth1_macvtap: left promiscuous mode
[  184.887306][   T11] veth0_macvtap: left promiscuous mode
[  184.911683][   T11] veth1_vlan: left promiscuous mode
[  184.927709][   T11] veth0_vlan: left promiscuous mode
[  185.201629][  T930] usb 5-1: USB disconnect, device number 2
[  185.227641][ T5123] Bluetooth: hci4: command tx timeout
[  185.371752][ T7384] loop0: detected capacity change from 0 to 32768
[  185.394122][ T7384] XFS: noattr2 mount option is deprecated.
[  185.414125][ T7384] XFS: noikeep mount option is deprecated.
[  185.430185][ T7384] XFS (loop0): attr2 and noattr2 cannot both be specified.
[  186.112984][   T11] team0 (unregistering): Port device team_slave_1 removed
[  186.147995][  T930] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  186.229728][   T11] team0 (unregistering): Port device team_slave_0 removed
[  186.359258][  T930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.373022][  T930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.427455][  T930] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  186.438847][  T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.460282][  T930] usb 5-1: config 0 descriptor??
[  186.608886][ T7393] loop2: detected capacity change from 0 to 40427
[  186.661978][ T7393] F2FS-fs (loop2): Found nat_bits in checkpoint
[  186.706673][ T5243] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  186.735834][ T7393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  186.883025][  T930] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0
[  186.895343][  T930] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0
[  186.898961][ T5243] usb 1-1: Using ep0 maxpacket: 16
[  186.908270][  T930] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0
[  186.928922][  T930] logitech-hidpp-device 0003:046D:C086.0002: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0
[  186.950246][ T5243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.977485][ T5243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.000274][ T5243] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  187.037570][ T5243] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  187.074605][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.098582][ T5166] usb 5-1: USB disconnect, device number 3
[  187.118391][ T5243] usb 1-1: config 0 descriptor??
[  187.147102][ T7324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.202344][ T7407] binder: BINDER_SET_CONTEXT_MGR already set
[  187.217052][ T7407] binder: 7406:7407 ioctl 4018620d 20000040 returned -16
[  187.218636][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.236052][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.245997][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.257450][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.267293][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.277932][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.296739][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.309867][ T5123] Bluetooth: hci4: command tx timeout
[  187.337090][ T7324] team0: Port device team_slave_0 added
[  187.345899][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.357294][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.368416][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.381570][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.391875][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.402433][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.413907][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.426824][ T7324] team0: Port device team_slave_1 added
[  187.500550][ T7140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.510269][ T7140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.522640][ T7140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.535538][ T7140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.540994][ T5243] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  187.547102][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.552210][ T5243] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  187.566526][ T5243] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  187.573909][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.573942][ T7324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.600269][    C1] vkms_vblank_simulate: vblank timer overrun
[  187.608115][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.612352][ T5243] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  187.625505][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.641586][ T5243] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  187.664205][ T7324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.699820][ T5243] microsoft 0003:045E:07DA.0003: No inputs registered, leaving
[  187.723302][ T5243] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  187.755327][ T5243] microsoft 0003:045E:07DA.0003: no inputs found
[  187.762650][ T5243] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[  187.775339][ T5243] usb 1-1: USB disconnect, device number 4
[  187.856527][ T7324] hsr_slave_0: entered promiscuous mode
[  187.865366][ T7324] hsr_slave_1: entered promiscuous mode
[  187.871913][ T7324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.887691][ T7324] Cannot create hsr debugfs directory
[  188.110446][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.135844][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.226746][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.244991][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.481139][ T7424] loop0: detected capacity change from 0 to 2048
[  188.508177][ T7423] dvmrp8: entered allmulticast mode
[  188.520433][ T7425] dvmrp8: left allmulticast mode
[  188.604703][ T7424] loop0: detected capacity change from 0 to 256
[  188.762053][ T7324] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  188.777169][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  188.777577][ T7429] loop1: detected capacity change from 0 to 64
