last executing test programs:

1m0.412747865s ago: executing program 1 (id=704):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
listen(r1, 0x3a5)
close_range(r0, 0xffffffffffffffff, 0x0)

1m0.412534425s ago: executing program 1 (id=705):
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
poll(0x0, 0x0, 0x2)

1m0.332323001s ago: executing program 1 (id=707):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009ec0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d1a2", 0x2}], 0x1}}], 0x1, 0x804)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1018002, &(0x7f0000001800)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8}, {@namecase}, {@utf8}, {@utf8}]}, 0x5, 0x1511, &(0x7f00000002c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62381)

1m0.242207239s ago: executing program 1 (id=710):
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e11, &(0x7f000000bc40)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmqKHHgLT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvP77Ef/z7y/8f++dcfnP7933537+QfT73dbv/T+j/u/eRuui0AAADguVRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/IfPlf9A/gAAAAAAMMPy3/+XO/7+d/7Fd2VPnvX978qU+gAAAAAAAAAAL9uLjv/3mPH/AAAAYGbVn9Vrfz76ZNlun7Hr5Vd6Ea+01gcKk06WWeq6HwAAAAAAAAAAAABQkuH2MbxXehFzEfHK0lJVVfWlqV0/rxfd/qArff+hZF0/yQMAwLb7R1vn8vciFiLiSvqtv7mlpaWqWlhcqpaqxfn8fnY0v1AtNj7X5mm9bH60hzfEw1FVX9lCY7umSZ+XJ7W3r6++rVE12EPHpqPDwAEgIrZfjR56RTpkqupYdP0uh4PB4//w8fhnL7q+nwIAAAD7r6qqqpd+zvt4+s6/33WnAICpyK//7e8F1Gq1Wq1WH766qRrvbrOIiI3mNvV7hrvjrgwAmF0b8UXXXaBD8i/aMCJe77oTwEzrdd0B9sXDR3fWeinfXvP1II3vno8F2ZH/Rm9ru7z9uOkk7WNMpnX/2oxBvLpLf16bUh9mSc6/387/6nb7KK233/lPy2751/u53EF/upbzH7Tzbzk8+ffH5l+qnP/wufIfyB8AAAAAAGZY/vv/su9/8y4DAAAAAAAAwIHz8NGdtXzea/7+/0tj1nP+5+GU8+/Jv0g5/34r/6+11hs05h+8/yT/fz26s/ajP3x+PE/3mv98numle1Yv3SN66ZZ6wzR9kb172ubcYFTf0lyvPximY36quQ/jetyI9VjdsW4//X88aT+3o73u6dyO9vM72odPtV/Y0T6XfnegWsztZ2Itfh434oOt9rptfsL+L0xorya05/wHHv9FyvkPG5c6/6XU3mtNaw8+6z/1uG9Ox93Oe7+9d391/3dnos0YPN63pnr/TnTQn63/kyOj+OWt9Ztnfn3t9u2b5yJNdiw9H2nykuX859Ll8fP/m9vt+Xm/+Xh98NnoufOfFZsx3DX/Nxvz9f6enHLfupDzH6VLzv+D1D7+8X+Q89/98X+qg/4AAAAAAAAAAAAAAADAs1RVtXWK6HsRcSmd/9PVuZkAwHTl1/8qycvVarVarVYfvrqpGu/dZhERf29uU79n+M24KwMAZtl/IuLzrjtBZ+RfsPx7f/X0ra47A0zVrU8+/em1GzfWb97quicAAAAAAAAAwP8qj/+50hj/+a2IWG6tt2P81/dj5UXH/xzmmccDjL7kgb53sdkfDfqN4cbfiGeP/30inj3+93DC7c1NaB9NaJ+f0L4woX3siR4NOf83GuOd1/kfbw2/XsL4r+0x70uQ8z/RuD/X+X+1tV4z/+ovBzn//o78z97++Bdnb33y6enrH1/7aP2j9Z9dXF29dOHyO6uXV89+eP3Gevq3wx7vr5x/HvvacaBlyfnnzOVflpz/l1Mt/7Lk/L+SavmXJeef3+/Jvyw5//zZR/5lyfmfTLX8y5Lz/3qq5V+WnP+pVMu/LDn/t1Mt/7Lk/E+nWv5lyfmfSbX8y5LzP5tq+Zcl55+/4ZJ/WXL++cgG+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf93Ui3/suT8L6Va/mXJ+V9OtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv97qZZ/WXL+76Za/mV58vv/ZsyYMZNnun5mAgAAAAAAAAAAAADapnE4cdf7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8lx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe9eY+Q6yzuAn13v2muHyxZCcEOAtWOCSZbs+h7TGsytpAlpKRBa6MW49tox8a1em1wUKUahTaRGbaTyIXwoBBqp+VIRAapSlSJXagUSSOQTrdQ2pEqoIkpaQ/sBKsJWM/M+r2fGe/MZx5k55/eT4sc7e2bmnTPvzO5/zX8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN26d8/cP1QUReO/5h/jRfGyxt9XT4w3Ptzwtpd6hQAAAECvXmj+efaV+YLdy7hS2zHfeMN3vjo3NzdXPPX9t7z2M3Nz+RMTRTG+qiianwvP3fK3G9qPSe4rxoaG2z4eXuLuVyzx+ZElPj+6xOdXLvH5VUt8fmyJz593As6zuvXzmOaNbWj+dbx1SovLi9Hm5zbMc637hlYND8fPcpqGmteZGz1QHCoOFzPFdMfxrWOHmsd/bV3jvm4s4r6G2+7rqsYO+dE9+2INQ+kcb+i4r3O3GZ5/ZzHx4x/ds+8Dn336yvnmkqeh4/Za69y4vrHOT6dLWmsdKlblcxLrHG5b51XzPCcrOtY51Lxe4+/d6zy7zHWuOLfMS6r7OR8rhpt/f7J5nkbaf6yXz9NV6bKfXF0Uxelzy+4+5rz7KoaLNR2XDJ97fsZaO7JxG42t9Kpi5IL26bpl7NPG3L+hc592vybi+V+XrjeywBran6bnP7XyvOf9QvdpaDzqhV4r3XvwYr9W+mUPxr54svmgH5h3D25Ij/+eaxbeg/PunXn2YH7cbXtw/VJ7cHjliuaa85Mw1LzOuT24qeP4Fc17GmrO565ZfA9OnTxyfGr2rrvfeujI3oMzB2eObp2e3r5lx7bpHdNTBw4dnkl/ljzb/W9NMZxfA+vTuYvXwJu7jm3fqnNfuHivw7FFXofjXcde7NfhSPeDG7o0L8jz93TrtfHhxkkfe3C4WOA11nx+ru39dZgfd9vrcKTtdTjv15R5Xocjy3gdNo45fu3yvmcZaftvvjW8WF8Lxtv2YPf3I9178GJ/P9Ive3As7Yt/vXbhrwVXpfU+MHmh34+sOG8P5oeb3nsal+Tv98duaI759uWVjU9ctrI4NTtz4vo79548eWJTkcYl8eq2vdK9X9e0PabivP06fMH7dff93/r2lfNcPp7O1dhbG3+MLfhcNY7Zev3iz1Xzq9v857Pj0s1FGhfZpT6f8301b5zPnCUXOZ+NYz491fv34jmXtr3/ji7w/hu5/+fN+9mQb+q+FaMjrdfvinx2RjvejzufqpHme9dQ877PTi3v/Xg0/Xep348vX+T9eG3XsRf7/Xi0+8HF+/HQUj/t6E338zmW9snh6cXfjxvHrN18oXtyZNH346vTHErn/y0pKeRc1LZ3Ftq3+b5GRkbT4xqJe+jcp1s6jh9N2axxX49tLrdPN17duq0V+dGdc6n26UTXsRd7n+b3q4X26dBSP30rp/v5HEv74vIti+/TxjFntvb+3rk6/tr23rlyqT04umJlY82jeRO23u/nVscevL7YVxwrDhf7m59d2dxPQ837mty2vD24Mv13qd8r1y6yBzd2HXux92D+OrbQ3hsaOf/BXwTdz+dY2hcPb1t8DzaOec+Oi/u968Z0ST6m7XvX7p+vLfQzryu7TtOL+TOvxjr/YcfiP5ttHHP4hgvNmYufp+vSJZfNc566X78Lvab2F5fmPK1N6/zhDQufp8Z6Gsd8Zucy99Puoii+cvPu5s9707+vfPnUd7/a8e8uu1ufe2Lnuds677uO+f7d5ys37z7zzzf99EIeIwD97efNPzesaX2ta/uXqeX8+z8AAAAwECL3D6eZyf8AAABQGZH7438Vnsn/AAAAUBmR+0fSzGqS/x/4t9fc/rN7i9zMn0vi83Eajj/TOi46ro+kjyfmzmlc/q5H//FbH7t3efc9XBTFz276l3mPf+CZWFfLQ2mdE9/rvPw8a7+3rPv/+K3njmvvAI6n24/H070NvvbfzzSvN7GzNc/cdKY5P3j6gfsanz+7s/VxdCef+5/WcX+eyry7D/x9x/U3PtW6vw1PLf644npfev/qm1/3kXP3F9cbWv+K5sN4+O2t243fe/PQu1vHn03HLbT+v/vjx77UOP7ON82//nuH51//c+l2n03zpy+0Lm8/p42P43p/mNYf9xfXu/6LX593/Y+/r3X84+l5eSTN7vW/809f/0L7+Yr1x/3sfrp1vbj/6b/+j+b14vbi9rvXP/aOZzrOR/ftn/ly63Z2ffJ/V7QfH5fH/eR993Tn89y4nfb9Fh77ozMd57n499b1/qZr/XF7x5+ef/3Xda3z+KY1zesvVBn/3Myz8z7eWM/uv3qy4/E8/oN0/t51S/N2x36S9mP6/P891Lq97t+W8OQPOt9P4vhHxluvy7i9qa71P9S1/tNvbJy7pdd/449b63/8Hd/ofD7+s7WO3c+35lLrP/j573Rc/wvfbT0fJ+6YPHps9tSh6FCPp9/9c/z7rdtbNbZ6zWUve/krXpneK7s/3nPs5G0zJyamJ6aLYmIAfyXei73+L6b5X61x+mLf/j1FUdzR9nXt2ve29l/xhrN/8sYbH70tjvun97Quf/Dm1tetN6fjHkqXn07Pd9zO5z7b+nrY6/rjfhaaeb3LdOqb929f1oHp8T+87ormq2zoTOvi7versuJ1/vRrOl/3T324NZ9I53Uu/Wbm9Vd8s3lc9/3H70Z48EOt13d8JxfX73X9f5me71uebd1+3G5eb/o+5utrO98f4/l54t6u3zQw3votHqfT+0dxuvX5OCq+p3rw7BUXsswFzd41O3X40NFTd06dnJk9OTV71917jhw7dfTknubv5tzziaWuf+71vab5+t4/s31r0Xy1H2uNF9lLvf7jt+7bv2P6mv0zB/aeOnDy1uMzJw7um53dN7N/9pq9Bw7M3LHU9Q/t37Vp884tOzZPHjy0f9cNO3du2Tl56OixxjJai1rC9unbJ4+e2NO8yuyurTs3bdu2dXryyLH9M7t2TE9Pnlrq+s2vTZONa39y8sTM4b0nDx2ZmZw9dPfMrk07t2/fvORv9zty/MDsxNSJU0enTs3OnJhqPZaJk82LG1/7lro+NMx+fvW8X6eG0nfvm67bnn8/a8Ojn1rwplqHdP0C0R+m30Xz7b/4s23L+Thy/2iaWU3yPwAAANRB5P6VaWbyPwAAAFRG5P5VaWbyPwAAAFRG5P6xNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9q4uilvkfAAAA6iBy/5o0M/kfAAAAKiNy/2VpZvI/AAAAVEbk/pelmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+5/eZpZTfI/AAAA1EHk/lekmcn/AAAAUBmR+1+ZZib/AwAAQGVE7h9PM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/C2lmNcn/AAAAUAeR+1+VZib/AwAAQGVE7n91mpn8DwAAAJURuf/yNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9r0kzq0n+BwAAgDqI3H9Fmpn8DwAAAJURuf+1aWbyPwAAAFRG5P61aWY1yf/6//r/+v/6/0H/X/+/DP1//f8y9P/1/wdh/fr/+v/0rt/6/5H7fzHNrCb5HwAAAOogcv+VaWbyPwAAAFRG5P7XpZnJ/wAAAFAZkfuvSjOrSf7X/9f/1//X/w/6//r/Zej/6/+Xof+v/z8I69f/1/+nd/3W/4/c//o0s5rkfwAAAKiDyP1vSDOT/wEAAKAyIve/Mc1M/gcAAIDKiNw/kWZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5f12aWU3yPwAAANRB5P71aWbyPwAAAFRG5P6r08zkfwAAAKiMyP0b0sxqkv/1//X/9f/1/4P+v/5/Gfr/+v9l6P/r/w/C+vX/9f/pXb/1/yP3vynNrCb5HwAAAOogcv81aWbyPwAAAFRG5P43p5nJ/wAAAFAZkfs3ppnVJP/r/+v/6//r/wf9f/3/MvT/9f/L0P/X/x+E9ev/6//Tu37r/0fuf0uaWU3yPwAAANRB5P5r08zkfwAAAKiMyP3XpZnJ/wAAAFAZkfsn08xqkv/1//X/9f/1/4P+v/5/Gfr/+v9l6P/r/w/C+vX/9f/pXb/1/yP3vzXNrCb5HwAAAOogcv/1aWbyPwAAAFRG5P6pNDP5HwAAACojcv90mllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+TWlmNcn/AAAAUAeR+zenmcn/AAAAUBmR+7ekmcn/AAAAUBmR+7emmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7flmZWk/wPAAAAdRC5f3uamfwPAAAAlRG5f0eamfwPAAAAlRG5/4Y0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP0708xqkv8BAACgDiL3vy3NTP4HAACAyojc/0tpZvI/AAAAVEbk/l9OM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9y/K82sJvkfAAAA6iBy/9vTzOR/AAAAqIzI/e9IM5P/AQAAoDIi9+9OM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/zjSzmuR/AAAAqIPI/e9KM5P/AQAAoDIi9787zUz+BwAAgMqI3P+eNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9700zq0n+BwAAgDqI3P8raWbyPwAAAFRG5P73pZnJ/wAAAFAZkftvTDOrSf7X/9f/1//X/w/6//r/Zej/6/+Xof+v/z8I69f/1/+nd/3W/4/c/6tpZjXJ/wAAAFAHkftvSjOT/wEAAKAyIvffnGYm/wMAAEBlRO5/f5pZTfK//r/+v/6//n/Q/9f/L0P/X/+/DP1//f9BWL/+v/4/veu3/n/k/lvSzGqS/wEAAKAOIvf/WpqZ/A8AAACVEbn/19PM5H8AAACojMj9H0gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COvX/9f/p3f91v+P3P8baWY1yf8AAABQB5H7P5hmJv8DAABAZUTu/1CamfwPAAAAlRG5/8NpZjXJ//r/+v/6//r/Qf+///v/Qws9eS8h/X/9/zL0//X/B2H9+v/6//Su3/r/kftvTTOrSf4HAACAOojc/5E0M/kfAAAAKiNy/2+mmcn/AAAAUBmR+38rzawm+V//X/9f/1//P+j/93//vx/p/+v/l6H/r/8/COvX/9f/p3f91v+P3P/RNLOa5H8AAACog8j9H0szk/8BAACgMiL3/3aamfwPAAAAlRG5/3fSzGqS//X/9f/1//X/g/6//n8Z+v/6/2Xo/+v/D8L69f/1/+ldv/X/I/f/bppZTfI/AAAA1EHk/t9LM5P/AQAAoDIi9+9JM5P/AQAAoDIi9388zawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/3jSzmuR/AAAAqIPI/b+fZib/AwAAQGVE7t+XZib/AwAAQGVE7t+fZlaT/K//r/+v/6//H/T/9f/L0P/X/y9D/1//fxDWr/+v/0/v+q3/H7l/Js2sJvkfAAAA6iBy/4E0M/kfAAAAKiNy/8E0M/kfAAAAKiNy/21pZjXJ//r/+v/6//r/Qf9f/78M/X/9/zL0//X/B2H9+v/6//Su3/r/kfsPpZnVJP8DAABAHUTu/0SamfwPAAAAlRG5//Y0M/kfAAAAKiNy/+E0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP1H0sxqkv8BAACgDiL3H00zk/8BAACgMiL3H0szk/8BAACgMiL3H08zq0n+1//X/9f/1/8P+v/6/2VUpf+/Kr0e9f8T/f8m/X/9f/1//X9602/9/8j9f5BmVpP8DwAAAHUQuf9Empn8DwAAAJURuX82zUz+BwAAgMqI3H8yzawm+V//X/9f/1//P+j/6/+XUZX+v////y76/0299v/Po/8/UOvX/9f/p3eL9P8/WrwE/f/I/afSzGqS/wEAgP9n7655NtmOKIw68u91ZGZmZmZmZmZmZmZmO3Dg2iXZuroanb6a6T61VlLJq9EJ5gt28KiBCbL771q32f8AAACwjez+u9Vt9j8AAABsI7v/7nXbkP2v/9f/6//1/6H/1/+v0P/r/1dM6f99///a79f/6/857mzf/8/uv0fdNmT/AwAAwATZ/fes2+x/AAAA2EZ2/73qNvsfAAAAtpHdf++6bcj+1//r//X/+v/Q/+v/V+j/9f8r9P/6/yu8X/+v/+e4s/X/2f33qduG7H8AAACYILv/vnWb/Q8AAADbyO6/X91m/wMAAMA2svvvX7cN2f/6f/2//l//H/p//f8K/b/+f4X+X/9/hffr//X/HHe2/j+7/wF125D9DwAAABNk9z+wbrP/AQAAYBvZ/Q+q2+x/AAAA2EZ2/4PrtiH7X/+v/9f/6/9D/6//X6H/1/+v0P/r/6/wfv2//p/jztb/Z/c/pG4bsv8BAABgguz+h9Zt9j8AAABsI7v/YXWb/Q8AAADbyO5/eN02ZP/r//X/+n/9f+j/9f8r9P/6/xX6f/3/Fd6v/9f/c9zZ+v/s/kfUbUP2PwAAAEyQ3f/Ius3+BwAAgG1k9z+qbrP/AQAAYBvZ/Y+u24bsf/2//l//r/8P/b/+f4X+X/+/Qv+v/7/C+/X/+n+OO1v/n93/mLptyP4HAACACbL7H1u32f8AAACwjez+x9Vt9j8AAABsI7v/8XXbkP2v/9f/6//1/6H/1/+v0P/r/1fo//X/V3i//l//z3Fn6/+z+59Qtw3Z/wAAADBBdv8T6zb7HwAAALaR3f+kus3+BwAAgG1k9z+5bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K79f/6/857mz9f3b/U+q2IfsfAAAAJsjuf2rdZv8DAADANrL7n1a32f8AAACwjez+p9dtQ/a//l//r//X/4f+X/+/Qv9/2/3/HfV+/f9/f6//X3Or+/mrv1//r//nuLP1/9n9z6jbhux/AAAAmCC7/5l1m/0PAAAA28juf1bdZv8DAADANrL7n123Ddn/+n/9v/5f/x/6f/3/Cv2/7/+v0P/r/6/w/p37/7vcSf/PzXG2/j+7/zl125D9DwAAABNk9z+3brP/AQAAYBvZ/c+r2+x/AAAA2EZ2//PrtiH7X/+v/9f/6/9D/6//X6H/1/+v0P/r/6/w/p37f9//52Y5W/+f3f+Cum3I/gcAAIAJsvtfWLfZ/wAAALCN7P4X1W32PwAAAGwju//FdduQ/a//1//r//X/of/X/6/Q/+v/V+j/9f9XeL/+X//PcWfr/7P7X1K3Ddn/AAAAMEF2/0vrNvsfAAAAtpHd/7K6zf4HAACAbWT3v7xuG7L/9f/6f/2//j/0//r/Ffp//f8K/b/+/wrv1//r/znubP1/dv8r6rYh+x8AAAAmyO5/Zd1m/wMAAMA2svtfVbfZ/wAAALCN7P5X121D9r/+X/+v/9f/h/5f/79C/6//X6H/1/9f4f36f/0/x52t/8/uf03dNmT/AwAAwATZ/a+t2+x/AAAA2EZ2/+vqNvsfAAAAtpHd//q6bcj+1//r//X/+v/Q/+v/V+j/9f8r9P/6/yu8X/+v/+e4s/X/2f1vqNuG7H8AAACYILv/jXWb/Q8AAADbyO5/U91m/wMAAMA2svvfXLcN2f/6f/2//l//H/p//f8K/b/+f4X+/0b7/2P/5W91P3/UrX6//l//z3Fn6/+z+99Stw3Z/wAAADBBdv9b6zb7HwAAALaR3f+2us3+BwAAgG1k97+9bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2/7/9f4f36f/0/x52t/8/uf0fdNmT/AwAAwATZ/e+s2+x/AAAA2EZ2/7vqNvsfAAAAtpHd/+66bcj+1//r//X/+v/Q/+v/V+j/9f8r9P/6/yu8X/+v/+e4s/X/2f3vqduG7H8AAACYILv/vXWb/Q8AAADbyO5/X91m/wMAAMA2svvfX7cN2f/6f/2//l//H/p//f8K/b/+f4X+X/9/hffr//X/HHe2/j+7/wN125D9DwAAABNk93+wbrP/AQAAYBvZ/R+q2+x/AAAA2EZ2/4frtiH7X/+v/9f/6/9D/6//X6H/1/+v0P/r/6/wfv2//p/jztb/Z/d/pG4bsv8BAABgguz+j9Zt9j8AAABsI7v/Y3Wb/Q8AAADbyO7/eN02ZP/r//X/+n/9f+j/9f8r9P/6/xX6f/3/Fd6v/9f/c9zZ+v/s/k/UbUP2PwAAAEyQ3f/Jus3+BwAAgG1k93+qbrP/AQAAYBvZ/Z+u24bsf/2//l//r/8P/b/+f4X+X/+/Qv+v/7/C+/X/+n+OO1v/n93/mbptyP4HAACACbL7P1u32f8AAACwjez+z9Vt9j8AAABsI7v/83XbkP2v/9f/6//1/6H/1/+v0P/r/1fo//X/V3i//l//z3Fn6/+z+79Qtw3Z/wAAADBBdv8X6zb7HwAAALaR3f+lus3+BwAAgG1k93+5bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K79f/6/857mz9f3b/V+q2IfsfAAAAJsju/2rdZv8DAADANrL7v1a32f8AAACwjez+r9dtQ/a//l//r//X/4f+X/+/Qv+v/1+h/9f/X+H9+n/9P8edrf/P7v9G3TZk/wMAAMAE2f3frNvsfwAAANhGdv+36jb7HwAAALaR3f/tum3I/tf/6//1//r/0P/r/1fo//X/K/T/+v8rvF//r//nuLP1/9n936nbhux/AAAAmCC7/7t1m/0PAAAA28ju/17dZv8DAADANrL7v1+3Ddn/+n/9v/5f/x/6f/3/Cv2//n+F/l//f4X36//1/xx3tv4/u/8HdduQ/Q8AAAATZPf/sG6z/wEAAGAb2f0/qtvsfwAAANhGdv+P67Yh+1//r//X/+v/Q/+v/1+h/9f/r9D/6/+v8H79v/6f487W/2f3/6RuG7L/AQAAYILs/p/WbfY/AAAAbCO7/2d1m/0PAAAA28ju/3ndNmT/6//1//p//X/o//X/K/T/+v8V+n/9/xXer//X/3Pc2fr/7P5f1G1D9j8AAABMkN3/y7rN/gcAAIBtZPf/qm6z/wEAAGAb2f2/rtuG7H/9v/5f/6//D/2//n+F/l//v0L/r/+/wvv1//p/jjtb/5/d/5u6bcj+BwAAgAmy+39bt9n/AAAAsI3s/t/VbfY/AAAAbCO7//d125D9r//X/+v/b6////+/iP/99/X/+n/9v/5f/79G/6//v8L79f/6f447W/+f3f+Hum3I/gcAAIAJsvv/WLfZ/wAAALCN7P4/1W32PwAAAGwju//PdduQ/a//1//r/33/P/T/+v8V+n/9/wr9v/7/Cu/X/+v/Oe5s/X92/1/qtiH7HwAAACbI7v9r3Wb/AwAAwDay+/9Wt9n/AAAAsI3s/r/XbUP2v/5f/6//1/+H/l//v0L/n/7/zvVL/f+N0P/r/6/wfv2//p/jztb/Z/f/o24bsv8BAABgguz+f9Zt9j8AAABsI7v/X3Wb/Q8AAADbyO7/d902ZP/r//X/+n/9f+j/9f8r9P++/79C/6//v8L79f/6f447W/+f3f+fAAAA///MV21W")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x10000000000400, 0x0, 0x0, 0x8, 0x7, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200000000000010", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

