last executing test programs:

1m4.330341229s ago: executing program 1 (id=898):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r2, 0x3, 0x2, 0x3ff, 0x4, 0x4}, &(0x7f0000000380)=0x14)

1m3.159481805s ago: executing program 1 (id=902):
socket$inet6(0xa, 0x80003, 0x6)
r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m3.001692357s ago: executing program 1 (id=904):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r1, 0x0, 0x3, 0x1}}, 0x20)

1m2.892552671s ago: executing program 1 (id=905):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x200068c0, &(0x7f0000000180)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e)

1m2.763130711s ago: executing program 1 (id=909):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000440)='./file1\x00', 0x208410, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES64=0x0], 0x1, 0x5a7d, &(0x7f0000022340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)

1m2.423000939s ago: executing program 1 (id=914):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0)="91d5c34a", &(0x7f0000000000), 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0), 0x0}, 0x20)

1m2.382301201s ago: executing program 32 (id=914):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0)="91d5c34a", &(0x7f0000000000), 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0), 0x0}, 0x20)

45.432018462s ago: executing program 3 (id=1092):
socket$netlink(0x10, 0x3, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)={0x1, [<r1=>0x0]}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x4}, &(0x7f0000000400)=0x8)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000540)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@sys_tz}, {@zero_size_dir}, {@fmask={'fmask', 0x3d, 0x6}}, {@sys_tz}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x3c}}, {@gid}, {@umask={'umask', 0x3d, 0x1}}]}, 0x1, 0x1541, &(0x7f00000034c0)="$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")
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r2 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0xb)
sendmsg$nl_route(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_unix(0x0, 0x0, 0x0, 0x802ca2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x2000800c)
mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u'])
openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x141842, 0x0)
openat(r2, &(0x7f0000000040)='./file1\x00', 0x111080, 0x16)
r6 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000040)=0x80000000)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2)

44.151338011s ago: executing program 3 (id=1097):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, <r2=>0x0], &(0x7f0000000000), 0x3, r1})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000200)={0x2e, r2, r1})

44.08211237s ago: executing program 3 (id=1099):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0)

44.08185147s ago: executing program 3 (id=1100):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x200068c0, &(0x7f0000000180)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e)

43.954946123s ago: executing program 3 (id=1103):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000080)=0x3, 0x4)

43.613108063s ago: executing program 3 (id=1110):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x7a6f938d2aadffed, 0x300)
mkdir(0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d8", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x3, 0x10000, 0x2f, 0x66, 0xcc7, 0xe, 0x0, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]})
write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0xba, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x2004d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x5, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x8, 0x3e, 0x8e, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x0, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0xc12f, 0x3e7, 0xb, 0x4, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3ff, 0x7ff, 0x12b, 0x4, 0x1, 0x2, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

43.573225118s ago: executing program 33 (id=1110):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x7a6f938d2aadffed, 0x300)
mkdir(0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d8", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x3, 0x10000, 0x2f, 0x66, 0xcc7, 0xe, 0x0, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]})
write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0xba, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x2004d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x5, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x8, 0x3e, 0x8e, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x0, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0xc12f, 0x3e7, 0xb, 0x4, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3ff, 0x7ff, 0x12b, 0x4, 0x1, 0x2, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.102920227s ago: executing program 0 (id=1583):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x10)

2.972886713s ago: executing program 2 (id=1585):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000740)="82", 0x1}, {0x0}], 0x2, 0x5000000, 0x7f)

2.919772568s ago: executing program 0 (id=1586):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0xc5, 0x6, 0x2, 0x1, 0x0, "f700", '\x00\x00G\x00', "050000f2", "fcffffff", ["50d5c2a7c50200ace40000b6", "808e0000000000eb0f00", "0c436d743c97c443084000"]})

2.919376723s ago: executing program 2 (id=1587):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e0, &(0x7f0000000500)="$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")
statx(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x100, 0x6a00, &(0x7f0000000200))

2.799559723s ago: executing program 2 (id=1589):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0)

2.797579015s ago: executing program 0 (id=1591):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15)
recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="20000023120001002cbd700000000000040000000c0041000100b1e6800d0000"], 0x20}], 0x1}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4iv2e136xNfb+2V5/n/T89s0bz3szOx6PZ+a9F4CJVWm8Li3NFSFcffPV4/984B+zd6Y82pqj1nidbktVQwhFTE9ny3tvqhnfev+lM93iIiw2XlM6PHmz9d7tIYRL4UC4Fmph79Xrr7y9+MTJyyeuHHzntaM31mftAQBgsnzr2tGlPX/7875dH7x+37GwpTU9nZ/XYnpHPO8/Fk/80/l/JXSmi7bQbiabbzqGSjbfVJf52supZvNN9yh/JltutZW/r2O+LSXlT7VN67beMM7SflwLRWW+I12pzM83f5OHxu/6mWL+wrnzz1wcUkWBNffv+0MIB4RBQ71e/3FjA45AXdY/3KgPvw7CeoT6zmEfgQCa8vuFd7mUX1lYndbSpvsr/+Zjle7vhzWw0fu/8ser/F9fjuWf+uu61oPJsFm/v9J6pc/RjpjO7yPkzy8N+vlPy5uKL9PZ8sv0uo8wLvcXetVzaoPrsVK96p/vF5vV12OctsM3svz2z0/+Px2X/zHQ3X8m7Pr/gRGow6YO1RGog9B3qA/7AASMrOXn5prqUcrPn+vL87eU5G8tyZ8tyd9Wkr+9JB8m2e+f/2l4uVj+nZ//ph/0eli6zvaRGH90wPrk1yMHLT9/7ndQqy0/f54YRtkbp586+5WnT11vPv9ftPb/23F/PxDTtfjZuhZnSNcL8+vqrWf/a53lVHrMd09Wn3TcqGxJ89ebJe7unK/Yvbyc0Hacuasec53v29lrvv2d89Wy+WZj2JrVNz8/2Za9L51/pONq2l7T2fpWs/WYyeqRjiu7YpzXA1Yi7Y+9nv9P++dcqBbPnDt/9pGYTvvpn6aqW+5MP9S+0N9sTN2B1em3/c9c6Gz/s6M1vVppPy7sXJ5etB8Xatn0xWaydZs8TT8c0+l77jtTs43p82e+d/7ptV55mHAXX3jxu6fPnz/7A3+kP2ZtFn/4Y9hHJmC9LTz/3PcXLr7w4sPnnjv97Nlnz144fOTI4cXFI189vLTQOK9faD+7BzaT5S/9YdcEAAAAAAAAAAAA6NcPTxy//pe3vvxus/3/cvu/1P4/Pfmb2v//JGv/n7eTT+3gUzvAXV3yG+PuvdFZj5lsvmoMH8vquzsrZ0/2vo/HuDWOX2z/n9rb5/26pvrcm03P++9N82XdCdzVX8pM1gdJPl7gp2J8Jca/CjBExWz3yTHu6N863N2/ddrXU/8U+qUYT+n/lvaG1I9Jav/dq1+ndPzftQF1ZO1tRHPCYa8j0N2/Rr7/77Yz8aHXZQKC7TxRoV43igcwGoY9/me67pniC3/85tY7Ic1287HO42XefymsxqiPP6n8URj/s1izSrTGv+vr+Neld/WOfp77H13hvz+/8W5bsWFvv8ffy9mqp36gd5eX2e6DWH5a/wdDf+XXf5mVn98Q6tP/svK39Vn+Xeu/f2Xl/z+WnzbbQ5/ut/xmjYtKZz3y68bp/l9+3Ti5la1/6ttz4PVf4UCNt2P5MMl6jzPb7wi2o2ko4/92uT+6UvlzGF+K6XQgTM855N/Ig9Y/PV+Rvgf2ZMsvSr7fxmWc4l4mffzfr8W47POQxv9N+2OtS7rSlq522bbjvq/AZvPeyN//G7NwaQTqIIxomB2BOnSGer2+vhe0Sgy1cIa+/Yd993nY5Q97+5fJx//Nz+Hz8X8r2Q+IfPzf/P35+L95fj6+Xp6fj/+bb898/N88/95sufkV7LmS/E+U5O8tyd+3nD/bLX9/yfs/WZJ/MMRzkh7595W8//6S/HtK8qdK8j9Tkv/ZkvwHSvIfKsn/XEn+Zpfao0zq+sMky9vn+fzD5Ej3f3p9/neX5APj62evH3r81O++XWu2/59p/V5L9/GOxXQ1/nb+UUzn971DW/pO3lsx/fcsf9Svd8AkyfvPyL/fHyzJB8ZXes7L5xsmUNG9x55++63qdZ7PePl8jL8Q4y/G+OEYz8d4IcaHYry4QfVjfTz+2z8cfblY/r2/M8vv93nyvD1Q3k/U4T7rk18fGPR59rwfv0GttvwVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmkrjdWlprgjh6puvHn/q5LmFO1Mebc1Ra7xOt6WqrfeF8EiMp2L8i/jHrfdfOtMe345xERZDEYrW9PDkzVZJ20MIl8KBcC3Uwt6r1195e/GJk5dPXDn4zmtHb6zfFgAAAIDN78MAAAD//+bcHCE=")
open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0)
ftruncate(r5, 0x2008000)
r6 = open(&(0x7f0000000b40)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x1000200201005)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

2.680030655s ago: executing program 2 (id=1592):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f40)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f27, 0x0, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x5, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x1, 0x8, 0xffffffff, 0x0, 0xfffffff8]})
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
timer_create(0x9, 0x0, &(0x7f00000000c0))
accept4(r0, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.730044837s ago: executing program 0 (id=1594):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="24000000120001c3000000000000000010003c"], 0x24}], 0x1}, 0x0)

1.550764285s ago: executing program 4 (id=1596):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xb6b2ca0ebc195c99, {0x2, 0x4e22, @multicast2}, 'veth0_vlan\x00'})

1.470246202s ago: executing program 0 (id=1597):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a)
pipe2(&(0x7f0000000240), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x8000)

1.2789156s ago: executing program 4 (id=1598):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
umount2(&(0x7f0000000400)='.\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40100, 0x1bb)

1.041028002s ago: executing program 2 (id=1599):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}}, 0x0)

916.64483ms ago: executing program 2 (id=1600):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0xc, 0x2, "2ece"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0x3, 0x2, "d0e6"}, 0x0, 0x0, 0x0, 0x0, 0x0})

916.473375ms ago: executing program 4 (id=1601):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000004000000000000000000000000000000000000400100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a"], 0x6c}}, 0x0)

761.10957ms ago: executing program 4 (id=1602):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000400000000600000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10002}, 0x50)

712.344847ms ago: executing program 4 (id=1603):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x1018084, &(0x7f000000cfc0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f696e6c696e655f646174612c6261636b67726f756e645f67633d6f6e2c6661756c745f747970653d30303030303030303030303030303030303030362c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6e6f696e6c696e655f78617474722c6a71666d743d7666736f6c642c6e6f61636c2c00a1a75ac439087a5b11ab7891dd39dd9bc0d7"], 0x1, 0x5509, &(0x7f00000079c0)="$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")
symlink(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

72.360891ms ago: executing program 0 (id=1604):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20)

