last executing test programs:

15m23.208008383s ago: executing program 32 (id=182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0)

14m49.184703183s ago: executing program 33 (id=548):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)

11m56.557859959s ago: executing program 34 (id=3186):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f76800090501"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

11m35.003080155s ago: executing program 35 (id=3435):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x20000003, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x1, 0xfffffff8, 0x4}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa8b6d}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

8m12.855402412s ago: executing program 4 (id=6682):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0xffffffff, 0x4)

8m12.775340047s ago: executing program 4 (id=6683):
syz_usb_connect(0x0, 0x46, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x2f, 0x5b, 0x37, 0x20, 0x1943, 0x2255, 0x9d17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x7, 0x9, 0x20, 0x49, "", [{{0x9, 0x4, 0x36, 0xb1, 0x3, 0x2d, 0xb5, 0x4c, 0x3, [], [{{0x9, 0x5, 0xf, 0x0, 0x0, 0x41, 0x4, 0x2, [@generic={0x7, 0x5, "69d2934d2e"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x1, 0x81, 0xf1}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x7f, 0x8f, 0x9}}]}}]}}]}}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0})

8m11.574271083s ago: executing program 4 (id=6689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0xa3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m11.574088813s ago: executing program 4 (id=6690):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
mount$bind(&(0x7f0000001080)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d)

8m11.46359063s ago: executing program 4 (id=6691):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

8m11.295341292s ago: executing program 4 (id=6692):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0xc05, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040004)

8m11.136631759s ago: executing program 36 (id=6692):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0xc05, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040004)

6m18.278929883s ago: executing program 6 (id=8280):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1)
ioctl$TCSETSF2(r0, 0x89f2, &(0x7f0000000000)={0x10000, 0x10, 0x4, 0x0, 0xc, "a500000500", 0xe7, 0x2})

6m17.858086925s ago: executing program 6 (id=8288):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, <r3=>0x0], &(0x7f00000000c0), 0x3, r1})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x8, r3, r1})

6m17.774900175s ago: executing program 6 (id=8289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000012}, 0x4814)

6m17.680284767s ago: executing program 6 (id=8290):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@noauto_da_alloc}]}, 0x7, 0x44a, &(0x7f0000000400)="$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")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setresuid(r0, r0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')

6m17.583391504s ago: executing program 6 (id=8291):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50d, &(0x7f0000000340)="$eJzs3M9vE1ceAPDvOHF+wLJkWRYJlt0NsKuNVtoEArtw2AurVuqhlarSQzlGSUApBiqSQ0FRMVJFz0i9Vz1WvbVSr+2x6ql/AD30UKlCQi0XoOphqrFnHMexYxtCoiSfjxR4b/zevPf85tlv5nkmgF1rPPsnifhdRNyPiP316OoE4/X/njxann36aHk2qml64aeklu5xFs8V+fbmkYlSROn9pGWHdYs3b12ZqVTmb0S1Fp9auvrO1OLNW/9euDpzef7y/LXpc+fOnD519r/T/2nNOtK1UW3Ky9r1+Mh7148efuXivddmB1t31tyOjopcP1e7Jo3ive3gH8372wH2NYWTte26vamVoWcj+WFYzsb/cuX4xa2uELBp0jRNhzu/XE1b3VmzBdi2ktjqGgBbo/iiz85/i7/6lvJmTD+23MPz9ROgx4+W09sRs08a7R+MUp6m3HJ+m1lnztSX8Yh4q/rLR9lfrHcd4vsNKhAA2PW+Op9PA5Nomf+V4lBTut/nayhjEfGHiDgQEX+MiIMR8aeIVWlXSSLSdco/2LqhUf7n+SpC6cGztq0X2fzvf/naVvGXl1skGRvIY/siignz/Mn8PZmI8vClhcr8qQ77H+pSfjH/G436HDArv5gL5vV4MNgy2ZybWZp5ttau9fBOxJHB1vYng1nHFcs4SUQcjogjfex3rCm88K9PjjYiLacVzfPf9u2vSdss6W3I+ln6ccQ/6/1fjVX9v1Ji0rw+WVqzPjk1EpX5k1PZUXCybRnffHv39U7ld23/Fz+0Znn57JcXnrfZDVn/72k6/qO+fvvSwEqSsSQiaazXLkakA/2Vcfe7D2r7HT+x9rXu/d/++B9K3qyFi/H17szS0o1TEUPJq2u3T6/kLeJF+qz9Eyfaj/8DeZ6s//8cEdlB/JeI+GvEQFH3YxFxPCLaNK3h6////e1Or/V4/L8wWfvn2n7+NY7/rP9X1ut7DBSZsy0DV47df9rhwyNv//71+/9MLTSRb2n/+Zes+ojotabP9+4BAADA9lCK2m//S5O18K9pmpZKk5P13/AfjD2lyvXFpb9FxLW5+j0CY1EuXVqozBcX5MainBTXP8ea4tMt8dP5deMPB0Zr8cnZ65W5rW487HJ7a+M/ycd/Fq6P/8yPfV7nBbahHXQfGtCnbuP/0L1Nqgiw6Xz/w+7VNP47Pdmi6pcysDP5/ofdq934vx2frnvvgs8M2P5SYxl2tfXHf/fnbQLb12C80QjXbntue7ctsBOZ/8Ou1O99/f0F0uH2L41EmycGjLyYaoy2KWtLAtnMqofExQNSuu2w3EOaemD0WeqcdKtGlPrb4XCsfWkg1suVtH+OQ0RUO+bK3pWu9bl8qPngH9qIzi2eibLRh81nK+O03GN3t1QsTdP+cjnfBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdpTfAgAA//8/VM/q")
open(&(0x7f00000000c0)='./bus\x00', 0x84242, 0x46)

6m17.185879283s ago: executing program 6 (id=8297):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

6m17.070375839s ago: executing program 37 (id=8297):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

6m7.288575106s ago: executing program 8 (id=8446):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20)

6m7.288233912s ago: executing program 8 (id=8448):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, 0x0)

6m6.365660538s ago: executing program 8 (id=8456):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)

6m5.486371854s ago: executing program 8 (id=8464):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b97966be023d208b8964152778594a1c"}})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f0000000080)='./file0\x00')

6m5.182990416s ago: executing program 8 (id=8470):
unshare(0x8000400)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)

6m4.781968404s ago: executing program 8 (id=8485):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x16, 0x18, &(0x7f0000000d00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

6m4.656168199s ago: executing program 38 (id=8485):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x16, 0x18, &(0x7f0000000d00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

4m19.88083442s ago: executing program 7 (id=10098):
poll(0xfffffffffffffffe, 0x0, 0x8)

4m19.814668123s ago: executing program 7 (id=10099):
syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000001500)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',errors=continue,dmask=00000000000000000100001,iocharset=cp857,discard,umask=00000000000037777777777,errors=continue,umask=00000000000000000000002,allow_utime=00000000000000000000001,errors=remount-ro,discard,sys_tz,gid=', @ANYRESHEX, @ANYBLOB="69653d303030383030303030303030307030303030304d6e616d3b2d99d6551d6de459901c9c76c79e000000"], 0x1, 0x152d, &(0x7f0000001f80)="$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")
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xee7c4188ea8ba09)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

4m19.814484901s ago: executing program 7 (id=10100):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x44, r1, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x44}}, 0x0)

4m19.757036112s ago: executing program 7 (id=10101):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2010002, &(0x7f0000000140)={[{@bsdgroups}, {@usrquota}, {@noinit_itable}, {@resuid}, {@errors_remount}, {@bh}]}, 0x1, 0x558, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
rename(&(0x7f0000001040)='./file1\x00', &(0x7f0000000240)='.\x02\x00')
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
llistxattr(0x0, 0x0, 0x0)

4m19.700094896s ago: executing program 7 (id=10103):
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0}, 0x18)

4m19.328159308s ago: executing program 7 (id=10105):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000014000100000080000000000007"], 0x1c}], 0x1}, 0x0)

4m19.2031798s ago: executing program 39 (id=10105):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000014000100000080000000000007"], 0x1c}], 0x1}, 0x0)

4m10.041200862s ago: executing program 9 (id=10200):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0x101, 0x7, 0x2, 0x401, 0x7}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)

4m9.96497449s ago: executing program 9 (id=10202):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x5, @dev={0xac, 0x14, 0x14, 0x26}, 0x3, "fcffffffffffffff"}]}}}}}}}}, 0x0)

4m9.898179527s ago: executing program 9 (id=10204):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0x100, 0x0)

4m9.820607006s ago: executing program 9 (id=10206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125088, 0x0)

4m9.742122907s ago: executing program 9 (id=10209):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0xffffffffffffff9b, 0x0, 0xfffffffffffffffe})

4m9.446069634s ago: executing program 9 (id=10212):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x80000003, 0x0, @qpsk={0x0, 0x18}})

4m9.289153409s ago: executing program 40 (id=10212):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x80000003, 0x0, @qpsk={0x0, 0x18}})

2m10.522792554s ago: executing program 3 (id=11752):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)

2m10.434223709s ago: executing program 3 (id=11753):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2m7.42564701s ago: executing program 3 (id=11767):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="4020280000002803f70ba3810700000000000000c30d2010bf6aa88a1a412d5900cb4fdca0560fb30d54f365c5b14a9667b624b75e1b7a3ec3afec2a8f940da4f47f680d06a84c5ab5de03575a4db4a8259cdf99d519e70397663239aa79e0988209fb1460ecc56366cb3779d29c0f8e9292d8fc73a8ca5043fa5a00b8b76fef6781755a82bf385f98af66a06a42974efef625b50a58b67e536cb59c0863fcfb339df3639c4ef28681c520aae30810c9a3bdee", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)

2m5.358009064s ago: executing program 3 (id=11785):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')

2m5.261747657s ago: executing program 3 (id=11787):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {0x7, 0x2, 0x5, 0x2}, 0x35, [0x2, 0xc, 0x1, 0x1b00, 0x401, 0x3467, 0x2, 0x7fff, 0x50dc7e3, 0x401, 0x0, 0x2, 0x8, 0x6, 0xd, 0x1, 0x3, 0x6, 0x10000, 0x4, 0x8, 0xf, 0xa0000000, 0xfffffc00, 0x8, 0x2, 0xb, 0x3, 0x5, 0x101, 0x2, 0x8, 0x4, 0xbc5, 0xfffffffd, 0x80000000, 0x0, 0x7, 0x8, 0x400004, 0xfffffffa, 0x7fff, 0x4, 0x2, 0x29, 0x81, 0x0, 0x400, 0x80, 0x10001, 0x1, 0x2, 0x10, 0x8, 0x9, 0x3, 0x9, 0x3, 0xee2f, 0x100, 0x8, 0x49be, 0x9, 0x3], [0x40, 0x0, 0xfffffffe, 0x6aba6e39, 0x1ff, 0x8, 0x5, 0x4, 0xb1, 0x4, 0x6, 0x5, 0x7, 0x9e, 0x2, 0x7, 0x6, 0x3, 0x5d9, 0x2, 0x2, 0x8, 0x8, 0xfffffff8, 0x1, 0xfb04592, 0x5, 0x3, 0xb, 0x7, 0x1, 0x3, 0x0, 0x9, 0xba6, 0x4, 0x8, 0xfffffffd, 0x10001, 0x6, 0xf, 0x4, 0x23, 0x8, 0x5, 0x10000, 0x10, 0x6, 0xc, 0xf, 0x6d0748d5, 0x4, 0x200000, 0x100, 0x9, 0x9, 0xd, 0x0, 0x9, 0xfffffff8, 0x4, 0x9, 0x6, 0x4], [0xffff0001, 0x62c, 0x9, 0x10000, 0x4, 0xfffffff5, 0xe3, 0x1, 0xff, 0x9, 0xb02, 0x0, 0x6, 0x3, 0x7000000, 0x7, 0xfffffffa, 0x8, 0xfff, 0x8001, 0x2, 0x0, 0x9, 0x6, 0x5, 0x4, 0xfffff801, 0x1, 0x8, 0xf8, 0xabb, 0x4, 0x7f, 0x83, 0xffff2563, 0x8, 0x9, 0xffffffff, 0x5, 0x10001, 0x8, 0x9c, 0x7, 0x1, 0xc, 0x7, 0xfffffff9, 0x4, 0x2, 0x9, 0x80000000, 0xff, 0x1, 0xfffffffc, 0x7, 0x2, 0x1, 0x4, 0x4, 0x6, 0x8, 0x4, 0x61ae, 0x100], [0xa81, 0xe, 0x5, 0x10000, 0x5, 0x2, 0xc7c, 0xb, 0x20000000, 0x748, 0x8, 0xca0c, 0x5, 0x10001, 0x2, 0xfffffffa, 0xf01, 0x7f, 0xd04b, 0x7, 0xb, 0x100000, 0x7, 0x8, 0x5, 0x6, 0x6, 0x9, 0xb6ac, 0x7f, 0x3, 0xbe, 0x4, 0xffffffff, 0x8002, 0x5ec3, 0xfffffffe, 0xda03, 0x9, 0x7, 0x2, 0xffffffff, 0x80, 0x7a29, 0x1c00000, 0xd, 0x6, 0x5, 0xd, 0x2, 0xab0, 0x1, 0x3, 0x7, 0x10001, 0x0, 0x3, 0x7, 0x3ff, 0x20000005, 0x40, 0x3ff, 0x4, 0xffffffff]}, 0x45c)

2m4.864741821s ago: executing program 3 (id=11791):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x106f)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000))
sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m4.707368927s ago: executing program 41 (id=11791):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x106f)
r6 = socket$rds(0x15, 0x5, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000))
sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

18.977467899s ago: executing program 1 (id=12949):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000280)=0x4000000)

18.141801812s ago: executing program 1 (id=12964):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}})

18.043795934s ago: executing program 1 (id=12967):
pselect6(0x66, 0x0, 0x0, &(0x7f00000010c0)={0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

17.908263491s ago: executing program 1 (id=12968):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f0000000040)={[{@fat=@errors_continue}, {@shortname_winnt}, {@fat=@sys_immutable}, {@utf8}, {@shortname_win95}, {@rodir}, {@shortname_win95}]}, 0x2, 0x226, &(0x7f0000000600)="$eJzs2k+LW1UYB+D3jq1Tp0wT8R8tiAddqJtLk7WLDtKCGFC0EaogvXUSDbkmQ24YiIidlW79CK7FpTtBunQzGz+BC3ezmWUX4pU20XZKFIo4kc7zbPLCOT9yDufew7u4B699/emwX+X9YhprWRZrl2IvbmfRjLX40168+vK1n55/99r7b251OpffSenK1tVWO6V07oUfP/j8uxdvTc++9/25H9Zjv/nhwWH71/1n988f/H71k0GVBlUajaepSDfG42lxo+yl7UE1zFN6u+zV6xGDUdWbHBnvl+OdnVkqRtubGzuTXlWlYjRLw94sTcdpOpml4uNiMEp5nqfNjeDf6H57u67jsD59Peq6fuKbOHsrNn+JRmRPpuypS9kz17Pn9rLzh3XdWPVS+U84/5Ptvkv9TET51W53tzv/nY9v9WMQZfTiYjTit7jzmCzM6ytvdC5fTHc148vy5iJ/c7f72NF8KxrRXJ5vzfPpaH49NiJORyzy7WjE08vz7aX5M/HKS/f9fx6N+PmjGEcZ23Eney//RSul19/qPJC/cHceAMCjJk9/Wdq/5fnfjc/zD9EfPtBfnYoLp1a7dyKq2WfDoix7E4VCcUKKxxdv/z/NWfHFxLG4d+irXgkAAAAAAAAAAAAP4zg+OVz1HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+3PwIAAP//rObRXg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2)