59.492732388s ago: executing program 1 (id=722):
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4101}, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc})

58.652637112s ago: executing program 1 (id=733):
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000005c0)=ANY=[], 0x4, 0x1ef, &(0x7f00000001c0)="$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")
r7 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

58.312710694s ago: executing program 32 (id=733):
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000005c0)=ANY=[], 0x4, 0x1ef, &(0x7f00000001c0)="$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")
r7 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

25.950615964s ago: executing program 0 (id=1006):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800)
io_setup(0x2, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0)

25.852121866s ago: executing program 0 (id=1009):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

25.782038332s ago: executing program 0 (id=1012):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$audio(0xffffff9c, &(0x7f00000001c0), 0x2002, 0x0)
read$dsp(r1, &(0x7f0000000040)=""/194, 0xc2)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

25.629822728s ago: executing program 0 (id=1016):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620700000000000095"], &(0x7f0000000d00)='syzkaller\x00', 0x1}, 0x94)

25.551070701s ago: executing program 0 (id=1018):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x74, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

24.912800729s ago: executing program 0 (id=1021):
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, 0x0, 0x0, 0x401, 0x2e, 0x63, 0x0, 0x59})

9.781507223s ago: executing program 33 (id=1021):
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, 0x0, 0x0, 0x401, 0x2e, 0x63, 0x0, 0x59})

1.496848004s ago: executing program 3 (id=1200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002140)="b9fe030768045c8c989a14f088a8", 0x0, 0x8000009e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

588.64858ms ago: executing program 3 (id=1205):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x6}, 0x2, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

540.98013ms ago: executing program 3 (id=1206):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fspick(0xffffffffffffffff, 0x0, 0x1)

452.038948ms ago: executing program 4 (id=1209):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x5, 0xe, r0, 0x0}])

451.8139ms ago: executing program 2 (id=1210):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V@', 0x2}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x22)

326.867781ms ago: executing program 4 (id=1211):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)

326.656615ms ago: executing program 2 (id=1212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f00000005c0)=[@clear_death, @dead_binder_done], 0x0, 0x1000000, 0x0})

242.25888ms ago: executing program 2 (id=1213):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b67db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715ff12829"], 0xe0}], 0x1}, 0x40040)

242.060992ms ago: executing program 4 (id=1214):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
writev(r1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)

159.463154ms ago: executing program 3 (id=1215):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x80, 0x0, 0xf})

159.336119ms ago: executing program 2 (id=1216):
syz_emit_ethernet(0x2e, &(0x7f00000007c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @broadcast}}}}, 0x0)

100.69909ms ago: executing program 4 (id=1217):
keyctl$clear(0x5, 0xffffffffffffffff)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0)

100.460919ms ago: executing program 3 (id=1218):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffef}, 0x27)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000600)={{0x0, 0x3938700}}, 0x0)
read(r2, &(0x7f0000000240)=""/123, 0x7b)
clock_adjtime(0x200000000000000, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x2, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0xe3, 0x18, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3})

100.310604ms ago: executing program 2 (id=1219):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0xb66f)
sendfile(r0, r1, 0x0, 0x7ffff006)

51.770166ms ago: executing program 4 (id=1220):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000030d00000000008000000000", @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100004001"], 0x80}, 0x1, 0x0, 0x0, 0x4042080}, 0x20000010)

907.528µs ago: executing program 4 (id=1221):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

442.34µs ago: executing program 2 (id=1222):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x50}}, 0x48040)

0s ago: executing program 3 (id=1223):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})

kernel console output (not intermixed with test programs):

ltsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  112.850209][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  112.853717][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  112.858836][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  112.864373][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  112.875621][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.879743][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.102004][   T10] usb 2-1: GET_CAPABILITIES returned 0
[  113.106788][   T10] usbtmc 2-1:16.0: can't read capabilities
[  113.170396][ T7348] loop0: detected capacity change from 0 to 256
[  113.238671][ T7348] FAT-fs (loop0): Directory bread(block 64) failed
[  113.242997][ T7348] FAT-fs (loop0): Directory bread(block 65) failed
[  113.247556][ T7348] FAT-fs (loop0): Directory bread(block 66) failed
[  113.250496][ T7348] FAT-fs (loop0): Directory bread(block 67) failed
[  113.253591][ T7348] FAT-fs (loop0): Directory bread(block 68) failed
[  113.256547][ T7348] FAT-fs (loop0): Directory bread(block 69) failed
[  113.260004][ T7348] FAT-fs (loop0): Directory bread(block 70) failed
[  113.262927][ T7348] FAT-fs (loop0): Directory bread(block 71) failed
[  113.265961][ T7348] FAT-fs (loop0): Directory bread(block 72) failed
[  113.269527][ T7348] FAT-fs (loop0): Directory bread(block 73) failed
[  113.397906][   T47] usb 2-1: USB disconnect, device number 11
[  113.398026][ T7337] usbtmc 2-1:16.0: usb_control_msg returned -71
[  113.577801][ T7357] loop2: detected capacity change from 0 to 256
[  113.611371][ T7355] loop0: detected capacity change from 0 to 32768
[  113.614677][ T7355] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.503 (7355)
[  113.629339][ T7355] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  113.632936][ T7355] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  113.750304][ T7355] BTRFS info (device loop0): enabling ssd optimizations
[  113.752909][ T7355] BTRFS info (device loop0): enabling free space tree
[  114.529833][ T7382] loop2: detected capacity change from 0 to 32768
[  114.538254][ T7382] XFS (loop2): invalid logbufsize: 13312 [not 16k,32k,64k,128k or 256k]
[  114.884892][   T33] audit: type=1326 audit(1757091176.520:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.1.510" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf3458ebe9 code=0x0
[  115.183634][ T7393] loop1: detected capacity change from 0 to 512
[  115.230518][ T7395] loop2: detected capacity change from 0 to 2048
[  115.271718][ T7395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.413076][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.440657][ T5839] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  115.607839][ T7407] loop1: detected capacity change from 0 to 128
[  115.612970][ T7407] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  115.618179][ T7407] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  115.661669][ T7407] fscrypt: AES-128-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  115.670090][ T7407] overlayfs: failed to resolve './file1': -2
[  115.683164][ T7407] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  115.710529][ T5844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.719131][   T47] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  115.749935][ T7415] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  115.852307][ T7422] [U] 
[  115.979480][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  115.982862][   T47] usb 3-1: not running at top speed; connect to a high speed hub
[  115.986561][   T47] usb 3-1: config 6 has an invalid interface number: 7 but max is 0
[  115.990031][   T47] usb 3-1: config 6 has no interface number 0
[  115.992315][   T47] usb 3-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64
[  115.996424][   T47] usb 3-1: config 6 interface 7 has no altsetting 0
[  116.002035][   T47] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92
[  116.004892][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.009495][   T47] usb 3-1: Product: syz
[  116.011171][   T47] usb 3-1: Manufacturer: syz
[  116.012618][   T47] usb 3-1: SerialNumber: syz
[  116.106226][ T7429] loop1: detected capacity change from 0 to 512
[  116.204500][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.209891][ T7429] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.215053][ T7429] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.437378][   T47] usb 3-1: Error in usbnet_get_endpoints (-22)
[  116.443184][   T47] usb 3-1: USB disconnect, device number 7
[  116.821246][ T7439] tipc: Started in network mode
[  116.823509][ T7439] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711
[  116.831013][ T7439] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  117.085547][ T7452] loop1: detected capacity change from 0 to 16
[  117.092736][ T7452] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 17700)
[  117.211690][ T7459] comedi comedi1: fl512: a I/O base address must be specified
[  117.340861][ T7465] loop1: detected capacity change from 0 to 4096
[  117.846856][ T7473] loop1: detected capacity change from 0 to 65536
[  117.881052][ T7473] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  117.890816][ T7473] XFS (loop1): Ending clean mount
[  117.929203][ T5844] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  117.967970][ T7483] loop0: detected capacity change from 0 to 512
[  117.975692][ T7483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  117.991299][ T7483] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  118.006562][ T7483] EXT4-fs (loop0): 1 truncate cleaned up
[  118.011270][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.570250][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'.
[  118.586124][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'.
[  118.862756][   T33] audit: type=1326 audit(1757091180.460:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.2.551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  118.874812][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.875294][   T33] audit: type=1326 audit(1757091180.460:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.2.551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  118.889223][   T33] audit: type=1326 audit(1757091180.460:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.2.551" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  118.898955][   T33] audit: type=1326 audit(1757091180.460:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.2.551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  118.909424][   T33] audit: type=1326 audit(1757091180.460:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.2.551" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  119.276759][ T5840] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  119.426703][ T5840] usb 3-1: Using ep0 maxpacket: 32
[  119.430794][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.436209][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.441270][ T5840] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  119.445392][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.455507][ T5840] usb 3-1: config 0 descriptor??
[  119.572535][ T7510] loop1: detected capacity change from 0 to 32768
[  119.873805][ T5840] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[  119.886911][ T5840] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[  119.901636][ T5840] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[  119.904865][ T5840] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[  119.911078][ T5840] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[  119.931942][ T5840] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[  120.025514][ T7522] loop1: detected capacity change from 0 to 32768
[  120.044461][ T7522] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.070415][ T7522] XFS (loop1): Ending clean mount
[  120.073570][ T5840] koneplus 0003:1E7D:2D51.0003: couldn't init struct koneplus_device
[  120.073735][ T7522] XFS (loop1): Quotacheck needed: Please wait.
[  120.077527][ T5840] koneplus 0003:1E7D:2D51.0003: couldn't install mouse
[  120.090837][ T5840] koneplus 0003:1E7D:2D51.0003: probe with driver koneplus failed with error -71
[  120.101780][ T5840] usb 3-1: USB disconnect, device number 8
[  120.104703][ T7522] XFS (loop1): Quotacheck: Done.
[  120.140172][ T5844] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.217638][    T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  120.319057][ T7542] loop1: detected capacity change from 0 to 256
[  120.391921][    T9] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  120.396500][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  120.400876][    T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  120.407162][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.415630][    T9] usb 1-1: config 0 descriptor??
[  120.427149][ T7530] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  120.712965][ T7552] loop1: detected capacity change from 0 to 32768
[  120.720864][ T7552] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  120.720864][ T7552] clean (size 2912):
[  120.720864][ T7552] flags:          0
[  120.720864][ T7552] journal_seq:    8
[  120.720864][ T7552] prio_ptrs: 
[  120.720864][ T7552] usage: type=key_version v=0
[  120.720864][ T7552] usage: type=reserved v=0
[  120.720864][ T7552] usage: type=reserved v=0
[  120.720864][ T7552] usage: type=reserved v=0
[  120.720864][ T7552] usage: type=reserved v=0
[  120.720864][ T7552] data_usage: btree: 1/1 [0]=2816
[  120.720864][ T7552] data_usage: journal: 1/1 [0]=0
[  120.720864][ T7552] data_usage: user: 1/1 [0]=32
[  120.720864][ T7552] dev_usage: dev=0  
[  120.720864][ T7552]   free: buckets=83 sectors=0 fragmented=0
[  120.720864][ T7552]   sb: buckets=25 sectors=6152 fragmented=248
[  120.720864][ T7552]   journal: buckets=8 sectors=2048 fragmented=0
[  120.720864][ T7552]   btree: buckets=11 sectors=2816 fragmented=0
[  120.720864][ T7552]   user: buckets=1 sectors=32 fragmented=224
[  120.720864][ T7552]   cached: buckets=0 sectors=0 fragmented=0
[  120.720864][ T7552]   parity: buckets=0 sectors=0 fragmented=0
[  120.720864][ T7552]   stripe: buckets=0 sectors=0 fragmented=0
[  120.720864][ T7552]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  120.720864][ T7552]   need_discard: buckets=0 sectors=0 fragmented=0
[  120.720864][ T7552] clock: read=0
[  120.720864][ T7552] clock: write=1288
[  120.720864][ T7552] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  120.720953][ T7552] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  120.863025][    T9] thrustmaster 0003:044F:B323.0004: hidraw0: USB HID v0.00 Device [HID 044f:b323] on usb-dummy_hcd.0-1/input0
[  120.871061][    T9] thrustmaster 0003:044F:B323.0004: no inputs found
[  120.917306][ T7562] loop2: detected capacity change from 0 to 128
[  120.925974][ T7562] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.935604][ T7562] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  120.972970][ T7566] loop1: detected capacity change from 0 to 2048
[  120.980331][ T5848] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.994507][ T7566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.014394][ T7566] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.023020][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'.
[  121.043140][   T33] audit: type=1804 audit(1757091182.700:32): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.578" name="/newroot/184/file0/file1" dev="loop1" ino=15 res=1 errno=0
[  121.060278][    T9] usb 1-1: USB disconnect, device number 11
[  121.094477][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.416729][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  121.567741][   T10] usb 2-1: Using ep0 maxpacket: 32
[  121.572194][   T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  121.575671][   T10] usb 2-1: config 0 has no interface number 0
[  121.578569][   T10] usb 2-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  121.582675][   T10] usb 2-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  121.598108][   T10] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be
[  121.601909][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.605853][   T10] usb 2-1: Product: syz
[  121.611901][   T10] usb 2-1: Manufacturer: syz
[  121.614047][   T10] usb 2-1: SerialNumber: syz
[  121.621122][   T10] usb 2-1: config 0 descriptor??
[  121.634838][ T7574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  121.654066][   T10] kvaser_usb 2-1:0.89: error -ENODEV: Cannot get usb endpoint(s)
[  121.726071][   T33] audit: type=1326 audit(1757091183.380:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.584" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e38ebe9 code=0x0
[  121.864316][   T10] usb 2-1: USB disconnect, device number 12
[  122.055227][ T5842] Bluetooth: hci2: Malformed Event: 0x02
[  122.080821][ T7592] loop2: detected capacity change from 0 to 2048
[  122.094216][ T7593] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.271258][ T7603] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  122.274804][ T7603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.593'.
[  122.593218][ T7609] loop2: detected capacity change from 0 to 32768
[  122.693213][ T7619] binder: 7618:7619 ioctl c0306201 200000000080 returned -14
[  122.744129][ T7623] program syz.2.601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  123.004068][ T7643] loop2: detected capacity change from 0 to 512
[  123.014225][ T7643] EXT4-fs (loop2): Test dummy encryption mode enabled
[  123.027681][ T7643] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.053953][ T5848] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  123.117688][  T792] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  123.266688][  T792] usb 2-1: Using ep0 maxpacket: 16
[  123.274312][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.279930][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.284559][  T792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  123.291483][  T792] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  123.297846][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.308652][  T792] usb 2-1: config 0 descriptor??
[  123.725898][  T792] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max
[  123.730197][  T792] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max
[  123.733572][  T792] microsoft 0003:045E:07DA.0005: usage index exceeded
[  123.738479][  T792] microsoft 0003:045E:07DA.0005: item 0 0 2 2 parsing failed
[  123.742256][  T792] microsoft 0003:045E:07DA.0005: parse failed
[  123.745056][  T792] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22
[  123.869810][ T7653] loop0: detected capacity change from 0 to 256
[  123.873599][ T7653] exfat: Deprecated parameter 'namecase'
[  123.880599][ T7653] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  123.893040][ T7653] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  123.949466][  T792] usb 2-1: USB disconnect, device number 13
[  123.970910][ T7655] capability: warning: `syz.0.617' uses 32-bit capabilities (legacy support in use)
[  124.126276][ T7667] netlink: 'syz.0.623': attribute type 2 has an invalid length.
[  124.129700][ T7667] netlink: 'syz.0.623': attribute type 8 has an invalid length.
[  124.132631][ T7667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.623'.
[  124.158754][   T33] audit: type=1326 audit(1757091185.820:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.0.624" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc6e38ebe9 code=0x0
[  124.209291][ T7670] vivid-000: disconnect
[  124.886696][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  124.989411][ T7668] vivid-000: reconnect
[  125.051203][   T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.056165][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  125.059072][   T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  125.062134][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.069798][   T10] usb 2-1: config 0 descriptor??
[  125.356788][  T792] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.487069][   T10] wacom 0003:056A:0333.0006: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0
[  125.508113][ T5840] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  125.518219][  T792] usb 3-1: config 0 has no interfaces?
[  125.520440][  T792] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  125.524070][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.528427][  T792] usb 3-1: config 0 descriptor??
[  125.666675][ T5840] usb 1-1: Using ep0 maxpacket: 8
[  125.672441][ T5840] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  125.675890][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  125.680788][ T5840] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  125.685807][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  125.692769][  T973] usb 2-1: USB disconnect, device number 14
[  125.695379][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  125.703638][ T5840] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  125.709438][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  125.717544][ T5840] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  125.722501][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  125.727182][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  125.735444][ T5840] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  125.743166][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  125.748096][ T5840] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  125.752866][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  125.757649][ T5840] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  125.765642][ T5840] usb 1-1: string descriptor 0 read error: -22
[  125.768457][ T5840] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  125.772334][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.784077][  T792] usb 3-1: USB disconnect, device number 9
[  125.788060][ T5840] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  125.989218][  T792] usb 1-1: USB disconnect, device number 12
[  126.224055][ T7702] netlink: 256 bytes leftover after parsing attributes in process `syz.1.638'.
[  126.366411][ T7712] loop2: detected capacity change from 0 to 2048
[  126.388344][ T7712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.522465][ T7718] loop2: detected capacity change from 0 to 4096
[  126.545037][ T7718] ntfs3(loop2): ino=19, mi_enum_attr
[  126.547966][ T7718] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  126.645091][ T7724] loop2: detected capacity change from 0 to 4096
[  126.683440][ T7726] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.699135][ T7724] NILFS (loop2): unable to set label with more than 80 bytes
[  127.166700][ T5840] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  127.328212][ T5840] usb 3-1: Using ep0 maxpacket: 32
[  127.338533][ T5840] usb 3-1: config 0 has an invalid interface number: 235 but max is 0
[  127.342874][ T5840] usb 3-1: config 0 has no interface number 0
[  127.349592][ T5840] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  127.358114][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.361797][ T5840] usb 3-1: Product: syz
[  127.363813][ T5840] usb 3-1: Manufacturer: syz
[  127.366073][ T5840] usb 3-1: SerialNumber: syz
[  127.373524][ T5840] usb 3-1: config 0 descriptor??
[  127.599217][ T5840] kaweth 3-1:0.235: Firmware present in device.
[  127.758182][ T7762] loop1: detected capacity change from 0 to 40427
[  127.797404][ T5840] kaweth 3-1:0.235: Statistics collection: 0
[  127.800031][ T5840] kaweth 3-1:0.235: Multicast filter limit: 0