0s ago: executing program 4 (id=1605):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$eJzs3c2OHFfZB/Cn+ms+/CaxsojyRghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmWhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTT7rGd7uqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6qIuPTztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeCMiPn464t792+vNorMH7Md3/vi33/7w2Pf/+vvhqX//6Ub/zUnr3bz5q3/9+c7j7y8AAACUqK7rukof819In+97XXcKAJiL/PpfJ3m5euHqzQXrj1qtVqsPYd1W7+9Ou4iIzfY2zXsGp+MB4JDZjE+67gIdkn/RBhFxrOtOAAut6roDzMS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PSdJrxa0zm9fzain48O6E/K3PqwyLJ+ffG87+00z5K6806/3mZlP9o59an4uT8++P5jzk6+ff2zb9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LtyIA87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrpx8sm/RdbM3yi1XEU2PrA4VJN8usdt0PAAAAAAAAAAAAACjJYOca3otVxDAinlpdreu6+Wkbrx/Vk25/2JW+/1Cyrv/IAwDAjo+fHruXv4pYjoiL6bv+hqurq3W9vLJar9YrS/n97GhpuV5pfa7N02bZ0ugAb4gHo7r5Zcut7dqmfV6e1j7++5rHGtX9A3RsPjoMHAAiYufV6J5XpCOmrp+Jrt/lcDg4/o8exz8H0fXzFAAAAJi9uq7rKn2d9wvpnH+v604BAHORX//Hzwuo1Wq1Wq0+enVbvb877SIiNtvbNO8ZDMcPAIfMZnzSdRfokPyLNoiI57vuBLDQqq47wEzcu397vUr5Vu3XgzS+e74WZE/+m9X2dnn7/abTjF9jMq/n11b049kJ/XluTn1YJDn/3nj+l3baR2m9Wec/L5Pyb/bzeAf96VrOvz+e/5ijk39v3/xLlfMfPFL+ffkDAAAAAMACy//+f3yhzv+OHnd3pnrY+d+1mT0qAAAAAAAAAMzWvfu31/N9r/n8/+f2Wc/9n0dTzr+Sf5Fy/un+/90Lb14ZW6/fmr/7zoP8/3n/9vrvbvzj//P0oPkv5ZkqPbOq9Iyo0iNVgzR9zB2bYGvYHzWPNKx6/UG65qcevhdX4mpsxOk96/bS8fCg/cye9qanw+32ur/TfnZP+2C3PW9/bk/7MF3pVK/k9pOxHj+Jq/HudnvTtjRl/5entNdT2nP+fcd/kXL+g9ZPk/9qaq/Gpo27H/X+57hvT/d7nLevfP6Xp2e/O1NtRX9339qa/Xupg/5s/z85disiNq6dvHn5xo1rZyJNjo3iZ9fz0rORJp+xnP8w/eT8X3l5pz3/3W8fr3c/Gj1y/otiKwYT83+5Nd/s76tz7lsXcv6j9JPzfze173/8H+b8Jx//r3XQHwAAAAAAAAAAAAAAAHiYuq63bxF9OyLOp/t/uro3EwCYr/z6Xyd5+bzq/uNu/4e9+9FV/9XqOdfVgvVnrvWn9WL1R72Q9X8WrD8LV7fV+3urXUTEX9rbNO8ZfrHfLwMAFtmnEfH3rjtBZ+RfsPx9f830RNedAebq+oe3fnT56tWNa9e77gkAAAAAAAAA8Ljy+J9rrfGfT9R1fWdsvT3jv74Ta086/ucgz+wOMDphoOr+o+/Tw2z1Rv1ea7jxF2PS+N/D3bmHjf89mPJ4wyntoyntS1Pal6e073ujR0vO/8XWeOcnIuKFseHXSxj/dXzM+xLk/F9qPZ+b/L80tl47//o3hzn/3p78T9344Kenrn946/UrH1x+f+P9jR+fO3Pm9Lnz5y9cuHDqvStXN07v/LfDHs9Wzj+Pfe060LLk/HPm8i9Lzv8LqZZ/WXL+X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9NtfzLkvP/cqrlX5ac/2upln9Zcv5fSbX8y5Lzfz3V8i9Lzv9kquVflpz/qVQfMP+VWfeL+cj55zNcjv+y5PzzlQ3yL0vO/2yq5V+WnP+5VMu/LDn/N1It/7Lk/L+aavmXJed/PtXyL0vO/2upln9Zcv4XUi3/suT8v55q+Zcl5/+NVMu/LDn/N1Mt/7Lk/L+ZavmXJef/rVTLvyw5/2+nWv5lyfm/lWr5l+XB9/+bMWNmRjODw3egdf2XCQAAAAAAAAAAAAAYN4/LibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe/cWI9dd3wH8zN68diA2EFInNWHtGGOcTXZ9iS+0LiZcG24lIRR6wXa9a7PgG167BBrVjgIlEkZFFW3DQ1tAqM1LhVXxQKuA8oBaVapE2gf6gqhQeYiqgAJSVVpBtpo5//9/Z2ZnZ3a9483Zcz4fKfllZ87MOXPmP7P7tfPdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2dY3TX+mlmVZrVbLL9iUZS+pz/VjmxqXvP7FPT4AAABg5X7R+PfzG9MFR5Zwo6Zt/umO73x9bm5uLvvA4J8Of2FuLl0xlmXD67KscV107QcfrDVvEzyWjdYGmr4e6LH7wR7XD/W4frjH9SM9rl/X4/rRHtcvOAELrM9q6c62N/5zU35Ks1uy4cZ12zvc6rHauoH6uUu3zWqN28wNn8xmstPZdDbZsn2+ba2x/VNb6/t6exb3NdC0ry31FfKTR07EY6iFc7y9ZV/z9xn96I3Z2E9/8siJv7743G2dZs/T0HJ/+XHu3FY/zk+FS/JjrWXr0jmJxznQdJxbOjwngy3HWWvcrv7f7cf5/BKPc3D+MFdV+3M+mg00/vuZxnkaqmUdztOWcNnP7syy7Mr8Ybdvs2Bf2UC2oeWSgfnnZzRfkfX7qC+ll2dDy1qnW5ewTutzanvrOm1/TcTnf2u43dAix9D8NP3o0ZGm5/3nc9ezTqP6o17stdK+Bvv9WinKGozr4pnGg3684xrcHh7/IzsWX4Md106HNZged9Ma3NZrDQ6MDDaOOT0JtcZt5tfg7pbtBxt7qjXmszu6r8GJi2fOT8x+4pN3z5w5fmr61PTZvbt3T+7dv//gwYMTJ2dOT0/m/77Os118G7KB9BrYFs5dfA28tm3b5qU69+WRBe+/1/s6HO3yOtzUtm2/X4dD7Q+utjovyIVrOn9tvK9+0kevDmSLvMYaz8+ulb8O0+Nueh0ONb0OO35P6fA6HFrC67C+zfldS/uZZajpn07HsPj3gpWtwU1Na7D955H2Ndjvn0eKsgZHw7r43q7FvxdsCcf7+Phyfx4ZXLAG08MN7z31S9LP+6MHG6PTury9fsVNI9ml2ekL9zx8/OLFC7uzMFbFK5rWSvt63dD0mLIF63Vg2ev1yMwdj9/e4fJN4VyN3l3/1+iiz1V9m333dH+uGt/dOp/Plkv3ZGH02Wqfz07fzevncyTLvvjtRx/45iNffNOi57OeNz81sfKfxVMubXr/HV7k/Tfm/hfy/aW7emxweCh//Q6mszPc8n7c+lQNNd67ao19Pz+xtPfj4fDPar8f39Ll/Xhz27b9fj8ebn9w8f241utPO1am/fkcDevk9GT39+P6Npv3LHdNDnV9P74zzFo4/68LSSHloqa1s9i6TfsaGhoOj2so7qF1ne5t2X44ZLP6vp7cc33rdOed+X0Npkc3b7XW6Vjbtv1ep+nPvhZbp7Vef/p2fdqfz9GwLm7Z232d1rd5et/K3zvXx/9seu8c6bUGhwdH6sc8nBZh4/0+m1sf1+A92YnsXHY6m2pcO9JYT7XGvsbvXdoaHAn/rPZ75eYua3Bn27b9XoPp+9hia682tPDB90H78zka1sUT93Zfg/Vt3nygvz+77gyXpG2afnZt//O1xf7M6/a203Sj1spQOM5vH+j+Z7P1bU4fXG7O7H6e7gqX3NThPLW/fhd7TU1lq3OeNofjfO7g4uepfjz1bb5waInr6UiWZZc/dl/jz3vD36/83aXvfr3l7106/Z3O5Y/d9+OXnvzH5Rw/AGvfC/nYkH+va/qbqaX8/T8AAACwJsTcPxBmIv8DAABAacTcH/+v8ET+BwAAgNKIuX8ozKQi+X/zm5+beeFylpr5c0G8Pp2G+/PtYsd1Mnw9Njevfvl9X53+73+4vLR9D2RZ9vP7/6Dj9pvvj8eVGwvHee0trZcv8PW7l7TvYw9dTvtt7q9/Kdx/fDxLXQadKriTWZY9tfFzjf2MffBqYz59/7HGfODK44/Vt3n+UP51vP2zr8i3/4tQ/j1y8njL7Z8N5+GHYU6+o/P5iLf72tXXbTnw/vn9xdvVtt3ceNhPfCi/3/h7cj7/WL59PM+LHf83P/vk1+rbP/yazsd/eaDz8T8Z7verYf7vq/Ltm5+D+tfxdp8Oxx/3F293z1e+1fH4r30m3/78W/PtjoUZ978zfL39rc/NNJ+vh2vHWx5X9rZ8u7j/ye/+ceP6eH/x/tuPf/To1Zbz0b4+nv63/H4m2raPl8f9RH/ftv/6/TSvz7j/J//oWMt57rX/aw88+6r6/bbv/6627c5/bFdj//P31/obm/7y05/ruL94PEf+9nzL4zny3vA6Dvt/4kNhPYbr/+9afn/tv13h2Htb33/i9l/adLnl8URv/2m+/2tvONWY60bXb7jpJS+9+cqr6+cuy55Zl99fr/2f+qtzLcf/5Vvz8xGvjx399v0vJu7/wsfHz56bvTQzlc7qIxsbvzvnnfnxxOPdGN5b278+eu7ih6cvjE2OTWbZWHl/hd51+0qYP87Hle5bzy14B931UHg+b//zpzbs+NfPxsv//X355VffkX/fem3Y7vPh8k3h+Vve/hd6Yuutjdd37elwhHMLf1/wSmzZ/l8Hl7RhePztPxfE9X7+lR9unIf6dY3vG/F1vcLj//5Ufj/fCOd1Lvxm5m23zu+vefv4uxGuPpi/3ld8/sLbXHxe/yY83+/6YX7/8bji4/1++DnmW5tb3+/i+vjG5YH2+2/8Fo8r4f0ku5JfH7eK5/vq87d2PLz4e0iyK7c1vv6TdD+3LethLmb2E7MTp2fOXnp44uL07MWJ2U988uiZc5fOXjza+F2eRz/S6/bz708bGu9PU9P792WNd6tz+bjBXuzjP//QiakDkzumpk8ev3Ty4kPnpy+cOjE7e2J6anbH8ZMnpz/e6/YzU4d37zm098Ce8VMzU4cPHjq099D4zNlz9cPID6qH/ZMfHT974WjjJrOH9x3afe+9+ybHz5ybmj58YHJy/FKv2ze+N43Xb/374xemTx+/OHNmenx25pPTh3cf2r9/T8/fBnjm/MnZsYkLl85OXJqdvjCRP5axi42L69/7et2ecpr9j/zn2Xa1/BfxZe+5a3/6/ax1X3100bvKN2n7BaLPhd9F888vO39wKV/H3D8cZlKR/A8AAABVEHP/SJiJ/A8AAAClEXP/ujAT+R8AAABKI+b+0TCTiuT/0vX/N19e0v71//X/m8+X/n/F+v8PFq3/n79f6P/3x0r79/r/gf6//r/+v/6//j99ULT+f8z967OskvkfAAAAqiDm/g1hJvI/AAAAlEbM/TeFmcj/AAAAUBox978kzKQi+V//X/9f/1//X/+/8/71/9cm/f/u9P970P+fyKrV/7/Sz+PX/9f/Z6Gi9f9j7n9pmElF8j8AAABUQcz9N4eZyP8AAABQGjH3bwwzkf8BAACgNGLu3xRmUpH8r//ftf/fXkNelP5/6/Hr/3deH/r/+v/6/zee/n93+v896P/7/H/9f/1/+qpo/f+Y+18WZlKR/A8AAABVEHP/y8NM5H8AAAAonqHru1nM/a8IM1mQ/69zBwAAAMCLLub+W7K2InhF/v5f/9/n/xe//78uXaf/r/+fFbL/P5jp/xeH/n93+v896P/r/+v/6//TV0Xr/zdyfzaavTLMpCL5HwAAAKog5v5bw0zkfwAAACiNmPt/KcxE/gcAAIDSiLl/c5hJRfK//r/+f/H7/z7/X/+/6P1/n/9fJPr/3en/96D/r/+v/6//T18Vrf8fc/9tYSYVyf8AAABQBTH33x5mIv8DAABAacTc/8thJvI/AAAAlEbM/VvCTCqS//X/C97/j81R/X/9f/1//X/9/yXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/8dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu4fCzOpSP7X/y94/z/vwY/4/H/9f/1//X/9/6XR/+9O/78H/X/9/770/+cu6//r/5MrWv8/5v6tYSYVyf8AAABQBTH3bwszkf8BAACgNGLuvzPMRP4HAACA0oi5f3uYSUXyv/7/muj/Z/r/+v/6//r/+v9Lo//fnf5/D/r/+v8+/1//n74qWv8/5v7XhJlUJP8DAABAFcTcvyPMRP4HAACA0oi5/7VhJvI/AAAAlEbM/TvDTCqS//X/9f/1//X/9f8771//f23S/+9O/78H/X/9f/1//X/6qmj9/5j7XxdmUpH8DwAAAFUQc/+uMBP5HwAAAEoj5v67wkzkfwAAACiNmPvHw0wqkv/1//X/9f/1//X/O+9f/39t0v/vTv+/B/1//X/9f/1/+qpo/f+Y++8OM6lI/gcAAIAqiLn/njAT+R8AAABKI+b+iTAT+R8AAABKI+b+yTCTiuR//X/9f/1//f9l9f9fPX+/+v85/f9i0f/vTv+/B/1//f8Xvf8/rP9PqRSt/x9z/+4wk4rkfwAAAKiCmPv3hJnI/wAAAFAaMffvDTOR/wEAAKA0Yu7fF2ZSkfyv/6//r/+v/+/z/zvvX/9/bdL/767//f/4EPX/9f/1/33+v/4/CxWt/x9z/71hJhXJ/wAAAFAFMffvDzOR/wEAAKA0Yu4/EGYi/wMAAEBpxNx/MMykIvlf/1//X/9f/1//v/P+9f/XJv3/7nz+fw/6//r/+v/6/6zQg3/Y/FXR+v8x9x8KM6lI/gcAAIAqiLn/9WEm8j8AAACURsz9vxJmIv8DAABAacTc/6thJhXJ//r/Ld3z+sPV/9f/1//X/2/Q/1+b9P+70//vQf9f/1//X/+fvlq0/x+i92r3/2PuPxxmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/IcxE/gcAAIDSiLn/SJhJRfK//r/P/9f/1//X/++8/9Xu/4/E+9X/XxH9/+70/3vQ/9f/1//X/6evivb5/zH3vzHMpCL5HwAAAKog5v77wkzkfwAAACiNmPvfFGYi/wMAAEBpxNz/5jCTiuR//X/9f/1//X/9/8779/n/a5P+f3f6/8GdGzsfgP6//r/+v/4/fVW0/n/M/W8JM6lI/gcAAIAqiLn/rWEm8j8AAACURsz9bwszkf8BAACgNGLuf3uYSUXyv/6//r/+v/6//n/n/ev/r036/93p//eg/6//r/+v/09fFa3/H3P/r4eZVCT/AwAAQBXE3H9/mIn8DwAAAKURc/87wkzkfwAAACiNmPvfGWZSkfyv/6//r/+v/6//33n/+v9rk/5/d2us//+Lm8Pl+v85/f9iH/9y+/9DbV/fkP7/Dxbr/8+ta7+9/j83QtH6/zH3vyvMpCL5HwAAAKog5v53h5nI/wAAAFAaMfe/J8xE/gcAAIDSiLn/N8JMKpL/9f/rxzHfXtb/L2v/f0D/X/9f/78i9P+7W2P9f5//30b/v9jH7/P/9f9ZqGj9/5j73xtmUpH8DwAAAFUQc/8DYSbyPwAAAJRGzP0PhpnI/wAAAFAaMfe/L8ykIvlf/9/n/1ej/+/z/zP9f/3/itD/707/vwf9f/3/ovX//1P/n7WtaP3/mPsfCjOpSP4HAACAKoi5//1hJvI/AAAAlEbM/b8ZZiL/AwAAQGnE3P+BMJOK5H/9/7XS/x9bo/3/R/X/b2D//46b8+30//X/maf/353+fw/6//r/Rev/+/x/1rii9f9j7v9gmMnS8//okrcEAAAAXhQx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/7XS//f5/5n+v8//b3s8+v/6/52sXv8/vvPo/+v/6/9H+v/6//r/tCta/z/m/t8NM6lI/gcAAIAqiLn/Q2Em8j8AAACsCZ3+n+x2MfcfDTOR/wEAAKA0Yu4/FmZSkfyv/6//r/9f0P7/n237l+99593Hduv/6//r/y/Lqn7+f/3F7/P/9f/1/xP9f/1//X/aFa3/H3P/8TCTiuR/AAAAqIKY+38vzET+BwAAgNKIuf9EmIn8DwAAAKURc/9UmElF8r/+v/6//n9B+/9r+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vn++J6/8vt/8/0vFS/X/9/7V8/Pr/+v8sVLT+f8z902EmFcn/AAAAUAUh9w+czOf8FfI/AAAAlEbM/afCTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuTz/4sq9e9/1nih6P+3KU7/vzP9f/3/tXz8+v/6/yxUtP5/zP0zYSYVyf8AAABQBTH3fyTMRP4HAACA0oi5/6NhJvI/AAAAlEbM/afDTCqS//X/9f/1//X/9f8777+wn/+v/9/VSvv3+v+B/n+1+///o/+v/6//T38Urf8fc/+ZMJOK5H8AAACogv9n706aLKvLPI7f7C66soJe9K4X3YuO6N71S2DRve5+AS7cuDHCcIEKKs4UziOKirMiOA84gCCigvMATiiKA6g4izNOiBJlkPU8T1Vmnjw3s+pm5jn//+ezqEfSSu6VqKjiV1lfT+7+8+MW+x8AAACakbv/UXGL/Q8AAADNyN3/6Lilk/2v/z+b/v9Upaz/3/z+J9H//4/+f6fX1//r/1um/x+n/19C/+/5//p//T8rNbX+P3f/Y+KWTvY/AAAA9CB3/wVxi/0PAAAAzcjdf2HcYv8DAABAM3L3PzZu6WT/b+n/1xZ99v+Z8Xr+f0v9v+f/7/j6+n/9f8sOtv+/5MGf+fT/+n/9f9D/76r/P7rT5+v/adHU+v/c/Y+LWzrZ/wAAANCD3P2Pj1vsfwAAAGhG7v6L4hb7HwAAAJqRu/8JcUsn+391z/8/tvHxmfb/Rf+v/9/4gP5f/6//ny3P/x/XU/9/4e3nnn/v9f92w15eX/+v//f8f/0/qzW1/j93/xPjlk72PwAAAPQgd/+T4hb7HwAAAJqRu//JcYv9DwAAAM3I3f+UuKWT/b+6/n/Wz/8v+n/9/8YH9P/6f/3/bOn/x/XU/5/J6+v/9f/6f/0/qzW1/j93/1Pjlk72PwAAAPQgd//T4hb7HwAAAJqRu//iuMX+BwAAgGbk7j8et3Sy//X/+9//P6D/1//H1f/r//X/+0//P07/v4T+X/+v/9f/s1JT6/9z918St3Sy/wEAAKAHufufHrfY/wAAANCM3P3PiFvsfwAAAGhG7v5nxi2d7H/9v+f/6/+X9/8X6P+D/l//P336/3H6/yX0/2fbz5+j/9f/6/853R77//tHftpeSf+fu/9ZcUsn+x8AAAB6kLv/2XGL/Q8AAADNyN3/nLjF/gcAAIBm5O5/btzSyf7X/+v/9f+e/3/G/f/2H3ob9P/D9P8HQ/8/bjL9/9qRwQ/r/2ff/3v+v/5f/88mU3v+f+7+58Utnex/AAAA6EHu/ufHLSP7f8+/mQ8AAAAcqtz9L4hbfP0fAAAAZi+rs9z9L4xbOtn/+n/9v/5f/+/5/8OvP9b/33Da+9P/T4v+f9xk+v8d6P/1/3N+//p//T/bTa3/z93/orilk/0PAAAAPcjdf2ncYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/h/v/U/+9/n939P+b37/+f/jHx6r6//w76v9H+///9fz/Pun/xx18/39U/7/576//30eH/f4b7/+PLft8/T9Dptb/5+6/LG7pZP8DAABAD3L3vzRusf8BAACgGbn7Xxa32P8AAADQjNz9L49bOtn/nv+v/9f/z6//9/z/kw7z+f+LA+//j+j/d0n/P87z/5fQ/+v/9f+e/89KTa3/z91/edzSyf4HAACAHlx+32Jj979isbD/AQAAYI5O/7MDW/9Aacjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrT6v/9/z/3dL/j9P/L6H/349+/khj/f8VO33+FPr/i/X/TMym/v+mUx8/rP4/d/+r45ZO9j8AAAD0IHf/a+IW+x8AAACakbv/tXGL/Q8AAADNyN3/urilk/2/7/3/sZ1fe+b9/6byRP+/+f3r/zfT/8ePB/2//v8A6P/H6f+X0P97/r/n/+v/WalT/f/mnw8Pq//P3f/6uKWT/Q8AAAA9yN3/hrjF/gcAAIBm5O6/Im6x/wEAAKAZufvfGLd0sv89/9/z//X/+n/9//Dr6//nSf8/Tv+/hP5f/6//1/+zUpue/3+aw+r/c/dfGbd0sv8BAACgB7n7r4pb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//n9/+//8uP5f/7/Q/+v/9f8Hotv+f23oV6Ltduj/b33E8f/f/BH9v/5f/6//1/+zApPo/0+c+rfL3P1viVs62f8AAADQg9z9b41b7H8AAABoRu7+t8Ut9j8AAAA0I3f/2+OWPe7/f1npuzo4+n/P/9f/6//1/8Ovr/+fp277/13y/P8l9P/6f/2//p+VmkT/f9pf5+5/R9zi6/8AAADQjNz974xb7H8AAABoRu7+d8Ut9j8AAAA0I3f/u+OWTva//l//r/+fZf9/XnwX/f8E+//1xTD9/8HQ/4/T/y+h/9f/6//1/6zU1Pr/3P1Xxy2d7H8AAADoQe7+98Qt9j8AAAA0I3f/e+MW+x8AAACakbv/fXFLJ/tf/6//1//Psv/3/P8J9/870f8fDP3/OP3/YrG4ZuQNDPX/J47q//X/+n/9P2doav1/7v73xy2d7H8AAADoQe7+a+IW+x8AAACakbv/2rjF/gcAAIBm5O7/QNzSyf7X/+v/9f/6f/3/8Ovr/+dJ/z9O/7+E5//r//X/+n9Wamr9f+7+6+KWTvY/AAAA9CB3//Vxi/0PAAAAzcjd/8G4xf4HAACAZuTuvyFu6WT/6//1//p//f++9P/H9f9b6f8Pxv71/wv9v/5f/7+E/l//r/9nq4Pq/++Pn++X9f+5+z8Ut3Sy/wEAAKAHuftvjFvsfwAAAGhG7v4Pxy32PwAAADQjd/9H4pZO9r/+X/+v/9f/e/7/8Ovr/+fJ8//H6f+X0P/r//X/+n9W6qD6/516/61/nbv/o3FLJ/sfAAAAepC7/6a4xf4HAACAZuTuvzlusf8BAACgGbn7Pxa3dLL/9f/6/839/2Kh/9f/6/9POoD+f32h/185/f84/f8S+v82+/9/WDTU/x/b8fP1/0zR1Pr/3P0fj1s62f8AAADQg9z9n4hb7H8AAABoRu7+T8Yt9j8AAAA0I3f/p+KWlvb/Azunb/Pv/49u+UT9/2KxuPMiz//X/4+8vv5/Mv1//VPV/6+O/n/cv//XPXes7+Y76v/1/y31/57/r//n0Eyt/8/d/+m4paX9DwAAAJ3L3f+ZuMX+BwAAgGbk7v9s3GL/AwAAQDNy938ubulk/8+//9/6ifr/xVk9/1//v/EB/b/+X/8/W2fb31+5Hr+mtdv/e/7/GP3/0n5+bYd/71no//X/+n8GTK3/z93/+bilk/0PAAAAPcjdf0vcYv8DAABAM3L33xq32P8AAADQjNz9X4hbOtn/+n/9/5z6/3X9f/X/6/p//b/+f9BUnv9/3nn/d5v+X//fYv8/Rv+v/9f/s9XU+v/c/V+MWzrZ/wAAANCD3P1filvsfwAAAGhG7v4vxy32PwAAADQjd/9X4pZO9v/2/v+cxclC9aSh/j8aNf3/afT/m9+/5/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v//2P75+n9aNLX+P3f/bXFLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTuvz1u6WT/e/6//l//r//X/w+/vv5/nvT/4/T/S+j/z76fz59V9f/zff7/P+r/WZ2p9f+5+78et2wMv//85zP8nwkAAABMSO7+b8QtnXz9HwAAAHqQu/+OuMX+BwAAgGbk7v9m3NLJ/tf/6//1//p//f/w6+v/50n/P07/v0Q//f/60AcPu58/W4f9/pvp/z3/nxWaWv+fu/9bcUsn+x8AAADadt/Gt7n7vx232P8AAADQjNz934lb7H8AAABoRu7+O+OWTva//l//337//zD9/5bX1//r/1um/89f0Yfp/5fop/8fdNj9/Nzfv/5f/892U+v/c/ffFbd0sv8BAACgB7n7vxu32P8AAADQjNz934tb7H8AAABoRu7+78ctnex//X9f/f/aosf+3/P/9f/6/57Mp/+/6sjQRz3/X/+v/5/v+9f/6//Zbmr9f+7+u9eOdLn/AQAAYK4e8t+PvGu33/fujW/XFz+IW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/576P//aeTz9f8MmVr/n7v/x3HLacNv8P+gBwAAADg8Y78pNSB3/0/ilk6+/g8AAAA9yN3/07hl2/4/scs/1Q4AAABMTe7+n8UtnXz9X/8/8f5/sU/9f3w//f9J+n/9/9Dr6//nSf8/7iz7/xNr+n/9/wj9f/v9/xj9P0Om1v/n7r/xukWX+x8AAAAatel3FH6+8e364p64xf4HAACAZuTu/0XcYv8DAABAM3L3/zJu6WT/6/8n3v+f0fP/j9V/8vz/zvv/S9cHX1//r/9vmf5/nOf/L6H/1//r//X/rNQe+v+NQbrf/X/u/l/FLZ3sfwAAAOhB7v5fxy32PwAAADQjd/9v4hb7HwAAAJqRu/+3cUsn+1//fwj9/2VHF4t97f938fx//X8f/f8Or99O//+v5x6/5aEPv/Zq/T+nHGT/nz8W9P/6f/3/Sfp//b/+n62m9vz/3P2/i1s62f8AAADQg9z998Yt9j8AAAA0I3f/7+OWB/f/zYf1rgAAAIBVyt3/h7ilk6//6/9bfP7/PPv//Gd9CP3/8fn1/9kU997/e/6//n87z/8fp/9fQv+v/9f/6/9Zqan1/7n7/xi3dLL/AQAAoAe5+/8Ut+T+X9vzb90DAAAAE5O7/89xi6//AwAAQDNy998Xt3Sy//X/+v+p9P/J8/9PfZ7n/5+k/9f/74X+f5z+fwn9v/5f/6//Z6Wm1v/n7v9L3NLJ/gcAAIAe5O6/P26x/wEAAKAZufv/GrfY/wAAANCM3P1/i1s62f/6f/2//l//r/8ffn39/zzp/8fp/5fQ/+v/9f/6f1Zqav1/7v6/BwAA//+l7G5O")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185)