[  188.800970][ T7324] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.821324][ T7324] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.880493][ T7324] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  188.919237][   T29] audit: type=1804 audit(1717270218.085:131): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3322409161/syzkaller.udhxzq/52/0x0000000000000000" dev="sda1" ino=1939 res=1 errno=0
[  189.096412][ T7324] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.152976][ T7324] 8021q: adding VLAN 0 to HW filter on device team0
[  189.179071][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.186291][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.224028][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.231420][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.387596][ T5123] Bluetooth: hci4: command tx timeout
[  189.415942][   T29] audit: type=1326 audit(1717270218.585:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba9607cee9 code=0x0
[  189.619892][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.749565][ T7324] veth0_vlan: entered promiscuous mode
[  189.775722][ T7324] veth1_vlan: entered promiscuous mode
[  189.852572][ T7324] veth0_macvtap: entered promiscuous mode
[  189.871854][ T7324] veth1_macvtap: entered promiscuous mode
[  189.912666][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.949363][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.961345][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.989301][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.007998][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.037571][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.058292][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.078031][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.113020][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.157448][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.190125][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.214160][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.239848][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.260798][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.278045][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.299255][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.312592][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.329933][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.348456][ T7324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.357199][ T7324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.366332][ T7324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.376699][ T7324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.657503][   T29] audit: type=1326 audit(1717270219.825:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96f87cee9 code=0x7ffc0000
[  190.704287][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.732759][ T7483] loop0: detected capacity change from 0 to 512
[  190.758355][   T29] audit: type=1326 audit(1717270219.825:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96f87cee9 code=0x7ffc0000
[  190.767509][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.804336][ T3924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.813532][ T7483] EXT4-fs: Ignoring removed mblk_io_submit option
[  190.837790][ T3924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.854749][ T7483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  190.877280][   T29] audit: type=1326 audit(1717270219.835:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fe96f87cee9 code=0x7ffc0000
[  190.928210][ T7483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  190.939174][   T29] audit: type=1326 audit(1717270219.835:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96f87cee9 code=0x7ffc0000
[  190.989807][   T29] audit: type=1326 audit(1717270219.835:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7480 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe96f87cee9 code=0x7ffc0000
[  191.067059][ T7483] EXT4-fs (loop0): 1 truncate cleaned up
[  191.085259][   T29] audit: type=1326 audit(1717270219.995:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f4c7cee9 code=0x7ffc0000
[  191.098703][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.172452][ T6113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.210068][   T29] audit: type=1326 audit(1717270219.995:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f4c7cee9 code=0x7ffc0000
[  191.276242][   T29] audit: type=1326 audit(1717270219.995:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50f4c7cee9 code=0x7ffc0000
[  191.688244][ T7508] loop3: detected capacity change from 0 to 8192
[  192.785648][ T7476] loop2: detected capacity change from 0 to 40427
[  192.813595][ T7476] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  192.837786][ T7476] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  192.884531][ T7476] F2FS-fs (loop2): invalid crc value
[  192.922332][ T7476] F2FS-fs (loop2): Found nat_bits in checkpoint
[  193.063366][ T7476] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  193.084575][ T7476] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  193.520271][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  193.540195][   T35] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  193.557031][   T35] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  194.538256][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.706329][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.753128][ T1242] ieee802154 phy0 wpan0: encryption failed: -22
[  194.760020][ T1242] ieee802154 phy1 wpan1: encryption failed: -22
[  194.802892][ T7575] loop4: detected capacity change from 0 to 512
[  194.947574][  T930] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  195.150048][  T930] usb 4-1: Using ep0 maxpacket: 32
[  195.163689][  T930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.193090][  T930] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  195.219117][  T930] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  195.229866][  T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.240790][  T930] usb 4-1: config 0 descriptor??