[  127.802643][ T5840] kaweth 3-1:0.235: MTU: 0
[  127.804244][ T5840] kaweth 3-1:0.235: Read MAC address 00:00:00:00:00:00
[  127.817098][ T7762] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  127.821405][ T7762] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  127.842721][ T5844] syz-executor: attempt to access beyond end of device
[  127.842721][ T5844] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  127.848800][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  127.848816][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.848822][ T5844] Call Trace:
[  127.848827][ T5844]  <TASK>
[  127.848832][ T5844]  dump_stack_lvl+0x189/0x250
[  127.848853][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.848865][ T5844]  ? __pfx_queue_work_on+0x10/0x10
[  127.848876][ T5844]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  127.848891][ T5844]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.848915][ T5844]  f2fs_handle_critical_error+0x37c/0x540
[  127.848937][ T5844]  f2fs_write_end_io+0x886/0xb60
[  127.848957][ T5844]  __submit_merged_bio+0x27a/0x6a0
[  127.848977][ T5844]  __submit_merged_write_cond+0x255/0x530
[  127.848997][ T5844]  f2fs_write_data_pages+0x261d/0x3000
[  127.849038][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.849063][ T5844]  ? __lock_acquire+0xab9/0xd20
[  127.849121][ T5844]  ? __lock_acquire+0xab9/0xd20
[  127.849142][ T5844]  ? do_raw_spin_lock+0x121/0x290
[  127.849163][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  127.849175][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.849191][ T5844]  do_writepages+0x32e/0x550
[  127.849215][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  127.849231][ T5844]  filemap_fdatawrite+0x199/0x240
[  127.849245][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  127.849324][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  127.849341][ T5844]  f2fs_sync_dirty_inodes+0x31f/0x830
[  127.849355][ T5844]  f2fs_write_checkpoint+0x95a/0x1df0
[  127.849372][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  127.849400][ T5844]  ? kill_f2fs_super+0x298/0x6c0
[  127.849410][ T5844]  kill_f2fs_super+0x2c3/0x6c0
[  127.849426][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  127.849435][ T5844]  ? radix_tree_delete_item+0x2b6/0x400
[  127.849456][ T5844]  ? shrinker_free+0x2ce/0x3e0
[  127.849471][ T5844]  deactivate_locked_super+0xbc/0x130
[  127.849485][ T5844]  cleanup_mnt+0x425/0x4c0
[  127.849498][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.849515][ T5844]  task_work_run+0x1d4/0x260
[  127.849532][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  127.849544][ T5844]  ? __x64_sys_umount+0x122/0x160
[  127.849562][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  127.849579][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  127.849594][ T5844]  do_syscall_64+0x2bd/0x3b0
[  127.849602][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.849616][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.849626][ T5844]  ? exc_page_fault+0x9f/0xf0
[  127.849643][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.849652][ T5844] RIP: 0033:0x7fbf3458ff17
[  127.849662][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  127.849671][ T5844] RSP: 002b:00007ffd8a9e3c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  127.849684][ T5844] RAX: 0000000000000000 RBX: 00007fbf34611c05 RCX: 00007fbf3458ff17
[  127.849690][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8a9e3d10
[  127.849694][ T5844] RBP: 00007ffd8a9e3d10 R08: 0000000000000000 R09: 0000000000000000
[  127.849698][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8a9e4da0
[  127.849702][ T5844] R13: 00007fbf34611c05 R14: 000000000001f2c9 R15: 00007ffd8a9e4de0
[  127.849715][ T5844]  </TASK>
[  127.849718][ T5844] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  127.979618][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  127.979630][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.979641][ T5844] Call Trace:
[  127.979644][ T5844]  <TASK>
[  127.979647][ T5844]  dump_stack_lvl+0x189/0x250
[  127.979661][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.979685][ T5844]  ? __pfx_queue_work_on+0x10/0x10
[  127.979694][ T5844]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  127.979704][ T5844]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.979718][ T5844]  f2fs_handle_critical_error+0x37c/0x540
[  127.979731][ T5844]  f2fs_write_end_io+0x886/0xb60
[  127.979745][ T5844]  __submit_merged_bio+0x27a/0x6a0
[  127.979756][ T5844]  __submit_merged_write_cond+0x255/0x530
[  127.979768][ T5844]  f2fs_write_data_pages+0x261d/0x3000
[  127.979791][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.979805][ T5844]  ? __lock_acquire+0xab9/0xd20
[  127.979838][ T5844]  ? __lock_acquire+0xab9/0xd20
[  127.979857][ T5844]  ? do_raw_spin_lock+0x121/0x290
[  127.979876][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  127.979888][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.979902][ T5844]  do_writepages+0x32e/0x550
[  127.979920][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  127.979929][ T5844]  filemap_fdatawrite+0x199/0x240
[  127.979940][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  127.979966][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  127.979976][ T5844]  f2fs_sync_dirty_inodes+0x31f/0x830
[  127.979988][ T5844]  f2fs_write_checkpoint+0x95a/0x1df0
[  127.980004][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  127.980029][ T5844]  ? kill_f2fs_super+0x298/0x6c0
[  127.980037][ T5844]  kill_f2fs_super+0x2c3/0x6c0
[  127.980046][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  127.980052][ T5844]  ? radix_tree_delete_item+0x2b6/0x400
[  127.980065][ T5844]  ? shrinker_free+0x2ce/0x3e0
[  127.980073][ T5844]  deactivate_locked_super+0xbc/0x130
[  127.980082][ T5844]  cleanup_mnt+0x425/0x4c0
[  127.980090][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.980101][ T5844]  task_work_run+0x1d4/0x260
[  127.980111][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  127.980118][ T5844]  ? __x64_sys_umount+0x122/0x160
[  127.980129][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  127.980140][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  127.980149][ T5844]  do_syscall_64+0x2bd/0x3b0
[  127.980155][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.980164][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.980171][ T5844]  ? exc_page_fault+0x9f/0xf0
[  127.980181][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.980187][ T5844] RIP: 0033:0x7fbf3458ff17
[  127.980195][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  127.980200][ T5844] RSP: 002b:00007ffd8a9e3c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  127.980208][ T5844] RAX: 0000000000000000 RBX: 00007fbf34611c05 RCX: 00007fbf3458ff17
[  127.980213][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8a9e3d10
[  127.980217][ T5844] RBP: 00007ffd8a9e3d10 R08: 0000000000000000 R09: 0000000000000000
[  127.980221][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8a9e4da0
[  127.980225][ T5844] R13: 00007fbf34611c05 R14: 000000000001f2c9 R15: 00007ffd8a9e4de0
[  127.980236][ T5844]  </TASK>
[  127.980317][ T5844] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  128.408440][ T5840] kaweth 3-1:0.235: Error setting receive filter
[  128.411122][ T5840] kaweth 3-1:0.235: probe with driver kaweth failed with error -5
[  128.415689][ T5840] usb 3-1: USB disconnect, device number 10
[  128.464511][ T7781] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  128.535917][ T7783] loop0: detected capacity change from 0 to 4096
[  128.545930][ T7784] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.627406][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  128.776895][   T10] usb 2-1: Using ep0 maxpacket: 16
[  128.792414][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  128.795851][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.807925][   T10] usb 2-1: config 0 descriptor??
[  128.813852][   T10] gspca_main: sonixj-2.14.0 probing 0471:0327
[  130.025148][ T7794] loop2: detected capacity change from 0 to 40427
[  130.040622][ T7794] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  130.043742][ T7794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  130.062890][ T7794] F2FS-fs (loop2): invalid crc value
[  130.064516][   T10] gspca_sonixj: reg_w1 err -71
[  130.108828][   T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  130.115685][   T10] usb 2-1: USB disconnect, device number 15
[  130.136070][ T7794] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.142835][ T7794] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  130.146113][ T7794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  130.591086][ T7824] Illegal XDP return value 4294967294 on prog  (id 74) dev N/A, expect packet loss!
[  130.617823][  T973] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  130.778043][  T973] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  130.780979][  T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.784628][  T973] usb 1-1: config 0 has no interface number 0
[  130.788082][  T973] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  130.791910][  T973] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.133720][  T973] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  131.137712][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.141076][  T973] usb 1-1: Product: syz
[  131.142848][  T973] usb 1-1: Manufacturer: syz
[  131.144869][  T973] usb 1-1: SerialNumber: syz
[  131.149821][  T973] usb 1-1: config 0 descriptor??
[  131.392296][ T7836] loop2: detected capacity change from 0 to 2048
[  131.398955][ T7836] udf: Unexpected value for 'shortad'
[  131.482762][ T7840] loop2: detected capacity change from 0 to 128
[  131.804444][ T5840] usb 1-1: USB disconnect, device number 13
[  131.949495][ T7866] loop1: detected capacity change from 0 to 256
[  131.952851][ T7866] exfat: Deprecated parameter 'utf8'
[  131.960820][ T7866] exfat: Deprecated parameter 'namecase'
[  131.963340][ T7866] exfat: Deprecated parameter 'utf8'
[  131.972079][ T7866] exfat: Deprecated parameter 'utf8'
[  131.989018][ T7866] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[  132.187309][ T7878] netlink: 2 bytes leftover after parsing attributes in process `syz.2.713'.
[  132.412630][ T7872] loop1: detected capacity change from 0 to 32768
[  132.558233][ T7872] loop1: detected capacity change from 32768 to 0
[  132.768360][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.771336][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.910636][    C1] blk_print_req_error: 2 callbacks suppressed
[  132.910652][    C1] I/O error, dev loop1, sector 288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.916666][    C1] Read error 10 at 0x24000
[  132.918599][ T5844] read_mapping_page failed!
[  132.921091][ T5844] diRead: read_metapage failed
[  132.923546][ T5844] jfs_lookup: iget failed on inum 32
[  132.926815][    C0] I/O error, dev loop1, sector 288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.930834][    C0] Read error 10 at 0x24000
[  132.932986][ T5844] read_mapping_page failed!
[  132.934566][ T5844] diRead: read_metapage failed
[  132.936527][ T5844] jfs_lookup: iget failed on inum 32
[  133.052347][ T7903] loop2: detected capacity change from 0 to 512
[  133.065072][ T7903] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.725: invalid indirect mapped block 27 (level 1)
[  133.075568][ T7903] EXT4-fs (loop2): Remounting filesystem read-only
[  133.080475][ T7903] EXT4-fs (loop2): 1 truncate cleaned up
[  133.084161][ T7903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.104890][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.162896][    C1] I/O error, dev loop1, sector 264 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  133.166726][    C1] metapage_write_end_io: I/O error
[  133.169029][    C1] I/O error, dev loop1, sector 30752 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  133.172778][    C1] lbmIODone: I/O error in JFS log
[  133.175088][    C1] I/O error, dev loop1, sector 160 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  133.178996][    C1] metapage_write_end_io: I/O error
[  133.182928][    C1] I/O error, dev loop1, sector 160 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  133.186136][    C1] metapage_write_end_io: I/O error
[  133.188501][    C1] I/O error, dev loop1, sector 264 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  133.191892][    C1] metapage_write_end_io: I/O error
[  133.193700][    C1] I/O error, dev loop1, sector 224 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  133.197190][    C1] metapage_write_end_io: I/O error
[  133.198970][    C1] I/O error, dev loop1, sector 352 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  133.202134][    C1] metapage_write_end_io: I/O error
[  133.232453][ T5908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.350577][ T5908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.396015][ T7915] loop0: detected capacity change from 0 to 512
[  133.419573][ T7915] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  133.428820][  T792] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  133.433745][ T5908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.439380][    C1] I/O error, dev loop1, sector 256 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  133.440811][ T7915] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.730: iget: bad extended attribute block 851968
[  133.443371][    C1] metapage_write_end_io: I/O error
[  133.450885][ T7915] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.730: couldn't read orphan inode 15 (err -117)
[  133.457465][    C1] metapage_write_end_io: I/O error
[  133.461159][ T7915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.466883][    C1] metapage_write_end_io: I/O error
[  133.469482][    C1] metapage_write_end_io: I/O error
[  133.472033][    C1] metapage_write_end_io: I/O error
[  133.474319][    C1] metapage_write_end_io: I/O error
[  133.478414][    C0] lbmIODone: I/O error in JFS log
[  133.480487][    C0] lbmIODone: I/O error in JFS log
[  133.482536][    C0] lbmIODone: I/O error in JFS log
[  133.484719][ T5844] lmLogShutdown: exit(-5)
[  133.486354][ T5844] jfs_umount failed with return code -5
[  133.501371][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.545466][ T5908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.580093][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.585739][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.597794][  T792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  133.611218][  T792] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  133.619650][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.637312][  T792] usb 3-1: config 0 descriptor??
[  133.730477][ T5908] bridge_slave_1: left allmulticast mode
[  133.735003][ T5908] bridge_slave_1: left promiscuous mode
[  133.741617][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.750593][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.732'.
[  133.759931][ T5908] bridge_slave_0: left allmulticast mode
[  133.762477][ T5908] bridge_slave_0: left promiscuous mode
[  133.765042][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.054621][  T792] usbhid 3-1:0.0: can't add hid device: -71
[  134.059111][  T792] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  134.070492][  T792] usb 3-1: USB disconnect, device number 11
[  134.246274][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.251217][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.255466][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.259780][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.269541][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.355399][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.361925][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.365471][ T5908] bond0 (unregistering): Released all slaves
[  134.375602][ T7931] warning: `syz.0.737' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  134.497406][ T5908] tipc: Left network mode
[  134.626109][ T7944] loop2: detected capacity change from 0 to 512
[  134.667151][  T973] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  134.674866][ T7944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.682718][ T7944] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  134.720797][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.805095][ T5908] hsr_slave_0: left promiscuous mode
[  134.807842][ T5908] hsr_slave_1: left promiscuous mode
[  134.810000][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.812750][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.817515][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.820455][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.827049][  T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.831445][  T973] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  134.840090][ T5908] veth1_macvtap: left promiscuous mode
[  134.842311][ T5908] veth0_macvtap: left promiscuous mode
[  134.842498][  T973] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  134.844729][ T5908] veth1_vlan: left promiscuous mode
[  134.850686][ T5908] veth0_vlan: left promiscuous mode
[  134.855277][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.873135][  T973] usb 1-1: config 0 descriptor??
[  134.884042][  T973] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  134.896264][  T973] dvb-usb: bulk message failed: -22 (3/0)
[  134.907866][  T973] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  134.915611][  T973] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  134.922550][  T973] usb 1-1: media controller created
[  134.939844][  T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  134.955693][  T973] dvb-usb: bulk message failed: -22 (6/0)
[  134.964368][  T973] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  134.977526][  T973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  135.005851][  T973] dvb-usb: schedule remote query interval to 150 msecs.
[  135.008874][  T973] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  135.086180][  T973] usb 1-1: USB disconnect, device number 14
[  135.122724][  T973] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  135.368144][ T5908] team0 (unregistering): Port device team_slave_1 removed
[  135.400502][ T5908] team0 (unregistering): Port device team_slave_0 removed
[  135.661265][ T7960] loop0: detected capacity change from 0 to 1024
[  135.666567][ T7960] EXT4-fs: Ignoring removed nobh option
[  135.674186][ T7960] EXT4-fs: Ignoring removed bh option
[  135.712375][ T7960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.737084][ T7960] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.745: Abort forced by user
[  135.743015][ T7960] EXT4-fs (loop0): Remounting filesystem read-only
[  135.745839][ T7960] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  135.768156][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.810063][ T7958] gtp0: entered promiscuous mode
[  135.812349][ T7958] gtp0: entered allmulticast mode
[  135.822658][ T7932] chnl_net:caif_netlink_parms(): no params data found
[  136.151941][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.154740][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.167730][ T7932] bridge_slave_0: entered allmulticast mode
[  136.181127][ T7932] bridge_slave_0: entered promiscuous mode
[  136.193624][ T7932] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.206826][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.209252][ T7932] bridge_slave_1: entered allmulticast mode