kernel console output (not intermixed with test programs):

consistent configuration, please check.
[  129.820448][ T7916] loop2: detected capacity change from 0 to 32768
[  129.829956][ T7916] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.128868][ T7916] XFS (loop2): Ending clean mount
[  130.157009][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.381065][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'.
[  131.381100][ T7941] Zero length message leads to an empty skb
[  131.618237][ T7955] loop0: detected capacity change from 0 to 2048
[  131.633393][ T7955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.650903][   T34] audit: type=1800 audit(1755287313.391:33): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.800" name="bus" dev="loop0" ino=1436 res=0 errno=0
[  131.735580][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  131.751915][ T7957] loop2: detected capacity change from 0 to 8192
[  131.904878][   T10] usb 2-1: Using ep0 maxpacket: 16
[  131.913588][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.918644][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.923121][   T10] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  131.931012][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.940405][   T10] usb 2-1: config 0 descriptor??
[  132.502905][   T10] pantherlord 0003:0F30:0111.000B: unknown main item tag 0x0
[  132.511346][   T10] pantherlord 0003:0F30:0111.000B: unknown main item tag 0x0
[  132.516226][   T10] pantherlord 0003:0F30:0111.000B: unknown main item tag 0x0
[  132.519621][   T10] pantherlord 0003:0F30:0111.000B: unknown main item tag 0x0
[  132.524042][   T10] pantherlord 0003:0F30:0111.000B: unknown main item tag 0x0
[  132.545837][   T10] pantherlord 0003:0F30:0111.000B: hidraw0: USB HID vff.fd Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0
[  132.560519][   T10] pantherlord 0003:0F30:0111.000B: no output reports found
[  132.700636][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.703154][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.708876][   T10] usb 2-1: USB disconnect, device number 15
[  133.338096][ T7976] program syz.0.809 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.399996][ T7980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.810'.
[  133.581055][ T7993] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  133.599006][ T7993] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  135.123045][ T8013] loop1: detected capacity change from 0 to 32768
[  135.150941][ T8013] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  135.160583][ T8013] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.189670][ T8013] XFS (loop1): Ending clean mount
[  135.198050][ T8013] XFS (loop1): Quotacheck needed: Please wait.
[  135.231167][ T8013] XFS (loop1): Quotacheck: Done.
[  135.261172][ T5838] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.477181][ T8024] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14
[  135.546119][ T8029] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  135.751164][ T8031] loop2: detected capacity change from 0 to 32768
[  135.753086][ T8041] loop1: detected capacity change from 0 to 4096
[  135.768912][ T8041] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  135.780259][ T8031] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.798195][ T8041] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  135.807758][ T8031] XFS (loop2): Ending clean mount
[  135.812383][ T8031] XFS (loop2): Quotacheck needed: Please wait.
[  135.839117][ T8031] XFS (loop2): Quotacheck: Done.
[  135.890947][ T5842] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.904875][ T1271] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  135.989765][ T8053] loop1: detected capacity change from 0 to 1024
[  136.062903][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'.
[  136.075367][ T1271] usb 1-1: Using ep0 maxpacket: 16
[  136.087026][ T1271] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  136.101006][ T8059] loop1: detected capacity change from 0 to 8
[  136.106691][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  136.113557][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 42580, setting to 1024
[  136.113743][ T8059] SQUASHFS error: zlib decompression failed, data probably corrupt
[  136.119205][ T1271] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  136.127962][ T1271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.130116][ T8059] SQUASHFS error: Failed to read block 0x9b: -5
[  136.136391][ T8059] SQUASHFS error: Unable to read metadata cache entry [99]
[  136.139636][ T1271] usb 1-1: config 0 descriptor??
[  136.140390][ T8059] SQUASHFS error: Unable to read inode 0x127
[  136.142520][ T8036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  136.260866][ T8065] loop1: detected capacity change from 0 to 1024
[  136.266492][ T8065] EXT4-fs: Ignoring removed nobh option
[  136.268358][ T1271] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -12
[  136.310665][ T8065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.779199][   T10] usb 1-1: USB disconnect, device number 14
[  137.074303][ T8074] netlink: 'syz.2.843': attribute type 3 has an invalid length.
[  137.077428][ T8074] netlink: 766 bytes leftover after parsing attributes in process `syz.2.843'.
[  137.300509][ T8084] loop2: detected capacity change from 0 to 8192
[  137.531167][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.651529][ T8106] loop1: detected capacity change from 0 to 1024
[  137.659717][ T8106] EXT4-fs: Ignoring removed orlov option
[  137.670066][ T8106] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  137.694237][ T8106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.736709][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.755147][ T8114] loop2: detected capacity change from 0 to 4096
[  137.759008][ T8114] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  137.798982][ T8114] ntfs3(loop2): ino=19, mi_enum_attr
[  137.801250][ T8114] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  137.816361][ T8116] syzkaller1: tun_chr_ioctl cmd 1074025672
[  137.818708][ T8116] syzkaller1: ignored: set checksum enabled
[  137.821700][ T8114] ntfs3(loop2): failed to convert "c46c" to cp855
[  137.829248][ T8114] ntfs3(loop2): ino=20, mi_enum_attr
[  137.925445][ T8110] loop0: detected capacity change from 0 to 32768
[  137.935051][ T8110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.858 (8110)
[  137.946084][ T8110] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.949492][ T8110] BTRFS info (device loop0 state S): using crc32c (crc32c-lib) checksum algorithm
[  137.960758][ T8110] BTRFS info (device loop0 state S): using free-space-tree
[  138.043678][ T8131] loop2: detected capacity change from 0 to 4096
[  138.047486][   T40] BTRFS warning (device loop0 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored
[  138.057601][ T5990] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  138.067206][   T40] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x48746f3c level 0, ignored
[  138.083882][   T40] BTRFS warning (device loop0 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored
[  138.089815][ T8131] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  138.093998][ T8110] BTRFS info (device loop0 state S): bdev /dev/loop0 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0
[  138.112855][ T6082] BTRFS warning (device loop0 state S): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored
[  138.174015][ T5844] BTRFS info (device loop0 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.225017][ T8120] loop1: detected capacity change from 0 to 32768
[  138.233939][ T8120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.864 (8120)
[  138.238475][ T8141] netlink: 68 bytes leftover after parsing attributes in process `syz.2.866'.
[  138.278089][ T8120] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.282527][ T8120] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  138.289373][ T8141] process 'syz.2.866' launched './file0' with NULL argv: empty string added
[  138.291136][ T8120] BTRFS info (device loop1): using free-space-tree
[  138.368815][   T34] audit: type=1800 audit(1755287320.101:34): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.866" name="file1" dev="loop2" ino=33 res=0 errno=0
[  138.826073][ T5838] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  140.946356][ T8180] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  140.954909][ T8180] netlink: 236 bytes leftover after parsing attributes in process `syz.2.874'.
[  140.987635][ T8182] loop1: detected capacity change from 0 to 256
[  141.039835][ T8182] FAT-fs (loop1): Directory bread(block 64) failed
[  141.042480][ T8182] FAT-fs (loop1): Directory bread(block 65) failed
[  141.053295][ T8182] FAT-fs (loop1): Directory bread(block 66) failed
[  141.062141][ T8182] FAT-fs (loop1): Directory bread(block 67) failed
[  141.087146][ T8182] FAT-fs (loop1): Directory bread(block 68) failed
[  141.089756][ T8182] FAT-fs (loop1): Directory bread(block 69) failed
[  141.092390][ T8182] FAT-fs (loop1): Directory bread(block 70) failed
[  141.120126][ T8182] FAT-fs (loop1): Directory bread(block 71) failed
[  141.122808][ T8182] FAT-fs (loop1): Directory bread(block 72) failed
[  141.134554][ T8182] FAT-fs (loop1): Directory bread(block 73) failed
[  141.411508][ T8194] loop1: detected capacity change from 0 to 32768
[  141.460920][ T8194] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.521276][ T8194] XFS (loop1): Ending clean mount
[  141.554813][ T8194] XFS (loop1): syz.1.882 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  141.564646][ T5903] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  141.609649][ T5838] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.744890][ T5903] usb 1-1: Using ep0 maxpacket: 16
[  141.750514][ T5903] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  141.755361][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.769075][ T5903] usb 1-1: config 0 descriptor??
[  141.780720][ T5903] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  141.890962][ T8230] loop1: detected capacity change from 0 to 4096
[  141.920492][ T8231] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.943921][ T8230] NILFS error (device loop1): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  141.952745][ T8230] Remounting filesystem read-only
[  141.979979][ T5903] usb 1-1: Detected FT232A
[  141.988371][ T5903] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  142.000898][ T5903] usb 1-1: USB disconnect, device number 15
[  142.020723][ T5903] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  142.031547][ T5903] ftdi_sio 1-1:0.0: device disconnected
[  142.842468][ T8247] loop2: detected capacity change from 0 to 8
[  142.892495][ T8247] SQUASHFS error: zlib decompression failed, data probably corrupt
[  142.896343][ T8247] SQUASHFS error: Failed to read block 0x4e8: -5
[  142.941317][ T8247] SQUASHFS error: Failed to read block 0x6e6: -5
[  142.944576][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  142.947880][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  142.951228][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  142.954870][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  142.958155][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  142.961513][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  142.964680][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  142.967936][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  142.971094][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  142.974350][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  142.977944][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  142.981228][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  142.984374][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  142.987846][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  142.991111][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  142.994647][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  142.998016][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.001351][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.004695][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.008169][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.011299][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.014148][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.017829][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.021349][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.024150][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.027454][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.027473][   T34] audit: type=1800 audit(1755287324.641:35): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.901" name="file1" dev="loop2" ino=5 res=0 errno=0
[  143.030460][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.040726][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.044120][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.047269][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.050016][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.053218][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.056393][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.060446][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.063696][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.067240][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.070037][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.073242][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.076422][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.079211][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.082383][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.085433][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.088123][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.088711][ T8243] loop0: detected capacity change from 0 to 32768
[  143.091106][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.091151][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.091202][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.103674][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.106616][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.109219][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.112186][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.115180][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.117858][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.120965][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.124269][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.126953][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.130166][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.133118][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.135832][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.138858][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.141679][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.144489][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.147608][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.150514][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.153084][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.156265][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.157980][ T8243] JBD2: Ignoring recovery information on journal
[  143.159300][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.164944][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.167989][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.170836][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.173424][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.176648][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.179052][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.181627][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.184791][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.187825][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.190434][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.193552][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.198508][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.201051][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.204105][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.207173][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.209820][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.212815][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.215868][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.218649][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.221878][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.224689][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.227426][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.230654][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.233532][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.236195][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.239204][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.242133][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.244999][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.248098][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.251805][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.254360][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.257320][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.260114][ T8247] SQUASHFS error: Failed to read block 0x0: -5
[  143.262823][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.265621][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.268104][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.271004][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.271657][ T8243] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  143.273349][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.279666][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.282513][ T8247] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  143.285725][ T8247] SQUASHFS error: read_indexes: reading block [6e4:0]
[  143.363721][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  143.479204][ T8257] fuse: Bad value for 'fd'
[  143.485607][ T8257] loop1: detected capacity change from 0 to 512
[  143.490160][ T8257] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  143.550141][ T8257] EXT4-fs (loop1): 1 truncate cleaned up
[  143.553861][ T8257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.629509][ T5838] EXT4-fs error (device loop1): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  143.670670][ T5838] EXT4-fs (loop1): Remounting filesystem read-only
[  143.762329][ T7989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.048428][ T5849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.155981][ T5849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.174668][ T8283] loop2: detected capacity change from 0 to 4096
[  144.187176][ T8283] EXT4-fs (loop2): Test dummy encryption mode enabled
[  144.196381][ T8283] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  144.208264][ T8283] System zones: 0-5
[  144.220047][ T8283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.240951][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.248108][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.261088][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.267534][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.270280][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.283977][ T5849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.341776][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.371429][ T5849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.476585][ T8291] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  144.522899][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'.
[  144.529016][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.920'.
[  144.532852][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'.
[  144.537629][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.920'.
[  144.540525][ T8293] netlink: 104 bytes leftover after parsing attributes in process `syz.2.920'.
[  144.543850][ T8285] chnl_net:caif_netlink_parms(): no params data found
[  144.563059][ T5849] bridge_slave_1: left allmulticast mode
[  144.565917][ T5849] bridge_slave_1: left promiscuous mode
[  144.576832][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.587347][ T5849] bridge_slave_0: left allmulticast mode
[  144.596367][ T5849] bridge_slave_0: left promiscuous mode
[  144.598289][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.745638][ T8297] loop0: detected capacity change from 0 to 32768
[  144.770401][ T8297] o2cb: This node has not been configured.
[  144.772423][ T8297] o2cb: Cluster check failed. Fix errors before retrying.
[  144.782383][ T8297] (syz.0.922,8297,0):ocfs2_dlm_init:3354 ERROR: status = -22
[  144.793060][ T8297] (syz.0.922,8297,0):ocfs2_mount_volume:1735 ERROR: status = -22
[  144.806565][ T8297] (syz.0.922,8297,0):ocfs2_fill_super:1177 ERROR: status = -22
[  144.815566][ T5849] team0: Port device bridge0 removed
[  144.961768][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.968210][ T5849] bond0 (unregistering): Released all slaves
[  145.013926][ T8302] vlan2: entered allmulticast mode
[  145.018661][ T8302] hsr0: entered allmulticast mode
[  145.020834][ T8302] hsr_slave_0: entered allmulticast mode
[  145.023234][ T8302] hsr_slave_1: entered allmulticast mode
[  145.233416][ T5902] IPVS: starting estimator thread 0...
[  145.240126][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.253104][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.256556][ T8285] bridge_slave_0: entered allmulticast mode