17.691924343s ago: executing program 1 (id=12969):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r1, r0}}, 0x18)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x59}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f00000024c0)="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", 0x1001}], 0x3)

17.281126964s ago: executing program 1 (id=12975):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
fanotify_init(0x9, 0x40000)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

17.063795204s ago: executing program 42 (id=12975):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
fanotify_init(0x9, 0x40000)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

2.077643929s ago: executing program 5 (id=13129):
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f0000000080)={[{@rescan_uuid_tree}, {@datasum}, {@datacow}, {@nossd}, {@nodiscard}, {@datacow}, {@space_cache_v2}, {@nodatacow}, {@rescue={'rescue', 0x3d, 'idatacsums'}}, {@commit}, {@nodatacow}, {@nossd}, {@flushoncommit}, {@noflushoncommit}, {@rescue={'rescue', 0x3d, 'nologreplay'}}]}, 0x6, 0x559d, &(0x7f0000004040)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

1.73675722s ago: executing program 2 (id=13132):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
setuid(0xee00)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)

1.678121692s ago: executing program 2 (id=13134):
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4})

1.575100029s ago: executing program 0 (id=13135):
syz_clone(0x91d7c6319857a68a, 0x0, 0x0, 0x0, 0x0, 0x0)

1.574849316s ago: executing program 2 (id=13136):
r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x84}})

1.491229425s ago: executing program 5 (id=13137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x50)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
setreuid(0x0, 0x0)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r4 = socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bind$unix(r4, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x40)

1.490952005s ago: executing program 0 (id=13138):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0})
close(0x3)

1.316614075s ago: executing program 0 (id=13139):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}})
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10)

1.202553168s ago: executing program 0 (id=13140):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0x10084, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES16=0x0, @ANYBLOB="0de0271c3bb30ed66447d448cc91866f809eec78ce476bce094c27517aaaeee9df34fdb6f82fd4a9e9eda525d5d8f3d5a8dc5a7b431bcd8d8e2fa1f7b6592cc11bcfb3c4cc5e86875cfa9c"], 0x2, 0x5fb0, &(0x7f0000011600)="$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")

772.52325ms ago: executing program 2 (id=13141):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x5}, 0x50)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

669.839787ms ago: executing program 2 (id=13142):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000004c0)=[{0x800000000}, {0x0, 0x0, 0x800}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x6e})

546.626263ms ago: executing program 2 (id=13143):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}}], 0x2, 0xc8040)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6)
sendto$inet6(r1, &(0x7f00000003c0)="1fd3cd769319b31fc20d6646fac13f48b2f7ec15b6b63ef5cd38233423fb13dd9615ec85a5e34358348584e6b016340cea509829b4bb2639b54dd265e7258b7c954a6fe743", 0x45, 0x24044001, 0x0, 0x0)

413.026685ms ago: executing program 0 (id=13144):
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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")
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa5e438, &(0x7f0000001ac0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32=r0, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))

412.727529ms ago: executing program 5 (id=13145):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef)

278.774269ms ago: executing program 5 (id=13146):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x8001, 0x180502)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, 0x0)

277.16169ms ago: executing program 5 (id=13147):
syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[], 0x1, 0x307, &(0x7f0000001b40)="$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")
creat(&(0x7f00000001c0)='./bus\x00', 0x106)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)

146.610554ms ago: executing program 5 (id=13148):
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b9b66040ac0501b300e4090203010902120001000000000904000000ff0101"], 0x0)