[  136.218325][ T7932] bridge_slave_1: entered promiscuous mode
[  136.280809][ T7932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.288204][ T7932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.311100][ T7932] team0: Port device team_slave_0 added
[  136.318295][ T7932] team0: Port device team_slave_1 added
[  136.347658][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  136.347800][ T5842] Bluetooth: hci1: command tx timeout
[  136.434625][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.447046][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.465906][ T7932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.479804][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.482700][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.498838][ T7932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.537740][   T10] usb 3-1: Using ep0 maxpacket: 32
[  136.541293][   T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  136.544476][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.555715][   T10] usb 3-1: config 0 descriptor??
[  136.581926][ T7932] hsr_slave_0: entered promiscuous mode
[  136.584714][ T7932] hsr_slave_1: entered promiscuous mode
[  136.588945][ T7932] debugfs: 'hsr0' already exists in 'hsr'
[  136.591356][ T7932] Cannot create hsr debugfs directory
[  136.656717][  T792] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  136.768088][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  136.780055][ T7932] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  136.783680][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.796439][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  136.797308][ T7932] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  136.800660][   T10] usb 3-1: media controller created
[  136.811306][ T7932] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  136.819913][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  136.823166][ T7932] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  136.830727][  T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.835062][  T792] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  136.854022][  T792] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  136.871757][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.887083][  T792] usb 1-1: config 0 descriptor??
[  136.901628][  T792] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  136.908043][  T792] dvb-usb: bulk message failed: -22 (3/0)
[  136.914147][  T792] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  136.922121][  T792] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  136.924588][  T792] usb 1-1: media controller created
[  136.945805][  T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  136.959148][  T792] dvb-usb: bulk message failed: -22 (6/0)
[  136.976764][   T10] az6027: usb out operation failed. (-71)
[  136.983106][  T792] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  136.993643][   T10] az6027: usb out operation failed. (-71)
[  136.996069][   T10] stb0899_attach: Driver disabled by Kconfig
[  136.999712][   T10] az6027: no front-end attached
[  136.999712][   T10] 
[  137.008467][  T792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  137.017621][   T10] az6027: usb out operation failed. (-71)
[  137.025197][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  137.033093][  T792] dvb-usb: schedule remote query interval to 150 msecs.
[  137.038641][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11
[  137.045162][  T792] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  137.063928][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  137.067719][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  137.091716][   T10] usb 3-1: USB disconnect, device number 12
[  137.124599][ T7932] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.163368][ T7932] 8021q: adding VLAN 0 to HW filter on device team0
[  137.182160][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.184408][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  137.187071][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.213150][  T792] dvb-usb: bulk message failed: -22 (1/0)
[  137.221013][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.223819][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.227415][  T792] dvb-usb: error while querying for an remote control event.
[  137.322616][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.331533][  T792] usb 1-1: USB disconnect, device number 15
[  137.362780][  T792] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  137.385552][ T7932] veth0_vlan: entered promiscuous mode
[  137.395546][ T7932] veth1_vlan: entered promiscuous mode
[  137.421422][ T7932] veth0_macvtap: entered promiscuous mode
[  137.433294][ T7932] veth1_macvtap: entered promiscuous mode
[  137.447629][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.456361][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.463643][ T5871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.470618][ T5871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.474311][ T5871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.481800][ T5871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.538317][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.548361][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.567912][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.570893][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.149100][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'.
[  138.234927][ T8034] netlink: 'syz.0.760': attribute type 1 has an invalid length.
[  138.238923][ T8034] netlink: 216 bytes leftover after parsing attributes in process `syz.0.760'.
[  138.471139][ T5842] Bluetooth: hci1: command tx timeout
[  138.888838][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  139.078567][   T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  139.082650][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.092560][   T10] usb 1-1: config 0 descriptor??
[  139.402160][ T5909] libceph: connect (1)[c::]:6789 error -101
[  139.406096][ T5909] libceph: mon0 (1)[c::]:6789 connect error
[  139.429906][ T5909] libceph: connect (1)[c::]:6789 error -101
[  139.434509][ T5909] libceph: mon0 (1)[c::]:6789 connect error
[  139.533376][   T10] usb 1-1: Cannot set MAC address
[  139.541627][   T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  139.556537][   T10] usb 1-1: USB disconnect, device number 16
[  139.700271][  T792] libceph: connect (1)[c::]:6789 error -101
[  139.702933][  T792] libceph: mon0 (1)[c::]:6789 connect error
[  140.174255][ T8051] loop0: detected capacity change from 0 to 164
[  140.178149][ T8045] ceph: No mds server is up or the cluster is laggy
[  140.209420][  T792] libceph: connect (1)[c::]:6789 error -101
[  140.211704][  T792] libceph: mon0 (1)[c::]:6789 connect error
[  140.532396][ T8065] loop0: detected capacity change from 0 to 1024
[  140.567470][   T33] audit: type=1800 audit(1757091202.220:35): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.771" name="file1" dev="loop0" ino=20 res=0 errno=0
[  140.590394][ T8067] binder: 8066:8067 ioctl c0306201 200000000080 returned -14
[  140.594565][ T8067] binder: 8066:8067 ioctl c0306201 200000000180 returned -22
[  140.656731][  T973] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  140.816928][  T973] usb 4-1: Using ep0 maxpacket: 32
[  140.837349][ T5842] Bluetooth: hci1: command tx timeout
[  140.875808][  T973] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  140.901478][  T973] usb 4-1: config 0 has no interface number 0
[  140.969654][  T973] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  140.979178][  T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.986498][  T973] usb 4-1: Product: syz
[  140.995335][  T973] usb 4-1: Manufacturer: syz
[  141.000730][  T973] usb 4-1: SerialNumber: syz
[  141.009387][  T973] usb 4-1: config 0 descriptor??
[  141.223548][  T973] radio-si470x 4-1:0.35: this is not a si470x device.
[  141.257609][  T973] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  141.475375][  T973] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  141.661853][   T10] usb 4-1: USB disconnect, device number 2
[  141.667443][   T10] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  141.786904][  T973] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  141.939751][  T973] usb 1-1: config index 0 descriptor too short (expected 63186, got 210)
[  141.942768][  T973] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[  141.945444][  T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.949825][  T973] usb 1-1: config 0 has no interface number 0
[  141.952323][  T973] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  141.955789][  T973] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  141.960762][  T973] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  141.965533][  T973] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  141.969799][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.978006][  T973] usb 1-1: config 0 descriptor??
[  141.995974][  T973] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  142.114644][ T8083] loop2: detected capacity change from 0 to 32768
[  142.144882][ T8083] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  142.163652][ T8083] XFS (loop2): Ending clean mount
[  142.183978][ T5908] usb 1-1: Failed to submit usb control message: -71
[  142.185601][   T10] usb 1-1: USB disconnect, device number 17
[  142.189378][ T5908] usb 1-1: unable to send the bmi data to the device: -71
[  142.193580][ T5908] usb 1-1: unable to get target info from device
[  142.196435][ T5908] usb 1-1: could not get target info (-71)
[  142.207776][ T5908] usb 1-1: could not probe fw (-71)
[  142.275439][ T5848] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  142.280952][ T8098] loop3: detected capacity change from 0 to 4096
[  142.290271][ T8098] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  142.616662][ T8117] loop2: detected capacity change from 0 to 512
[  142.619977][ T8117] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  142.648078][ T8117] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  142.651324][ T8117] System zones: 0-2, 18-18, 34-34
[  142.663859][ T8117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.670644][ T8117] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.704587][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.907662][ T5842] Bluetooth: hci1: command tx timeout
[  143.098600][ T8136] loop2: detected capacity change from 0 to 64
[  143.167024][ T8136] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  143.716233][   T33] audit: type=1326 audit(1757091205.370:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.798" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e38ebe9 code=0x7ffc0000
[  143.725449][   T33] audit: type=1326 audit(1757091205.370:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.798" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e38ebe9 code=0x7ffc0000
[  143.746716][   T33] audit: type=1326 audit(1757091205.400:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.798" exe="/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fcc6e38ebe9 code=0x7ffc0000
[  143.776304][   T33] audit: type=1326 audit(1757091205.400:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.798" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e38ebe9 code=0x7ffc0000
[  143.812058][   T33] audit: type=1326 audit(1757091205.400:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.798" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6e38ebe9 code=0x7ffc0000
[  143.840954][ T8144] loop0: detected capacity change from 0 to 1024
[  144.140262][    C0] vkms_vblank_simulate: vblank timer overrun
[  144.413412][ T8140] loop2: detected capacity change from 0 to 32768
[  144.658543][ T8140] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  144.658543][ T8140] members_v2 (size 640):
[  144.658543][ T8140] member_bytes 0
[  144.685331][ T8140] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  145.003608][ T8166] overlayfs: workdir and upperdir must be separate subtrees
[  145.015862][ T8165] loop0: detected capacity change from 0 to 1024
[  145.136780][  T792] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  145.299210][  T792] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  145.302550][  T792] usb 4-1: config 0 has no interface number 0
[  145.320512][  T792] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7
[  145.324633][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.329917][  T792] usb 4-1: Product: syz
[  145.331819][  T792] usb 4-1: Manufacturer: syz
[  145.333911][  T792] usb 4-1: SerialNumber: syz
[  145.342891][  T792] usb 4-1: config 0 descriptor??
[  145.379961][  T792] ttusb_dec_send_command: command bulk message failed: error -22
[  145.394675][  T792] ttusb-dec 4-1:0.50: probe with driver ttusb-dec failed with error -22
[  145.586293][  T792] usb 4-1: USB disconnect, device number 3
[  145.608595][ T8195] loop0: detected capacity change from 0 to 65
[  145.615850][ T8195] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  146.008321][ T5840] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  146.187505][ T5840] usb 3-1: Using ep0 maxpacket: 32
[  146.193060][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  146.202632][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  146.216842][ T5840] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  146.224243][ T5840] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  146.229652][ T5840] usb 3-1: Product: syz
[  146.234665][ T5840] usb 3-1: Manufacturer: syz
[  146.239560][ T5840] usb 3-1: SerialNumber: syz
[  146.252663][ T5840] usb 3-1: config 0 descriptor??
[  146.263836][ T5840] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  146.462500][   T12] usb 3-1: Failed to submit usb control message: -71
[  146.463485][ T5840] usb 3-1: USB disconnect, device number 13
[  146.466232][   T12] usb 3-1: unable to send the bmi data to the device: -71
[  146.472376][   T12] usb 3-1: unable to get target info from device
[  146.475250][   T12] usb 3-1: could not get target info (-71)
[  146.479895][   T12] usb 3-1: could not probe fw (-71)
[  146.912058][ T8217] loop0: detected capacity change from 0 to 40427
[  146.927533][ T8217] F2FS-fs (loop0): invalid crc value
[  146.972563][ T8217] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  146.979218][ T8217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  147.025499][ T5839] syz-executor: attempt to access beyond end of device
[  147.025499][ T5839] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.031819][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  147.031833][ T5839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.031838][ T5839] Call Trace:
[  147.031841][ T5839]  <TASK>
[  147.031845][ T5839]  dump_stack_lvl+0x189/0x250
[  147.031862][ T5839]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.031871][ T5839]  ? __pfx_queue_work_on+0x10/0x10
[  147.031879][ T5839]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.031891][ T5839]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.031906][ T5839]  f2fs_handle_critical_error+0x37c/0x540
[  147.031927][ T5839]  f2fs_write_end_io+0x886/0xb60
[  147.031950][ T5839]  __submit_merged_bio+0x27a/0x6a0
[  147.031972][ T5839]  __submit_merged_write_cond+0x255/0x530
[  147.031992][ T5839]  f2fs_write_data_pages+0x261d/0x3000
[  147.032053][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.032098][ T5839]  ? __mod_zone_page_state+0xd7/0x140
[  147.032123][ T5839]  ? folios_put_refs+0x560/0x640
[  147.032171][ T5839]  ? __lock_acquire+0xab9/0xd20
[  147.032197][ T5839]  ? do_raw_spin_lock+0x121/0x290
[  147.032219][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[  147.032230][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.032240][ T5839]  do_writepages+0x32e/0x550
[  147.032256][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[  147.032266][ T5839]  filemap_fdatawrite+0x199/0x240
[  147.032277][ T5839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  147.032308][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[  147.032318][ T5839]  f2fs_sync_dirty_inodes+0x31f/0x830
[  147.032332][ T5839]  f2fs_write_checkpoint+0x95a/0x1df0
[  147.032356][ T5839]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  147.032385][ T5839]  ? kill_f2fs_super+0x298/0x6c0
[  147.032395][ T5839]  kill_f2fs_super+0x2c3/0x6c0
[  147.032405][ T5839]  ? __pfx_kill_f2fs_super+0x10/0x10
[  147.032411][ T5839]  ? radix_tree_delete_item+0x2b6/0x400
[  147.032425][ T5839]  ? shrinker_free+0x2ce/0x3e0
[  147.032435][ T5839]  deactivate_locked_super+0xbc/0x130
[  147.032446][ T5839]  cleanup_mnt+0x425/0x4c0
[  147.032457][ T5839]  task_work_run+0x1d4/0x260
[  147.032468][ T5839]  ? __pfx_task_work_run+0x10/0x10
[  147.032477][ T5839]  ? __x64_sys_umount+0x122/0x160
[  147.032489][ T5839]  ? exit_to_user_mode_loop+0x40/0x110
[  147.032502][ T5839]  exit_to_user_mode_loop+0xec/0x110
[  147.032512][ T5839]  do_syscall_64+0x2bd/0x3b0
[  147.032518][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.032527][ T5839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.032535][ T5839]  ? exc_page_fault+0x9f/0xf0
[  147.032545][ T5839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.032552][ T5839] RIP: 0033:0x7fcc6e38ff17
[  147.032561][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  147.032567][ T5839] RSP: 002b:00007ffe382e80c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  147.032576][ T5839] RAX: 0000000000000000 RBX: 00007fcc6e411c05 RCX: 00007fcc6e38ff17
[  147.032581][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe382e8180
[  147.032585][ T5839] RBP: 00007ffe382e8180 R08: 0000000000000000 R09: 0000000000000000
[  147.032590][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe382e9210
[  147.032594][ T5839] R13: 00007fcc6e411c05 R14: 0000000000023db4 R15: 00007ffe382e9250
[  147.032607][ T5839]  </TASK>
[  147.034069][ T5839] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  147.268525][ T5840] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  147.426659][ T5840] usb 3-1: Using ep0 maxpacket: 8
[  147.430488][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short
[  147.434354][ T5840] usb 3-1: config 2 has an invalid interface number: 179 but max is 0
[  147.438042][ T5840] usb 3-1: config 2 has no interface number 0
[  147.440604][ T5840] usb 3-1: config 2 interface 179 has no altsetting 0
[  147.448319][ T5840] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b5.a8
[  147.451774][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.454487][ T5840] usb 3-1: Product: syz
[  147.456119][ T5840] usb 3-1: Manufacturer: syz
[  147.458628][ T5840] usb 3-1: SerialNumber: syz
[  147.556894][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  147.681728][ T5840] cypress_cy7c63 3-1:2.179: Cypress CY7C63xxx device now attached
[  147.694995][ T5840] usb 3-1: USB disconnect, device number 14
[  147.701827][ T5840] cypress_cy7c63 3-1:2.179: Cypress CY7C63xxx device now disconnected
[  147.708539][   T10] usb 4-1: Using ep0 maxpacket: 16
[  147.712424][   T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  147.716288][   T10] usb 4-1: config 0 has no interface number 0
[  147.721500][   T10] usb 4-1: config 0 interface 51 has no altsetting 0
[  147.729831][   T10] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5
[  147.734028][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.743094][   T10] usb 4-1: Product: syz
[  147.744744][   T10] usb 4-1: Manufacturer: syz
[  147.746509][   T10] usb 4-1: SerialNumber: syz