[  145.259969][ T8285] bridge_slave_0: entered promiscuous mode
[  145.327126][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.329679][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.332504][ T8285] bridge_slave_1: entered allmulticast mode
[  145.338113][ T8319] IPVS: using max 54 ests per chain, 129600 per kthread
[  145.346196][ T8285] bridge_slave_1: entered promiscuous mode
[  145.461423][ T5849] hsr_slave_0: left promiscuous mode
[  145.465546][ T5849] hsr_slave_1: left promiscuous mode
[  145.467867][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.470490][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.487010][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.489841][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.530079][ T5849] veth1_macvtap: left promiscuous mode
[  145.532585][ T5849] veth0_macvtap: left promiscuous mode
[  145.535434][ T5849] veth1_vlan: left promiscuous mode
[  145.538295][ T5849] veth0_vlan: left promiscuous mode
[  145.813854][ T8351] netlink: 25 bytes leftover after parsing attributes in process `syz.0.942'.
[  145.928005][ T5849] team0 (unregistering): Port device team_slave_1 removed
[  145.953366][ T5849] team0 (unregistering): Port device team_slave_0 removed
[  146.095011][ T5903] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  146.208968][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.248072][ T5903] usb 1-1: Using ep0 maxpacket: 32
[  146.253396][ T5903] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  146.255534][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.262457][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.277026][ T5903] usb 1-1: config 0 descriptor??
[  146.289804][ T5903] gspca_main: sq930x-2.14.0 probing 041e:403c
[  146.295838][ T5234] Bluetooth: hci0: command tx timeout
[  146.331248][ T8285] team0: Port device team_slave_0 added
[  146.335436][ T8285] team0: Port device team_slave_1 added
[  146.579426][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.582373][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.593393][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.599982][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.603013][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.616080][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.692108][ T8285] hsr_slave_0: entered promiscuous mode
[  146.695936][ T8285] hsr_slave_1: entered promiscuous mode
[  146.698783][ T8285] debugfs: 'hsr0' already exists in 'hsr'
[  146.701172][ T8285] Cannot create hsr debugfs directory
[  146.769663][ T5903] gspca_sq930x: ucbus_write failed -71
[  146.774701][ T5903] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  146.785623][ T5903] usb 1-1: USB disconnect, device number 16
[  146.809599][ T5849] IPVS: stop unused estimator thread 0...
[  146.922330][ T8285] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  146.929013][ T8285] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  146.936228][ T8285] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  146.942271][ T8285] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  147.035661][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.077198][ T8285] 8021q: adding VLAN 0 to HW filter on device team0
[  147.090484][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.093684][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.103936][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.107157][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.193274][ T8380] loop2: detected capacity change from 0 to 512
[  147.231993][ T8380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.279939][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.340029][ T8391] vlan0: entered promiscuous mode
[  147.421673][ T8397] loop0: detected capacity change from 0 to 1024
[  147.437764][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.443880][ T8397] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.471605][ T8285] veth0_vlan: entered promiscuous mode
[  147.477288][ T8285] veth1_vlan: entered promiscuous mode
[  147.489313][ T8397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.497493][ T8285] veth0_macvtap: entered promiscuous mode
[  147.501751][ T8285] veth1_macvtap: entered promiscuous mode
[  147.517832][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.529319][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.534118][ T8300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.549829][ T8300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.553183][ T8300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.562078][ T8300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.651851][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.657672][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.681259][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.683980][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.727575][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.931034][ T8422] loop0: detected capacity change from 0 to 1024
[  147.970452][ T8422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.127601][ T8437] netlink: 'syz.2.960': attribute type 4 has an invalid length.
[  148.131897][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.284807][ T8452] loop0: detected capacity change from 0 to 164
[  148.390143][ T5234] Bluetooth: hci0: command tx timeout
[  148.511328][ T8462]  nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  148.524681][ T8462] nullb0: p1 start 3121229925 is beyond EOD, truncated
[  148.527703][ T8462] nullb0: p2 start 1125600442 is beyond EOD, truncated
[  148.530652][ T8462] nullb0: p3 start 2749556348 is beyond EOD, truncated
[  148.544806][ T8462] nullb0: p4 size 749881270 extends beyond EOD, truncated
[  148.561579][ T8456] loop3: detected capacity change from 0 to 32768
[  148.565884][ T8462] nullb0: p5 start 3634521299 is beyond EOD, truncated
[  148.569571][ T8462] nullb0: p6 start 3691333785 is beyond EOD, truncated
[  148.573471][ T8462] nullb0: p7 start 3987215793 is beyond EOD, truncated
[  148.575951][ T8456] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.968 (8456)
[  148.581276][ T8462] nullb0: p8 start 1563769952 is beyond EOD, truncated
[  148.588291][ T8462] nullb0: p9 start 1763214672 is beyond EOD, truncated
[  148.614442][ T8456] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.617865][ T8456] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  148.749327][ T8456] BTRFS info (device loop3): rebuilding free space tree
[  148.773975][ T8456] BTRFS info (device loop3): disabling free space tree
[  148.780947][ T8456] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  148.788847][ T8456] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  148.982482][ T8285] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.027628][ T8505] loop2: detected capacity change from 0 to 1024
[  149.049093][ T8505] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  149.096069][ T8505] hfsplus: filesystem is marked journaled, leaving read-only.
[  149.150399][ T8513] loop0: detected capacity change from 0 to 512
[  149.389259][ T8532] loop0: detected capacity change from 0 to 256
[  149.412766][ T8532] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.430683][ T8532] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  149.456613][ T8532] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  149.513156][ T8540] loop2: detected capacity change from 0 to 256
[  149.534779][ T8540] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d)
[  149.548278][ T8540] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  149.553139][ T8542] loop3: detected capacity change from 0 to 512
[  149.561659][ T8542] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  149.578781][ T8540] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  149.582160][   T34] audit: type=1800 audit(1755287331.321:36): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.990" name="file1" dev="loop2" ino=1048603 res=0 errno=0
[  149.582786][ T8542] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  149.597805][ T8542] System zones: 0-2, 18-18, 34-34
[  149.602552][ T8542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.624658][ T8542] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.676273][ T8285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.727843][ T8555] loop3: detected capacity change from 0 to 512
[  149.731358][ T8555] EXT4-fs: Ignoring removed bh option
[  149.746048][ T8555] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  149.765764][ T8555] EXT4-fs (loop3): 1 truncate cleaned up
[  149.770786][ T8555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.820904][ T8285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.824947][ T5309] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  149.855122][ T8562] loop3: detected capacity change from 0 to 8
[  149.857743][ T8562] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  149.868102][ T8562] cramfs: Error -5 while decompressing!
[  149.870499][ T8562] cramfs: ffffffff99beb628(26)->ffff88811d4ad000(4096)
[  149.877928][ T8562] cramfs: Error -3 while decompressing!
[  149.880058][ T8562] cramfs: ffffffff99beb642(26)->ffff88811d4ae000(4096)
[  149.883626][ T8562] cramfs: Error -3 while decompressing!
[  149.886210][ T8562] cramfs: ffffffff99beb65c(16)->ffff88811d4af000(4096)
[  149.888756][ T8562] cramfs: Error -5 while decompressing!
[  149.890692][ T8562] cramfs: ffffffff99beb628(26)->ffff88811d4ad000(4096)
[  149.941342][ T8566] loop3: detected capacity change from 0 to 1024
[  149.964856][ T8566] hfsplus: xattr exists yet
[  149.988741][ T5309] usb 1-1: config 0 has an invalid interface number: 127 but max is 1
[  149.990866][   T40] hfsplus: b-tree write err: -5, ino 4
[  149.992208][ T5309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.992225][ T5309] usb 1-1: config 0 has no interface number 1
[  149.993620][ T5309] usb 1-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  150.009681][ T5309] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29
[  150.025172][ T5309] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  150.030924][ T5309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.042051][ T5309] usb 1-1: Product: syz
[  150.043855][ T5309] usb 1-1: Manufacturer: syz
[  150.047009][ T5309] usb 1-1: SerialNumber: syz
[  150.055571][ T5309] usb 1-1: config 0 descriptor??
[  150.060803][ T5309] usb-storage 1-1:0.127: USB Mass Storage device detected
[  150.069454][ T5309] usb-storage 1-1:0.127: Quirks match for vid 1908 pid 1315: 20000
[  150.129308][ T5309] usb-storage 1-1:0.0: USB Mass Storage device detected
[  150.150984][ T5309] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  150.262891][ T8568] loop3: detected capacity change from 0 to 32768
[  150.293241][ T5309] usb 1-1: USB disconnect, device number 17
[  150.333762][ T8568] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,compression=gzip,str_hash=crc32c,wide_macs,no_splitbrain_check,fix_errors=ask,norecovery,noexcl,version_upgrade=none
[  150.333783][ T8568]   allowing incompatible features above 0.0: (unknown version)
[  150.333791][ T8568]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  150.355752][ T8568] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  150.359647][ T8568] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  150.385011][ T8568] bcachefs (loop3): accounting_read... done
[  150.389776][ T8568] bcachefs (loop3): alloc_read... done
[  150.392634][ T8568] bcachefs (loop3): snapshots_read... done
[  150.399262][ T8568] bcachefs (loop3): done starting filesystem
[  150.448187][ T8285] bcachefs (loop3): shutting down
[  150.465225][ T5234] Bluetooth: hci0: command tx timeout
[  150.472031][ T8285] bcachefs (loop3): shutdown complete
[  150.819162][ T8589] loop2: detected capacity change from 0 to 16
[  150.845219][ T8589] erofs (device loop2): mounted with root inode @ nid 36.
[  150.857418][ T8589] erofs (device loop2): inline data across blocks @ nid 36
[  151.011133][ T8596] loop2: detected capacity change from 0 to 4096
[  151.026858][ T8596] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  151.061799][ T8596] ntfs3(loop2): ino=1d, mi_enum_attr
[  151.067023][ T8596] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  151.070398][ T8596] ntfs3(loop2): ino=1d, mi_enum_attr
[  151.073976][ T8596] ntfs3(loop2): ino=1d, mi_enum_attr
[  151.122354][ T8598] loop2: detected capacity change from 0 to 512
[  151.132252][ T8598] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  151.140506][ T8598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  151.143977][ T8598] EXT4-fs (loop2): orphan cleanup on readonly fs
[  151.147963][ T8598] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1009: bg 0: block 361: padding at end of block bitmap is not set
[  151.155038][ T8598] EXT4-fs (loop2): Remounting filesystem read-only
[  151.158036][ T8598] EXT4-fs (loop2): 1 truncate cleaned up
[  151.160728][ T8598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  151.410903][ T8603] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1009: dx entry: limit 0 != root limit 125
[  151.415138][ T8603] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1009: Corrupt directory, running e2fsck is recommended
[  151.422973][ T8603] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1009: dx entry: limit 0 != root limit 125
[  151.427440][ T8603] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1009: Corrupt directory, running e2fsck is recommended
[  151.433538][ T8603] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1009: dx entry: limit 0 != root limit 125
[  151.438014][ T8603] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1009: Corrupt directory, running e2fsck is recommended
[  151.444627][ T8603] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1009: dx entry: limit 0 != root limit 125
[  151.448866][ T8603] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1009: Corrupt directory, running e2fsck is recommended
[  151.731847][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  152.185304][ T8627] loop0: detected capacity change from 0 to 512
[  152.205363][ T8627] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  152.238178][ T8627] block device autoloading is deprecated and will be removed.
[  152.254795][ T8627] EXT4-fs (loop0): external journal has bad superblock
[  152.286417][ T8619] loop2: detected capacity change from 0 to 32768
[  152.294546][ T5902] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  152.300123][ T8619] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1015 (8619)
[  152.320504][ T8619] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  152.325287][ T8619] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  152.333189][ T8619] BTRFS info (device loop2): using free-space-tree
[  152.444529][ T5902] usb 4-1: Using ep0 maxpacket: 32
[  152.450196][ T5902] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  152.453804][ T5902] usb 4-1: config 4 has no interface number 0
[  152.457209][ T5902] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.461670][ T5902] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.465219][ T5902] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  152.467179][ T8619] BTRFS info (device loop2): rebuilding free space tree
[  152.468749][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.484012][ T5902] hub 4-1:4.128: USB hub found
[  152.546609][ T5234] Bluetooth: hci0: command tx timeout
[  152.685238][ T5902] hub 4-1:4.128: 2 ports detected
[  152.691165][ T5902] hub 4-1:4.128: Using single TT (err -22)
[  152.869646][ T5842] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  153.107126][ T5902] usb 4-1: USB disconnect, device number 2
[  153.206553][ T8652] tipc: Started in network mode
[  153.208424][ T8652] tipc: Node identity 7, cluster identity 4711
[  153.210886][ T8652] tipc: Node number set to 7
[  154.150593][   T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  154.350880][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  154.362879][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  154.373226][   T10] usb 4-1: config 1 has no interface number 1
[  154.376172][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  154.382818][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  154.387243][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.391638][   T10] usb 4-1: Product: syz
[  154.393676][   T10] usb 4-1: Manufacturer: syz
[  154.398635][   T10] usb 4-1: SerialNumber: syz
[  154.644593][   T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  154.701147][   T10] usb 4-1: failed to enable PITCH for EP 0x82
[  154.721799][   T10] usb 4-1: USB disconnect, device number 3
[  154.756400][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.786560][ T5903] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  154.804801][   T24] usb 1-1: Using ep0 maxpacket: 16
[  154.808934][   T24] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  154.814182][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  154.817317][   T24] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  154.820275][   T24] usb 1-1: Product: syz
[  154.821684][   T24] usb 1-1: Manufacturer: syz
[  154.823308][   T24] usb 1-1: SerialNumber: syz
[  154.831484][   T24] usbtest 1-1:254.0: couldn't get endpoints, -22
[  154.833708][   T24] usbtest 1-1:254.0: probe with driver usbtest failed with error -22
[  154.934846][ T5903] usb 3-1: Using ep0 maxpacket: 8
[  154.937941][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[  154.941202][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  154.946235][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  154.950308][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  154.956589][ T5903] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  154.959716][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.962394][ T5903] usb 3-1: Product: syz
[  154.963986][ T5903] usb 3-1: Manufacturer: syz
[  154.965668][ T5903] usb 3-1: SerialNumber: syz
[  154.972579][ T5903] usb 3-1: config 0 descriptor??
[  154.975564][ T8673] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  155.040367][   T24] usb 1-1: USB disconnect, device number 18
[  155.182582][ T5903] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  155.195070][ T5903] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16
[  155.601740][    C0] powermate: config urb returned -71
[  155.603039][ T5875] usb 3-1: USB disconnect, device number 11
[  155.603854][    C0] powermate: usb_submit_urb(config) failed
[  155.606528][    C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  155.771569][ T8692] loop3: detected capacity change from 0 to 512
[  155.779122][ T8692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  155.793155][ T8692] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1038: bad orphan inode 15
[  155.807088][ T8688] loop0: detected capacity change from 0 to 40427
[  155.807366][ T8692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.817100][ T8688] F2FS-fs (loop0): Image doesn't support compression
[  155.819752][ T8688] F2FS-fs (loop0): build fault injection rate: 690
[  155.831354][ T8688] F2FS-fs (loop0): invalid crc value
[  155.876888][ T8285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.917896][ T8688] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.934028][ T8688] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.959657][   T34] audit: type=1800 audit(1755287337.701:37): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1037" name="file1" dev="loop0" ino=10 res=0 errno=0
[  155.989567][ T5844] syz-executor: attempt to access beyond end of device
[  155.989567][ T5844] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.996496][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  155.996515][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.996522][ T5844] Call Trace:
[  155.996527][ T5844]  <TASK>
[  155.996532][ T5844]  dump_stack_lvl+0x189/0x250
[  155.996554][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.996567][ T5844]  ? __pfx_queue_work_on+0x10/0x10
[  155.996579][ T5844]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  155.996594][ T5844]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.996618][ T5844]  f2fs_handle_critical_error+0x37c/0x540
[  155.996640][ T5844]  f2fs_write_end_io+0x886/0xb60
[  155.996664][ T5844]  __submit_merged_bio+0x27a/0x6a0
[  155.996706][ T5844]  __submit_merged_write_cond+0x255/0x530
[  155.996728][ T5844]  f2fs_write_data_pages+0x261d/0x3000
[  155.996774][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.996840][ T5844]  ? folios_put_refs+0x559/0x640
[  155.996874][ T5844]  ? __lock_acquire+0xab9/0xd20
[  155.996900][ T5844]  ? do_raw_spin_lock+0x121/0x290
[  155.996925][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  155.996939][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.996958][ T5844]  do_writepages+0x32e/0x550
[  155.996984][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  155.997002][ T5844]  filemap_fdatawrite+0x199/0x240
[  155.997019][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  155.997075][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  155.997093][ T5844]  f2fs_sync_dirty_inodes+0x31f/0x830
[  155.997118][ T5844]  f2fs_write_checkpoint+0x95a/0x1df0
[  155.997150][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  155.997204][ T5844]  ? kill_f2fs_super+0x298/0x6c0
[  155.997221][ T5844]  kill_f2fs_super+0x2c3/0x6c0
[  155.997239][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  155.997248][ T5844]  ? radix_tree_delete_item+0x2b6/0x400
[  155.997270][ T5844]  ? shrinker_free+0x2ce/0x3e0
[  155.997285][ T5844]  deactivate_locked_super+0xbc/0x130
[  155.997302][ T5844]  cleanup_mnt+0x425/0x4c0