0s ago: executing program 0 (id=13149):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  906.523476][ T2614] loop1: detected capacity change from 0 to 512
[  906.541664][ T2614] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  906.546733][ T2614] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  906.552285][ T2614] EXT4-fs (loop1): group descriptors corrupted!
[  906.613314][ T2621] loop1: detected capacity change from 0 to 2048
[  906.675490][   T33] audit: type=1400 audit(1778613003.830:1712): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=2626 comm="syz.0.12082"
[  906.933604][ T2642] /dev/nullb0: Can't lookup blockdev
[  906.959826][ T2638] loop1: detected capacity change from 0 to 32768
[  906.987474][ T2638] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  907.004181][ T2638] XFS (loop1): Ending clean mount
[  907.011613][ T2638] XFS (loop1): Quotacheck needed: Please wait.
[  907.309197][ T2659] loop0: detected capacity change from 0 to 32768
[  907.343283][ T2659] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  907.370281][ T2638] XFS (loop1): Quotacheck: Done.
[  907.375107][   T33] audit: type=1800 audit(1778613004.565:1713): pid=2638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12086" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  907.403203][ T2659] XFS (loop0): Ending clean mount
[  907.410713][ T2659] XFS (loop0): Quotacheck needed: Please wait.
[  907.494548][ T1710] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  907.511309][ T2659] XFS (loop0): Quotacheck: Done.
[  908.248472][T29806] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  908.317707][ T2700] loop1: detected capacity change from 0 to 128
[  908.320777][ T2700] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  908.339054][ T2700] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  908.516085][ T1117] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  908.584386][ T2717] loop1: detected capacity change from 0 to 4096
[  908.588354][ T2717] ntfs3: Bad value for 'gid'
[  908.590085][ T2717] ntfs3: Bad value for 'gid'
[  908.655399][ T2708] loop0: detected capacity change from 0 to 40427
[  908.662411][ T2708] F2FS-fs (loop0): invalid crc value
[  908.776984][ T2708] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  908.786267][ T2708] F2FS-fs (loop0): Start checkpoint disabled!
[  908.795236][ T2720] loop1: detected capacity change from 0 to 2048
[  908.801270][ T2708] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  908.804628][ T2708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  908.958027][ T2720] hpfs: filesystem error: improperly stopped; already mounted read-only
[  908.977674][ T2720] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  908.980256][ T2720] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000
[  909.192363][ T2736] loop1: detected capacity change from 0 to 256
[  909.197193][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  909.211754][ T2736] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  909.340048][T26448] kworker/u9:1: attempt to access beyond end of device
[  909.340048][T26448] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  909.356012][T26448] CPU: 0 UID: 0 PID: 26448 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  909.356029][T26448] Tainted: [L]=SOFTLOCKUP
[  909.356032][T26448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  909.356037][T26448] Workqueue: writeback wb_workfn (flush-7:0)
[  909.356055][T26448] Call Trace:
[  909.356058][T26448]  <TASK>
[  909.356062][T26448]  dump_stack_lvl+0xe8/0x150
[  909.356074][T26448]  f2fs_stop_checkpoint+0x3c7/0x590
[  909.356087][T26448]  f2fs_write_end_io+0x1274/0x1740
[  909.356106][T26448]  __submit_merged_bio+0x256/0x6a0
[  909.356118][T26448]  __submit_merged_write_cond+0x3c9/0x4e0
[  909.356130][T26448]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  909.356147][T26448]  f2fs_write_data_pages+0x287e/0x34f0
[  909.356157][T26448]  ? f2fs_build_free_nids+0xdc/0x1810
[  909.356178][T26448]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  909.356212][T26448]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  909.356237][T26448]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  909.356253][T26448]  ? __lock_acquire+0x6b5/0x2cf0
[  909.356268][T26448]  ? set_shrinker_bit+0x7c/0x350
[  909.356278][T26448]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  909.356288][T26448]  do_writepages+0x32e/0x550
[  909.356299][T26448]  ? reacquire_held_locks+0x104/0x190
[  909.356308][T26448]  ? writeback_sb_inodes+0x463/0x19d0
[  909.356321][T26448]  __writeback_single_inode+0x133/0x10e0
[  909.356331][T26448]  ? do_raw_spin_unlock+0x4d/0x210
[  909.356344][T26448]  writeback_sb_inodes+0x979/0x19d0
[  909.356352][T26448]  ? __lock_acquire+0x6b5/0x2cf0
[  909.356371][T26448]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  909.356379][T26448]  ? do_raw_spin_lock+0x12b/0x2f0
[  909.356405][T26448]  ? rcu_is_watching+0x15/0xb0
[  909.356419][T26448]  wb_writeback+0x445/0xb00
[  909.356429][T26448]  ? queue_io+0x1d1/0x470
[  909.356441][T26448]  ? __pfx_wb_writeback+0x10/0x10
[  909.356449][T26448]  ? do_raw_spin_lock+0x12b/0x2f0
[  909.356466][T26448]  wb_workfn+0x3f8/0xf10
[  909.356473][T26448]  ? __lock_acquire+0x6b5/0x2cf0
[  909.356480][T26448]  ? look_up_lock_class+0x57/0x110
[  909.356497][T26448]  ? __pfx_wb_workfn+0x10/0x10
[  909.356506][T26448]  ? do_raw_spin_lock+0x12b/0x2f0
[  909.356515][T26448]  ? lock_acquire+0x106/0x350
[  909.356524][T26448]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  909.356535][T26448]  ? process_scheduled_works+0xa70/0x1860
[  909.356544][T26448]  ? process_scheduled_works+0xa70/0x1860
[  909.356555][T26448]  ? process_scheduled_works+0xa70/0x1860
[  909.356562][T26448]  ? process_scheduled_works+0xa70/0x1860
[  909.356570][T26448]  process_scheduled_works+0xb5d/0x1860
[  909.356590][T26448]  ? __pfx_process_scheduled_works+0x10/0x10
[  909.356600][T26448]  ? assign_work+0x3d5/0x5e0
[  909.356610][T26448]  worker_thread+0xa53/0xfc0
[  909.356629][T26448]  kthread+0x388/0x470
[  909.356639][T26448]  ? __pfx_worker_thread+0x10/0x10
[  909.356646][T26448]  ? __pfx_kthread+0x10/0x10
[  909.356656][T26448]  ret_from_fork+0x514/0xb70
[  909.356672][T26448]  ? __pfx_ret_from_fork+0x10/0x10
[  909.356680][T26448]  ? __switch_to+0xc79/0x1410
[  909.356693][T26448]  ? __pfx_kthread+0x10/0x10
[  909.356703][T26448]  ret_from_fork_asm+0x1a/0x30
[  909.356718][T26448]  </TASK>
[  909.356758][T26448] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  909.845196][ T5726] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  910.006388][ T5726] usb 2-1: Using ep0 maxpacket: 16
[  910.010284][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  910.014757][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  910.019133][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  910.024457][ T5726] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  910.029544][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.035435][ T5726] usb 2-1: config 0 descriptor??
[  910.276516][ T2741] exfat: Deprecated parameter 'namecase'
[  910.291688][ T2741] exfat: Bad value for 'namecase'
[  910.532621][ T5726] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  910.545421][ T5726] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  910.558285][ T5726] microsoft 0003:045E:07DA.002B: report is too long
[  910.575943][ T5726] microsoft 0003:045E:07DA.002B: item 0 4 0 11 parsing failed
[  910.602772][ T5726] microsoft 0003:045E:07DA.002B: parse failed
[  910.614513][ T5726] microsoft 0003:045E:07DA.002B: probe with driver microsoft failed with error -22
[  910.719673][ T5726] usb 2-1: USB disconnect, device number 33
[  911.409733][ T2757] set_capacity_and_notify: 1 callbacks suppressed
[  911.409744][ T2757] loop1: detected capacity change from 0 to 512
[  911.529954][ T2757] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  911.553353][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  911.555775][    C1] EXT4-fs (loop1): initial error at time 1778613008: ext4_mb_generate_buddy:1317
[  911.558613][    C1] EXT4-fs (loop1): last error at time 1778613008: ext4_mb_generate_buddy:1317
[  911.564379][ T2757] EXT4-fs (loop1): Remounting filesystem read-only
[  911.572745][ T2757] EXT4-fs (loop1): 1 truncate cleaned up
[  911.576966][ T2757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  911.671749][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  912.016624][ T5671] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  912.041099][ T2768] syzkaller1: entered promiscuous mode
[  912.050418][ T2768] syzkaller1: entered allmulticast mode
[  912.173537][ T5671] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  912.188138][ T5671] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  912.193752][ T5671] usb 2-1: config 0 interface 0 has no altsetting 0
[  912.197936][ T5671] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  912.204462][ T5671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.209794][ T5671] usb 2-1: config 0 descriptor??
[  912.280695][   T33] audit: type=1326 audit(1778613009.709:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.302288][   T33] audit: type=1326 audit(1778613009.730:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.330977][   T33] audit: type=1326 audit(1778613009.730:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.341640][   T33] audit: type=1326 audit(1778613009.730:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.356943][   T33] audit: type=1326 audit(1778613009.730:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.366772][   T33] audit: type=1326 audit(1778613009.730:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.381866][   T33] audit: type=1326 audit(1778613009.730:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.514069][ T2783] loop0: detected capacity change from 0 to 4096
[  912.518832][ T2783] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  912.525011][ T2783] NILFS (loop0): mounting unchecked fs
[  912.527052][ T2783] NILFS (loop0): recovery required for readonly filesystem
[  912.529985][ T2783] NILFS (loop0): write access will be enabled during recovery
[  912.555029][ T2783] NILFS (loop0): recovery complete
[  912.625796][ T5671] lenovo 0003:17EF:60B5.002C: unknown main item tag 0x0
[  912.634846][ T5671] lenovo 0003:17EF:60B5.002C: unknown main item tag 0x0
[  912.644561][ T5671] lenovo 0003:17EF:60B5.002C: unknown main item tag 0x0
[  912.653957][ T5671] lenovo 0003:17EF:60B5.002C: unknown main item tag 0x0
[  912.665838][ T5671] lenovo 0003:17EF:60B5.002C: unknown main item tag 0x0
[  912.679463][ T5671] lenovo 0003:17EF:60B5.002C: hidraw0: USB HID v0.08 Device [HID 17ef:60b5] on usb-dummy_hcd.1-1/input0
[  912.751656][   T33] audit: type=1326 audit(1778613009.730:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.760028][   T33] audit: type=1326 audit(1778613009.730:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.767253][   T33] audit: type=1326 audit(1778613009.730:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2773 comm="syz.2.12128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  912.789691][ T5671] usb 2-1: USB disconnect, device number 34
[  912.951222][T32649] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  913.121466][T32649] usb 1-1: Using ep0 maxpacket: 32
[  913.126170][T32649] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  913.134623][T32649] usb 1-1: config 0 has no interface number 0
[  913.141804][T32649] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  913.146026][T32649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.154187][T32649] usb 1-1: Product: syz
[  913.155864][T32649] usb 1-1: Manufacturer: syz
[  913.157665][T32649] usb 1-1: SerialNumber: syz
[  913.166035][T32649] usb 1-1: config 0 descriptor??
[  913.174449][T32649] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  913.369475][T32649] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  913.375773][T32649] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  913.885367][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  913.888737][ T5800] usb 1-1: USB disconnect, device number 47
[  913.899550][ T5800] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  913.918583][ T5800] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  913.926121][ T5800] quatech2 1-1:0.51: device disconnected
[  914.262855][ T2813] loop1: detected capacity change from 0 to 128
[  914.322524][ T2813] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  914.326566][ T2813] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  914.354068][ T1710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  914.489982][ T5671] libceph: connect (1)[c::]:6789 error -101
[  914.492094][ T5671] libceph: mon0 (1)[c::]:6789 connect error
[  914.526232][ T2817] ceph: No mds server is up or the cluster is laggy
[  914.810244][ T2829] loop1: detected capacity change from 0 to 1024
[  914.843688][ T2829] hfsplus: unable to change nls mapping
[  915.037483][ T2845] netlink: 'syz.2.12150': attribute type 1 has an invalid length.
[  915.045776][ T2845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  915.061852][ T5800] lo speed is unknown, defaulting to 1000
[  915.071662][ T5800] syz0: Port: 1 Link DOWN
[  915.094207][ T2849] loop0: detected capacity change from 0 to 256
[  915.275241][ T2847] loop1: detected capacity change from 0 to 32768
[  915.439195][ T2868] loop1: detected capacity change from 0 to 128
[  915.442630][ T2868] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  915.483685][ T5671] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  915.501175][ T2870] loop1: detected capacity change from 0 to 128
[  915.544212][ T2870] qnx6: superblock #1 checksum error
[  915.619432][ T2874] loop1: detected capacity change from 0 to 2048
[  915.632013][ T2874] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  915.636993][ T2874] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  915.641402][ T2874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  915.645539][ T5671] usb 1-1: Using ep0 maxpacket: 32
[  915.649423][ T5671] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  915.654851][ T5671] usb 1-1: config 0 has no interface number 0
[  915.687523][ T5671] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  915.691783][ T5671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.695245][ T5671] usb 1-1: Product: syz
[  915.696948][ T5671] usb 1-1: Manufacturer: syz
[  915.698486][ T5671] usb 1-1: SerialNumber: syz
[  915.701773][ T5671] usb 1-1: config 0 descriptor??
[  915.708742][ T5671] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  915.711700][ T5671] usb 1-1: selecting invalid altsetting 1
[  915.715180][ T5671] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  915.719551][ T5671] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  915.723716][ T5671] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  915.727072][ T5671] usb 1-1: media controller created
[  915.758538][ T5671] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  915.924826][ T2880] loop1: detected capacity change from 0 to 512
[  915.928129][ T2880] EXT4-fs: Ignoring removed nobh option
[  915.939635][ T2880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  915.984140][ T2880] EXT4-fs (loop1): 1 truncate cleaned up
[  915.991528][ T2880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  916.212662][ T2909] overlayfs: failed to resolve './file0': -2
[  916.258937][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12174'.
[  916.262439][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12174'.
[  916.266331][ T2911] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  916.645233][ T2920] loop0: detected capacity change from 0 to 32768
[  916.669370][ T5671] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  916.672301][ T5671] zl10353_read_register: readreg error (reg=127, ret==-71)
[  916.675215][ T5671] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  916.679376][ T2920] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  916.700987][ T5671] usb 1-1: USB disconnect, device number 48
[  916.722687][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  916.800390][ T2920] XFS (loop0): Ending clean mount
[  916.833604][ T2920] XFS (loop0): Quotacheck needed: Please wait.
[  917.009139][ T2920] XFS (loop0): Quotacheck: Done.
[  917.285377][ T2962] loop1: detected capacity change from 0 to 2048
[  917.325845][ T2962] Dev loop1: RDB in block 1 has bad checksum
[  917.489414][T29806] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  917.686267][ T2970] loop1: detected capacity change from 0 to 40427
[  917.696355][ T2970] F2FS-fs (loop1): build fault injection rate: 174
[  917.712655][ T2970] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  917.724204][ T2970] F2FS-fs (loop1): invalid crc value
[  917.796127][ T2970] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  917.858536][ T2974] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0)
[  917.865560][ T2970] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  918.105299][ T1710] syz-executor: attempt to access beyond end of device
[  918.105299][ T1710] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  918.124075][ T1710] CPU: 0 UID: 0 PID: 1710 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  918.124096][ T1710] Tainted: [L]=SOFTLOCKUP
[  918.124100][ T1710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  918.124107][ T1710] Call Trace:
[  918.124112][ T1710]  <TASK>
[  918.124117][ T1710]  dump_stack_lvl+0xe8/0x150
[  918.124136][ T1710]  f2fs_stop_checkpoint+0x3c7/0x590
[  918.124152][ T1710]  f2fs_write_end_io+0x1274/0x1740
[  918.124178][ T1710]  __submit_merged_bio+0x256/0x6a0
[  918.124194][ T1710]  __submit_merged_write_cond+0x3c9/0x4e0
[  918.124210][ T1710]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  918.124235][ T1710]  f2fs_write_data_pages+0x287e/0x34f0
[  918.124270][ T1710]  ? unwind_next_frame+0xa6/0x2550
[  918.124308][ T1710]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  918.124320][ T1710]  ? is_bpf_text_address+0x26/0x2b0
[  918.124338][ T1710]  ? arch_stack_walk+0xfb/0x150
[  918.124367][ T1710]  ? add_lock_to_list+0xc7/0x100
[  918.124381][ T1710]  ? lockdep_unlock+0x5d/0xd0
[  918.124390][ T1710]  ? __lock_acquire+0x146e/0x2cf0
[  918.124416][ T1710]  ? do_raw_spin_lock+0x12b/0x2f0
[  918.124436][ T1710]  ? do_raw_spin_unlock+0x4d/0x210
[  918.124450][ T1710]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  918.124463][ T1710]  do_writepages+0x32e/0x550
[  918.124480][ T1710]  ? do_raw_spin_unlock+0x4d/0x210
[  918.124496][ T1710]  filemap_fdatawrite+0x1e9/0x2f0
[  918.124510][ T1710]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  918.124541][ T1710]  ? preempt_schedule_common+0x82/0xd0
[  918.124555][ T1710]  ? preempt_schedule_thunk+0x16/0x30
[  918.124574][ T1710]  f2fs_sync_dirty_inodes+0x30e/0x830
[  918.124596][ T1710]  f2fs_write_checkpoint+0x9df/0x26a0
[  918.124609][ T1710]  ? __lock_acquire+0x6b5/0x2cf0
[  918.124637][ T1710]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  918.124679][ T1710]  kill_f2fs_super+0x314/0x730
[  918.124696][ T1710]  ? __pfx_kill_f2fs_super+0x10/0x10
[  918.124716][ T1710]  ? lockdep_hardirqs_on+0x7a/0x110
[  918.124736][ T1710]  deactivate_locked_super+0xbc/0x130
[  918.124753][ T1710]  cleanup_mnt+0x437/0x4d0
[  918.124763][ T1710]  ? _raw_spin_unlock_irq+0x23/0x50
[  918.124777][ T1710]  task_work_run+0x1d9/0x270
[  918.124795][ T1710]  ? __pfx_task_work_run+0x10/0x10
[  918.124812][ T1710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.124824][ T1710]  exit_to_user_mode_loop+0xed/0x480
[  918.124834][ T1710]  ? rcu_is_watching+0x15/0xb0
[  918.124849][ T1710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.124888][ T1710]  do_syscall_64+0x33e/0xf80
[  918.124902][ T1710]  ? trace_irq_disable+0x3b/0x140
[  918.124921][ T1710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.124930][ T1710] RIP: 0033:0x7ff88a39e017
[  918.124941][ T1710] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  918.124949][ T1710] RSP: 002b:00007ffcfcb0add8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  918.124962][ T1710] RAX: 0000000000000000 RBX: 00007ff88a432120 RCX: 00007ff88a39e017
[  918.124969][ T1710] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfcb0ae90
[  918.124975][ T1710] RBP: 00007ffcfcb0ae90 R08: 00007ffcfcb0be90 R09: 00000000ffffffff
[  918.124982][ T1710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfcb0bf20
[  918.124988][ T1710] R13: 00007ff88a432120 R14: 00000000000e9988 R15: 00007ffcfcb0bf60
[  918.125005][ T1710]  </TASK>