[  147.760352][   T10] usb 4-1: config 0 descriptor??
[  147.764719][   T10] usb 4-1: bad CDC descriptors
[  147.972311][ T5840] usb 4-1: USB disconnect, device number 4
[  148.452399][ T8266] program syz.2.846 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.479843][ T8266] loop6: detected capacity change from 0 to 63
[  148.508939][ T8266] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.521022][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.525157][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.549521][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.553242][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.567968][ T6296] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.588012][ T8266] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.832110][ T8272] cgroup: Unknown subsys name 'uid>00000000000000000000'
[  149.037058][ T8275] loop0: detected capacity change from 0 to 1024
[  149.045943][ T8275] hfsplus: Bad value for 'part'
[  150.263186][ T8294] loop0: detected capacity change from 0 to 512
[  150.272399][ T8294] EXT4-fs: inline encryption not supported
[  150.303754][ T8294] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  150.394752][ T8294] EXT4-fs (loop0): 1 truncate cleaned up
[  150.406072][ T8294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.530429][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.283964][ T8338] loop2: detected capacity change from 0 to 256
[  151.312789][ T8338] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  151.732711][  T792] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  151.886742][  T792] usb 1-1: Using ep0 maxpacket: 8
[  151.890767][  T792] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  151.894189][  T792] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  151.899725][  T792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  151.903671][  T792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  151.907843][  T792] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  151.913948][  T792] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  151.919262][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.150573][  T792] usb 1-1: usb_control_msg returned -32
[  152.153051][  T792] usbtmc 1-1:16.0: can't read capabilities
[  152.235901][   T33] audit: type=1326 audit(1757091213.890:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.873" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7fc00000
[  152.315225][ T8347] loop2: detected capacity change from 0 to 4096
[  152.347664][ T8348] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.524298][ T8350] usbtmc 1-1:16.0: control status returned 0
[  152.598033][ T8345] loop3: detected capacity change from 0 to 32768
[  152.728278][ T5840] usb 1-1: USB disconnect, device number 18
[  152.943286][ T8345] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  152.943391][ T8345]   allowing incompatible features above 0.0: (unknown version)
[  152.943399][ T8345]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  152.967743][ T8345] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  152.971584][ T8345] bcachefs (loop3): initializing new filesystem
[  152.997962][ T8345] bcachefs (loop3): going read-write
[  153.023929][ T8345] bcachefs (loop3): marking superblocks
[  153.077904][ T8345] bcachefs (loop3): initializing freespace
[  153.137739][ T8345] bcachefs (loop3): done initializing freespace
[  153.168361][ T8345] bcachefs (loop3): reading snapshots table
[  153.170514][ T8345] bcachefs (loop3): reading snapshots done
[  153.195692][ T8345] bcachefs (loop3): done starting filesystem
[  153.245756][   T33] audit: type=1804 audit(1757091214.900:42): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.874" name="/newroot/38/file1/bus" dev="loop3" ino=4098 res=1 errno=0
[  153.264904][ T8345] Invalid ELF header magic: != ELF
[  153.298602][ T7932] bcachefs (loop3): shutting down
[  153.300895][ T7932] bcachefs (loop3): going read-only
[  153.302877][ T7932] bcachefs (loop3): finished waiting for writes to stop
[  153.310814][ T7932] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8
[  153.516668][ T7932] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13
[  153.531609][ T7932] bcachefs (loop3): clean shutdown complete, journal seq 14
[  153.546396][ T7932] bcachefs (loop3): marking filesystem clean
[  153.690453][ T7932] bcachefs (loop3): shutdown complete
[  154.432729][ T8376] loop2: detected capacity change from 0 to 16
[  154.444512][ T8376] erofs (device loop2): mounted with root inode @ nid 36.
[  154.628163][   T47] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  155.176720][   T47] usb 1-1: Using ep0 maxpacket: 16
[  155.188422][   T47] usb 1-1: config 0 has an invalid interface number: 74 but max is 0
[  155.191929][   T47] usb 1-1: config 0 has no interface number 0
[  155.194644][   T47] usb 1-1: config 0 interface 74 has no altsetting 0
[  155.216121][   T47] usb 1-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36
[  155.225900][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.229896][   T47] usb 1-1: Product: syz
[  155.231698][   T47] usb 1-1: Manufacturer: syz
[  155.233691][   T47] usb 1-1: SerialNumber: syz
[  155.257760][   T47] usb 1-1: config 0 descriptor??
[  155.470417][   T47] belkin_sa 1-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  155.478543][   T47] usb 1-1: bcdDevice: 6636, bfc: 0
[  155.485461][   T47] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  155.496538][   T47] usb 1-1: USB disconnect, device number 19
[  155.518426][   T47] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  155.524104][   T47] belkin_sa 1-1:0.74: device disconnected
[  155.544218][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'.
[  155.637266][ T8395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.887'.
[  155.641373][ T8395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.887'.
[  155.715907][ T8399] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  155.720060][ T8399] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  155.723006][ T8399] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  155.725913][ T8399] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  155.729552][ T8399] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  155.732223][ T8399] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  155.735185][ T8399] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  155.740406][ T8399] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  155.743167][ T8399] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  155.746025][ T8399] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  155.749679][ T8399] comedi comedi3: 8255: I/O port conflict (0xd4,4)
[  155.752534][ T8399] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  156.053819][ T8411] process 'syz.0.895' launched './file1' with NULL argv: empty string added
[  156.096697][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  156.248382][   T10] usb 4-1: Using ep0 maxpacket: 32
[  156.253453][   T10] usb 4-1: config 1 has an invalid interface number: 236 but max is 0
[  156.257789][   T10] usb 4-1: config 1 has no interface number 0
[  156.260471][   T10] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.264883][   T10] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  156.271446][   T10] usb 4-1: config 1 interface 236 has no altsetting 0
[  156.276090][   T10] usb 4-1: config 1 has an invalid interface number: 236 but max is 0
[  156.279840][   T10] usb 4-1: config 1 has no interface number 0
[  156.282456][   T10] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.286910][   T10] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  156.291256][   T10] usb 4-1: config 1 interface 236 has no altsetting 0
[  156.297208][   T10] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  156.301210][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.304667][   T10] usb 4-1: Product: syz
[  156.306556][   T10] usb 4-1: Manufacturer: syz
[  156.309759][   T10] usb 4-1: SerialNumber: syz
[  156.318687][   T10] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected
[  156.436720][ T5909] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  156.529747][  T792] usb 4-1: USB disconnect, device number 5
[  156.587290][ T5909] usb 1-1: Using ep0 maxpacket: 8
[  156.591401][ T5909] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  156.594864][ T5909] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.599158][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  156.603448][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  156.607691][ T5909] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.613116][ T5909] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  156.617389][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.827254][ T5909] usb 1-1: GET_CAPABILITIES returned 0
[  156.829759][ T5909] usbtmc 1-1:16.0: can't read capabilities
[  157.035859][ T5840] usb 1-1: USB disconnect, device number 20
[  157.366803][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  157.536707][ T5909] usb 4-1: Using ep0 maxpacket: 8
[  157.543218][ T5909] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  157.547793][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.551111][ T5909] usb 4-1: Product: syz
[  157.552878][ T5909] usb 4-1: Manufacturer: syz
[  157.554904][ T5909] usb 4-1: SerialNumber: syz
[  157.560404][ T5909] usb 4-1: config 0 descriptor??
[  157.742555][ T8427] sctp: [Deprecated]: syz.2.903 (pid 8427) Use of struct sctp_assoc_value in delayed_ack socket option.
[  157.742555][ T8427] Use struct sctp_sack_info instead
[  157.773297][ T5909] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  157.782405][ T5909] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  157.804717][ T5909] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  157.809444][ T5909] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  157.820681][ T5909] usb 4-1: USB disconnect, device number 6
[  158.005669][ T8435] loop0: detected capacity change from 0 to 4096
[  158.012542][ T8435] ntfs3(loop0): ino=3, Correct links count -> 2.
[  158.067032][ T5840] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  158.173804][ T8437] input: syz1 as /devices/virtual/input/input12
[  158.227280][ T5840] usb 3-1: Using ep0 maxpacket: 32
[  158.233374][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.242156][ T5840] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  158.246004][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.261720][ T5840] usb 3-1: config 0 descriptor??
[  158.683344][ T5840] stadia 0003:18D1:9400.0007: reserved main item tag 0xd
[  158.693490][ T5840] stadia 0003:18D1:9400.0007: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0
[  158.693517][ T5840] stadia 0003:18D1:9400.0007: no inputs found
[  158.693527][ T5840] stadia 0003:18D1:9400.0007: force feedback init failed
[  158.698761][ T5909] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[  158.848371][ T5909] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  158.848391][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.849815][ T5909] usb 1-1: config 0 descriptor??
[  158.889415][ T5840] usb 3-1: USB disconnect, device number 15
[  159.459929][ T5909] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  159.464552][ T5909] asix 1-1:0.0: probe with driver asix failed with error -32
[  159.482243][ T5909] usb 1-1: USB disconnect, device number 21
[  159.633226][ T8459] loop2: detected capacity change from 0 to 32768
[  159.637835][ T8459] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal_v2: journal bucket 4294967319 past end of device (nbuckets 128)
[  159.637835][ T8459] journal_v2 (size 40):
[  159.637835][ T8459] Buckets:  9-16 24-4294967320
[  159.637835][ T8459] 
[  159.648976][ T8459] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  159.660008][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  159.829463][   T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  159.834544][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.841358][   T10] usb 4-1: config 0 descriptor??
[  159.850481][   T10] cp210x 4-1:0.0: cp210x converter detected
[  160.015331][ T8467] loop0: detected capacity change from 0 to 164
[  160.020730][ T8467] rock: directory entry would overflow storage
[  160.023470][ T8467] rock: sig=0x66, size=4, remaining=3
[  160.033906][ T8467] rock: directory entry would overflow storage
[  160.039332][ T8467] rock: sig=0x66, size=4, remaining=3
[  160.254165][   T10] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  160.258095][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.270213][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.280766][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[  160.292653][ T8469] loop0: detected capacity change from 0 to 40427
[  160.305523][ T8469] F2FS-fs (loop0): invalid crc value
[  160.354096][ T8469] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  160.359952][ T8469] F2FS-fs (loop0): Start checkpoint disabled!
[  160.365483][ T8469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  160.372902][   T33] audit: type=1800 audit(1757091222.030:43): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.923" name="file1" dev="loop0" ino=10 res=0 errno=0
[  160.475497][   T10] usb 4-1: USB disconnect, device number 7
[  160.485461][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  160.499261][   T10] cp210x 4-1:0.0: device disconnected
[  160.627888][ T8473] syz.0.923: attempt to access beyond end of device
[  160.627888][ T8473] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  160.638215][ T8473] syz.0.923: attempt to access beyond end of device
[  160.638215][ T8473] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  160.645870][ T8473] syz.0.923: attempt to access beyond end of device
[  160.645870][ T8473] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  160.651773][ T8473] syz.0.923: attempt to access beyond end of device
[  160.651773][ T8473] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  160.657880][ T8473] syz.0.923: attempt to access beyond end of device
[  160.657880][ T8473] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  160.666222][ T8473] syz.0.923: attempt to access beyond end of device
[  160.666222][ T8473] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  160.672658][ T8473] syz.0.923: attempt to access beyond end of device
[  160.672658][ T8473] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  160.678658][ T8473] syz.0.923: attempt to access beyond end of device
[  160.678658][ T8473] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  160.684081][ T8473] syz.0.923: attempt to access beyond end of device
[  160.684081][ T8473] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  160.689436][ T8473] syz.0.923: attempt to access beyond end of device
[  160.689436][ T8473] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  160.863075][ T8476] loop2: detected capacity change from 0 to 128
[  160.930809][ T8476] program syz.2.924 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.008244][  T153] CPU: 0 UID: 0 PID: 153 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  161.008259][  T153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.008264][  T153] Workqueue: writeback wb_workfn (flush-7:0)
[  161.008281][  T153] Call Trace:
[  161.008284][  T153]  <TASK>
[  161.008289][  T153]  dump_stack_lvl+0x189/0x250
[  161.008302][  T153]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.008311][  T153]  ? __pfx_queue_work_on+0x10/0x10
[  161.008319][  T153]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  161.008331][  T153]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.008346][  T153]  f2fs_handle_critical_error+0x37c/0x540
[  161.008361][  T153]  f2fs_write_end_io+0x886/0xb60
[  161.008376][  T153]  __submit_merged_bio+0x27a/0x6a0
[  161.008390][  T153]  __submit_merged_write_cond+0x255/0x530
[  161.008403][  T153]  f2fs_write_data_pages+0x261d/0x3000
[  161.008428][  T153]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  161.008444][  T153]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  161.008466][  T153]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  161.008482][  T153]  ? trace_f2fs_writepages+0x7f/0x200
[  161.008492][  T153]  ? f2fs_write_node_pages+0x478/0x6e0
[  161.008504][  T153]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  161.008519][  T153]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  161.008530][  T153]  do_writepages+0x32e/0x550
[  161.008542][  T153]  ? reacquire_held_locks+0x127/0x1d0
[  161.008550][  T153]  ? writeback_sb_inodes+0x384/0x1010
[  161.008563][  T153]  __writeback_single_inode+0x145/0xff0
[  161.008572][  T153]  ? do_raw_spin_unlock+0x4d/0x240
[  161.008582][  T153]  writeback_sb_inodes+0x6c7/0x1010
[  161.008603][  T153]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  161.008630][  T153]  ? rcu_is_watching+0x15/0xb0
[  161.008643][  T153]  wb_writeback+0x43b/0xaf0
[  161.008655][  T153]  ? queue_io+0x331/0x590
[  161.008665][  T153]  ? __pfx_wb_writeback+0x10/0x10
[  161.008678][  T153]  ? _raw_spin_unlock_irq+0x23/0x50
[  161.008690][  T153]  wb_workfn+0x409/0xef0
[  161.008704][  T153]  ? __pfx_wb_workfn+0x10/0x10
[  161.008713][  T153]  ? __lock_acquire+0xab9/0xd20
[  161.008729][  T153]  ? process_scheduled_works+0x9ef/0x17b0
[  161.008739][  T153]  ? _raw_spin_unlock_irq+0x23/0x50
[  161.008747][  T153]  ? process_scheduled_works+0x9ef/0x17b0
[  161.008753][  T153]  ? process_scheduled_works+0x9ef/0x17b0
[  161.008760][  T153]  process_scheduled_works+0xae1/0x17b0
[  161.008780][  T153]  ? __pfx_process_scheduled_works+0x10/0x10
[  161.008795][  T153]  worker_thread+0x8a0/0xda0
[  161.008803][  T153]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.008816][  T153]  ? __kthread_parkme+0x7b/0x200
[  161.008829][  T153]  kthread+0x711/0x8a0
[  161.008839][  T153]  ? __pfx_worker_thread+0x10/0x10
[  161.008847][  T153]  ? __pfx_kthread+0x10/0x10
[  161.008860][  T153]  ? _raw_spin_unlock_irq+0x23/0x50
[  161.008872][  T153]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.008886][  T153]  ? __pfx_kthread+0x10/0x10
[  161.008899][  T153]  ret_from_fork+0x3fc/0x770
[  161.008913][  T153]  ? __pfx_ret_from_fork+0x10/0x10
[  161.008929][  T153]  ? __switch_to_asm+0x39/0x70
[  161.008943][  T153]  ? __switch_to_asm+0x33/0x70
[  161.008955][  T153]  ? __pfx_kthread+0x10/0x10
[  161.008973][  T153]  ret_from_fork_asm+0x1a/0x30
[  161.008999][  T153]  </TASK>
[  161.009005][  T153] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  161.238212][ T8489] loop2: detected capacity change from 0 to 512
[  161.464991][ T8489] loop2: detected capacity change from 0 to 32768
[  161.476770][ T8489] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.931 (8489)
[  161.514662][ T8489] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  161.526665][ T8489] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  161.587497][ T8489] BTRFS info (device loop2): enabling ssd optimizations
[  161.589887][ T8489] BTRFS info (device loop2): enabling free space tree
[  161.600246][ T8503] loop0: detected capacity change from 0 to 2364
[  161.716050][ T5848] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  161.729471][ T8522] input: syz1 as /devices/virtual/input/input13
[  161.734239][ T8522] input: failed to attach handler leds to device input13, error: -6
[  161.780380][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe
[  161.865363][ T8528] loop3: detected capacity change from 0 to 2048
[  161.982213][ T8528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.039313][ T7932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.062452][ T8537] loop2: detected capacity change from 0 to 2048