[  155.997316][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.997335][ T5844]  task_work_run+0x1d4/0x260
[  155.997353][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  155.997367][ T5844]  ? __x64_sys_umount+0x122/0x160
[  155.997387][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  155.997406][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  155.997424][ T5844]  do_syscall_64+0x2bd/0x3b0
[  155.997439][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.997475][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.997487][ T5844]  ? exc_page_fault+0x9f/0xf0
[  155.997504][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.997515][ T5844] RIP: 0033:0x7facbd38ff17
[  155.997527][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  155.997537][ T5844] RSP: 002b:00007ffe3e89c318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  155.997550][ T5844] RAX: 0000000000000000 RBX: 00007facbd411c05 RCX: 00007facbd38ff17
[  155.997557][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3e89c3d0
[  155.997564][ T5844] RBP: 00007ffe3e89c3d0 R08: 0000000000000000 R09: 0000000000000000
[  155.997571][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3e89d460
[  155.997579][ T5844] R13: 00007facbd411c05 R14: 00000000000260d7 R15: 00007ffe3e89d4a0
[  155.997602][ T5844]  </TASK>
[  155.999661][ T5844] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  156.603843][ T8713] Invalid source name
[  156.606589][ T8713] UBIFS error (pid: 8713): cannot open "/dev/sg0", error -22
[  156.622234][ T8713] loop2: detected capacity change from 0 to 64
[  156.715264][ T8717] loop0: detected capacity change from 0 to 2048
[  156.730267][ T8717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.739865][ T8717] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh
[  156.806945][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  156.858002][ T8726] syz.2.1051: attempt to access beyond end of device
[  156.858002][ T8726] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0
[  156.974710][   T10] usb 4-1: Using ep0 maxpacket: 32
[  156.988898][   T10] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  156.992288][   T10] usb 4-1: config 0 has no interface number 0
[  157.011635][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  157.024240][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.027831][   T10] usb 4-1: Product: syz
[  157.029664][   T10] usb 4-1: Manufacturer: syz
[  157.031655][   T10] usb 4-1: SerialNumber: syz
[  157.040780][   T10] usb 4-1: config 0 descriptor??
[  157.050094][   T10] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  157.053336][   T10] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  157.295299][   T10] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  157.509514][   T10] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  157.739487][   T10] usb 4-1: USB disconnect, device number 4
[  157.746539][   T10] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  158.433441][ T8741] loop0: detected capacity change from 0 to 40427
[  158.447988][ T8741] F2FS-fs (loop0): Image doesn't support compression
[  158.463926][ T8741] F2FS-fs (loop0): build fault injection rate: 690
[  158.478244][ T8741] F2FS-fs (loop0): invalid crc value
[  158.572046][ T8756] vcan0: tx address claim with dest, not broadcast
[  158.584047][ T8741] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.590643][ T8741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  158.679544][ T5844] syz-executor: attempt to access beyond end of device
[  158.679544][ T5844] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  158.688121][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  158.688134][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.688138][ T5844] Call Trace:
[  158.688142][ T5844]  <TASK>
[  158.688145][ T5844]  dump_stack_lvl+0x189/0x250
[  158.688159][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.688167][ T5844]  ? __pfx_queue_work_on+0x10/0x10
[  158.688174][ T5844]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.688184][ T5844]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  158.688197][ T5844]  f2fs_handle_critical_error+0x37c/0x540
[  158.688211][ T5844]  f2fs_write_end_io+0x886/0xb60
[  158.688225][ T5844]  __submit_merged_bio+0x27a/0x6a0
[  158.688238][ T5844]  __submit_merged_write_cond+0x255/0x530
[  158.688250][ T5844]  f2fs_write_data_pages+0x261d/0x3000
[  158.688275][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  158.688290][ T5844]  ? arch_stack_walk+0xfc/0x150
[  158.688311][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.688325][ T5844]  ? folios_put_refs+0x560/0x640
[  158.688338][ T5844]  ? __lock_acquire+0xab9/0xd20
[  158.688352][ T5844]  ? do_raw_spin_lock+0x121/0x290
[  158.688365][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  158.688373][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  158.688383][ T5844]  do_writepages+0x32e/0x550
[  158.688397][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  158.688407][ T5844]  filemap_fdatawrite+0x199/0x240
[  158.688417][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  158.688447][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  158.688457][ T5844]  f2fs_sync_dirty_inodes+0x31f/0x830
[  158.688471][ T5844]  f2fs_write_checkpoint+0x95a/0x1df0
[  158.688489][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  158.688517][ T5844]  ? kill_f2fs_super+0x298/0x6c0
[  158.688526][ T5844]  kill_f2fs_super+0x2c3/0x6c0
[  158.688536][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  158.688542][ T5844]  ? radix_tree_delete_item+0x2b6/0x400
[  158.688554][ T5844]  ? shrinker_free+0x2ce/0x3e0
[  158.688563][ T5844]  deactivate_locked_super+0xbc/0x130
[  158.688573][ T5844]  cleanup_mnt+0x425/0x4c0
[  158.688581][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.688590][ T5844]  task_work_run+0x1d4/0x260
[  158.688601][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  158.688608][ T5844]  ? __x64_sys_umount+0x122/0x160
[  158.688619][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  158.688630][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  158.688642][ T5844]  do_syscall_64+0x2bd/0x3b0
[  158.688650][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.688658][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.688687][ T5844]  ? exc_page_fault+0x9f/0xf0
[  158.688699][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.688705][ T5844] RIP: 0033:0x7facbd38ff17
[  158.688713][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  158.688719][ T5844] RSP: 002b:00007ffe3e89c318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  158.688727][ T5844] RAX: 0000000000000000 RBX: 00007facbd411c05 RCX: 00007facbd38ff17
[  158.688732][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3e89c3d0
[  158.688736][ T5844] RBP: 00007ffe3e89c3d0 R08: 0000000000000000 R09: 0000000000000000
[  158.688740][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3e89d460
[  158.688744][ T5844] R13: 00007facbd411c05 R14: 0000000000026b44 R15: 00007ffe3e89d4a0
[  158.688757][ T5844]  </TASK>
[  158.688760][ T5844] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  158.886757][ T8764] loop2: detected capacity change from 0 to 512
[  158.890959][ T8764] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  158.960109][ T8764] block device autoloading is deprecated and will be removed.
[  158.971696][ T8764] syz.2.1064: attempt to access beyond end of device
[  158.971696][ T8764] md185: rw=0, sector=2, nr_sectors = 2 limit=0
[  158.993128][ T8764] EXT4-fs (loop2): couldn't read superblock of external journal
[  159.220434][ T8776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1066'.
[  159.224232][ T8776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1066'.
[  160.480202][ T8823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.848988][ T8845] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  160.967286][ T8856] loop3: detected capacity change from 0 to 256
[  160.970187][ T8856] exfat: Deprecated parameter 'utf8'
[  160.977059][ T8856] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  162.034186][ T8870] loop0: detected capacity change from 0 to 256
[  162.322509][ T8887] fuse: Bad value for 'fd'
[  162.340828][ T8887] loop3: detected capacity change from 0 to 512
[  162.355733][ T8887] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  162.368842][ T8887] EXT4-fs (loop3): 1 truncate cleaned up
[  162.379454][ T8887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.439352][ T8285] EXT4-fs error (device loop3): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  162.455985][ T8285] EXT4-fs (loop3): Remounting filesystem read-only
[  162.710906][ T8906] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  162.719826][   T40] Bluetooth: hci0: Frame reassembly failed (-84)
[  162.722081][ T8285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.723472][   T40] Bluetooth: hci0: Frame reassembly failed (-84)
[  162.799249][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.878545][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.965101][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.972605][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  162.977973][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  162.981741][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  162.992341][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  162.996749][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  163.044944][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.127834][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'.
[  163.203469][ T8913] gretap1: entered promiscuous mode
[  163.206144][ T8913] bridge1: port 1(gretap1) entered blocking state
[  163.209242][ T8913] bridge1: port 1(gretap1) entered disabled state
[  163.212158][ T8913] gretap1: entered allmulticast mode
[  163.288595][   T13] bridge_slave_1: left allmulticast mode
[  163.291087][   T13] bridge_slave_1: left promiscuous mode
[  163.293799][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.304750][   T13] bridge_slave_0: left allmulticast mode
[  163.306784][   T13] bridge_slave_0: left promiscuous mode
[  163.308897][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.487802][ T8919] loop2: detected capacity change from 0 to 32768
[  163.498338][ T8919] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.545400][ T8919] XFS (loop2): Ending clean mount
[  163.583971][ T8919] XFS (loop2): Quotacheck needed: Please wait.
[  163.588254][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.593056][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.609122][   T13] bond0 (unregistering): Released all slaves
[  163.609220][ T8919] XFS (loop2): Quotacheck: Done.
[  163.617360][ T8908] chnl_net:caif_netlink_parms(): no params data found
[  163.672040][ T5842] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.839140][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.841481][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.844304][ T8908] bridge_slave_0: entered allmulticast mode
[  163.850225][ T8908] bridge_slave_0: entered promiscuous mode
[  163.869414][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.872588][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.877876][ T8908] bridge_slave_1: entered allmulticast mode
[  163.882138][ T8908] bridge_slave_1: entered promiscuous mode
[  163.941854][ T8908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.949532][ T8908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.998311][ T8908] team0: Port device team_slave_0 added
[  164.002484][ T8908] team0: Port device team_slave_1 added
[  164.028147][   T13] hsr_slave_0: left promiscuous mode
[  164.031262][   T13] hsr_slave_1: left promiscuous mode
[  164.033736][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.038995][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.042365][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.045874][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.064294][   T13] veth1_macvtap: left promiscuous mode
[  164.066674][   T13] veth0_macvtap: left promiscuous mode
[  164.068913][   T13] veth1_vlan: left promiscuous mode
[  164.071082][   T13] veth0_vlan: left promiscuous mode
[  164.084492][ T5902] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  164.235121][ T5902] usb 3-1: Using ep0 maxpacket: 32
[  164.241813][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.248814][ T5902] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  164.252430][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.266148][ T5902] usb 3-1: Product: syz
[  164.267875][ T5902] usb 3-1: Manufacturer: syz
[  164.269786][ T5902] usb 3-1: SerialNumber: syz
[  164.282273][ T5902] usb 3-1: config 0 descriptor??
[  164.298545][ T5902] usb 3-1: bad CDC descriptors
[  164.301126][ T5902] usb 3-1: unsupported MDLM descriptors
[  164.448213][   T13] team0 (unregistering): Port device team_slave_1 removed
[  164.478769][   T13] team0 (unregistering): Port device team_slave_0 removed
[  164.501756][ T5902] usb 3-1: USB disconnect, device number 12
[  164.776697][   T55] Bluetooth: hci0: command 0x1003 tx timeout
[  164.776709][ T5234] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  164.898005][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.900672][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.915907][ T8908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.932954][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.936096][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.948395][ T8908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.018466][ T5234] Bluetooth: hci3: command tx timeout
[  165.086305][ T8908] hsr_slave_0: entered promiscuous mode
[  165.092358][ T8908] hsr_slave_1: entered promiscuous mode
[  165.112178][ T8908] debugfs: 'hsr0' already exists in 'hsr'
[  165.114321][ T8908] Cannot create hsr debugfs directory
[  165.381626][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'.
[  165.490352][ T8976] loop0: detected capacity change from 0 to 1024
[  165.582548][ T8968] loop2: detected capacity change from 0 to 32768
[  165.615955][ T8968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1124 (8968)
[  165.637557][ T8968] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.646258][ T8968] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  165.649724][ T8968] BTRFS info (device loop2): using free-space-tree
[  165.739426][ T8908] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  165.758440][ T8908] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  165.769049][ T8908] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  165.787225][ T8908] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  165.828399][ T5842] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.949938][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'.
[  166.080950][ T8908] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.094799][ T9015] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  166.116797][ T8908] 8021q: adding VLAN 0 to HW filter on device team0
[  166.130675][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.133711][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.173258][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.176306][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.214239][ T8908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  166.237976][ T8908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.293656][ T9017] loop2: detected capacity change from 0 to 8192
[  166.448468][ T8908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.459003][ T9028] tipc: Enabled bearer <udp:syz2>, priority 10
[  166.985443][ T8908] veth0_vlan: entered promiscuous mode
[  166.998674][ T8908] veth1_vlan: entered promiscuous mode
[  167.050010][ T8908] veth0_macvtap: entered promiscuous mode
[  167.059592][ T8908] veth1_macvtap: entered promiscuous mode
[  167.070581][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.077939][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.084755][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.094763][ T5234] Bluetooth: hci3: command tx timeout
[  167.097268][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.100510][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.107031][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.203083][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.211110][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.226403][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.229092][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.302910][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'.
[  167.660766][ T9079] netlink: 'syz.4.1144': attribute type 4 has an invalid length.
[  168.238142][ T9099] loop0: detected capacity change from 0 to 32768
[  168.255607][ T9099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1150 (9099)
[  168.282953][ T9099] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.284728][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  168.298191][ T9099] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  168.301120][ T9099] BTRFS info (device loop0): using free-space-tree
[  168.454963][   T10] usb 3-1: Using ep0 maxpacket: 32
[  168.459691][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  168.464142][   T10] usb 3-1: config 7 has an invalid interface number: 69 but max is 0
[  168.471158][   T10] usb 3-1: config 7 has no interface number 0
[  168.477988][   T10] usb 3-1: config 7 interface 69 has no altsetting 0
[  168.494562][ T5844] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.507799][   T10] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=a5.97
[  168.511367][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.522384][   T10] usb 3-1: Product: syz
[  168.524291][   T10] usb 3-1: Manufacturer: syz
[  168.527102][   T10] usb 3-1: SerialNumber: syz
[  168.698075][ T9131] affs: No valid root block on device nullb0
[  168.762524][   T10] kvaser_usb 3-1:7.69: error -ENODEV: Cannot get usb endpoint(s)
[  168.780384][ T5234] Bluetooth: hci2: command 0x0406 tx timeout
[  168.791212][   T10] usb 3-1: USB disconnect, device number 13
[  169.029744][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1158'.
[  169.175798][   T55] Bluetooth: hci3: command tx timeout
[  169.279937][ T9156] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1166'.
[  169.327057][ T9159] loop2: detected capacity change from 0 to 64
[  169.341120][ T9159] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  169.521927][ T9174] netlink: 'syz.2.1174': attribute type 1 has an invalid length.
[  169.551046][ T9174] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  169.555301][ T9174] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  169.561572][ T9174] bond1: (slave vcan1): making interface the new active one
[  169.567462][ T9174] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  169.851856][ T9188] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1178'.
[  169.855763][ T9188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1178'.
[  169.859441][ T9188] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1178'.
[  170.132743][ T9208] mkiss: ax0: crc mode is auto.
[  170.407347][ T9211] loop0: detected capacity change from 0 to 32768
[  170.421168][ T9211] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  170.437666][ T9211] (syz.0.1189,9211,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255
[  170.443883][ T9211] (syz.0.1189,9211,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  170.449585][ T9211] (syz.0.1189,9211,1):ocfs2_mknod:301 ERROR: status = -2
[  170.470557][ T9211] (syz.0.1189,9211,1):ocfs2_mknod:505 ERROR: status = -2
[  170.473411][ T9211] (syz.0.1189,9211,1):ocfs2_create:678 ERROR: status = -2
[  170.500116][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  170.621986][ T9219] loop2: detected capacity change from 0 to 512
[  170.640084][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'.
[  170.643787][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'.
[  170.653113][ T9219] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  170.688543][ T9223] loop0: detected capacity change from 0 to 512
[  170.699155][ T9223] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1194: corrupted in-inode xattr: invalid ea_ino
[  170.708466][ T9223] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1194: couldn't read orphan inode 15 (err -117)
[  170.719840][ T9223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.769597][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.455539][   T55] Bluetooth: hci3: command tx timeout
[  172.021854][ T9273] loop4: detected capacity change from 0 to 1024
[  172.025854][ T9273] EXT4-fs: inline encryption not supported
[  172.056342][ T9273] EXT4-fs: Ignoring removed i_version option
[  172.067417][ T9273] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  172.093581][ T9273] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1214: lblock 2 mapped to illegal pblock 2 (length 1)
[  172.093785][ T9281] loop0: detected capacity change from 0 to 1024
[  172.100993][ T9273] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  172.105772][ T9273] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1214: lblock 0 mapped to illegal pblock 48 (length 1)
[  172.112062][ T9273] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  172.122297][ T9273] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1214: Failed to acquire dquot type 0
[  172.137458][ T9273] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  172.147749][ T9273] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1214: mark_inode_dirty error
[  172.151901][ T9273] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  172.152520][ T9281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.156845][ T9273] EXT4-fs (loop4): 1 orphan inode deleted