[  918.130383][ T1710] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  918.393592][ T2991] loop0: detected capacity change from 0 to 4096
[  918.713151][ T5800] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  918.798008][ T3016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12209'.
[  918.803241][ T3016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12209'.
[  918.855732][ T5800] usb 2-1: Using ep0 maxpacket: 32
[  918.864392][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  918.874846][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  918.888213][ T5800] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  918.896844][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.904548][ T5800] usb 2-1: config 0 descriptor??
[  918.910199][ T2995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  918.914381][ T5800] hub 2-1:0.0: USB hub found
[  919.108161][ T5800] hub 2-1:0.0: 1 port detected
[  919.895767][ T5800] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  919.896821][ T5671] usb 2-1: USB disconnect, device number 35
[  920.695342][ T3061] loop0: detected capacity change from 0 to 16
[  920.708557][ T3061] erofs (device loop0): dirblkbits 248 isn't supported
[  921.234588][ T5800] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  921.418059][ T5800] usb 2-1: Using ep0 maxpacket: 16
[  921.425453][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  921.433668][ T5800] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  921.443620][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.449028][ T5800] usb 2-1: Product: syz
[  921.454512][ T5800] usb 2-1: Manufacturer: syz
[  921.460731][ T5800] usb 2-1: SerialNumber: syz
[  921.469190][ T5800] usb 2-1: config 0 descriptor??
[  921.479810][ T5800] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  921.489842][ T5800] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  922.061196][ T5800] em28xx 2-1:0.0: chip ID is em2874
[  922.224175][ T3096] loop0: detected capacity change from 0 to 32768
[  922.242241][ T3096] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  922.279772][ T3096] XFS (loop0): Ending clean mount
[  922.395256][T29806] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  922.790038][ T3124] loop0: detected capacity change from 0 to 64
[  923.075353][ T5800] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  923.081458][ T5800] em28xx 2-1:0.0: board has no eeprom
[  923.151716][ T5800] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  923.155103][ T5800] em28xx 2-1:0.0: dvb set to bulk mode.
[  923.158489][   T10] em28xx 2-1:0.0: Binding DVB extension
[  923.202502][ T5800] usb 2-1: USB disconnect, device number 36
[  923.295697][ T5671] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  923.457082][ T5671] usb 1-1: Using ep0 maxpacket: 32
[  923.461960][ T5671] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  923.465733][ T5671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.176543][ T5800] em28xx 2-1:0.0: Disconnecting em28xx
[  924.180151][   T10] em28xx 2-1:0.0: Registering input extension
[  924.181096][ T3135] loop1: detected capacity change from 0 to 512
[  924.211201][ T5671] usb 1-1: config 0 descriptor??
[  924.366905][ T3135] EXT4-fs (loop1): 1 truncate cleaned up
[  924.383615][ T3135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  924.400419][   T10] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  924.405248][   T10] Registered IR keymap rc-empty
[  924.476723][ T5671] as10x_usb: device has been detected
[  924.488151][ T5671] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  924.568062][ T3135] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12256: bg 0: block 465: padding at end of block bitmap is not set
[  924.608500][   T10] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  924.613585][   T10] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input58
[  924.658508][ T3135] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28
[  924.674293][ T3135] EXT4-fs (loop1): This should not happen!! Data will be lost
[  924.674293][ T3135] 
[  924.699535][ T5671] usb 1-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)...
[  924.729190][ T3135] EXT4-fs (loop1): Total free blocks count 0
[  924.742939][ T3135] EXT4-fs (loop1): Free/Dirty block details
[  924.753171][ T3135] EXT4-fs (loop1): free_blocks=0
[  924.756196][ T3135] EXT4-fs (loop1): dirty_blocks=2
[  924.758225][ T3135] EXT4-fs (loop1): Block reservation details
[  924.758808][   T10] em28xx 2-1:0.0: Input extension successfully initialized
[  924.763237][ T5800] em28xx 2-1:0.0: Closing input extension
[  924.781500][ T3135] EXT4-fs (loop1): i_reserved_data_blocks=2
[  924.879503][ T1710] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost
[  924.889780][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.489360][ T3153] loop1: detected capacity change from 0 to 32768
[  925.514216][ T5671] as10x_usb: error during firmware upload part1
[  925.517322][ T5671] Registered device nBox DVB-T Dongle
[  925.583890][ T5671] usb 1-1: USB disconnect, device number 49
[  925.590637][ T3153] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  925.643525][ T5800] em28xx 2-1:0.0: Freeing device
[  925.725511][ T3153] XFS (loop1): Ending clean mount
[  925.805961][ T1710] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  925.819825][ T3174] fuse: fd is not a fuse device
[  925.899893][ T5671] Unregistered device nBox DVB-T Dongle
[  925.930466][ T5671] as10x_usb: device has been disconnected
[  926.379303][ T3186] loop0: detected capacity change from 0 to 1764
[  926.425739][ T3190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12276'.
[  926.438486][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  926.438503][   T33] audit: type=1800 audit(1778613024.574:1729): pid=3186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12275" name="file0" dev="loop0" ino=1923 res=0 errno=0
[  926.752431][T25703] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  926.895696][T25703] usb 2-1: Using ep0 maxpacket: 16
[  926.899181][T25703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  926.903056][T25703] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  926.911503][T25703] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  926.914868][T25703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.919994][T25703] usb 2-1: Product: syz
[  926.921750][T25703] usb 2-1: Manufacturer: syz
[  926.923657][T25703] usb 2-1: SerialNumber: syz
[  926.934300][T25703] usb 2-1: 0:2 : does not exist
[  927.132740][T25703] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  927.148510][ T3217] x_tables: duplicate underflow at hook 4
[  927.220203][T25703] usb 2-1: USB disconnect, device number 37
[  927.296551][T32320] udevd[32320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  927.767961][ T3255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12306'.
[  929.273659][ T3284] loop1: detected capacity change from 0 to 1024
[  929.397235][ T3284] hfsplus: catalog record size mismatch (type 3, got 52, expected 12)
[  929.490455][ T3284] smb3: Unexpected value for 'rdma'
[  930.566303][ T3317] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12328'.
[  930.870132][ T5671] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  931.366947][ T3339] netlink: 'syz.0.12338': attribute type 1 has an invalid length.
[  931.369809][ T3339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12338'.
[  931.535776][ T5671] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  931.540130][ T5671] usb 2-1: config 0 has no interface number 1
[  931.543379][ T5671] usb 2-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0
[  931.550080][ T5671] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  931.555036][ T5671] usb 2-1: config 0 interface 199 has no altsetting 0
[  931.560398][ T5671] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  931.564407][ T5671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  931.567640][ T5671] usb 2-1: SerialNumber: syz
[  931.570815][ T5671] usb 2-1: config 0 descriptor??
[  931.575971][ T5671] uvcvideo 2-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[  931.579169][ T5671] uvcvideo 2-1:0.199: No valid video chain found.
[  931.780379][   T10] usb 2-1: USB disconnect, device number 38
[  931.834119][ T3349] loop0: detected capacity change from 0 to 32768
[  931.839216][ T3349] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12343 (3349)
[  931.857800][ T3349] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  931.861393][ T3349] BTRFS info (device loop0): using sha256 checksum algorithm
[  932.010090][ T3349] BTRFS info (device loop0): enabling ssd optimizations
[  932.014198][ T3349] BTRFS info (device loop0): turning on async discard
[  932.017240][ T3349] BTRFS info (device loop0): enabling free space tree
[  932.042205][ T3349] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  932.166619][T29806] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  932.818157][ T5726] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  932.903003][ T3375] loop1: detected capacity change from 0 to 256
[  932.931096][ T3375] FAT-fs (loop1): Directory bread(block 64) failed
[  932.933973][ T3375] FAT-fs (loop1): Directory bread(block 65) failed
[  932.945999][ T3375] FAT-fs (loop1): Directory bread(block 66) failed
[  932.949537][ T3375] FAT-fs (loop1): Directory bread(block 67) failed
[  932.952363][ T3375] FAT-fs (loop1): Directory bread(block 68) failed
[  932.955192][ T3375] FAT-fs (loop1): Directory bread(block 69) failed
[  932.958032][ T3375] FAT-fs (loop1): Directory bread(block 70) failed
[  932.960727][ T3375] FAT-fs (loop1): Directory bread(block 71) failed
[  932.963551][ T3375] FAT-fs (loop1): Directory bread(block 72) failed
[  932.966190][ T3375] FAT-fs (loop1): Directory bread(block 73) failed
[  932.994792][ T5726] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 255, using maximum allowed: 30
[  932.999311][ T5726] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  933.004611][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0
[  933.007394][ T5726] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  933.012000][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.017546][ T5726] usb 1-1: config 0 descriptor??
[  933.409862][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.415882][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.417362][ T3386] loop1: detected capacity change from 0 to 4096
[  933.418728][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.424851][ T3386] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  933.431315][ T3386] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  933.433196][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.438941][ T3386] ntfs3(loop1): volume is dirty and "force" flag is not set!
[  933.445844][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.456009][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.462089][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.475648][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.491458][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.500870][ T5726] logitech-djreceiver 0003:046D:C71B.002D: unknown main item tag 0x0
[  933.610697][   T10] usb 1-1: USB disconnect, device number 50
[  933.935053][T25703] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  934.079706][T25703] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  934.083503][T25703] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  934.090441][T25703] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  934.094697][T25703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.098604][T25703] usb 2-1: Product: syz
[  934.100428][T25703] usb 2-1: Manufacturer: syz
[  934.102347][T25703] usb 2-1: SerialNumber: syz
[  934.112553][T25703] usb 2-1: config 0 descriptor??
[  934.128473][T25703] gspca_main: sunplus-2.14.0 probing 055f:c630
[  934.157218][   T33] audit: type=1326 audit(1778613032.689:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3399 comm="syz.0.12360" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b4eb9cdd9 code=0x0
[  935.136268][ T3414] raw_sendmsg: syz.2.12367 forgot to set AF_INET. Fix it!
[  935.155632][ T3416] loop0: detected capacity change from 0 to 16
[  935.160539][ T3416] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  935.306853][ T5726] usb 2-1: USB disconnect, device number 39
[  935.453843][ T3429] syzkaller1: entered promiscuous mode
[  935.455693][ T3429] syzkaller1: entered allmulticast mode
[  936.220206][ T3451] loop1: detected capacity change from 0 to 32768
[  936.251562][ T3451] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  936.273475][ T3451] XFS (loop1): Ending clean mount
[  936.277137][ T3451] XFS (loop1): Quotacheck needed: Please wait.
[  936.410087][ T3451] XFS (loop1): Quotacheck: Done.
[  937.240309][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  937.575473][ T3480] loop0: detected capacity change from 0 to 4096
[  938.086877][ T3492] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_1
[  938.092453][ T3493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12397'.
[  938.096483][ T3493] netlink: 'syz.0.12397': attribute type 1 has an invalid length.
[  938.104398][ T3493] netlink: 'syz.0.12397': attribute type 2 has an invalid length.
[  938.107869][ T3493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12397'.
[  938.197549][ T1710] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  938.700918][T32649] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  938.855367][T32649] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  938.858888][T32649] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  938.869512][T32649] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  938.875996][T32649] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  938.881767][T32649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.911794][T32649] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  938.916903][T32649] usb 1-1: invalid MIDI out EP 0
[  939.089696][T32649] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  939.105893][T32649] usb 1-1: USB disconnect, device number 51
[  939.740587][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816bf1e400: rx timeout, send abort
[  940.069310][T32649] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  940.212669][T32649] usb 1-1: Using ep0 maxpacket: 8
[  940.216692][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816bf1e800: rx timeout, send abort
[  940.220344][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816bf1e400: abort rx timeout. Force session deactivation
[  940.240247][T32649] usb 1-1: config index 0 descriptor too short (expected 30482, got 18)
[  940.243237][T32649] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  940.246575][T32649] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101
[  940.253710][T32649] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  940.257440][T32649] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  940.260844][T32649] usb 1-1: Product: syz
[  940.262748][T32649] usb 1-1: Manufacturer: syz
[  940.266263][T32649] usb 1-1: config 0 descriptor??
[  940.273114][T32649] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  940.277181][T32649] usb 1-1: Detected FT2232C/D
[  940.465657][T32649] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  940.468455][T32649] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  940.472327][T32649] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  940.477222][T32649] usb 1-1: USB disconnect, device number 52
[  940.494876][T32649] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  940.498599][T32649] ftdi_sio 1-1:0.0: device disconnected
[  940.689570][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816f600000: rx timeout, send abort
[  940.693149][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88816f600000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  940.703885][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816bf1e800: abort rx timeout. Force session deactivation
[  941.010285][ T3593] loop1: detected capacity change from 0 to 128
[  941.113266][ T3593] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  941.120477][ T3593] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  941.346423][T25703] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  941.352634][ T1710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  941.488788][T25703] usb 1-1: Using ep0 maxpacket: 16
[  941.493870][T25703] usb 1-1: unable to get BOS descriptor or descriptor too short
[  941.497263][T25703] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  941.502673][T25703] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  941.505283][T25703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.512364][T25703] usb 1-1: Product: syz
[  941.513724][T25703] usb 1-1: Manufacturer: syz
[  941.515142][T25703] usb 1-1: SerialNumber: syz
[  941.596066][ T3605] loop1: detected capacity change from 0 to 32768
[  941.619947][ T3605] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  941.750350][ T1710] ocfs2: Unmounting device (7,1) on (node local)
[  941.753926][T25703] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  941.757898][T25703] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  941.967893][T32649] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  942.080323][T32649] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  942.137210][T25703] usb 1-1: 2:1 : bogus bTerminalLink 6
[  942.485013][ T3626] loop1: detected capacity change from 0 to 32768
[  942.581110][T25703] usb 1-1: USB disconnect, device number 53
[  942.612686][T32320] udevd[32320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  942.666549][ T3626] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  942.701074][ T3626] XFS (loop1): Ending clean mount
[  942.704496][ T3626] XFS (loop1): Quotacheck needed: Please wait.
[  942.869298][ T3626] XFS (loop1): Quotacheck: Done.
[  943.260561][ T3645] fuse: fd is not a fuse device
[  944.124016][ T1710] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  944.169985][ T3651] loop0: detected capacity change from 0 to 256
[  944.214649][ T3651] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  944.292501][   T33] audit: type=1800 audit(1778613043.324:1731): pid=3651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12465" name="file1" dev="loop0" ino=1048825 res=0 errno=0
[  944.725762][ T3663] loop0: detected capacity change from 0 to 512
[  944.733263][ T3663] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  944.750905][ T3663] EXT4-fs (loop0): 1 truncate cleaned up
[  944.753600][ T3663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  945.686455][T29806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  945.773418][ T3682] loop1: detected capacity change from 0 to 128
[  945.795457][ T3686] netlink: 'syz.0.12476': attribute type 3 has an invalid length.
[  945.798337][ T3686] netlink: 'syz.0.12476': attribute type 1 has an invalid length.
[  945.801411][ T3686] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12476'.
[  945.804965][ T3686] NCSI netlink: No device for ifindex 8868644
[  945.843454][ T3688] loop0: detected capacity change from 0 to 256
[  946.175609][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  946.318057][    T9] usb 1-1: Using ep0 maxpacket: 16
[  946.321611][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  946.326165][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  946.342239][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  946.350099][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.363569][    T9] usb 1-1: config 0 descriptor??
[  946.535877][ T3717] loop1: detected capacity change from 0 to 2048
[  946.548922][ T3717] EXT4-fs (loop1): stripe (11) is not aligned with cluster size (16), stripe is disabled
[  946.587365][ T3717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  946.659094][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  946.961480][T25703] usb 1-1: USB disconnect, device number 54
[  947.109036][    T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  947.251981][    T9] usb 2-1: Using ep0 maxpacket: 16
[  947.257460][    T9] usb 2-1: config 0 has an invalid interface number: 213 but max is 1
[  947.261221][    T9] usb 2-1: config 0 has no interface number 1
[  947.265095][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  947.270477][    T9] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8
[  947.274654][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.277986][    T9] usb 2-1: Product: syz
[  947.279701][    T9] usb 2-1: Manufacturer: syz
[  947.281431][    T9] usb 2-1: SerialNumber: syz