[  162.097503][ T8537] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  162.100964][ T8537] NILFS (loop2): mounting unchecked fs
[  162.109523][ T6296] udevd[6296]: incorrect nilfs2 checksum on /dev/loop2
[  162.136230][ T6296] udevd[6296]: incorrect nilfs2 checksum on /dev/loop2
[  162.159412][ T6296] udevd[6296]: incorrect nilfs2 checksum on /dev/loop2
[  162.164427][ T8537] NILFS (loop2): recovery complete
[  162.194786][ T8542] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.242559][ T8544] loop3: detected capacity change from 0 to 512
[  162.267219][ T8544] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  162.363288][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'.
[  162.366795][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'.
[  162.372432][ T8552] netlink: 'syz.3.950': attribute type 15 has an invalid length.
[  162.453186][ T8564] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  162.627970][ T5909] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  162.685591][ T8577] loop3: detected capacity change from 0 to 1024
[  162.741832][ T8573] loop2: detected capacity change from 0 to 32768
[  162.780243][ T8573] ERROR: (device loop2): dbAllocAG: unable to allocate blocks
[  162.780243][ T8573] 
[  162.784281][ T8573] jfs_create: dtInsert returned -EIO
[  162.786111][ T8573] ERROR: (device loop2): jfs_create: 
[  162.786111][ T8573] 
[  162.826940][ T5909] usb 1-1: Using ep0 maxpacket: 8
[  162.831913][ T5909] usb 1-1: config 252 has an invalid interface number: 104 but max is 0
[  162.835609][ T5909] usb 1-1: config 252 has no interface number 0
[  162.854281][ T5909] usb 1-1: config 252 interface 104 has no altsetting 0
[  162.864964][ T5909] usb 1-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= b.c7
[  162.882730][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.886092][ T5909] usb 1-1: Product: syz
[  162.888681][ T5909] usb 1-1: Manufacturer: syz
[  162.888806][ T8579] loop3: detected capacity change from 0 to 32768
[  162.890617][ T5909] usb 1-1: SerialNumber: syz
[  162.895797][ T5909] gspca_main: spca501-2.14.0 probing 0497:c001
[  162.909645][ T8579] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas_v0: no devices in entry btree: 1/0 []
[  162.909645][ T8579] replicas_v0 (size 24):
[  162.909645][ T8579] btree: 0 [] (unknown data_type 16): 2 [1 0] user: 1 [0]
[  162.909645][ T8579] 
[  162.935705][ T8579] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  163.098467][ T5909] gspca_spca501: reg write: error -71
[  163.105824][ T5909] spca501 1-1:252.104: Reg write failed for 0x02,0x07,0x05
[  163.109054][ T5909] spca501 1-1:252.104: probe with driver spca501 failed with error -22
[  163.116505][ T5909] usb 1-1: USB disconnect, device number 22
[  163.154539][ T8583] loop2: detected capacity change from 0 to 32768
[  163.164167][ T8587] loop3: detected capacity change from 0 to 512
[  163.173973][ T8587] EXT4-fs: inline encryption not supported
[  163.179137][ T8587] EXT4-fs: Ignoring removed i_version option
[  163.183992][ T8583] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.186955][ T8587] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  163.204074][ T8583] XFS (loop2): Ending clean mount
[  163.208614][ T8583] XFS (loop2): Quotacheck needed: Please wait.
[  163.237415][ T8583] XFS (loop2): Quotacheck: Done.
[  163.274181][ T5848] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.281538][ T8597] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  163.546714][ T5910] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  163.698424][ T5910] usb 4-1: Using ep0 maxpacket: 16
[  163.705295][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.709512][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.712848][ T5910] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  163.715944][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.857135][ T5910] usb 4-1: config 0 descriptor??
[  164.316174][ T5910] corsair 0003:1B1C:1B02.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0
[  164.515609][ T5910] corsair 0003:1B1C:1B02.0008: Failed to get K90 initial state (error -71).
[  164.526407][ T5910] usb 4-1: USB disconnect, device number 8
[  164.727539][   T33] audit: type=1326 audit(1757091226.380:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.980" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  164.737540][   T33] audit: type=1326 audit(1757091226.380:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.980" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  164.750294][   T33] audit: type=1326 audit(1757091226.410:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.980" exe="/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  164.760966][   T33] audit: type=1326 audit(1757091226.410:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.980" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  164.783842][   T33] audit: type=1326 audit(1757091226.410:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.980" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b3b8ebe9 code=0x7ffc0000
[  164.914736][ T8644] netlink: 104 bytes leftover after parsing attributes in process `syz.2.988'.
[  165.192819][ T8663] block nbd3: shutting down sockets
[  165.306922][   T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  165.499278][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  165.503307][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  165.508759][   T10] usb 1-1: config 13 has an invalid interface number: 120 but max is 1
[  165.512332][   T10] usb 1-1: config 13 has no interface number 1
[  165.515149][   T10] usb 1-1: config 13 interface 120 has no altsetting 0
[  165.522947][   T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9
[  165.527953][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.531319][   T10] usb 1-1: Product: syz
[  165.533151][   T10] usb 1-1: Manufacturer: syz
[  165.535298][   T10] usb 1-1: SerialNumber: syz
[  165.783503][   T10] usb 1-1: USB disconnect, device number 23
[  165.814184][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.120/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.822454][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  166.067266][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'.
[  166.519692][ T8696] loop3: detected capacity change from 0 to 1024
[  166.558320][ T8696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.569356][   T33] audit: type=1800 audit(1757091228.230:49): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1010" name="file1" dev="loop3" ino=15 res=0 errno=0
[  166.582516][ T8696] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt.
[  166.640261][ T7932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.936776][ T5840] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  167.956762][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  168.092173][ T5840] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  168.096275][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.102805][ T5840] usb 3-1: Product: syz
[  168.104725][ T5840] usb 3-1: Manufacturer: syz
[  168.107333][ T5840] usb 3-1: SerialNumber: syz
[  168.111662][ T5840] usb 3-1: config 0 descriptor??
[  168.119557][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.136128][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.146340][ T5910] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  168.158701][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  168.163853][ T5910] usb 4-1: SerialNumber: syz
[  168.330421][ T5840] usb 3-1: USB disconnect, device number 16
[  168.379860][ T5910] usb 4-1: 0:2 : does not exist
[  168.400762][ T5910] usb 4-1: USB disconnect, device number 9
[  168.421219][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.002490][ T8731] _Z`Ԁ@: entered promiscuous mode
[  169.271041][ T8745] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1032'.
[  169.834069][ T8771] loop3: detected capacity change from 0 to 128
[  170.044798][ T8779] loop3: detected capacity change from 0 to 256
[  170.072208][ T8779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  170.191311][ T8789] loop3: detected capacity change from 0 to 1024
[  170.211231][ T8789] EXT4-fs (loop3): filesystem is read-only
[  170.365979][ T8798] loop3: detected capacity change from 0 to 1024
[  170.400597][ T6879] hfsplus: b-tree write err: -5, ino 4
[  170.647938][ T8806] loop3: detected capacity change from 0 to 16384
[  170.705978][ T8806] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,background_compression=gzip,erasure_code,grpquota,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,nocow
[  170.705995][ T8806]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  170.721178][ T8806] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  170.725164][ T8806] bcachefs (loop3): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing
[  170.731925][ T8806] bcachefs (loop3): recovering from clean shutdown, journal seq 18
[  170.735269][ T8806] bcachefs (loop3): dropping and reconstructing all alloc info
[  170.756079][ T8806] bcachefs (loop3): accounting_read... done
[  170.761778][ T8806] bcachefs (loop3): alloc_read... done
[  170.764775][ T8806] bcachefs (loop3): snapshots_read... done
[  170.768410][ T8806] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  170.772227][ T8806] bcachefs (loop3): reading quotas
[  170.775441][ T8806] bcachefs (loop3): quotas done
[  170.780468][ T8806] bcachefs (loop3): done starting filesystem
[  170.833716][ T7932] bcachefs (loop3): shutting down
[  170.846449][ T7932] bcachefs (loop3): shutdown complete
[  171.696718][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  171.859299][   T10] usb 3-1: Using ep0 maxpacket: 8
[  171.863561][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  171.876690][   T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  171.880967][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.892498][   T10] usb 3-1: config 0 descriptor??
[  172.304972][ T8825] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  172.321877][   T10] corsair 0003:1B1C:1B09.0009: unbalanced collection at end of report description
[  172.328400][   T10] corsair 0003:1B1C:1B09.0009: parse failed
[  172.331318][   T10] corsair 0003:1B1C:1B09.0009: probe with driver corsair failed with error -22
[  172.401028][ T8827] loop3: detected capacity change from 0 to 256
[  172.488971][   T33] audit: type=1326 audit(1757091234.150:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.3.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacd98ebe9 code=0x7ffc0000
[  172.517120][   T47] usb 3-1: USB disconnect, device number 17
[  172.520963][   T33] audit: type=1326 audit(1757091234.160:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.3.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbacd98ebe9 code=0x7ffc0000
[  172.546760][   T33] audit: type=1326 audit(1757091234.160:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.3.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacd98ebe9 code=0x7ffc0000
[  172.555789][   T33] audit: type=1326 audit(1757091234.160:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.3.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacd98ebe9 code=0x7ffc0000
[  173.591323][ T8869] loop2: detected capacity change from 0 to 22
[  173.599794][ T8869] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  173.615542][ T8869] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  173.667197][  T792] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  173.793148][ T8873] loop2: detected capacity change from 0 to 512
[  173.818994][ T8873] EXT4-fs: Ignoring removed mblk_io_submit option
[  173.846819][  T792] usb 4-1: Using ep0 maxpacket: 8
[  173.854044][  T792] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  173.858835][ T8873] EXT4-fs (loop2): failed to initialize system zone (-117)
[  173.863251][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.869443][ T8873] EXT4-fs (loop2): mount failed
[  173.892655][  T792] pvrusb2: Hardware description: Terratec Grabster AV400
[  173.895875][  T792] pvrusb2: **********
[  173.919389][  T792] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  173.934475][  T792] pvrusb2: Important functionality might not be entirely working.
[  173.943161][  T792] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  173.949383][  T792] pvrusb2: **********
[  173.989583][ T8876] loop2: detected capacity change from 0 to 128
[  174.003004][ T8876] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  174.095768][ T2398] pvrusb2: Invalid write control endpoint
[  174.178224][ T2398] pvrusb2: Invalid write control endpoint
[  174.180935][ T2398] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  174.185116][ T2398] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  174.192325][ T2398] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  174.196537][ T2398] pvrusb2: Device being rendered inoperable
[  174.202214][ T2398] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  174.206098][ T2398] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  174.223175][ T2398] pvrusb2: Attached sub-driver cx25840
[  174.225463][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  174.232028][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  174.309225][ T5840] usb 4-1: USB disconnect, device number 10
[  175.263392][ T8897] loop2: detected capacity change from 0 to 2048
[  175.313093][ T8897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.351554][ T8362] block nbd0: Receive control failed (result -107)
[  175.382970][ T5848] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  175.394466][ T5848] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  175.408590][ T8902] nbd0: detected capacity change from 0 to 32
[  175.417706][ T8675] block nbd0: Dead connection, failed to find a fallback
[  175.420979][ T8675] block nbd0: shutting down sockets
[  175.423353][ T8675] blk_print_req_error: 10 callbacks suppressed
[  175.423364][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.435551][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.457266][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.469198][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.474366][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.481135][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.484997][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.517237][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.521134][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.524652][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.543375][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.549399][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.553321][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.558187][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.562696][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.566194][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.572372][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.576280][ T8675] ldm_validate_partition_table(): Disk read failed.
[  175.605548][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.617615][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.621099][ T8675] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.630945][ T8675] Buffer I/O error on dev nbd0, logical block 0, async page read
[  175.635247][ T8675] Dev nbd0: unable to read RDB block 0
[  175.638321][ T8675]  nbd0: unable to read partition table
[  175.645406][ T8675] ldm_validate_partition_table(): Disk read failed.
[  175.649356][ T8675] Dev nbd0: unable to read RDB block 0
[  175.655664][ T8675]  nbd0: unable to read partition table
[  176.290238][ T8919] sp0: Synchronizing with TNC
[  177.066918][   T47] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  177.225592][   T47] usb 4-1: unable to get BOS descriptor or descriptor too short
[  177.238128][   T47] usb 4-1: unable to read config index 0 descriptor/start: -71
[  177.247627][   T47] usb 4-1: can't read configurations, error -71
[  177.713935][ T8931] loop2: detected capacity change from 0 to 32768
[  177.844785][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'.
[  177.909739][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1116'.
[  178.260241][ T8943] loop3: detected capacity change from 0 to 32768
[  178.433991][ T8949] loop2: detected capacity change from 0 to 32768
[  178.441099][ T8949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1122 (8949)
[  178.449471][ T8949] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.453661][ T8949] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  178.457529][ T8949] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  178.509357][ T8949] BTRFS info (device loop2): rebuilding free space tree
[  178.523751][ T8949] BTRFS info (device loop2): disabling free space tree
[  178.526856][ T8949] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  178.531191][ T8949] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  178.540646][ T8949] BTRFS info (device loop2): setting nodatasum
[  178.543429][ T8949] BTRFS info (device loop2): setting nodatacow
[  178.546175][ T8949] BTRFS info (device loop2): enabling ssd optimizations
[  178.549312][ T8949] BTRFS info (device loop2): turning off barriers
[  178.552172][ T8949] BTRFS info (device loop2): enabling disk space caching
[  178.555273][ T8949] BTRFS info (device loop2): force clearing of disk cache
[  178.558578][ T8949] BTRFS info (device loop2): doing ref verification
[  178.561377][ T8949] BTRFS info (device loop2): max_inline set to 4096
[  178.597403][ T5848] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.110049][ T8983] futex_wake_op: syz.3.1123 tries to shift op by 32; fix this program
[  180.132000][ T9004] loop2: detected capacity change from 0 to 16
[  180.140707][ T9004] erofs (device loop2): mounted with root inode @ nid 36.
[  180.408594][ T9006] bio_check_eod: 268 callbacks suppressed
[  180.408653][ T9006] syz.2.1136: attempt to access beyond end of device
[  180.408653][ T9006] loop2: rw=524288, sector=128, nr_sectors = 8 limit=16
[  180.427551][ T9006] syz.2.1136: attempt to access beyond end of device
[  180.427551][ T9006] loop2: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  180.618400][ T9006] syz.2.1136: attempt to access beyond end of device
[  180.618400][ T9006] loop2: rw=0, sector=0, nr_sectors = 1024 limit=16
[  180.625679][ T9006] erofs (device loop2): read error -5 @ 0 of nid 89
[  180.632747][   T33] audit: type=1800 audit(1757091242.290:54): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1136" name="file2" dev="loop2" ino=89 res=0 errno=0
[  180.743402][ T9010] loop3: detected capacity change from 0 to 2048
[  180.759185][ T9010] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051
[  180.776987][ T9010] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.907572][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  180.924286][ T9018] loop3: detected capacity change from 0 to 164
[  180.942471][ T9018] Unable to read rock-ridge attributes
[  180.959629][ T9018] Unable to read rock-ridge attributes
[  181.417015][ T9028] loop3: detected capacity change from 0 to 32768
[  181.421619][ T9028] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  181.510429][ T5909] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  181.605012][ T9032] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1149'.
[  181.663962][ T5909] usb 3-1: Using ep0 maxpacket: 8
[  181.687933][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short
[  181.693148][ T5909] usb 3-1: config 7 has an invalid interface number: 84 but max is 0
[  181.696453][ T5909] usb 3-1: config 7 has no interface number 0