[  172.166492][   T26] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  172.180669][ T9273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.181907][   T26] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  172.197201][   T26] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u9:0: Failed to release dquot type 0
[  172.203934][ T9273] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm syz.4.1214: lblock 1 mapped to illegal pblock 1 (length 1)
[  172.225973][ T9273] Quota error (device loop4): find_next_id: Can't read quota tree block 1
[  172.263214][ T8908] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.278924][ T8908] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  172.293672][ T8908] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  172.300032][ T8908] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  172.324138][ T9290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.466162][ T9295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  172.470083][ T9295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  172.540539][ T9302] loop0: detected capacity change from 0 to 64
[  172.552298][ T9300] loop2: detected capacity change from 0 to 2048
[  172.573260][ T9300] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=4096, location=4096
[  172.575965][ T9302] syz.0.1224: attempt to access beyond end of device
[  172.575965][ T9302] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  172.598460][ T9302] Buffer I/O error on dev loop0, logical block 8388608, async page read
[  172.598756][ T9300] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  172.607435][ T9300] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  172.609200][ T9302] syz.0.1224: attempt to access beyond end of device
[  172.609200][ T9302] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  172.611929][ T9300] UDF-fs: Scanning with blocksize 512 failed
[  172.625359][ T9300] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  172.630134][ T9300] UDF-fs: Scanning with blocksize 1024 failed
[  172.636112][ T9302] Buffer I/O error on dev loop0, logical block 8388608, async page read
[  172.636818][ T9300] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  172.643841][ T9300] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  172.647705][ T9300] UDF-fs: Scanning with blocksize 2048 failed
[  172.651448][ T9300] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  172.657393][ T9300] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  172.661707][ T9300] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  172.665461][ T9300] UDF-fs: Scanning with blocksize 4096 failed
[  172.668301][ T9300] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  173.487958][ T9324] loop0: detected capacity change from 0 to 16
[  173.494272][ T9324] erofs (device loop0): bogus i_mode (0) @ nid 58320
[  173.616504][ T9319] loop4: detected capacity change from 0 to 32768
[  173.766067][ T9332] loop4: detected capacity change from 0 to 128
[  173.927656][ T9336] program syz.4.1237 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  174.189175][ T9349] loop2: detected capacity change from 0 to 4096
[  174.224832][ T9349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.407256][ T9360] loop4: detected capacity change from 0 to 64
[  174.414034][ T9360] MINIX-fs: mounting file system with errors, running fsck is recommended
[  174.951135][ T9373] loop0: detected capacity change from 0 to 1024
[  175.026025][ T9373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.030870][ T9373] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.040813][ T9373] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.1251: lblock 1 mapped to illegal pblock 1 (length 1)
[  175.052733][ T9373] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[  175.060190][ T9373] EXT4-fs (loop0): This should not happen!! Data will be lost
[  175.060190][ T9373] 
[  175.100348][ T9373] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.1251: lblock 1 mapped to illegal pblock 1 (length 1)
[  175.117350][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.121501][ T9373] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[  175.131474][ T9373] EXT4-fs (loop0): This should not happen!! Data will be lost
[  175.131474][ T9373] 
[  175.246430][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.472771][ T9389] loop2: detected capacity change from 0 to 8
[  175.494344][ T9389] SQUASHFS error: lzo decompression failed, data probably corrupt
[  175.497976][ T9389] SQUASHFS error: Failed to read block 0x91: -5
[  175.500710][ T9389] SQUASHFS error: Unable to read metadata cache entry [8f]
[  175.503620][ T9389] SQUASHFS error: Unable to read inode 0x11f
[  175.756461][ T9393] loop0: detected capacity change from 0 to 2048
[  175.765075][ T5875] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  175.782129][ T9394] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.783814][ T9393] NILFS (loop0): corrupt root inode
[  175.916598][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.925110][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  175.940911][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  175.951664][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  175.968787][ T5875] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  175.976412][ T5875] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  175.980612][ T5875] usb 5-1: Manufacturer: syz
[  175.987762][ T5875] usb 5-1: config 0 descriptor??
[  176.244811][ T5875] rc_core: IR keymap rc-hauppauge not found
[  176.247397][ T5875] Registered IR keymap rc-empty
[  176.249648][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.264639][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.285456][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  176.291607][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17
[  176.300351][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.314701][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.334629][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.354705][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.376779][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.395180][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.414907][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.434622][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.456720][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.464997][ T9422] loop2: detected capacity change from 0 to 32768
[  176.470108][ T9422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1270 (9422)
[  176.474780][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.486703][ T9422] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  176.490329][ T9422] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  176.493485][ T9422] BTRFS info (device loop2): using free-space-tree
[  176.504744][ T5875] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  176.528098][ T5875] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  176.531907][ T5875] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  176.609312][ T5842] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  176.658941][ T5875] usb 5-1: USB disconnect, device number 2
[  177.016974][ T9454] netlink: 'syz.0.1277': attribute type 29 has an invalid length.
[  177.021192][ T9454] netlink: 'syz.0.1277': attribute type 29 has an invalid length.
[  177.027816][ T9454] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1277'.
[  177.194976][   T55] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18
[  177.203115][ T9461] loop4: detected capacity change from 0 to 1024
[  177.211141][ T9461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.561141][ T9464] loop4: detected capacity change from 0 to 32768
[  177.572630][ T9464] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.608627][ T9464] XFS (loop4): Ending clean mount
[  177.617314][ T9464] XFS (loop4): Quotacheck needed: Please wait.
[  177.642372][ T9464] XFS (loop4): Quotacheck: Done.
[  177.681272][ T8908] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.925089][ T9522] sp0: Synchronizing with TNC
[  178.252226][ T9530] loop0: detected capacity change from 0 to 32768
[  178.468187][ T9541] loop4: detected capacity change from 0 to 32768
[  178.499145][ T9541] JBD2: Ignoring recovery information on journal
[  178.541965][ T9541] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  178.565938][ T9562] loop2: detected capacity change from 0 to 736
[  178.596528][ T9562] rock: directory entry would overflow storage
[  178.605969][ T9562] rock: sig=0x3b10, size=4, remaining=3
[  178.622616][ T8908] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[  178.633692][ T8908] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  178.637399][ T8908] OCFS2: File system is now read-only.
[  178.639609][ T8908] (syz-executor,8908,0):_ocfs2_free_suballoc_bits:2579 ERROR: status = -30
[  178.643058][ T8908] (syz-executor,8908,0):ocfs2_remove_inode:775 ERROR: status = -30
[  178.653414][ T8908] (syz-executor,8908,0):ocfs2_wipe_inode:897 ERROR: status = -30
[  178.662670][ T8908] (syz-executor,8908,0):ocfs2_delete_inode:1158 ERROR: status = -30
[  178.680601][ T8908] ocfs2: Unmounting device (7,4) on (node local)
[  179.242987][ T9604] bond1: entered promiscuous mode
[  179.246178][ T9604] bond1: entered allmulticast mode
[  179.248242][ T9604] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.780411][ T9610] loop4: detected capacity change from 0 to 32768
[  179.862762][ T9610] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  179.932427][ T9610] XFS (loop4): Ending clean mount
[  180.249587][ T8908] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  180.334373][ T9641] loop2: detected capacity change from 0 to 2048
[  180.372829][ T9641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.854731][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  181.584596][ T5309] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  181.698435][ T9671] loop0: detected capacity change from 0 to 40427
[  181.702283][ T9671] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  181.709755][ T9671] F2FS-fs (loop0): invalid crc value
[  181.749004][ T5309] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81
[  181.755079][ T5309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.757899][ T9671] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  181.769901][ T5309] usb 3-1: config 0 descriptor??
[  181.769910][ T9671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  181.781071][ T5309] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[  181.788923][ T5309] dvb-usb: bulk message failed: -22 (3/0)
[  181.810895][ T9671] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[  181.812137][ T5309] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  181.820785][ T5309] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[  181.830486][ T5309] usb 3-1: media controller created
[  181.834591][ T5309] dvb-usb: bulk message failed: -22 (5/0)
[  181.837296][ T5309] dvb-usb: MAC address reading failed.
[  181.844122][ T5309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  181.864252][ T5309] dvb-usb: bulk message failed: -22 (6/0)
[  181.876176][ T5309] dvb-usb: bulk message failed: -22 (6/0)
[  181.878865][ T5309] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[  181.895300][ T5309] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18
[  181.910640][ T5309] dvb-usb: schedule remote query interval to 100 msecs.
[  181.913707][ T5309] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[  181.972462][ T9697] loop4: detected capacity change from 0 to 2048
[  182.000877][ T9697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.017049][ T5309] dvb-usb: bulk message failed: -22 (2/0)
[  182.019254][ T5309] dvb-usb: error while querying for an remote control event.
[  182.024285][ T8908] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.126151][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  182.128130][    T9] dvb-usb: error while querying for an remote control event.
[  182.183753][ T9706] loop4: detected capacity change from 0 to 32768
[  182.192740][ T9706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1345 (9706)
[  182.198807][ T5309] usb 3-1: USB disconnect, device number 14
[  182.210700][ T9706] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.214335][ T9706] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  182.219046][ T9706] BTRFS info (device loop4): using free-space-tree
[  182.244346][ T5309] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[  182.264892][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  182.333317][ T8908] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.447997][    T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  182.458121][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.461657][    T9] usb 1-1: Product: syz
[  182.475458][    T9] usb 1-1: Manufacturer: syz
[  182.477569][    T9] usb 1-1: SerialNumber: syz
[  182.488459][    T9] usb 1-1: config 0 descriptor??
[  182.644933][ T9724] loop4: detected capacity change from 0 to 32768
[  182.657144][ T9724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1346 (9724)
[  182.674233][ T9724] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.678895][ T9724] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  182.681825][ T9724] BTRFS info (device loop4): using free-space-tree
[  182.706274][    T9] hso 1-1:0.0: Failed to find INT IN ep
[  182.708824][    T9] usb-storage 1-1:0.0: USB Mass Storage device detected
[  182.746499][ T9744] loop2: detected capacity change from 0 to 2048
[  182.769927][ T8908] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.793592][ T9744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  182.913261][    T9] usb 1-1: USB disconnect, device number 19
[  182.957029][ T9752] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  182.973929][ T9752] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 670 with error 28
[  182.978625][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'.
[  182.985055][ T9752] EXT4-fs (loop2): This should not happen!! Data will be lost
[  182.985055][ T9752] 
[  182.988288][ T9752] EXT4-fs (loop2): Total free blocks count 0
[  182.990351][ T9752] EXT4-fs (loop2): Free/Dirty block details
[  182.993663][ T9752] EXT4-fs (loop2): free_blocks=2415919104
[  182.996246][ T9752] EXT4-fs (loop2): dirty_blocks=672
[  182.998063][ T9752] EXT4-fs (loop2): Block reservation details
[  183.000126][ T9752] EXT4-fs (loop2): i_reserved_data_blocks=42
[  183.239632][ T9763] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  183.609906][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'.
[  183.615476][   T26] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 16 with error 28
[  183.958769][ T9775] loop4: detected capacity change from 0 to 131072
[  183.974987][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  183.988787][ T9775] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  184.016109][ T9775] XFS (loop4): Starting recovery (logdev: internal)
[  184.029026][ T9775] XFS (loop4): Ending recovery (logdev: internal)
[  184.052504][ T8908] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  184.139140][    T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  184.142110][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.155032][    T9] usb 1-1: Product: syz
[  184.156615][    T9] usb 1-1: Manufacturer: syz
[  184.158444][    T9] usb 1-1: SerialNumber: syz
[  184.175184][    T9] usb 1-1: config 0 descriptor??
[  184.244710][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  184.371345][ T9797] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  184.374383][  T136] Bluetooth: hci0: Frame reassembly failed (-84)
[  184.414573][   T10] usb 3-1: Using ep0 maxpacket: 32
[  184.418084][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.422419][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.425858][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  184.429035][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.433528][   T10] usb 3-1: config 0 descriptor??
[  184.852526][   T10] magicmouse 0003:05AC:0265.000C: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0
[  184.858730][   T10] magicmouse 0003:05AC:0265.000C: magicmouse input not registered
[  184.867902][   T10] magicmouse 0003:05AC:0265.000C: probe with driver magicmouse failed with error -12
[  185.051719][ T5902] usb 3-1: USB disconnect, device number 15
[  185.594640][    T9] usb 1-1: f81604_read: reg: 200f failed: -EPROTO
[  185.603636][    T9] usb 1-1: USB disconnect, device number 20
[  185.612828][    T9] usb 1-1: f81604_read: reg: 100f failed: -ENODEV
[  185.639592][ T5589] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  185.646767][ T5589] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  185.670817][    T9] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  186.374614][ T5234] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  186.384669][ T5875] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  186.546293][ T5875] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  186.549758][ T5875] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3
[  186.553422][ T5875] usb 1-1: config 220 interface 0 has no altsetting 0
[  186.558811][ T5875] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  186.562217][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.565746][ T5875] usb 1-1: Product: syz
[  186.567175][ T5875] usb 1-1: Manufacturer: syz
[  186.569103][ T5875] usb 1-1: SerialNumber: syz
[  186.604286][ T9826] netlink: 'syz.2.1374': attribute type 1 has an invalid length.
[  186.808221][   T34] audit: type=1326 audit(1755287368.551:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.0.1368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbd38ebe9 code=0x7ffc0000
[  186.816835][   T34] audit: type=1326 audit(1755287368.551:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.0.1368" exe="/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7facbd38ebe9 code=0x7ffc0000
[  186.818361][ T5875] uvcvideo 1-1:220.0: probe with driver uvcvideo failed with error -22
[  186.826148][   T34] audit: type=1326 audit(1755287368.551:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.0.1368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbd38ebe9 code=0x7ffc0000
[  186.836189][ T5875] usb 1-1: USB disconnect, device number 21
[  186.856589][   T34] audit: type=1326 audit(1755287368.551:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.0.1368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbd38ebe9 code=0x7ffc0000
[  186.980252][ T9844] loop2: detected capacity change from 0 to 32768
[  186.998987][ T9844] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.011875][ T9844] XFS (loop2): Ending clean mount
[  187.021314][ T9844] XFS (loop2): Quotacheck needed: Please wait.
[  187.032577][   T33] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1806 dinode
[  187.037665][   T33] XFS (loop2): Unmount and run xfs_repair
[  187.039676][   T33] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  187.042119][   T33] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  187.047879][   T33] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  187.050945][   T33] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  187.053899][   T33] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a  4.Xh...=........
[  187.057928][   T33] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  187.060895][   T33] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 2c 50 36 f0  ..e.........,P6.
[  187.063924][   T33] 00000060: ff ff ff ff cb 1f f2 eb 00 00 00 00 00 00 00 08  ................
[  187.067287][   T33] 00000070: 00 00 00 01 00 00 00 0d 00 00 00 00 00 00 00 08  ................
[  187.080702][ T9850] loop4: detected capacity change from 0 to 32768
[  187.083924][ T9850] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1386 (9850)
[  187.086719][ T9844] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  187.097112][ T9850] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.100950][ T9850] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  187.112194][ T9850] BTRFS info (device loop4): using free-space-tree
[  187.115401][ T5842] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.119308][ T5842] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  187.247852][ T9850] BTRFS info (device loop4): rebuilding free space tree
[  187.258600][ T9850] BTRFS info (device loop4): checking UUID tree
[  187.291052][ T8908] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.323538][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1388'.
[  187.603867][ T9900] loop2: detected capacity change from 0 to 2048
[  187.672493][ T9900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.848926][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.911219][ T9908] loop2: detected capacity change from 0 to 256
[  187.933477][ T9908] FAT-fs (loop2): Directory bread(block 64) failed
[  187.936221][ T9908] FAT-fs (loop2): Directory bread(block 65) failed
[  187.939287][ T9908] FAT-fs (loop2): Directory bread(block 66) failed
[  187.942254][ T9908] FAT-fs (loop2): Directory bread(block 67) failed
[  187.948504][ T9908] FAT-fs (loop2): Directory bread(block 68) failed
[  187.950916][ T9908] FAT-fs (loop2): Directory bread(block 69) failed
[  187.953295][ T9908] FAT-fs (loop2): Directory bread(block 70) failed
[  187.956385][ T9908] FAT-fs (loop2): Directory bread(block 71) failed
[  187.959248][ T9908] FAT-fs (loop2): Directory bread(block 72) failed
[  187.961668][ T9908] FAT-fs (loop2): Directory bread(block 73) failed
[  188.143371][ T9917] loop2: detected capacity change from 0 to 1024