[  195.249128][  T930] usb 4-1: bad CDC descriptors
[  195.457078][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.476028][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.487494][  T930] usb 4-1: USB disconnect, device number 6
[  195.688972][ T7580] loop1: detected capacity change from 0 to 40427
[  195.703551][ T7580] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  195.728567][ T7580] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  195.753374][ T7580] F2FS-fs (loop1): invalid crc value
[  195.770250][ T7580] F2FS-fs (loop1): Found nat_bits in checkpoint
[  195.817746][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  195.907174][ T7580] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  195.914612][ T7580] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  196.037814][    T8] usb 1-1: Using ep0 maxpacket: 16
[  196.057039][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.092653][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  196.124962][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  196.145178][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.167027][    T8] usb 1-1: Product: syz
[  196.177058][    T8] usb 1-1: Manufacturer: syz
[  196.195369][    T8] usb 1-1: SerialNumber: syz
[  196.298745][ T3924] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  196.314825][ T3924] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  196.487745][    T8] usb 1-1: USB disconnect, device number 5
[  198.273682][ T7613] lo: entered promiscuous mode
[  198.283795][ T7613] tunl0: entered promiscuous mode
[  198.321507][ T7613] gre0: entered promiscuous mode
[  198.332719][ T7613] gretap0: entered promiscuous mode
[  198.358036][ T7613] erspan0: entered promiscuous mode
[  198.379718][ T7613] ip_vti0: entered promiscuous mode
[  198.390285][ T7613] ip6_vti0: entered promiscuous mode
[  198.397803][ T7613] sit0: entered promiscuous mode
[  198.409484][ T7613] ip6tnl0: entered promiscuous mode
[  198.416712][ T7613] ip6gre0: entered promiscuous mode
[  198.425586][ T7613] syz_tun: entered promiscuous mode
[  198.442377][ T7613] ip6gretap0: entered promiscuous mode
[  198.454825][ T7613] bridge0: entered promiscuous mode
[  198.462498][ T7613] vcan0: entered promiscuous mode
[  198.471511][ T7613] bond0: entered promiscuous mode
[  198.478719][ T7613] bond_slave_0: entered promiscuous mode
[  198.486823][ T7613] bond_slave_1: entered promiscuous mode
[  198.535897][ T7613] team0: entered promiscuous mode
[  198.564334][ T7613] team_slave_0: entered promiscuous mode
[  198.582646][ T7613] team_slave_1: entered promiscuous mode
[  198.600825][ T7613] dummy0: entered promiscuous mode
[  198.637945][ T7613] nlmon0: entered promiscuous mode
[  198.671518][ T7613] caif0: entered promiscuous mode
[  198.677312][ T7613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.707104][ T7637] loop4: detected capacity change from 0 to 40427
[  202.739418][ T7637] F2FS-fs (loop4): invalid crc value
[  202.756581][ T7637] F2FS-fs (loop4): Found nat_bits in checkpoint
[  202.804079][ T7639] loop0: detected capacity change from 0 to 40427
[  202.833922][ T7639] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  202.858316][ T7639] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  202.904558][ T7639] F2FS-fs (loop0): Found nat_bits in checkpoint
[  202.913169][ T7637] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  203.010956][ T7637] syz-executor.4: attempt to access beyond end of device
[  203.010956][ T7637] loop4: rw=2049, sector=53768, nr_sectors = 520 limit=40427
[  203.070552][ T7639] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  203.091297][ T7639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  203.105418][ T7649] loop1: detected capacity change from 0 to 32768
[  203.124365][ T6316] syz-executor.4: attempt to access beyond end of device
[  203.124365][ T6316] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.145430][ T7649] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7649)
[  203.154289][ T6316] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  203.168868][ T7664] input: syz0 as /devices/virtual/input/input8
[  203.197561][ T7649] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  203.209946][ T7649] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  203.219965][ T7649] BTRFS info (device loop1): using free-space-tree
[  203.223860][ T7639] ------------[ cut here ]------------
[  203.232421][ T7639] kernel BUG at fs/f2fs/inline.c:258!