[  181.712844][ T5909] usb 3-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=9e.50
[  181.717069][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.720390][ T5909] usb 3-1: Product: syz
[  181.722175][ T5909] usb 3-1: Manufacturer: syz
[  181.724175][ T5909] usb 3-1: SerialNumber: syz
[  181.966104][ T5909] cypress_m8 3-1:7.84: HID->COM RS232 Adapter converter detected
[  181.987552][ T5909] cyphidcom ttyUSB0: required endpoint is missing
[  181.996907][ T5909] usb 3-1: USB disconnect, device number 18
[  182.010076][ T5909] cypress_m8 3-1:7.84: device disconnected
[  183.256485][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.263021][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.266246][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.271000][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.273816][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.401828][ T9044] chnl_net:caif_netlink_parms(): no params data found
[  183.462145][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.465326][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.471101][ T9044] bridge_slave_0: entered allmulticast mode
[  183.473997][ T9044] bridge_slave_0: entered promiscuous mode
[  183.482144][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.484777][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.498215][ T9044] bridge_slave_1: entered allmulticast mode
[  183.501582][ T9044] bridge_slave_1: entered promiscuous mode
[  183.541738][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.569037][ T9044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.585680][ T9044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.651200][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.662459][ T9044] team0: Port device team_slave_0 added
[  183.669299][ T9044] team0: Port device team_slave_1 added
[  183.698166][ T9044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.700924][ T9044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.711623][ T9044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.720128][ T9044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.723268][ T9044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.735480][ T9039] loop3: detected capacity change from 0 to 262144
[  183.735913][ T9044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.782632][ T9039] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  183.787615][ T9039] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  183.865871][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.992521][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.044335][ T9044] hsr_slave_0: entered promiscuous mode
[  184.056461][ T9044] hsr_slave_1: entered promiscuous mode
[  184.067132][ T9044] debugfs: 'hsr0' already exists in 'hsr'
[  184.069585][ T9044] Cannot create hsr debugfs directory
[  184.082587][ T9063] loop2: detected capacity change from 0 to 256
[  184.115266][ T9063] FAT-fs (loop2): Directory bread(block 64) failed
[  184.122910][ T9063] FAT-fs (loop2): Directory bread(block 65) failed
[  184.125793][ T9063] FAT-fs (loop2): Directory bread(block 66) failed
[  184.132591][ T9063] FAT-fs (loop2): Directory bread(block 67) failed
[  184.135653][ T9063] FAT-fs (loop2): Directory bread(block 68) failed
[  184.141027][ T9063] FAT-fs (loop2): Directory bread(block 69) failed
[  184.143953][ T9063] FAT-fs (loop2): Directory bread(block 70) failed
[  184.146824][ T9063] FAT-fs (loop2): Directory bread(block 71) failed
[  184.149827][ T9063] FAT-fs (loop2): Directory bread(block 72) failed
[  184.155549][ T9063] FAT-fs (loop2): Directory bread(block 73) failed
[  184.387316][ T9067] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1161'.
[  184.392267][   T12] bridge_slave_1: left allmulticast mode
[  184.394873][   T12] bridge_slave_1: left promiscuous mode
[  184.403011][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.420099][   T12] bridge_slave_0: left allmulticast mode
[  184.429911][   T12] bridge_slave_0: left promiscuous mode
[  184.432603][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.453260][ T9069] loop2: detected capacity change from 0 to 16
[  184.498987][ T9069] erofs (device loop2): mounted with root inode @ nid 36.
[  184.917895][ T9087] loop3: detected capacity change from 0 to 1764
[  185.053500][ T9095] loop3: detected capacity change from 0 to 256
[  185.082168][ T9095] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  185.135670][   T32] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  185.237249][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.243022][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.250306][   T12] bond0 (unregistering): Released all slaves
[  185.304916][ T9044] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  185.308055][ T5845] Bluetooth: hci0: command tx timeout
[  185.351697][ T9044] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  185.369709][ T9044] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  185.413061][ T9111] sch_fq: defrate 4294967295 ignored.
[  185.423285][ T9044] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  185.456878][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  185.594594][ T9125] sctp: [Deprecated]: syz.2.1177 (pid 9125) Use of int in max_burst socket option deprecated.
[  185.594594][ T9125] Use struct sctp_assoc_value instead
[  185.608324][   T10] usb 4-1: Using ep0 maxpacket: 16
[  185.610867][   T12] hsr_slave_0: left promiscuous mode
[  185.614021][   T12] hsr_slave_1: left promiscuous mode
[  185.616530][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.622217][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.622390][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  185.631778][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.634941][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.636719][   T10] usb 4-1: config 13 has an invalid interface number: 50 but max is 0
[  185.642775][   T10] usb 4-1: config 13 has an invalid descriptor of length 158, skipping remainder of the config
[  185.647808][   T10] usb 4-1: config 13 has no interface number 0
[  185.650603][   T10] usb 4-1: config 13 interface 50 altsetting 167 endpoint 0x8 has an invalid bInterval 101, changing to 7
[  185.655462][   T10] usb 4-1: config 13 interface 50 altsetting 167 endpoint 0x8 has invalid maxpacket 26047, setting to 1024
[  185.661190][   T10] usb 4-1: config 13 interface 50 has no altsetting 0
[  185.664931][   T12] veth1_macvtap: left promiscuous mode
[  185.669335][   T12] veth0_macvtap: left promiscuous mode
[  185.671226][   T12] veth1_vlan: left promiscuous mode
[  185.673673][   T10] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  185.675362][   T12] veth0_vlan: left promiscuous mode
[  185.678479][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.682998][   T10] usb 4-1: Product: syz
[  185.684967][   T10] usb 4-1: Manufacturer: syz
[  185.687596][   T10] usb 4-1: SerialNumber: syz
[  185.936988][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  185.940219][   T10] usb 4-1: MIDIStreaming interface descriptor not found
[  186.038735][   T10] usb 4-1: USB disconnect, device number 13
[  186.172017][   T12] team0 (unregistering): Port device team_slave_1 removed
[  186.209708][   T12] team0 (unregistering): Port device team_slave_0 removed
[  186.645666][ T9044] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.679881][ T9044] 8021q: adding VLAN 0 to HW filter on device team0
[  186.693530][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.696254][ T6641] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.753923][   T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  186.757757][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.760770][ T6641] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.764079][ T9141] block nbd2: not configured, cannot reconfigure
[  186.927353][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.933671][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  186.950032][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  186.953657][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  186.971346][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  186.984215][   T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  187.005640][   T10] usb 4-1: Manufacturer: syz
[  187.029286][   T10] usb 4-1: config 0 descriptor??
[  187.114733][ T9044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.308966][   T10] rc_core: IR keymap rc-hauppauge not found
[  187.311527][   T10] Registered IR keymap rc-empty
[  187.313998][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.350571][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.375547][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  187.387044][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14
[  187.398382][ T5845] Bluetooth: hci0: command tx timeout
[  187.402169][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.437216][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.453181][ T9044] veth0_vlan: entered promiscuous mode
[  187.486974][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.512889][ T9044] veth1_vlan: entered promiscuous mode
[  187.527028][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.556353][ T9044] veth0_macvtap: entered promiscuous mode
[  187.572598][ T9044] veth1_macvtap: entered promiscuous mode
[  187.573680][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.605584][ T9044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.616946][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.633357][ T9044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.639458][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.665210][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.668828][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.692479][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.697590][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.700709][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.727112][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.773217][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.829045][   T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  187.846561][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.851275][   T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  187.856737][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.868515][   T10] usb 4-1: USB disconnect, device number 14
[  187.931378][ T6879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.934536][ T6879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.244181][ T9188] loop4: detected capacity change from 0 to 32768
[  189.254198][ T9188] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1188 (9188)
[  189.274044][ T9188] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.289307][ T9188] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  189.476842][ T5845] Bluetooth: hci0: command tx timeout
[  189.480441][ T9188] BTRFS info (device loop4): enabling ssd optimizations
[  189.500130][ T9188] BTRFS info (device loop4): enabling free space tree
[  189.759759][ T9044] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.873599][ T9217] loop2: detected capacity change from 0 to 2048
[  190.414114][ T9226] loop4: detected capacity change from 0 to 4096
[  190.433079][ T9226] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  190.477399][ T9226] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  190.630942][ T9228] openvswitch: netlink: Message has 4 unknown bytes.
[  191.558693][ T5845] Bluetooth: hci0: command tx timeout
[  192.329297][ T9288] comedi comedi1: c6xdigio: I/O port conflict (0x401,3)
[  192.331839][ T9288] ------------[ cut here ]------------
[  192.334406][ T9288] Unexpected driver unregister!
[  192.339446][ T9288] WARNING: CPU: 0 PID: 9288 at drivers/base/driver.c:273 driver_unregister+0x94/0xb0
[  192.343633][ T9288] Modules linked in:
[  192.345737][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.3.1223 Not tainted syzkaller #0 PREEMPT(full) 
[  192.350659][ T9288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.355013][ T9288] RIP: 0010:driver_unregister+0x94/0xb0
[  192.357849][ T9288] Code: 90 5d fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 d1 a9 be fb eb 05 e8 ca a9 be fb 90 48 c7 c7 00 fc 09 8c e8 dd 45 82 fb 90 <0f> 0b 90 90 5b 41 5e 41 5f e9 be a6 7b 05 cc cc cc cc cc cc cc cc
[  192.366328][ T9288] RSP: 0018:ffffc900071d7a40 EFLAGS: 00010246
[  192.369405][ T9288] RAX: 74a1f9278c2fbe00 RBX: ffffffff8f3f64c0 RCX: 0000000000080000
[  192.373230][ T9288] RDX: ffffc90022486000 RSI: 0000000000000f5a RDI: 0000000000000f5b
[  192.376968][ T9288] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  192.380430][ T9288] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88801fba2038
[  192.383960][ T9288] R13: ffffffff8f3f6410 R14: 0000000000000000 R15: dffffc0000000000
[  192.387370][ T9288] FS:  00007fbace8646c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  192.391207][ T9288] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  192.394106][ T9288] CR2: 00005555731c25c8 CR3: 0000000111236000 CR4: 00000000000006f0
[  192.398249][ T9288] Call Trace:
[  192.399753][ T9288]  <TASK>
[  192.401115][ T9288]  comedi_device_detach_locked+0x178/0x750
[  192.403669][ T9288]  comedi_device_attach+0x5d4/0x720
[  192.405998][ T9288]  comedi_unlocked_ioctl+0x5ff/0x1020
[  192.408905][ T9288]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  192.411396][ T9288]  ? __lock_acquire+0xab9/0xd20
[  192.413560][ T9288]  ? __fget_files+0x2a/0x420
[  192.415540][ T9288]  ? __fget_files+0x2a/0x420
[  192.417468][ T9288]  ? __fget_files+0x3a0/0x420
[  192.419581][ T9288]  ? __fget_files+0x2a/0x420
[  192.421611][ T9288]  ? bpf_lsm_file_ioctl+0x9/0x20
[  192.423737][ T9288]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  192.426290][ T9288]  __se_sys_ioctl+0xfc/0x170
[  192.428371][ T9288]  do_syscall_64+0xfa/0x3b0
[  192.430333][ T9288]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.432626][ T9288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.435313][ T9288]  ? exc_page_fault+0x9f/0xf0
[  192.437564][ T9288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.440169][ T9288] RIP: 0033:0x7fbacd98ebe9
[  192.442145][ T9288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.450463][ T9288] RSP: 002b:00007fbace864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  192.454118][ T9288] RAX: ffffffffffffffda RBX: 00007fbacdbc5fa0 RCX: 00007fbacd98ebe9
[  192.457631][ T9288] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  192.461094][ T9288] RBP: 00007fbacda11e19 R08: 0000000000000000 R09: 0000000000000000
[  192.464520][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.468115][ T9288] R13: 00007fbacdbc6038 R14: 00007fbacdbc5fa0 R15: 00007ffe499d0948
[  192.471695][ T9288]  </TASK>
[  192.473113][ T9288] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  192.476285][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.3.1223 Not tainted syzkaller #0 PREEMPT(full) 
[  192.480238][ T9288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.484460][ T9288] Call Trace:
[  192.485910][ T9288]  <TASK>
[  192.487174][ T9288]  dump_stack_lvl+0x99/0x250
[  192.489180][ T9288]  ? __asan_memcpy+0x40/0x70
[  192.491171][ T9288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.493306][ T9288]  ? __pfx__printk+0x10/0x10
[  192.495243][ T9288]  vpanic+0x281/0x750
[  192.496977][ T9288]  ? __pfx__printk+0x10/0x10
[  192.498910][ T9288]  ? __pfx_vpanic+0x10/0x10
[  192.500827][ T9288]  ? is_bpf_text_address+0x26/0x2b0
[  192.503022][ T9288]  panic+0xb9/0xc0
[  192.504548][ T9288]  ? __pfx_panic+0x10/0x10
[  192.506415][ T9288]  __warn+0x31b/0x4b0
[  192.508035][ T9288]  ? driver_unregister+0x94/0xb0
[  192.510014][ T9288]  ? driver_unregister+0x94/0xb0
[  192.512083][ T9288]  report_bug+0x2be/0x4f0
[  192.513945][ T9288]  ? driver_unregister+0x94/0xb0
[  192.516035][ T9288]  ? driver_unregister+0x94/0xb0
[  192.518117][ T9288]  ? driver_unregister+0x96/0xb0
[  192.520153][ T9288]  handle_bug+0x84/0x160
[  192.521956][ T9288]  exc_invalid_op+0x1a/0x50
[  192.523797][ T9288]  asm_exc_invalid_op+0x1a/0x20
[  192.525795][ T9288] RIP: 0010:driver_unregister+0x94/0xb0
[  192.528112][ T9288] Code: 90 5d fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 d1 a9 be fb eb 05 e8 ca a9 be fb 90 48 c7 c7 00 fc 09 8c e8 dd 45 82 fb 90 <0f> 0b 90 90 5b 41 5e 41 5f e9 be a6 7b 05 cc cc cc cc cc cc cc cc
[  192.536420][ T9288] RSP: 0018:ffffc900071d7a40 EFLAGS: 00010246
[  192.539082][ T9288] RAX: 74a1f9278c2fbe00 RBX: ffffffff8f3f64c0 RCX: 0000000000080000
[  192.542514][ T9288] RDX: ffffc90022486000 RSI: 0000000000000f5a RDI: 0000000000000f5b
[  192.545957][ T9288] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  192.549262][ T9288] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88801fba2038
[  192.552639][ T9288] R13: ffffffff8f3f6410 R14: 0000000000000000 R15: dffffc0000000000
[  192.556069][ T9288]  comedi_device_detach_locked+0x178/0x750
[  192.558581][ T9288]  comedi_device_attach+0x5d4/0x720
[  192.560796][ T9288]  comedi_unlocked_ioctl+0x5ff/0x1020
[  192.563138][ T9288]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  192.565661][ T9288]  ? __lock_acquire+0xab9/0xd20
[  192.567725][ T9288]  ? __fget_files+0x2a/0x420
[  192.569742][ T9288]  ? __fget_files+0x2a/0x420
[  192.571788][ T9288]  ? __fget_files+0x3a0/0x420
[  192.573891][ T9288]  ? __fget_files+0x2a/0x420
[  192.575922][ T9288]  ? bpf_lsm_file_ioctl+0x9/0x20
[  192.578071][ T9288]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  192.580610][ T9288]  __se_sys_ioctl+0xfc/0x170
[  192.582622][ T9288]  do_syscall_64+0xfa/0x3b0
[  192.584545][ T9288]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.586819][ T9288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.589454][ T9288]  ? exc_page_fault+0x9f/0xf0
[  192.591529][ T9288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.594113][ T9288] RIP: 0033:0x7fbacd98ebe9
[  192.596073][ T9288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.604162][ T9288] RSP: 002b:00007fbace864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  192.607749][ T9288] RAX: ffffffffffffffda RBX: 00007fbacdbc5fa0 RCX: 00007fbacd98ebe9
[  192.611027][ T9288] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  192.614431][ T9288] RBP: 00007fbacda11e19 R08: 0000000000000000 R09: 0000000000000000
[  192.617829][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.621128][ T9288] R13: 00007fbacdbc6038 R14: 00007fbacdbc5fa0 R15: 00007ffe499d0948
[  192.624447][ T9288]  </TASK>
[  192.626577][ T9288] Kernel Offset: disabled
[  192.628458][ T9288] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:54:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000c16a RDI=000000000000c16b RBP=00000000000003f8 RSP=ffffc900071d71f0
R8 =ffff888106f38237 R9 =1ffff11020de7046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8e6 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbace8646c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555731c25c8 CR3=0000000111236000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc3b3c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44f7b RBX=1ffff11009608341 RCX=ffff888107210000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90004c4f7e0 RSP=ffffc90004c4f658
R8 =ffffffff8fa39037 R9 =1ffffffff1f47206 R10=dffffc0000000000 R11=fffffbfff1f47207
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81bfae18 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34523ffc CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=000000ffff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