[  947.290425][    T9] usb 2-1: config 0 descriptor??
[  947.299970][    T9] usb 2-1: selecting invalid altsetting 0
[  947.301883][    T9] usb 2-1: Could not set interface, error -22
[  947.493060][    T9] usb 2-1: USB disconnect, device number 40
[  947.740427][ T3759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12510'.
[  947.776878][ T3761] netlink: 'syz.2.12511': attribute type 1 has an invalid length.
[  947.783026][ T3761] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.12511'.
[  947.862051][ T3765] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12513'.
[  948.346911][ T5726] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  948.492806][ T5726] usb 2-1: Using ep0 maxpacket: 8
[  948.496673][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  948.501330][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  948.507153][ T5726] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  948.511071][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.518184][ T5726] usb 2-1: config 0 descriptor??
[  949.274211][ T5726] logitech 0003:046D:C20E.002F: rdesc size test failed for formula gp
[  949.277022][ T5726] hid_parser_main: 30 callbacks suppressed
[  949.277035][ T5726] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  949.282874][ T5726] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  949.285086][ T5726] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  949.287189][ T5726] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  949.289327][ T5726] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  949.292169][ T5726] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  949.294391][ T5726] logitech 0003:046D:C20E.002F: unknown main item tag 0x0
[  949.298126][ T5726] logitech 0003:046D:C20E.002F: hidraw0: USB HID v0.08 Device [HID 046d:c20e] on usb-dummy_hcd.1-1/input0
[  949.362995][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12536'.
[  949.481153][    T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  949.485277][ T5800] usb 2-1: USB disconnect, device number 41
[  949.543075][ T3825] netlink: 'syz.2.12541': attribute type 1 has an invalid length.
[  949.559237][ T3825] 8021q: adding VLAN 0 to HW filter on device bond14
[  949.661593][    T9] usb 1-1: Using ep0 maxpacket: 16
[  949.666208][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  949.674890][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  949.686085][    T9] usb 1-1: language id specifier not provided by device, defaulting to English
[  949.693816][    T9] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40
[  949.702559][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.707415][    T9] usb 1-1: Product: syz
[  949.710071][    T9] usb 1-1: SerialNumber: syz
[  949.917746][    T9] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  949.928608][    T9] usb 1-1: USB disconnect, device number 55
[  950.029162][ T3832] loop1: detected capacity change from 0 to 256
[  950.062055][ T3832] exfat: Deprecated parameter 'utf8'
[  950.064888][ T3832] exfat: Deprecated parameter 'namecase'
[  950.069344][ T3832] exfat: Deprecated parameter 'namecase'
[  950.077063][ T3832] exfat: Deprecated parameter 'utf8'
[  950.091106][ T3832] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  950.095390][ T3832] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  950.195559][ T5619] Bluetooth: hci1: command tx timeout
[  950.521670][ T3846] loop1: detected capacity change from 0 to 1024
[  950.530509][ T3846] hfsplus: Unknown parameter ''
[  950.768857][ T3855] loop0: detected capacity change from 0 to 256
[  950.786299][ T3855] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  950.798871][ T3855] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  950.803173][ T3855] exFAT-fs (loop0): failed to load alloc-bitmap
[  950.806386][ T3855] exFAT-fs (loop0): failed to recognize exfat type
[  950.961428][   T33] audit: type=1326 audit(1778613050.326:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3865 comm="syz.0.12560" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b4eb9cdd9 code=0x0
[  951.246758][ T3873] loop1: detected capacity change from 0 to 4096
[  951.252013][ T3873] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  951.275720][ T3873] ntfs3(loop1): ino=19, mi_enum_attr
[  951.283407][ T3873] ntfs3(loop1): failed to convert "c46c" to cp874
[  951.287942][ T3873] ntfs3(loop1): ino=20, mi_enum_attr
[  951.448759][ T3868] loop0: detected capacity change from 0 to 32768
[  951.551917][ T3868] find_entry called with index = 0
[  951.561302][ T3868] read_mapping_page failed!
[  951.563838][ T3868] ERROR: (device loop0): txCommit: 
[  951.563838][ T3868] 
[  952.151406][ T3884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12565'.
[  952.569347][ T5726] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  952.637347][ T3901] netlink: 'syz.2.12576': attribute type 4 has an invalid length.
[  952.689743][ T3902] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  952.730395][ T5726] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  952.744861][ T5726] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  952.753288][ T5726] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  952.757713][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.013938][ T5726] usb 2-1: usb_control_msg returned -32
[  953.018671][ T5726] usbtmc 2-1:16.0: can't read capabilities
[  954.757992][    T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  954.900690][    T9] usb 1-1: Using ep0 maxpacket: 32
[  954.906636][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  954.915281][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  954.928821][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  954.932465][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.941056][    T9] usb 1-1: config 0 descriptor??
[  954.946240][    T9] hub 1-1:0.0: USB hub found
[  955.142973][    T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -90)
[  955.213738][ T5726] usb 2-1: USB disconnect, device number 42
[  955.266211][ T3962] openvswitch: netlink: Duplicate or invalid key (type 0).
[  955.268701][ T3962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  955.335346][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  955.342232][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  955.369099][    T9] usb 1-1: USB disconnect, device number 56
[  955.710590][ T5726] usb 2-1: new low-speed USB device number 43 using dummy_hcd
[  955.857611][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short
[  955.862085][ T5726] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[  955.868526][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  955.875924][ T5726] usb 2-1: config 0 has no interface number 0
[  955.881107][ T5726] usb 2-1: config 0 interface 88 has no altsetting 0
[  955.890407][ T5726] usb 2-1: string descriptor 0 read error: -22
[  955.896058][ T5726] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  955.906565][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  955.921749][ T5726] usb 2-1: config 0 descriptor??
[  955.978224][ T3970] loop0: detected capacity change from 0 to 512
[  956.005244][ T3970] EXT4-fs (loop0): 1 truncate cleaned up
[  956.015592][ T3970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  956.104073][ T5722] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x76
[  956.121370][T25703] usb 2-1: USB disconnect, device number 43
[  956.235848][T29806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.661515][ T4000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12620'.
[  956.677714][ T4002] netlink: 'syz.1.12621': attribute type 29 has an invalid length.
[  956.681244][ T4002] netlink: 'syz.1.12621': attribute type 29 has an invalid length.
[  956.687589][ T4002] netlink: 508 bytes leftover after parsing attributes in process `syz.1.12621'.
[  956.701267][T25703] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  956.864362][T25703] usb 1-1: Using ep0 maxpacket: 8
[  956.873744][T25703] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  956.878057][T25703] usb 1-1: config 0 has no interface number 0
[  956.880573][T25703] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  956.885941][T25703] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  956.890081][T25703] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  956.898664][T25703] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  956.904711][T25703] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  956.926843][T25703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.939855][T25703] usb 1-1: config 0 descriptor??
[  956.955289][T25703] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  957.148377][   T10] usb 1-1: USB disconnect, device number 57
[  957.148662][    C0] ldusb 1-1:0.55: usb_submit_urb failed (-19)
[  957.155554][   T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  957.351676][ T3992] ldusb: No device or device unplugged -19
[  957.376892][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  957.379665][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  957.565656][ T4039] loop1: detected capacity change from 0 to 8192
[  957.616033][ T4039]  loop1: p1 p3 p4
[  957.616033][ T4039]  p1: <minix: p5 >
[  957.620423][ T4039] loop1: p3 start 503316480 is beyond EOD, truncated
[  957.622799][ T4039] loop1: p4 start 50688 is beyond EOD, truncated
[  957.715190][T32320] udevd[32320]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  957.718832][ T4043] loop1: detected capacity change from 0 to 512
[  957.738940][ T4043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  957.747859][T32320] udevd[32320]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  957.752487][ T4043] EXT4-fs (loop1): 1 truncate cleaned up
[  957.755991][ T4043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  957.947655][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.055624][ T4051] loop1: detected capacity change from 0 to 1024
[  958.130215][ T5726] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  958.282937][ T4053] loop1: detected capacity change from 0 to 32768
[  958.339819][ T4053] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  958.358330][ T5726] usb 1-1: Using ep0 maxpacket: 32
[  958.363194][ T5726] usb 1-1: unable to get BOS descriptor or descriptor too short
[  958.369665][ T5726] usb 1-1: config 1 has an invalid interface number: 65 but max is 0
[  958.376957][ T5726] usb 1-1: config 1 has no interface number 0
[  958.382812][ T4053] XFS (loop1): Ending clean mount
[  958.387594][ T4053] XFS (loop1): Quotacheck needed: Please wait.
[  958.406047][ T5726] usb 1-1: config 1 interface 65 has no altsetting 0
[  958.424208][ T5726] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=e9.0f
[  958.427898][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.430860][ T5726] usb 1-1: Product: syz
[  958.432454][ T5726] usb 1-1: Manufacturer: syz
[  958.434331][ T5726] usb 1-1: SerialNumber: syz
[  958.576473][ T4053] XFS (loop1): Quotacheck: Done.
[  958.713494][ T5726] flexcop_usb: set interface failed.
[  958.718752][ T5726] b2c2_flexcop_usb 1-1:1.65: probe with driver b2c2_flexcop_usb failed with error -22
[  958.725818][ T5726] usb 1-1: USB disconnect, device number 58
[  958.927925][ T1710] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  959.381105][ T4086] loop0: detected capacity change from 0 to 1024
[  959.399593][ T4086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  959.404596][ T4086] ext4 filesystem being mounted at /686/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  959.522837][T29806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  960.025395][ T5691] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  960.181387][ T5691] usb 1-1: config 8 has an invalid interface number: 177 but max is 0
[  960.185271][ T5691] usb 1-1: config 8 has no interface number 0
[  960.190122][ T5691] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88
[  960.201324][ T5691] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64
[  960.221666][ T5691] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  960.228154][ T5691] usb 1-1: config 8 interface 177 has no altsetting 0
[  960.232457][ T5691] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  960.238473][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.397842][ T4099] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  960.612695][ T5691] usb 1-1: string descriptor 0 read error: -71
[  960.769686][ T5691] ir_toy 1-1:8.177: required endpoints not found
[  960.860193][ T5691] usb 1-1: USB disconnect, device number 59
[  961.065298][ T4105] sctp: [Deprecated]: syz.2.12662 (pid 4105) Use of struct sctp_assoc_value in delayed_ack socket option.
[  961.065298][ T4105] Use struct sctp_sack_info instead
[  961.303429][ T4111] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 1 out of range (1000000..45000000)
[  962.414233][ T4135] loop0: detected capacity change from 0 to 256
[  962.654536][ T4143] loop1: detected capacity change from 0 to 128
[  962.663214][ T4143] EXT4-fs: Ignoring removed nobh option
[  962.669142][ T4141] loop0: detected capacity change from 0 to 4096
[  962.680273][ T4141] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  962.700308][ T4143] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  962.717964][ T4143] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  962.742865][ T4141] ntfs3(loop0): $Secure::$SDH is corrupted.
[  962.745269][ T4141] ntfs3(loop0): Failed to initialize $Secure (-22).
[  962.822984][ T1710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  962.956663][ T4153] loop0: detected capacity change from 0 to 1024
[  962.964929][ T4153] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  962.990116][ T4155] loop1: detected capacity change from 0 to 256
[  962.995800][ T4153] hfsplus: failed to load attributes file
[  963.034218][ T4155] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  963.340190][ T4169] netlink: 'syz.0.12691': attribute type 4 has an invalid length.
[  963.364393][ T4169] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12691'.
[  963.498372][ T4178] team0: Device gtp0 is up. Set it down before adding it as a team port
[  964.837911][ T4201] loop1: detected capacity change from 0 to 64
[  965.446609][ T4210] loop1: detected capacity change from 0 to 512
[  965.472843][ T4210] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  965.546843][ T4210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  965.577682][ T4210] System zones: 1-12
[  965.820499][ T4210] EXT4-fs (loop1): 1 truncate cleaned up
[  965.909356][ T4210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  965.930555][ T4196] loop0: detected capacity change from 0 to 32768
[  966.037451][ T4196] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  966.084776][ T4196] XFS (loop0): Ending clean mount
[  966.116958][   T33] audit: type=1800 audit(1778613066.230:1733): pid=4196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12702" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  966.360727][T29806] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  966.392366][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  966.496123][ T4234] loop1: detected capacity change from 0 to 2048
[  966.583237][ T4234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  966.596983][ T4234] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.12713: inline data xattr refers to an external xattr inode
[  966.662006][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  966.805456][ T4240] loop1: detected capacity change from 0 to 1024
[  966.811486][ T4240] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  966.817582][ T4240] hfsplus: failed to load extents file
[  966.899334][   T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  966.929684][ T4242] EXT4-fs (loop1): Test dummy encryption mode enabled
[  966.931341][ T4244] fuse: fd is not a fuse device
[  966.937886][ T4242] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  966.941668][ T4242] System zones: 0-5
[  966.946402][ T4242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  967.004440][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  967.067436][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  967.070994][   T10] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  967.077521][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.096729][   T10] usb 1-1: config 0 descriptor??
[  967.136215][   T10] rndis_host 1-1:0.0: rndis: master #0/ffff888105287000 slave #1/0000000000000000
[  967.345411][   T10] usb 1-1: USB disconnect, device number 60
[  967.620674][ T4263] syzkaller0: entered promiscuous mode
[  967.622681][ T4263] syzkaller0: entered allmulticast mode
[  967.997395][   T33] audit: type=1326 audit(1778613068.204:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.12729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  968.019500][   T33] audit: type=1326 audit(1778613068.225:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.12729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  968.037169][   T33] audit: type=1326 audit(1778613068.225:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.12729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  968.047511][   T33] audit: type=1326 audit(1778613068.225:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.12729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  968.065849][   T33] audit: type=1326 audit(1778613068.225:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.12729" exe="/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  968.084685][   T33] audit: type=1326 audit(1778613068.225:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.12729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  968.101867][   T33] audit: type=1326 audit(1778613068.225:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.12729" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  968.136528][   T33] audit: type=1326 audit(1778613068.225:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4274 comm="syz.1.12729" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  968.221581][ T4281] set_capacity_and_notify: 1 callbacks suppressed
[  968.221597][ T4281] loop1: detected capacity change from 0 to 512
[  968.259965][ T4271] loop0: detected capacity change from 0 to 32768
[  968.283264][ T4271] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  968.295941][ T4271] XFS (loop0): Ending clean mount
[  968.298542][ T4271] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 
[  968.309239][ T4271] XFS (loop0): Unmount and run xfs_repair
[  968.318970][ T4271] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  968.332190][ T4271] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  968.346448][ T4271] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  968.349871][ T4271] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  968.353519][ T4271] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  968.357771][ T4271] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  968.362165][ T4271] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  968.365706][ T4271] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  968.374964][ T4271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  968.381786][ T4271] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 4 error 74
[  968.407969][ T4271] loop0: lost filesystem error report for type 5 error -117
[  968.408954][ T4271] XFS (loop0): Failed to initialize disk quotas, err -117.
[  968.462042][T29806] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  968.471575][T29806] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  968.878264][ T4298] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12736'.
[  969.023043][   T33] audit: type=1326 audit(1778613069.285:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.0.12739" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4eb9cdd9 code=0x7ffc0000
[  969.278835][ T4309] loop1: detected capacity change from 0 to 1024
[  969.416779][ T5691] IPVS: starting estimator thread 0...
[  969.462369][ T4311] loop0: detected capacity change from 0 to 32768
[  969.465438][ T4311] btrfs: Deprecated parameter 'usebackuproot'
[  969.467434][ T4311] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  969.474305][ T4311] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12743 (4311)
[  969.490226][ T4311] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  969.493452][ T4311] BTRFS info (device loop0): using crc32c checksum algorithm
[  969.523599][ T4316] IPVS: using max 46 ests per chain, 110400 per kthread
[  969.605230][T26448] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  969.610122][ T4311] BTRFS error (device loop0): failed to load root extent