[  203.254052][ T7639] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  203.254082][ T7639] CPU: 1 PID: 7639 Comm: syz-executor.0 Not tainted 6.10.0-rc1-next-20240531-syzkaller #0
[  203.254102][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  203.254113][ T7639] RIP: 0010:f2fs_write_inline_data+0x781/0x790
2024/06/01 19:30:32 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  203.254153][ T7639] Code: ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 fc ff ff 48 89 df e8 ff a4 09 fe e9 d6 fc ff ff e8 25 22 9a 07 e8 a0 b7 a3 fd 90 <0f> 0b e8 98 b7 a3 fd 90 0f 0b 0f 1f 44 00 00 90 90 90 90 90 90 90
[  203.254169][ T7639] RSP: 0018:ffffc90003136b00 EFLAGS: 00010283
[  203.254193][ T7639] RAX: ffffffff83f2c450 RBX: 0000000000000001 RCX: 0000000000040000
[  203.254206][ T7639] RDX: ffffc900034d9000 RSI: 000000000000a257 RDI: 000000000000a258
[  203.254218][ T7639] RBP: ffffc90003136c30 R08: ffffffff83f2bf15 R09: 1ffff1100b127ed9
[  203.254232][ T7639] R10: dffffc0000000000 R11: ffffed100b127eda R12: ffffc90003136b88
[  203.254246][ T7639] R13: 1ffff1100b127ed9 R14: ffffc90003136b80 R15: ffffc90003136b90
[  203.254259][ T7639] FS:  00007fe97061b6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  203.254275][ T7639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  203.254287][ T7639] CR2: 0000001b2cd29000 CR3: 000000007c438000 CR4: 00000000003506f0
[  203.254301][ T7639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  203.254311][ T7639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  203.254322][ T7639] Call Trace:
[  203.254333][ T7639]  <TASK>
[  203.254341][ T7639]  ? __die_body+0x88/0xe0
[  203.254370][ T7639]  ? die+0xcf/0x110
[  203.254395][ T7639]  ? do_trap+0x15a/0x3a0
[  203.254418][ T7639]  ? f2fs_write_inline_data+0x781/0x790
[  203.254445][ T7639]  ? do_error_trap+0x1dc/0x2c0
[  203.254466][ T7639]  ? f2fs_write_inline_data+0x781/0x790
[  203.254494][ T7639]  ? __pfx_do_error_trap+0x10/0x10
[  203.254517][ T7639]  ? report_bug+0x3e8/0x500
[  203.254545][ T7639]  ? handle_invalid_op+0x34/0x40
[  203.254566][ T7639]  ? f2fs_write_inline_data+0x781/0x790
[  203.254591][ T7639]  ? exc_invalid_op+0x38/0x50
[  203.254613][ T7639]  ? asm_exc_invalid_op+0x1a/0x20
[  203.254639][ T7639]  ? f2fs_write_inline_data+0x245/0x790
[  203.254664][ T7639]  ? f2fs_write_inline_data+0x780/0x790
[  203.254690][ T7639]  ? f2fs_write_inline_data+0x781/0x790
[  203.254721][ T7639]  ? __pfx_f2fs_write_inline_data+0x10/0x10
[  203.254746][ T7639]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  203.254774][ T7639]  f2fs_write_single_data_page+0xbb6/0x1e90
[  203.254803][ T7639]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  203.254829][ T7639]  ? mlock_drain_local+0x79/0x490
[  203.254852][ T7639]  ? mlock_drain_local+0x79/0x490
[  203.254871][ T7639]  ? mlock_drain_local+0x28d/0x490
[  203.254902][ T7639]  f2fs_write_data_pages+0x1efe/0x3a90
[  203.254944][ T7639]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.254998][ T7639]  ? __pfx_lock_release+0x10/0x10
[  203.255015][ T7639]  ? do_raw_spin_lock+0x14f/0x370
[  203.255042][ T7639]  ? do_raw_spin_unlock+0x13c/0x8b0
[  203.255059][ T7639]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.255078][ T7639]  do_writepages+0x35d/0x870
[  203.255106][ T7639]  ? __pfx_do_writepages+0x10/0x10
[  203.255134][ T7639]  ? filemap_fdatawrite_wbc+0x11a/0x180
[  203.255151][ T7639]  ? do_raw_spin_lock+0x14f/0x370
[  203.255175][ T7639]  ? __pfx_lock_release+0x10/0x10
[  203.255197][ T7639]  ? do_raw_spin_unlock+0x13c/0x8b0
[  203.255214][ T7639]  ? wbc_attach_and_unlock_inode+0x565/0x580
[  203.255242][ T7639]  filemap_fdatawrite_wbc+0x125/0x180
[  203.255261][ T7639]  file_write_and_wait_range+0x1aa/0x290
[  203.255282][ T7639]  ? __pfx_file_write_and_wait_range+0x10/0x10
[  203.255319][ T7639]  ? f2fs_inode_dirtied+0x2a3/0x2e0
[  203.255342][ T7639]  ? do_raw_spin_lock+0x14f/0x370