[  969.612561][ T4311] BTRFS warning (device loop0): try to load backup roots slot 1
[  969.615615][ T1115] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  969.632329][ T4311] BTRFS warning (device loop0): couldn't read tree root
[  969.635171][ T4311] BTRFS warning (device loop0): try to load backup roots slot 2
[  969.639163][T26448] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  969.645702][ T4311] BTRFS warning (device loop0): couldn't read tree root
[  969.648356][ T4311] BTRFS warning (device loop0): try to load backup roots slot 3
[  969.663533][ T4311] BTRFS info (device loop0): rebuilding free space tree
[  969.681161][ T4311] BTRFS info (device loop0): checking UUID tree
[  969.684407][ T4311] BTRFS info (device loop0): enabling ssd optimizations
[  969.686771][ T4311] BTRFS info (device loop0): using spread ssd allocation scheme
[  969.689584][ T4311] BTRFS info (device loop0): turning on async discard
[  969.692041][ T4311] BTRFS info (device loop0): enabling free space tree
[  969.694470][ T4311] BTRFS info (device loop0): force clearing of disk cache
[  969.696723][ T4311] BTRFS info (device loop0): enabling auto defrag
[  969.699087][ T4311] BTRFS info (device loop0): trying to use backup root at mount time
[  969.701528][ T4311] BTRFS info (device loop0): use zstd compression, level 3
[  969.733269][T29806] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  970.109708][ T4338] fuse: fd is not a fuse device
[  970.411259][ T4340] loop1: detected capacity change from 0 to 64
[  970.887058][ T4362] fuse: fd is not a fuse device
[  971.015764][ T4370] loop0: detected capacity change from 0 to 256
[  971.097239][ T4370] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372)
[  971.477902][ T4377] loop0: detected capacity change from 0 to 32768
[  971.481694][ T4377] Only 4K block size supported!
[  971.483953][ T4377] Mount JFS Failure: -22
[  971.489374][ T4377] jfs_mount failed w/return code = -22
[  971.864070][ T4393] loop0: detected capacity change from 0 to 2048
[  971.888612][ T4395] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  971.996399][ T4395] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  972.001652][ T4395] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  972.036328][ T4395] Remounting filesystem read-only
[  972.040037][T29806] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  972.159439][ T4402] loop0: detected capacity change from 0 to 256
[  972.190663][ T4402] FAT-fs (loop0): Directory bread(block 64) failed
[  972.199624][ T4402] FAT-fs (loop0): Directory bread(block 65) failed
[  972.214903][ T4402] FAT-fs (loop0): Directory bread(block 66) failed
[  972.221779][ T4402] FAT-fs (loop0): Directory bread(block 67) failed
[  972.223933][ T4402] FAT-fs (loop0): Directory bread(block 68) failed
[  972.227036][ T4402] FAT-fs (loop0): Directory bread(block 69) failed
[  972.229501][ T4405] [U] v
[  972.232464][ T4402] FAT-fs (loop0): Directory bread(block 70) failed
[  972.239334][ T4402] FAT-fs (loop0): Directory bread(block 71) failed
[  972.242188][ T4402] FAT-fs (loop0): Directory bread(block 72) failed
[  972.248287][ T4402] FAT-fs (loop0): Directory bread(block 73) failed
[  972.424914][ T4415] loop1: detected capacity change from 0 to 1024
[  972.514049][ T5800] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  972.663419][ T5800] usb 1-1: config 127 has an invalid interface number: 63 but max is 0
[  972.667019][ T5800] usb 1-1: config 127 has no interface number 0
[  972.669451][ T5800] usb 1-1: too many endpoints for config 127 interface 63 altsetting 243: 127, using maximum allowed: 30
[  972.674598][ T5800] usb 1-1: config 127 interface 63 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 127
[  972.681609][ T5800] usb 1-1: config 127 interface 63 has no altsetting 0
[  972.684061][ T5800] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  972.688106][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.796839][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12791'.
[  972.865942][   T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  972.888020][ T5800] usb 1-1: string descriptor 0 read error: -71
[  972.895278][ T5800] usb 1-1: USB disconnect, device number 61
[  973.008801][   T10] usb 2-1: Using ep0 maxpacket: 16
[  973.013097][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  973.017840][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  973.022544][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  973.026664][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  973.033447][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  973.036489][   T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  973.039923][   T10] usb 2-1: Manufacturer: syz
[  973.045637][   T10] usb 2-1: config 0 descriptor??
[  973.249395][   T10] usb 2-1: USB disconnect, device number 44
[  973.792534][ T4457] loop1: detected capacity change from 0 to 1024
[  973.800303][ T4457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  974.077926][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12810'.
[  974.103649][ T4470] ipvlan2: entered allmulticast mode
[  974.111017][ T4470] syz_tun: entered allmulticast mode
[  974.133024][ T4464] loop1: detected capacity change from 0 to 32768
[  974.137932][ T4464] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12807 (4464)
[  974.156036][ T4464] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  974.163828][ T4464] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  974.235839][ T4487] syzkaller1: left promiscuous mode
[  974.246260][ T4487] syzkaller1: left allmulticast mode
[  974.281874][ T4464] BTRFS info (device loop1): enabling ssd optimizations
[  974.291435][ T4464] BTRFS info (device loop1): turning on flush-on-commit
[  974.299706][ T4464] BTRFS info (device loop1): turning on async discard
[  974.308339][ T4464] BTRFS info (device loop1): enabling free space tree
[  974.314674][ T4464] BTRFS info (device loop1): force zlib compression, level 3
[  974.321022][ T4464] BTRFS info (device loop1): max_inline set to 0
[  974.333065][ T4493] fuse: fd is not a fuse device
[  974.378476][ T4464] BTRFS error: failed to open device for path p=RGXQe/QKP7iRŻ>?%IbADLIEm/H\OoIٯaM6o`4yu;i_ft_'js}ux2/ with flags 0x1: -2
[  974.416531][ T1710] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  974.542407][T25703] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  974.668374][ T4502] loop1: detected capacity change from 0 to 128
[  974.674758][ T4502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  974.685344][T25703] usb 1-1: Using ep0 maxpacket: 16
[  974.700522][T25703] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  974.719894][T25703] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  974.722976][T25703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.745251][T25703] usb 1-1: Product: syz
[  974.746984][T25703] usb 1-1: Manufacturer: syz
[  974.748807][T25703] usb 1-1: SerialNumber: syz
[  974.762262][T25703] r8152-cfgselector 1-1: Unknown version 0x0000
[  974.764470][T25703] r8152-cfgselector 1-1: config 0 descriptor??
[  974.983121][ T4502] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  975.167871][T25703] r8152-cfgselector 1-1: USB disconnect, device number 62
[  975.246777][ T4520] loop1: detected capacity change from 0 to 8
[  975.254925][ T4520] SQUASHFS error: Unable to read inode 0xa7
[  975.596777][ T4539] loop1: detected capacity change from 0 to 4096
[  975.662436][ T4539] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  975.665432][ T4539] ntfs3(loop1): Failed to load $Extend (-22).
[  975.670275][ T4539] ntfs3(loop1): Failed to initialize $Extend.
[  975.736994][ T4539] overlayfs: upper fs does not support tmpfile.
[  975.768141][ T4539] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  975.781705][ T4539] overlayfs: failed to set uuid (/file0, err=-22); falling back to uuid=null.
[  975.785459][ T4539] overlayfs: failed to verify upper root origin
[  975.844750][T27414] ntfs3(loop1): ino=9, ntfs3_write_inode failed, -22.
[  975.850889][ T1710] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22.
[  975.878334][ T4543] netlink: 'syz.0.12839': attribute type 1 has an invalid length.
[  975.883368][ T4543] netlink: 'syz.0.12839': attribute type 2 has an invalid length.
[  976.218309][ T4567] loop0: detected capacity change from 0 to 1024
[  976.314480][T25703] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[  976.473876][T25703] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  976.487943][T25703] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  976.505009][T25703] usb 2-1: config 0 interface 0 has no altsetting 0
[  976.510101][T25703] usb 2-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  976.523770][T25703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.541157][T25703] usb 2-1: config 0 descriptor??
[  976.553540][ T4558] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  976.992051][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.008646][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.028765][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.040287][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.049926][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.059909][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.073432][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.081502][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.096156][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.107412][T25703] holtek_mouse 0003:04D9:A04A.0030: unknown main item tag 0x0
[  977.128977][T25703] holtek_mouse 0003:04D9:A04A.0030: hidraw0: USB HID v0.08 Device [HID 04d9:a04a] on usb-dummy_hcd.1-1/input0
[  977.214891][T25703] usb 2-1: USB disconnect, device number 45
[  978.143681][ T4596] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  978.263557][ T4604] loop0: detected capacity change from 0 to 1024
[  978.270552][ T4604] EXT4-fs: Ignoring removed nomblk_io_submit option
[  978.288636][ T4604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  978.356165][T29806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  978.682672][ T4623] loop1: detected capacity change from 0 to 512
[  978.687501][ T4623] EXT4-fs: Ignoring removed orlov option
[  978.692843][ T4623] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  978.701124][ T4623] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.12875: corrupted in-inode xattr: e_value size too large
[  978.709985][ T4623] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  978.710949][ T4623] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.12875: couldn't read orphan inode 15 (err -117)
[  978.714681][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  978.714709][    C1] EXT4-fs (loop1): initial error at time 1778613079: ext4_iget_extra_inode:5128: inode 15
[  978.714759][    C1] EXT4-fs (loop1): last error at time 1778613079: ext4_iget_extra_inode:5128: inode 15
[  978.729867][ T4623] loop1: lost filesystem error report for type 5 error -117
[  978.731908][ T4623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  978.864424][ T1710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  978.914976][ T4617] loop0: detected capacity change from 0 to 32768
[  978.974494][ T4617] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  979.037107][ T4617] XFS (loop0): Ending clean mount
[  979.081933][T29806] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  979.099219][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  979.099235][   T33] audit: type=1326 audit(1778613079.867:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  979.113961][   T33] audit: type=1326 audit(1778613079.867:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  979.124943][   T33] audit: type=1326 audit(1778613079.878:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  979.132681][   T33] audit: type=1326 audit(1778613079.878:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff88a39cb42 code=0x7ffc0000
[  979.141531][ T4645] sctp: [Deprecated]: syz.2.12880 (pid 4645) Use of struct sctp_assoc_value in delayed_ack socket option.
[  979.141531][ T4645] Use struct sctp_sack_info instead
[  979.167571][   T33] audit: type=1326 audit(1778613079.878:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff88a39cb42 code=0x7ffc0000
[  979.226799][   T33] audit: type=1326 audit(1778613079.878:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  979.243251][   T33] audit: type=1326 audit(1778613079.878:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  979.264136][   T33] audit: type=1326 audit(1778613079.888:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  979.274762][   T33] audit: type=1326 audit(1778613079.888:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  979.345127][   T33] audit: type=1326 audit(1778613079.888:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.12881" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88a39cdd9 code=0x7ffc0000
[  980.182071][T25703] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  980.336109][T25703] usb 2-1: Using ep0 maxpacket: 8
[  980.345974][T25703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.357944][T25703] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  980.365432][T25703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  980.373543][T25703] usb 2-1: SerialNumber: syz
[  980.394194][T25703] usb 2-1: config 0 descriptor??
[  980.412692][T25703] uvcvideo 2-1:0.0: Found UVC 0.00 device <unnamed> (05ac:8501)
[  980.415549][T25703] uvcvideo 2-1:0.0: No valid video chain found.
[  980.617110][T25703] usb 2-1: USB disconnect, device number 46
[  981.038358][ T4673] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  981.045308][ T4673] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  981.050630][ T4673] overlayfs: missing 'lowerdir'
[  981.869405][ T4694] loop0: detected capacity change from 0 to 4096
[  981.912436][ T4694] ntfs3(loop0): Primary boot: invalid record size -14.
[  981.923786][ T4694] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  982.553832][ T5691] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  982.720006][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  982.731044][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  982.735159][ T5691] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  982.741634][ T5691] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  982.752248][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.767483][ T5691] usb 1-1: config 0 descriptor??
[  983.153658][T32649] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  983.203587][ T5691] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  983.315496][T32649] usb 2-1: Using ep0 maxpacket: 32
[  983.320554][T32649] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  983.326472][T32649] usb 2-1: config 0 interface 0 has no altsetting 0
[  983.329075][T32649] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  983.332632][T32649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.339991][T32649] usb 2-1: config 0 descriptor??
[  983.734058][T32649] uclogic 0003:2179:0053.0032: interface is invalid, ignoring
[  983.792952][    C0] plantronics 0003:047F:FFFF.0031: Event data for report 0 was too short (4043 vs 114)
[  983.928751][T32649] usb 2-1: USB disconnect, device number 47
[  983.985687][ T5691] usb 1-1: USB disconnect, device number 63
[  984.540337][ T4749] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12927'.
[  985.964681][ T4804] overlayfs: failed to clone upperpath
[  986.077985][ T5691] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  986.251453][ T5691] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  986.255324][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.263256][ T5691] usb 1-1: config 0 descriptor??
[  986.270235][ T5691] cp210x 1-1:0.0: cp210x converter detected
[  986.654724][ T5691] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  986.658352][ T4796] loop0: detected capacity change from 0 to 16
[  986.669737][ T4796] erofs (device loop0): invalid ishare xattr prefix id 0
[  986.727632][ T5691] usb 1-1: cp210x converter now attached to ttyUSB0
[  986.870933][ T5691] usb 1-1: USB disconnect, device number 64
[  986.880632][ T5691] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  986.908342][ T5691] cp210x 1-1:0.0: device disconnected
[  986.924878][ T4838] loop1: detected capacity change from 0 to 128
[  986.960275][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  986.965130][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  986.968393][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  986.972726][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  986.976585][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  986.980279][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  986.983537][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  986.987414][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  986.990804][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.008774][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.012237][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.015766][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.019120][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.025196][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.028616][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.031550][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.034471][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.045385][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.048831][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.052288][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.055383][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.058112][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.061597][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.065221][ T4838] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  987.069407][   T33] audit: type=1800 audit(1778613088.234:1757): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12968" name="file1" dev="loop1" ino=1048835 res=0 errno=0
[  987.079624][ T4839] loop1: detected capacity change from 128 to 0
[  987.104657][ T1710] FAT-fs (loop1): Directory bread(block 8) failed
[  987.109096][ T1710] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  987.119332][ T1710] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  987.470567][ T1710] Buffer I/O error on dev loop1, logical block 3, lost sync page write
[  987.476297][ T1710] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[  987.481043][ T1710] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  987.488857][ T1710] Buffer I/O error on dev loop1, logical block 2, lost sync page write
[  987.680150][T13885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.788100][ T5691] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  987.880796][T13885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.979043][ T5691] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  988.007534][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  988.019376][ T5691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  988.026612][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  988.055180][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.066855][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  988.074198][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  988.078105][ T5691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  988.081805][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  988.086201][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.096422][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  988.098968][ T5691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  988.102332][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  988.106275][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.111420][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  988.117056][ T5691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  988.125594][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  988.139779][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.177081][ T5691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  988.252871][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  988.279218][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.288480][ T5691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  988.301633][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  988.315843][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.338563][ T5691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  988.342182][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  988.352343][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.355288][T13885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.362294][ T5691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  988.371973][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  988.382467][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0