[  203.255370][ T7639]  f2fs_do_sync_file+0x68a/0x1b10
[  203.255397][ T7639]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  203.255436][ T7639]  ? __pfx_generic_perform_write+0x10/0x10
[  203.255461][ T7639]  ? __pfx_up_write+0x10/0x10
[  203.255483][ T7639]  ? mnt_put_write_access_file+0xc2/0x100
[  203.255506][ T7639]  ? f2fs_sync_file+0xec/0x160
[  203.255528][ T7639]  f2fs_file_write_iter+0x7bd/0x24e0
[  203.255563][ T7639]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  203.255586][ T7639]  ? rcu_read_lock_any_held+0xb7/0x160
[  203.255618][ T7639]  vfs_write+0xa72/0xc90
[  203.255645][ T7639]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  203.255669][ T7639]  ? __pfx_vfs_write+0x10/0x10
[  203.255692][ T7639]  ? do_futex+0x33b/0x560
[  203.255721][ T7639]  ksys_write+0x1a0/0x2c0
[  203.255749][ T7639]  ? __pfx_ksys_write+0x10/0x10
[  203.255774][ T7639]  ? do_syscall_64+0x100/0x230
[  203.255797][ T7639]  ? do_syscall_64+0xb6/0x230
[  203.255819][ T7639]  do_syscall_64+0xf3/0x230
[  203.255841][ T7639]  ? clear_bhb_loop+0x35/0x90
[  203.255866][ T7639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.255890][ T7639] RIP: 0033:0x7fe96f87cee9
[  203.255920][ T7639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  203.255936][ T7639] RSP: 002b:00007fe97061b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  203.255956][ T7639] RAX: ffffffffffffffda RBX: 00007fe96f9b3fa0 RCX: 00007fe96f87cee9
[  203.255971][ T7639] RDX: 0000000000002000 RSI: 0000000020000040 RDI: 0000000000000008
[  203.255984][ T7639] RBP: 00007fe96f8c947f R08: 0000000000000000 R09: 0000000000000000
[  203.255996][ T7639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.256008][ T7639] R13: 000000000000000b R14: 00007fe96f9b3fa0 R15: 00007ffd7c6096b8
[  203.256029][ T7639]  </TASK>
[  203.256035][ T7639] Modules linked in:
[  203.256076][ T7639] ---[ end trace 0000000000000000 ]---
[  203.365604][ T7649] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  203.488525][ T7639] RIP: 0010:f2fs_write_inline_data+0x781/0x790
[  203.493212][ T7649] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  203.527513][ T7639] Code: ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 fc ff ff 48 89 df e8 ff a4 09 fe e9 d6 fc ff ff e8 25 22 9a 07 e8 a0 b7 a3 fd 90 <0f> 0b e8 98 b7 a3 fd 90 0f 0b 0f 1f 44 00 00 90 90 90 90 90 90 90
[  203.533217][ T7649] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  203.592819][ T7639] RSP: 0018:ffffc90003136b00 EFLAGS: 00010283
[  203.603416][ T7649] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  203.603783][ T7639] 
[  203.610697][ T7649] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  203.611268][ T7649] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  203.616181][ T7639] RAX: ffffffff83f2c450 RBX: 0000000000000001 RCX: 0000000000040000
[  203.622313][ T7649] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  203.626223][ T7639] RDX: ffffc900034d9000 RSI: 000000000000a257 RDI: 000000000000a258
[  203.684613][ T7649] BTRFS error (device loop1): open_ctree failed
[  203.967557][ T7639] RBP: ffffc90003136c30 R08: ffffffff83f2bf15 R09: 1ffff1100b127ed9
[  203.975574][ T7639] R10: dffffc0000000000 R11: ffffed100b127eda R12: ffffc90003136b88
[  204.060338][ T7639] R13: 1ffff1100b127ed9 R14: ffffc90003136b80 R15: ffffc90003136b90
[  204.077431][ T7639] FS:  00007fe97061b6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  204.107444][ T7639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.131469][ T7639] CR2: 00007fba96101722 CR3: 000000007c438000 CR4: 00000000003506f0
[  204.147447][ T7639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  204.155466][ T7639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  204.177444][ T7639] Kernel panic - not syncing: Fatal exception
[  204.183656][ T7639] Kernel Offset: disabled
[  204.187969][ T7639] Rebooting in 86400 seconds..