[  988.392926][ T5691] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  988.403229][ T5691] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  988.406039][ T5691] usb 1-1: Product: syz
[  988.407385][ T5691] usb 1-1: Manufacturer: syz
[  988.408800][ T5691] usb 1-1: SerialNumber: syz
[  988.424861][ T5691] usb 1-1: config 0 descriptor??
[  988.441666][ T5691] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  988.559811][T13885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.768075][ T4853] lo speed is unknown, defaulting to 1000
[  989.079663][T13885] bridge_slave_1: left allmulticast mode
[  989.081958][T13885] bridge_slave_1: left promiscuous mode
[  989.084404][T13885] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.097198][T13885] bridge_slave_0: left allmulticast mode
[  989.099981][T13885] bridge_slave_0: left promiscuous mode
[  989.102542][T13885] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.350314][ T4887] overlayfs: failed to clone upperpath
[  989.496817][T13885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.503933][T13885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.510128][T13885] bond0 (unregistering): Released all slaves
[  990.060364][ T4853] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.062993][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.065533][ T4853] bridge_slave_0: entered allmulticast mode
[  990.071175][ T4853] bridge_slave_0: entered promiscuous mode
[  990.075949][ T4853] bridge0: port 2(bridge_slave_1) entered blocking state
[  990.079145][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state
[  990.081594][ T4853] bridge_slave_1: entered allmulticast mode
[  990.085247][ T4853] bridge_slave_1: entered promiscuous mode
[  990.203198][ T5619] Bluetooth: hci1: command tx timeout
[  990.213158][ T5356] 8021q: adding VLAN 0 to HW filter on device eth25
[  990.231260][ T4853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  990.238504][ T4853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  990.265229][T13885] hsr_slave_0: left promiscuous mode
[  990.269161][T13885] hsr_slave_1: left promiscuous mode
[  990.272721][T13885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  990.275852][T13885] batman_adv: batadv0: Removing interface: batadv_slave_0
[  990.296468][T13885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  990.299196][T13885] batman_adv: batadv0: Removing interface: batadv_slave_1
[  990.325244][T13885] veth1_macvtap: left promiscuous mode
[  990.333103][T13885] veth0_macvtap: left promiscuous mode
[  990.340937][T13885] veth1_vlan: left promiscuous mode
[  990.347265][T13885] veth0_vlan: left promiscuous mode
[  990.427241][ T1288] usb 1-1: USB disconnect, device number 65
[  990.436450][ T1288] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  990.636852][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12994'.
[  991.045392][T13885] team0 (unregistering): Port device team_slave_1 removed
[  991.087780][T13885] team0 (unregistering): Port device team_slave_0 removed
[  991.315872][ T4853] team0: Port device team_slave_0 added
[  991.357978][ T4853] team0: Port device team_slave_1 added
[  991.392034][ T4853] batman_adv: batadv0: Adding interface: batadv_slave_0
[  991.437707][ T4853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.453279][ T4853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  991.481406][ T4853] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.491494][ T4853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.527868][ T4853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  991.638622][ T4853] hsr_slave_0: entered promiscuous mode
[  991.643128][ T4853] hsr_slave_1: entered promiscuous mode
[  991.662496][ T4853] debugfs: 'hsr0' already exists in 'hsr'
[  991.665543][ T4853] Cannot create hsr debugfs directory
[  991.777835][ T5356] 8021q: adding VLAN 0 to HW filter on device eth27
[  992.198064][ T5619] Bluetooth: hci1: command tx timeout
[  992.354533][ T4853] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.401930][ T5356] 8021q: adding VLAN 0 to HW filter on device eth26
[  992.489589][T13885] IPVS: stop unused estimator thread 0...
[  992.680661][ T4853] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.830482][ T4853] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.833360][ T5671] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  992.939358][ T5356] 8021q: adding VLAN 0 to HW filter on device eth28
[  993.016502][ T5671] usb 1-1: Using ep0 maxpacket: 16
[  993.018611][ T4853] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.025375][ T5671] usb 1-1: config 5 has an invalid interface number: 168 but max is 0
[  993.030310][ T5671] usb 1-1: config 5 has no interface number 0
[  993.038622][ T5671] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  993.059273][ T5671] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024
[  993.074482][ T5671] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3
[  993.083841][ T5671] usb 1-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  993.093044][ T5671] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0
[  993.101976][ T5671] usb 1-1: config 5 interface 168 has no altsetting 0
[  993.110377][ T5671] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  993.119760][ T5671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.145000][ T5671] usb 1-1: Product: syz
[  993.146833][ T5671] usb 1-1: Manufacturer: syz
[  993.148891][ T5671] usb 1-1: SerialNumber: syz
[  993.162162][ T4949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  993.460151][ T5671] usb 1-1: NFC: Unable to get FW version
[  993.475367][ T5671] pn533_usb 1-1:5.168: probe with driver pn533_usb failed with error -90
[  993.526802][ T5671] usb 1-1: USB disconnect, device number 66
[  993.810963][   T33] audit: type=1326 audit(1778613095.289:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.819946][   T33] audit: type=1326 audit(1778613095.289:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.838062][   T33] audit: type=1326 audit(1778613095.289:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.854923][   T33] audit: type=1326 audit(1778613095.289:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.866080][   T33] audit: type=1326 audit(1778613095.289:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.878562][   T33] audit: type=1326 audit(1778613095.289:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.887771][   T33] audit: type=1326 audit(1778613095.289:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.895305][ T4853] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  993.898505][   T33] audit: type=1326 audit(1778613095.289:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.909763][   T33] audit: type=1326 audit(1778613095.289:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.13010" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7acdd9cdd9 code=0x7ffc0000
[  993.912635][ T4853] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  993.937618][ T4853] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  993.943504][ T4853] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  993.948599][ T4853] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  993.958763][ T4853] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  993.983327][ T4853] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  993.999200][ T4853] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  994.095386][ T4853] 8021q: adding VLAN 0 to HW filter on device bond0
[  994.118987][ T4853] 8021q: adding VLAN 0 to HW filter on device team0
[  994.135275][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.138387][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  994.152594][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  994.155773][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  994.174985][ T5619] Bluetooth: hci1: command tx timeout
[  994.229742][ T4993] loop0: detected capacity change from 0 to 512
[  994.254672][ T4993] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  994.369996][ T4993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  994.374053][ T4993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  994.379548][ T4993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  994.647618][ T4853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  994.832906][ T4853] veth0_vlan: entered promiscuous mode
[  994.845898][ T4853] veth1_vlan: entered promiscuous mode
[  994.883204][ T4853] veth0_macvtap: entered promiscuous mode
[  994.890405][ T4853] veth1_macvtap: entered promiscuous mode
[  994.907022][ T4853] batman_adv: batadv0: Interface activated: batadv_slave_0
[  994.918769][ T4853] batman_adv: batadv0: Interface activated: batadv_slave_1
[  994.933991][T13885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  994.940340][T13885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  994.944083][T13885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  994.949403][T13885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  995.176880][T27415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.180835][T27415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  995.274346][T29720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.277415][T29720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  995.353129][ T5033] loop0: detected capacity change from 0 to 512
[  995.368906][ T5033] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  995.494635][ T5044] loop5: detected capacity change from 0 to 512
[  995.507246][ T5044] EXT4-fs: Ignoring removed i_version option
[  995.513909][ T5044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  995.519844][ T5046] fuse: fd is not a fuse device
[  995.562923][ T5033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  995.567398][ T5044] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.13026: invalid indirect mapped block 4294967295 (level 1)
[  995.570468][ T5033] block device autoloading is deprecated and will be removed.
[  995.578881][ T5033] EXT4-fs (loop0): couldn't read superblock of external journal
[  995.596597][ T5044] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  995.597276][ T5044] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.13026: invalid indirect mapped block 4294967295 (level 1)
[  995.606476][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  995.606497][    C0] EXT4-fs (loop5): initial error at time 1778613097: ext4_free_branches:1023: inode 11
[  995.606520][    C0] EXT4-fs (loop5): last error at time 1778613097: ext4_free_branches:1023: inode 11
[  995.632061][ T5044] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  995.632851][ T5044] EXT4-fs (loop5): 2 truncates cleaned up
[  995.656081][ T5044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  995.715140][ T4853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  995.799334][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  995.917785][T25684] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  996.006134][ T5070] 9p: Bad value for 'rfdno'
[  996.090755][T25684] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  996.096533][T25684] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  996.106517][T25684] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  996.111853][T25684] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  996.117214][T25684] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  996.122588][T25684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  996.141321][T25684] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  996.147531][ T5619] Bluetooth: hci1: command tx timeout
[  996.153148][T25684] usb 1-1: invalid MIDI out EP 0
[  996.465775][ T5082] loop0: detected capacity change from 0 to 4096
[  996.475229][ T5082] nilfs2: Unknown parameter ''
[  996.682305][T25684] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  996.692220][T25684] usb 1-1: USB disconnect, device number 67
[  996.908564][ T5671] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  997.117903][ T5671] usb 6-1: Using ep0 maxpacket: 32
[  997.121965][ T5671] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  997.126168][ T5671] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  997.130158][ T5671] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  997.136777][ T5671] usb 6-1: New USB device found, idVendor=0763, idProduct=200d, bcdDevice= 0.40
[  997.140504][ T5671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  997.146546][ T5671] usb 6-1: Product: syz
[  997.148624][ T5671] usb 6-1: Manufacturer: syz
[  997.151330][ T5671] usb 6-1: SerialNumber: syz
[  997.161261][ T5106] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13052'.
[  997.178072][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13052'.
[  997.272751][ T5108] loop0: detected capacity change from 0 to 2048
[  997.288548][ T5108] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  997.308913][ T5108] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  997.313471][ T5108] UDF-fs: Scanning with blocksize 512 failed
[  997.334945][ T5108] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2047, location=2047
[  997.340378][ T5108] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  997.344854][ T5108] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  997.355070][ T5108] UDF-fs: Scanning with blocksize 1024 failed
[  997.361047][ T5671] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor
[  997.368025][ T5108] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2047, location=2047
[  997.369173][ T5671] usb 6-1: 1:1 : sample bitwidth 3 in over sample bytes 0
[  997.372364][ T5108] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  997.379340][ T5108] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  997.380827][ T5671] usb 6-1: 1:1 : unsupported sample bitwidth 3 in 0 bytes
[  997.388207][ T5671] usb 6-1: 1:1 : unsupported format bits 0xfffffe
[  997.389303][ T5108] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  997.390603][ T5671] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  997.397921][ T5671] usb 6-1: 1:1 : invalid channels 0
[  997.400496][ T5671] usb 6-1: 0:2 : does not exist
[  997.400928][ T5108] UDF-fs: Scanning with blocksize 2048 failed
[  997.402651][ T5671] usb 6-1: unit 1 not found!
[  997.407639][ T5108] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2047, location=2047
[  997.413136][ T5671] usb 6-1: unit 130 not found!
[  997.415128][ T5108] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  997.419848][ T5108] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  997.426934][ T5108] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  997.430640][ T5108] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  997.436880][ T5108] UDF-fs: Scanning with blocksize 4096 failed
[  997.439812][ T5108] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  997.491061][ T5671] usb 6-1: USB disconnect, device number 4
[  997.529949][T32320] udevd[32320]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  997.723327][ T5124] loop0: detected capacity change from 0 to 2048
[  997.737070][ T5124] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  997.758590][ T5124] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  997.767491][ T5124] UDF-fs: Scanning with blocksize 512 failed
[  997.773520][ T5124] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  997.779162][ T5124] UDF-fs: Scanning with blocksize 1024 failed
[  997.785304][ T5124] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  997.789389][ T5124] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  997.794422][ T5124] UDF-fs: Scanning with blocksize 2048 failed
[  997.798420][ T5124] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  997.807243][ T5124] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  997.811387][ T5124] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  997.816530][ T5124] UDF-fs: Scanning with blocksize 4096 failed
[  997.819026][ T5124] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  997.874336][ T5134] fuse: fd is not a fuse device
[  997.967356][ T5140] loop5: detected capacity change from 0 to 256
[  998.139974][ T5671] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  998.261020][ T5691] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  998.289417][ T5671] usb 1-1: Using ep0 maxpacket: 8
[  998.294301][ T5671] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  998.303664][ T5671] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  998.307615][ T5671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.311197][ T5671] usb 1-1: Product: syz
[  998.312973][ T5671] usb 1-1: Manufacturer: syz
[  998.315107][ T5671] usb 1-1: SerialNumber: syz
[  998.321217][ T5671] usb 1-1: config 0 descriptor??
[  998.415691][ T5691] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  998.420440][ T5691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  998.425004][ T5691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  998.428892][ T5691] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  998.437586][ T5691] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  998.441218][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  998.445323][ T5691] usb 6-1: SerialNumber: syz
[  998.525017][ T5671] usb 1-1: USB disconnect, device number 68
[  998.652901][ T5691] usbtest 6-1:1.0: couldn't get endpoints, -22
[  998.656337][ T5691] usbtest 6-1:1.0: probe with driver usbtest failed with error -22
[  998.664858][ T5691] usb 6-1: USB disconnect, device number 5
[  999.084209][ T5167] Invalid ELF header len 1
[  999.117817][ T5170] xt_hashlimit: size too large, truncated to 1048576
[  999.493204][ T5199] loop5: detected capacity change from 0 to 128
[  999.521776][ T5199] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  999.527110][ T5199] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  999.566777][ T4853] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  999.671107][ T5671] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  999.838878][ T5671] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  999.847384][ T5671] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  999.851934][ T5671] usb 1-1: config 220 has no interface number 2
[  999.855063][ T5671] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  999.859657][ T5671] usb 1-1: config 220 interface 0 has no altsetting 0
[  999.862839][ T5671] usb 1-1: config 220 interface 76 has no altsetting 0
[  999.865512][ T5671] usb 1-1: config 220 interface 1 has no altsetting 0
[  999.875377][ T5671] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  999.878574][ T5671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.883792][ T5671] usb 1-1: Product: syz
[  999.887877][ T5671] usb 1-1: Manufacturer: syz
[  999.891570][ T5671] usb 1-1: SerialNumber: syz
[ 1000.191565][ T5671] usb 1-1: selecting invalid altsetting 0
[ 1000.230141][ T5671] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1000.234122][ T5671] uvcvideo 1-1:220.0: No valid video chain found.
[ 1000.260276][ T5671] usb 1-1: selecting invalid altsetting 0
[ 1000.263947][ T5671] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[ 1000.282961][ T5671] usb 1-1: USB disconnect, device number 69
[ 1000.939897][ T5219] loop0: detected capacity change from 0 to 512
[ 1001.328450][ T5030] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1001.443526][ T5229] loop5: detected capacity change from 0 to 40427
[ 1001.448392][ T5229] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1001.456799][ T5229] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1001.463007][ T5229] F2FS-fs (loop5): invalid crc value
[ 1001.470930][ T5030] usb 1-1: Using ep0 maxpacket: 32
[ 1001.474507][ T5030] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[ 1001.477283][ T5030] usb 1-1: config 0 has no interface number 0
[ 1001.479532][ T5030] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1001.487036][ T5030] usb 1-1: config 0 interface 85 has no altsetting 0
[ 1001.517377][ T5030] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1001.524107][ T5229] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1001.529435][ T5030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.537982][ T5030] usb 1-1: Product: syz
[ 1001.539476][ T5030] usb 1-1: Manufacturer: syz
[ 1001.540989][ T5030] usb 1-1: SerialNumber: syz
[ 1001.546323][ T5030] usb 1-1: config 0 descriptor??
[ 1001.556335][ T5229] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1001.558925][ T5229] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1002.028428][ T5257] loop5: detected capacity change from 0 to 4096
[ 1002.036824][ T5257] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[ 1002.056394][ T5257] ntfs3(loop5): ino=1a, mi_enum_attr
[ 1002.058697][ T5257] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1002.088045][ T5257] ntfs3(loop5): ino=1e, "file1" ntfs3_write_inode failed, -22.
[ 1002.092753][ T5257] ntfs3(loop5): ino=21, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[ 1002.134029][ T5030] appletouch 1-1:0.85: Geyser mode initialized.
[ 1002.140255][ T5030] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input61
[ 1002.335931][ T5030] usb 1-1: USB disconnect, device number 70
[ 1002.389213][ T5265] loop5: detected capacity change from 0 to 4096
[ 1002.411209][ T5265] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[ 1002.429203][ T5265] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[ 1002.441555][ T5030] appletouch 1-1:0.85: input: appletouch disconnected
[ 1002.445521][ T5264] ntfs3(loop5): ino=1e, "file1" attr_set_size_ex
[ 1002.487319][T27415] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[ 1002.497593][ T4853] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[ 1002.503415][ T4853] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1002.514948][ T4853] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[ 1002.517783][T27415] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[ 1003.001078][ T5277] loop5: detected capacity change from 0 to 32768
[ 1003.020845][ T5277] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13129 (5277)
[ 1003.062060][ T5277] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1003.073953][ T5277] BTRFS info (device loop5): using blake2b checksum algorithm
[ 1003.178284][ T5277] BTRFS info (device loop5 state EC): setting nodatasum
[ 1003.187807][ T5277] BTRFS info (device loop5 state EC): setting nodatacow
[ 1003.196686][ T5277] BTRFS info (device loop5 state EC): disabling log replay at mount time
[ 1003.206370][ T5277] BTRFS info (device loop5 state EC): enabling free space tree
[ 1003.219724][ T5277] BTRFS info (device loop5 state EC): ignoring data csums
[ 1003.283893][ T4853] BTRFS info (device loop5 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1004.228060][ T5324] loop0: detected capacity change from 0 to 32768
[ 1004.235251][ T5324] jfs_mount: Mount Failure: File System Dirty.
[ 1004.241095][ T5324] Mount JFS Failure: -22
[ 1004.244942][ T5324] jfs_mount failed w/return code = -22
[ 1004.578226][ T5347] loop0: detected capacity change from 0 to 32768
[ 1004.583782][ T5347] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13144 (5347)
[ 1004.601549][ T5353] loop5: detected capacity change from 0 to 128
[ 1004.603840][ T5347] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[ 1004.608536][ T5347] BTRFS info (device loop0): using xxhash64 checksum algorithm
[ 1004.723227][ T5347] BTRFS info (device loop0): enabling ssd optimizations
[ 1004.738019][ T5347] BTRFS info (device loop0): turning on async discard
[ 1004.741490][ T5347] BTRFS info (device loop0): enabling free space tree
[ 1004.792878][T29806] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[ 1004.907822][  T796] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1004.945580][ T5378] loop0: detected capacity change from 0 to 64
[ 1005.196055][  T796] usb 6-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[ 1005.199088][  T796] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[ 1005.201503][  T796] usb 6-1: Product: syz
[ 1005.202884][  T796] usb 6-1: Manufacturer: syz
[ 1005.204387][  T796] usb 6-1: SerialNumber: syz
[ 1005.215447][  T796] usb 6-1: config 0 descriptor??
[ 1005.311267][ T5384] ------------[ cut here ]------------
[ 1005.316640][ T5384] !buffer_uptodate(bh)
[ 1005.316673][ T5384] WARNING: fs/buffer.c:1087 at mark_buffer_dirty+0x299/0x410, CPU#1: syz.0.13149/5384
[ 1005.321288][ T5384] Modules linked in:
[ 1005.325084][ T5384] CPU: 1 UID: 0 PID: 5384 Comm: syz.0.13149 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1005.328397][ T5384] Tainted: [L]=SOFTLOCKUP
[ 1005.330166][ T5384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1005.333371][ T5384] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 1005.335451][ T5384] Code: 4c 89 f7 e8 89 16 da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 94 63 fb ff e8 bf ba 6e ff eb 8c e8 b8 ba 6e ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 aa ba 6e ff 90 0f 0b 90 e9 cf fd ff ff
[ 1005.342451][ T5384] RSP: 0018:ffffc900064563e8 EFLAGS: 00010293
[ 1005.344455][ T5384] RAX: ffffffff8256e988 RBX: ffff8881a403dbc8 RCX: ffff8881202f1d80
[ 1005.346952][ T5384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 1005.350357][ T5384] RBP: ffff8881108b6001 R08: ffff8881a403dbcf R09: 1ffff11034807b79
[ 1005.353261][ T5384] R10: dffffc0000000000 R11: ffffed1034807b7a R12: ffff8881a7a7d800
[ 1005.356164][ T5384] R13: ffff88801c41c828 R14: ffff8881a403dbc8 R15: 0000000000000012
[ 1005.359543][ T5384] FS:  00007f9b4cdf66c0(0000) GS:ffff8882a9290000(0000) knlGS:0000000000000000
[ 1005.362901][ T5384] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1005.364973][ T5384] CR2: 00007f13c8e02440 CR3: 0000000110b5e000 CR4: 00000000000006f0
[ 1005.367769][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1005.370292][ T5384] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1005.373229][ T5384] Call Trace:
[ 1005.374311][ T5384]  <TASK>
[ 1005.375270][ T5384]  bfs_get_block+0x5da/0xae0
[ 1005.376860][ T5384]  __block_write_begin_int+0x6c6/0x1910
[ 1005.378637][ T5384]  ? __pfx_bfs_get_block+0x10/0x10
[ 1005.380325][ T5384]  ? __pfx___block_write_begin_int+0x10/0x10
[ 1005.382154][ T5384]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 1005.384056][ T5384]  ? __pfx_bfs_get_block+0x10/0x10
[ 1005.385666][ T5384]  block_write_begin+0x8d/0x120
[ 1005.387322][ T5384]  ? bfs_write_begin+0x1e/0xd0
[ 1005.388878][ T5384]  bfs_write_begin+0x35/0xd0
[ 1005.390344][ T5384]  generic_perform_write+0x2e2/0x8f0
[ 1005.392038][ T5384]  ? __pfx_generic_perform_write+0x10/0x10
[ 1005.393865][ T5384]  ? file_update_time_flags+0x219/0x4a0
[ 1005.396088][ T5384]  ? __generic_file_write_iter+0xf9/0x230
[ 1005.398084][ T5384]  ? generic_file_write_iter+0x136/0x680
[ 1005.400220][ T5384]  generic_file_write_iter+0x14a/0x680
[ 1005.402416][ T5384]  ? __pfx_generic_file_write_iter+0x10/0x10
[ 1005.404501][ T5384]  ? unwind_next_frame+0xa6/0x2550
[ 1005.406417][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.408369][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.410268][ T5384]  ? is_bpf_text_address+0x292/0x2b0
[ 1005.412446][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.414682][ T5384]  ? kernel_text_address+0xa5/0xe0
[ 1005.416525][ T5384]  ? __kernel_text_address+0xd/0x30
[ 1005.418636][ T5384]  ? unwind_get_return_address+0x4d/0x90
[ 1005.420979][ T5384]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1005.423497][ T5384]  ? arch_stack_walk+0xfb/0x150
[ 1005.425698][ T5384]  __kernel_write_iter+0x41e/0x880
[ 1005.427757][ T5384]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1005.429967][ T5384]  ? __asan_memset+0x22/0x50
[ 1005.431848][ T5384]  ? iov_iter_kvec+0xb8/0x180
[ 1005.433980][ T5384]  __kernel_write+0x106/0x170
[ 1005.435928][ T5384]  ? cgroup1_freezing+0x20/0x350
[ 1005.437989][ T5384]  ? __pfx___kernel_write+0x10/0x10
[ 1005.440160][ T5384]  ? cgroup1_freezing+0x20/0x350
[ 1005.442198][ T5384]  ? cgroup1_freezing+0x29a/0x350
[ 1005.444486][ T5384]  ? freezing_slow_path+0x115/0x160
[ 1005.446538][ T5384]  dump_emit+0x8e9/0xab0
[ 1005.448357][ T5384]  ? __pfx_dump_emit+0x10/0x10
[ 1005.450356][ T5384]  ? __kasan_kmalloc+0x93/0xb0
[ 1005.452331][ T5384]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1005.454777][ T5384]  elf_core_dump+0x2e5d/0x3ad0
[ 1005.455813][ T5028] usb 6-1: USB disconnect, device number 6
[ 1005.456778][ T5384]  ? __pfx_elf_core_dump+0x10/0x10
[ 1005.460562][ T5384]  ? __kasan_kmalloc+0x93/0xb0
[ 1005.462675][ T5384]  ? __kvmalloc_node_noprof+0x528/0x8a0
[ 1005.464929][ T5384]  ? coredump_write+0x387/0x1910
[ 1005.466978][ T5384]  ? vfs_coredump+0x3807/0x4530
[ 1005.468950][ T5384]  ? get_signal+0x1107/0x1330
[ 1005.470859][ T5384]  ? arch_do_signal_or_restart+0xbc/0x830
[ 1005.473228][ T5384]  ? irqentry_exit+0x284/0x730
[ 1005.475226][ T5384]  ? asm_exc_page_fault+0x26/0x30
[ 1005.477307][ T5384]  ? mas_ascend+0x304/0x890
[ 1005.479238][ T5384]  ? vfs_coredump+0x3807/0x4530
[ 1005.481406][ T5384]  coredump_write+0x1216/0x1910
[ 1005.483430][ T5384]  ? __pfx_coredump_write+0x10/0x10
[ 1005.485550][ T5384]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1005.487513][ T5384]  ? put_files_struct+0x256/0x350
[ 1005.489552][ T5384]  ? do_raw_spin_unlock+0x4d/0x210
[ 1005.491894][ T5384]  ? unshare_files+0xfc/0x140
[ 1005.493926][ T5384]  vfs_coredump+0x3807/0x4530
[ 1005.495936][ T5384]  ? __pfx_vfs_coredump+0x10/0x10
[ 1005.498033][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.500135][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.502228][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.504318][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.506400][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.508467][ T5384]  ? unwind_next_frame+0xa6/0x2550
[ 1005.510750][ T5384]  ? lock_acquire+0x106/0x350
[ 1005.512690][ T5384]  ? unwind_next_frame+0xa6/0x2550
[ 1005.514828][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.516959][ T5384]  ? lock_acquire+0x106/0x350
[ 1005.518958][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.522102][ T5384]  ? is_bpf_text_address+0x292/0x2b0
[ 1005.524435][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.526594][ T5384]  ? kernel_text_address+0xa5/0xe0
[ 1005.528833][ T5384]  ? __kernel_text_address+0xd/0x30
[ 1005.530964][ T5384]  ? unwind_get_return_address+0x4d/0x90
[ 1005.533236][ T5384]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1005.535768][ T5384]  ? arch_stack_walk+0xfb/0x150
[ 1005.537744][ T5384]  ? stack_trace_save+0xa9/0x100
[ 1005.539865][ T5384]  ? __pfx_stack_trace_save+0x10/0x10
[ 1005.541972][ T5384]  ? stack_depot_save_flags+0x33/0x810
[ 1005.544196][ T5384]  ? kasan_save_track+0x4f/0x80
[ 1005.546230][ T5384]  ? kasan_save_track+0x3e/0x80
[ 1005.548349][ T5384]  ? kasan_save_free_info+0x46/0x50
[ 1005.550460][ T5384]  ? __kasan_slab_free+0x5c/0x80
[ 1005.552463][ T5384]  ? kmem_cache_free+0x182/0x650
[ 1005.554471][ T5384]  ? get_signal+0xa4a/0x1330
[ 1005.556301][ T5384]  ? arch_do_signal_or_restart+0xbc/0x830
[ 1005.558596][ T5384]  ? irqentry_exit+0x284/0x730
[ 1005.560571][ T5384]  ? asm_exc_page_fault+0x26/0x30
[ 1005.562704][ T5384]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1005.564835][ T5384]  get_signal+0x1107/0x1330
[ 1005.566731][ T5384]  arch_do_signal_or_restart+0xbc/0x830
[ 1005.569182][ T5384]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1005.571706][ T5384]  irqentry_exit+0x284/0x730
[ 1005.573497][ T5384]  ? trace_irq_disable+0x3b/0x140
[ 1005.575404][ T5384]  asm_exc_page_fault+0x26/0x30
[ 1005.577519][ T5384] RIP: 0033:0x7f9b4eb9cde1
[ 1005.579384][ T5384] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1005.587133][ T5384] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217
[ 1005.589572][ T5384] RAX: 0000000000000000 RBX: 00007f9b4ee16180 RCX: 00007f9b4eb9cdd9
[ 1005.592737][ T5384] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400
[ 1005.596188][ T5384] RBP: 00007f9b4ec32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1005.599405][ T5384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1005.602586][ T5384] R13: 00007f9b4ee16218 R14: 00007f9b4ee16180 R15: 00007fffc4f4c668
[ 1005.605925][ T5384]  </TASK>
[ 1005.607223][ T5384] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1005.610271][ T5384] CPU: 1 UID: 0 PID: 5384 Comm: syz.0.13149 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1005.614682][ T5384] Tainted: [L]=SOFTLOCKUP
[ 1005.616382][ T5384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1005.620443][ T5384] Call Trace:
[ 1005.621891][ T5384]  <TASK>
[ 1005.623090][ T5384]  vpanic+0x56c/0xa60
[ 1005.624777][ T5384]  ? __pfx__printk+0x10/0x10
[ 1005.626713][ T5384]  ? __pfx_vpanic+0x10/0x10
[ 1005.628622][ T5384]  ? is_bpf_text_address+0x292/0x2b0
[ 1005.630836][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.633007][ T5384]  panic+0xc5/0xd0
[ 1005.634550][ T5384]  ? __pfx_panic+0x10/0x10
[ 1005.636369][ T5384]  __warn+0x315/0x4c0
[ 1005.638015][ T5384]  ? mark_buffer_dirty+0x299/0x410
[ 1005.640124][ T5384]  ? mark_buffer_dirty+0x299/0x410
[ 1005.642257][ T5384]  __report_bug+0x29a/0x540
[ 1005.644127][ T5384]  ? filemap_get_entry+0xcd/0x3f0
[ 1005.646198][ T5384]  ? filemap_get_entry+0xcd/0x3f0
[ 1005.648314][ T5384]  ? mark_buffer_dirty+0x299/0x410
[ 1005.650305][ T5384]  ? __pfx___report_bug+0x10/0x10
[ 1005.652280][ T5384]  ? __pfx_folio_mark_accessed+0x10/0x10
[ 1005.654494][ T5384]  ? mark_buffer_dirty+0x299/0x410
[ 1005.656694][ T5384]  report_bug+0x16a/0x220
[ 1005.658577][ T5384]  ? mark_buffer_dirty+0x299/0x410
[ 1005.660708][ T5384]  ? mark_buffer_dirty+0x29b/0x410
[ 1005.662784][ T5384]  handle_bug+0x9c/0x200
[ 1005.664483][ T5384]  exc_invalid_op+0x1a/0x50
[ 1005.666314][ T5384]  asm_exc_invalid_op+0x1a/0x20
[ 1005.668249][ T5384] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 1005.670577][ T5384] Code: 4c 89 f7 e8 89 16 da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 94 63 fb ff e8 bf ba 6e ff eb 8c e8 b8 ba 6e ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 aa ba 6e ff 90 0f 0b 90 e9 cf fd ff ff
[ 1005.678312][ T5384] RSP: 0018:ffffc900064563e8 EFLAGS: 00010293
[ 1005.680818][ T5384] RAX: ffffffff8256e988 RBX: ffff8881a403dbc8 RCX: ffff8881202f1d80
[ 1005.684051][ T5384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 1005.687246][ T5384] RBP: ffff8881108b6001 R08: ffff8881a403dbcf R09: 1ffff11034807b79
[ 1005.690369][ T5384] R10: dffffc0000000000 R11: ffffed1034807b7a R12: ffff8881a7a7d800
[ 1005.693398][ T5384] R13: ffff88801c41c828 R14: ffff8881a403dbc8 R15: 0000000000000012
[ 1005.696694][ T5384]  ? mark_buffer_dirty+0x298/0x410
[ 1005.698839][ T5384]  ? mark_buffer_dirty+0x298/0x410
[ 1005.700938][ T5384]  bfs_get_block+0x5da/0xae0
[ 1005.702853][ T5384]  __block_write_begin_int+0x6c6/0x1910
[ 1005.705065][ T5384]  ? __pfx_bfs_get_block+0x10/0x10
[ 1005.707197][ T5384]  ? __pfx___block_write_begin_int+0x10/0x10
[ 1005.709610][ T5384]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 1005.712072][ T5384]  ? __pfx_bfs_get_block+0x10/0x10
[ 1005.714189][ T5384]  block_write_begin+0x8d/0x120
[ 1005.716234][ T5384]  ? bfs_write_begin+0x1e/0xd0
[ 1005.718208][ T5384]  bfs_write_begin+0x35/0xd0
[ 1005.720070][ T5384]  generic_perform_write+0x2e2/0x8f0
[ 1005.722188][ T5384]  ? __pfx_generic_perform_write+0x10/0x10
[ 1005.724535][ T5384]  ? file_update_time_flags+0x219/0x4a0
[ 1005.726765][ T5384]  ? __generic_file_write_iter+0xf9/0x230
[ 1005.729057][ T5384]  ? generic_file_write_iter+0x136/0x680
[ 1005.731239][ T5384]  generic_file_write_iter+0x14a/0x680
[ 1005.733339][ T5384]  ? __pfx_generic_file_write_iter+0x10/0x10
[ 1005.735732][ T5384]  ? unwind_next_frame+0xa6/0x2550
[ 1005.737771][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.739800][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.742072][ T5384]  ? is_bpf_text_address+0x292/0x2b0
[ 1005.744038][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.745912][ T5384]  ? kernel_text_address+0xa5/0xe0
[ 1005.747795][ T5384]  ? __kernel_text_address+0xd/0x30
[ 1005.749941][ T5384]  ? unwind_get_return_address+0x4d/0x90
[ 1005.752038][ T5384]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1005.754521][ T5384]  ? arch_stack_walk+0xfb/0x150
[ 1005.756529][ T5384]  __kernel_write_iter+0x41e/0x880
[ 1005.758468][ T5384]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1005.760582][ T5384]  ? __asan_memset+0x22/0x50
[ 1005.762361][ T5384]  ? iov_iter_kvec+0xb8/0x180
[ 1005.764141][ T5384]  __kernel_write+0x106/0x170
[ 1005.765924][ T5384]  ? cgroup1_freezing+0x20/0x350
[ 1005.767791][ T5384]  ? __pfx___kernel_write+0x10/0x10
[ 1005.769694][ T5384]  ? cgroup1_freezing+0x20/0x350
[ 1005.771616][ T5384]  ? cgroup1_freezing+0x29a/0x350
[ 1005.773695][ T5384]  ? freezing_slow_path+0x115/0x160
[ 1005.775859][ T5384]  dump_emit+0x8e9/0xab0
[ 1005.777627][ T5384]  ? __pfx_dump_emit+0x10/0x10
[ 1005.779645][ T5384]  ? __kasan_kmalloc+0x93/0xb0
[ 1005.781632][ T5384]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1005.783892][ T5384]  elf_core_dump+0x2e5d/0x3ad0
[ 1005.785810][ T5384]  ? __pfx_elf_core_dump+0x10/0x10
[ 1005.787917][ T5384]  ? __kasan_kmalloc+0x93/0xb0
[ 1005.789904][ T5384]  ? __kvmalloc_node_noprof+0x528/0x8a0
[ 1005.792095][ T5384]  ? coredump_write+0x387/0x1910
[ 1005.794001][ T5384]  ? vfs_coredump+0x3807/0x4530
[ 1005.795942][ T5384]  ? get_signal+0x1107/0x1330
[ 1005.797819][ T5384]  ? arch_do_signal_or_restart+0xbc/0x830
[ 1005.800061][ T5384]  ? irqentry_exit+0x284/0x730
[ 1005.801950][ T5384]  ? asm_exc_page_fault+0x26/0x30
[ 1005.803873][ T5384]  ? mas_ascend+0x304/0x890
[ 1005.805547][ T5384]  ? vfs_coredump+0x3807/0x4530
[ 1005.807402][ T5384]  coredump_write+0x1216/0x1910
[ 1005.809373][ T5384]  ? __pfx_coredump_write+0x10/0x10
[ 1005.811480][ T5384]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1005.813505][ T5384]  ? put_files_struct+0x256/0x350
[ 1005.815550][ T5384]  ? do_raw_spin_unlock+0x4d/0x210
[ 1005.817681][ T5384]  ? unshare_files+0xfc/0x140
[ 1005.819586][ T5384]  vfs_coredump+0x3807/0x4530
[ 1005.821544][ T5384]  ? __pfx_vfs_coredump+0x10/0x10
[ 1005.823508][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.825430][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.827448][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.829466][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.831455][ T5384]  ? __lock_acquire+0x6b5/0x2cf0
[ 1005.833487][ T5384]  ? unwind_next_frame+0xa6/0x2550
[ 1005.835627][ T5384]  ? lock_acquire+0x106/0x350
[ 1005.837622][ T5384]  ? unwind_next_frame+0xa6/0x2550
[ 1005.839720][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.841847][ T5384]  ? lock_acquire+0x106/0x350
[ 1005.843799][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.845934][ T5384]  ? is_bpf_text_address+0x292/0x2b0
[ 1005.848095][ T5384]  ? is_bpf_text_address+0x26/0x2b0
[ 1005.850150][ T5384]  ? kernel_text_address+0xa5/0xe0
[ 1005.852218][ T5384]  ? __kernel_text_address+0xd/0x30
[ 1005.854198][ T5384]  ? unwind_get_return_address+0x4d/0x90
[ 1005.856343][ T5384]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1005.858711][ T5384]  ? arch_stack_walk+0xfb/0x150
[ 1005.860628][ T5384]  ? stack_trace_save+0xa9/0x100
[ 1005.862538][ T5384]  ? __pfx_stack_trace_save+0x10/0x10
[ 1005.864640][ T5384]  ? stack_depot_save_flags+0x33/0x810
[ 1005.866893][ T5384]  ? kasan_save_track+0x4f/0x80
[ 1005.868887][ T5384]  ? kasan_save_track+0x3e/0x80
[ 1005.870777][ T5384]  ? kasan_save_free_info+0x46/0x50
[ 1005.872882][ T5384]  ? __kasan_slab_free+0x5c/0x80
[ 1005.874849][ T5384]  ? kmem_cache_free+0x182/0x650
[ 1005.876823][ T5384]  ? get_signal+0xa4a/0x1330
[ 1005.878766][ T5384]  ? arch_do_signal_or_restart+0xbc/0x830
[ 1005.881072][ T5384]  ? irqentry_exit+0x284/0x730
[ 1005.882981][ T5384]  ? asm_exc_page_fault+0x26/0x30
[ 1005.885003][ T5384]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1005.887022][ T5384]  get_signal+0x1107/0x1330
[ 1005.888827][ T5384]  arch_do_signal_or_restart+0xbc/0x830
[ 1005.890770][ T5384]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1005.892645][ T5384]  irqentry_exit+0x284/0x730
[ 1005.894278][ T5384]  ? trace_irq_disable+0x3b/0x140
[ 1005.896008][ T5384]  asm_exc_page_fault+0x26/0x30
[ 1005.897513][ T5384] RIP: 0033:0x7f9b4eb9cde1
[ 1005.899097][ T5384] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1005.905340][ T5384] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217
[ 1005.907686][ T5384] RAX: 0000000000000000 RBX: 00007f9b4ee16180 RCX: 00007f9b4eb9cdd9
[ 1005.910532][ T5384] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400
[ 1005.913411][ T5384] RBP: 00007f9b4ec32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1005.916046][ T5384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1005.918715][ T5384] R13: 00007f9b4ee16218 R14: 00007f9b4ee16180 R15: 00007fffc4f4c668
[ 1005.921097][ T5384]  </TASK>
[ 1005.922840][ T5384] Kernel Offset: disabled
[ 1005.924244][ T5384] Rebooting in 86400 seconds..