[  188.291178][ T9923] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  188.891737][ T9957] tipc: Can't bind to reserved service type 1
[  189.338576][ T9971] loop4: detected capacity change from 0 to 4096
[  189.353052][ T9971] ntfs3(loop4): Primary boot: start of MFT 0x4 (0xff) is out of volume 0x1ff.
[  189.363773][ T9975] loop0: detected capacity change from 0 to 512
[  189.373659][ T9971] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[  189.409607][ T9975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.432832][ T9975] ext4 filesystem being mounted at /494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  189.486601][ T9975] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.1429: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  189.530222][ T9975] EXT4-fs (loop0): Remounting filesystem read-only
[  189.695004][ T5234] Bluetooth: hci1: unexpected event for opcode 0x202d
[  189.722448][ T9983] loop2: detected capacity change from 0 to 512
[  189.732150][ T9983] EXT4-fs: journaled quota format not specified
[  189.774954][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  189.839387][ T9987] loop2: detected capacity change from 0 to 1024
[  189.876822][  T136] hfsplus: b-tree write err: -5, ino 3
[  189.880531][ T5842] hfsplus: node 4:3 still has 1 user(s)!
[  190.198353][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.265865][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.270547][ T5902] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 24
[  190.277303][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  190.281267][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.284905][ T5902] usb 5-1: Product: syz
[  190.286756][ T5902] usb 5-1: Manufacturer: syz
[  190.288829][ T5902] usb 5-1: SerialNumber: syz
[  190.299165][ T5902] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  190.302167][ T5902] cdc_ncm 5-1:1.0: bind() failure
[  190.309949][ T5902] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  190.312957][ T5902] cdc_ncm 5-1:1.1: bind() failure
[  190.350187][T10008] loop0: detected capacity change from 0 to 32768
[  190.353261][T10008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1444 (10008)
[  190.364995][T10008] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  190.368338][T10008] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  190.371447][T10008] BTRFS info (device loop0): using free-space-tree
[  190.416861][T10008] BTRFS info (device loop0): rebuilding free space tree
[  190.497033][ T5309] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  190.518946][ T5844] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  190.527856][   T24] usb 5-1: USB disconnect, device number 3
[  190.590774][T10028] netlink: 'syz.0.1446': attribute type 1 has an invalid length.
[  190.647249][ T5309] usb 3-1: Using ep0 maxpacket: 32
[  190.652193][T10030] trusted_key: syz.0.1447 sent an empty control message without MSG_MORE.
[  190.659102][ T5309] usb 3-1: unable to get BOS descriptor or descriptor too short
[  190.662641][ T5309] usb 3-1: config 4 has an invalid interface number: 10 but max is 0
[  190.665817][ T5309] usb 3-1: config 4 has no interface number 0
[  190.668332][ T5309] usb 3-1: config 4 interface 10 has no altsetting 0
[  190.684872][ T5309] usb 3-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15
[  190.687939][ T5309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.690613][ T5309] usb 3-1: Product: syz
[  190.694078][ T5309] usb 3-1: Manufacturer: syz
[  190.698267][ T5309] usb 3-1: SerialNumber: syz
[  190.761709][   T34] audit: type=1326 audit(1755287372.501:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.1450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbd38ebe9 code=0x7ffc0000
[  190.769730][   T34] audit: type=1326 audit(1755287372.501:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.1450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbd38ebe9 code=0x7ffc0000
[  190.778000][   T34] audit: type=1326 audit(1755287372.501:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.1450" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7facbd38d69f code=0x7ffc0000
[  190.788112][   T34] audit: type=1326 audit(1755287372.501:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.1450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbd38ebe9 code=0x7ffc0000
[  190.796054][   T34] audit: type=1326 audit(1755287372.501:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.1450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbd38ebe9 code=0x7ffc0000
[  190.910999][ T5309] radio-si470x 3-1:4.10: could not find interrupt in endpoint
[  190.916233][T10042] netlink: zone id is out of range
[  190.918808][ T5309] radio-si470x 3-1:4.10: probe with driver radio-si470x failed with error -5
[  190.922744][ T5309] usbhid 3-1:4.10: couldn't find an input interrupt endpoint
[  190.933199][ T5309] usb 3-1: USB disconnect, device number 16
[  191.026325][T10048] loop0: detected capacity change from 0 to 128
[  191.036273][T10048] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  191.041296][T10048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.202562][T10058] loop0: detected capacity change from 0 to 4096
[  191.217861][T10058] NILFS (loop0): mounting unchecked fs
[  191.220731][T10058] NILFS (loop0): invalid segment: Checksum error in segment payload
[  191.223467][T10058] NILFS (loop0): trying rollback from an earlier position
[  191.230970][T10058] NILFS (loop0): recovery cancelled because norecovery option was specified for a read/write mount
[  191.714513][ T5902] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  192.696169][T10078] loop0: detected capacity change from 0 to 128
[  192.708961][T10078] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  192.721861][T10078] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.730355][T10078] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.1468: No space for directory leaf checksum. Please run e2fsck -D.
[  192.737544][T10078] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.1468: Directory block failed checksum
[  192.760891][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.816352][ T5902] usb 3-1: Using ep0 maxpacket: 16
[  192.819781][ T5902] usb 3-1: config 5 has an invalid interface number: 206 but max is 0
[  192.822400][ T5902] usb 3-1: config 5 has no interface number 0
[  192.825470][ T5902] usb 3-1: config 5 interface 206 has no altsetting 0
[  192.833175][ T5902] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44
[  192.837721][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.841144][ T5902] usb 3-1: Product: syz
[  192.842776][ T5902] usb 3-1: Manufacturer: syz
[  192.849905][ T5902] usb 3-1: SerialNumber: syz
[  192.897893][T10086] loop0: detected capacity change from 0 to 512
[  192.913182][T10086] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  193.083293][ T5902] usb_ehset_test 3-1:5.206: probe with driver usb_ehset_test failed with error -32
[  193.089835][ T5902] usb 3-1: USB disconnect, device number 17
[  193.690223][T10103] loop2: detected capacity change from 0 to 1024
[  193.721404][T10103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.733214][T10103] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.2.1477: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  193.745969][T10103] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1687: Corrupt filesystem
[  193.775874][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.140297][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.142590][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.245255][T10124] loop2: detected capacity change from 0 to 256
[  194.262301][T10124] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  194.654536][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  194.814731][   T10] usb 3-1: Using ep0 maxpacket: 32
[  194.818602][   T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  194.821695][   T10] usb 3-1: config 0 has no interface number 0
[  194.825895][   T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  194.828934][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.831591][   T10] usb 3-1: Product: syz
[  194.833027][   T10] usb 3-1: Manufacturer: syz
[  194.834897][   T10] usb 3-1: SerialNumber: syz
[  194.838168][   T10] usb 3-1: config 0 descriptor??
[  194.841720][   T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  195.049906][   T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  195.060747][   T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  195.136334][T10148] veth0: entered promiscuous mode
[  195.141560][T10147] veth0: left promiscuous mode
[  195.349354][T10160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.461115][T10156] loop4: detected capacity change from 0 to 40427
[  195.465914][T10156] F2FS-fs: heap/no_heap options were deprecated
[  195.468799][T10156] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  195.471710][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  195.472408][   T24] usb 3-1: USB disconnect, device number 18
[  195.477720][T10156] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  195.483744][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  195.487619][T10156] F2FS-fs (loop4): build fault injection type: 0x0
[  195.495192][T10156] F2FS-fs (loop4): invalid crc value
[  195.497744][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  195.512714][   T24] quatech2 3-1:0.51: device disconnected
[  195.538708][T10156] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  195.541984][T10156] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[  195.545610][T10156] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  196.037626][T10169] netlink: 'syz.2.1505': attribute type 1 has an invalid length.
[  196.041275][T10169] netlink: 'syz.2.1505': attribute type 4 has an invalid length.
[  196.044870][T10169] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1505'.
[  196.051918][T10167] loop4: detected capacity change from 0 to 32768
[  196.081432][T10167] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  196.104265][T10167] XFS (loop4): Ending clean mount
[  196.109426][T10167] XFS (loop4): Quotacheck needed: Please wait.
[  196.137846][T10167] XFS (loop4): Quotacheck: Done.
[  196.159898][ T8908] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  196.327838][T10185] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  198.337543][T10246] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1533'.
[  198.421021][T10255] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  198.554623][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  198.630576][T10269] loop0: detected capacity change from 0 to 256
[  198.637004][T10269] exFAT-fs (loop0): bogus number of FAT structure
[  198.640141][T10269] exFAT-fs (loop0): failed to read boot sector
[  198.642884][T10269] exFAT-fs (loop0): failed to recognize exfat type
[  198.654525][ T5309] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  198.726205][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.729706][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.734238][   T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  198.742982][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  198.749589][   T10] usb 3-1: SerialNumber: syz
[  198.832427][ T5309] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  198.839012][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.850239][ T5309] usb 5-1: config 0 descriptor??
[  198.857050][ T5309] gspca_main: cpia1-2.14.0 probing 0813:0001
[  198.960000][   T10] usb 3-1: 0:2 : does not exist
[  198.963177][   T10] usb 3-1: unit 255 not found!
[  198.983084][   T10] usb 3-1: USB disconnect, device number 19
[  199.004091][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  199.259348][ T5309] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  199.885167][ T5309] gspca_cpia1: usb_control_msg 05, error -71
[  199.887958][ T5309] cpia1 5-1:0.0: unexpected systemstate: 00
[  199.922648][ T5309] usb 5-1: USB disconnect, device number 4
[  200.539984][T10296] loop0: detected capacity change from 0 to 128
[  200.718378][T10307] netlink: zone id is out of range
[  200.891258][T10310] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  201.661247][T10309] netlink: del zone limit has 4 unknown bytes
[  201.677914][T10312] loop2: detected capacity change from 0 to 2048
[  201.683635][T10307] netlink: set zone limit has 4 unknown bytes
[  201.715158][T10312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.827242][T10314] loop0: detected capacity change from 0 to 2048
[  201.831078][T10314] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  201.861154][T10315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.887346][T10314] syz.0.1564: attempt to access beyond end of device
[  201.887346][T10314] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  201.893805][T10314] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1)
[  202.100179][ T5889] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  202.257394][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short
[  202.262226][ T5889] usb 3-1: not running at top speed; connect to a high speed hub
[  202.267042][ T5889] usb 3-1: config 1 has an invalid interface number: 138 but max is 0
[  202.270529][ T5889] usb 3-1: config 1 has no interface number 0
[  202.273178][ T5889] usb 3-1: config 1 interface 138 has no altsetting 0
[  202.284326][ T5889] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  202.294214][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.297971][ T5889] usb 3-1: Product: syz
[  202.299927][ T5889] usb 3-1: Manufacturer: syz
[  202.301986][ T5889] usb 3-1: SerialNumber: syz
[  202.526945][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  202.555616][ T5889] usb 3-1: USB disconnect, device number 20
[  202.662829][ T1271] IPVS: starting estimator thread 0...
[  202.755735][T10329] IPVS: using max 79 ests per chain, 189600 per kthread
[  202.896132][T10337] loop4: detected capacity change from 0 to 32768
[  202.906614][T10337] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  202.918788][T10337] OCFS2: ERROR (device loop4): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[  202.934781][T10337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  202.938374][T10337] OCFS2: Returning error to the calling process.
[  202.940830][T10337] (syz.4.1572,10337,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[  202.943733][T10337] (syz.4.1572,10337,0):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[  202.964487][T10337] (syz.4.1572,10337,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[  202.971037][T10337] (syz.4.1572,10337,0):ocfs2_mknod:309 ERROR: status = -5
[  202.973427][T10337] (syz.4.1572,10337,0):ocfs2_mknod:505 ERROR: status = -5
[  202.984491][T10337] (syz.4.1572,10337,0):ocfs2_mkdir:661 ERROR: status = -5
[  203.004184][ T8908] ocfs2: Unmounting device (7,4) on (node local)
[  203.091629][T10347] vivid-000: disconnect
[  203.094295][T10347] vivid-000: reconnect
[  203.159290][T10352] bridge_slave_0: default FDB implementation only supports local addresses
[  203.227267][T10356] mmap: syz.2.1580 (10356) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  203.253714][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'.
[  203.318901][T10360] loop4: detected capacity change from 0 to 2048
[  203.337657][T10360] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  203.337918][ T6258] udevd[6258]: incorrect nilfs2 checksum on /dev/loop4
[  203.357893][T10364] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.358039][T10360] syz.4.1582: attempt to access beyond end of device
[  203.358039][T10360] loop4: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  203.375957][ T5839] udevd[5839]: incorrect nilfs2 checksum on /dev/loop4
[  203.466884][T10369] loop2: detected capacity change from 0 to 16
[  203.472023][T10369] erofs (device loop2): mounted with root inode @ nid 36.
[  203.631806][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1589'.
[  203.643922][T10379] loop0: detected capacity change from 0 to 512
[  203.650036][T10379] EXT4-fs: Ignoring removed i_version option
[  203.653406][T10379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  203.676481][T10379] EXT4-fs (loop0): 1 truncate cleaned up
[  203.690095][T10379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.391174][   T34] audit: type=1804 audit(1755287386.131:47): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1591" name="/newroot/572/bus/bus" dev="loop0" ino=18 res=1 errno=0
[  204.689377][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.257816][T10401] loop4: detected capacity change from 0 to 512
[  205.386899][T10401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.391382][T10401] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  205.437701][T10401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.736171][   T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  205.910408][   T10] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  205.914302][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.926624][   T10] usb 3-1: config 0 descriptor??
[  206.199460][T10413] loop4: detected capacity change from 0 to 40427
[  206.203759][T10413] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  206.207125][T10413] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  206.210787][T10413] F2FS-fs (loop4): build fault injection type: 0x6
[  206.245637][T10413] F2FS-fs (loop4): invalid crc value
[  206.306455][T10413] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  206.311383][T10413] F2FS-fs (loop4): Start checkpoint disabled!
[  206.318625][T10413] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  206.321654][T10413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  206.367933][T10413] syz.4.1603: attempt to access beyond end of device
[  206.367933][T10413] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  206.388587][ T5990] kworker/u10:4: attempt to access beyond end of device
[  206.388587][ T5990] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  206.393433][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: kworker/u10:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  206.393445][ T5990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.393449][ T5990] Workqueue: writeback wb_workfn (flush-7:4)
[  206.393463][ T5990] Call Trace:
[  206.393466][ T5990]  <TASK>
[  206.393470][ T5990]  dump_stack_lvl+0x189/0x250
[  206.393482][ T5990]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.393490][ T5990]  ? __pfx_queue_work_on+0x10/0x10
[  206.393497][ T5990]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  206.393507][ T5990]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.393520][ T5990]  f2fs_handle_critical_error+0x37c/0x540
[  206.393533][ T5990]  f2fs_write_end_io+0x886/0xb60
[  206.393549][ T5990]  __submit_merged_bio+0x27a/0x6a0
[  206.393561][ T5990]  __submit_merged_write_cond+0x255/0x530
[  206.393573][ T5990]  f2fs_write_data_pages+0x261d/0x3000
[  206.393598][ T5990]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.393614][ T5990]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  206.393638][ T5990]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  206.393653][ T5990]  ? trace_f2fs_writepages+0x7f/0x200
[  206.393662][ T5990]  ? f2fs_write_node_pages+0x478/0x6e0
[  206.393673][ T5990]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  206.393688][ T5990]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.393698][ T5990]  do_writepages+0x32e/0x550
[  206.393710][ T5990]  ? reacquire_held_locks+0x127/0x1d0
[  206.393716][ T5990]  ? writeback_sb_inodes+0x384/0x1010
[  206.393729][ T5990]  __writeback_single_inode+0x145/0xff0
[  206.393737][ T5990]  ? do_raw_spin_unlock+0x4d/0x240
[  206.393748][ T5990]  writeback_sb_inodes+0x6c7/0x1010
[  206.393768][ T5990]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  206.393795][ T5990]  ? rcu_is_watching+0x15/0xb0
[  206.393808][ T5990]  wb_writeback+0x43b/0xaf0
[  206.393820][ T5990]  ? queue_io+0x3c1/0x590
[  206.393829][ T5990]  ? __pfx_wb_writeback+0x10/0x10
[  206.393841][ T5990]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.393852][ T5990]  wb_workfn+0x409/0xef0
[  206.393866][ T5990]  ? __pfx_wb_workfn+0x10/0x10
[  206.393875][ T5990]  ? __lock_acquire+0xab9/0xd20
[  206.393890][ T5990]  ? process_scheduled_works+0x9ef/0x17b0
[  206.393900][ T5990]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.393907][ T5990]  ? process_scheduled_works+0x9ef/0x17b0
[  206.393913][ T5990]  ? process_scheduled_works+0x9ef/0x17b0
[  206.393920][ T5990]  process_scheduled_works+0xae1/0x17b0
[  206.393940][ T5990]  ? __pfx_process_scheduled_works+0x10/0x10
[  206.393955][ T5990]  worker_thread+0x8a0/0xda0
[  206.393964][ T5990]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.393976][ T5990]  ? __kthread_parkme+0x7b/0x200
[  206.393988][ T5990]  kthread+0x711/0x8a0
[  206.393998][ T5990]  ? __pfx_worker_thread+0x10/0x10
[  206.394004][ T5990]  ? __pfx_kthread+0x10/0x10
[  206.394013][ T5990]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.394021][ T5990]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.394029][ T5990]  ? __pfx_kthread+0x10/0x10
[  206.394037][ T5990]  ret_from_fork+0x3fc/0x770
[  206.394049][ T5990]  ? __pfx_ret_from_fork+0x10/0x10
[  206.394065][ T5990]  ? __switch_to_asm+0x39/0x70
[  206.394077][ T5990]  ? __switch_to_asm+0x33/0x70
[  206.394089][ T5990]  ? __pfx_kthread+0x10/0x10
[  206.394103][ T5990]  ret_from_fork_asm+0x1a/0x30
[  206.394129][ T5990]  </TASK>
[  206.394132][ T5990] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  206.981445][T10421] loop4: detected capacity change from 0 to 32768
[  206.986610][T10421] 
[  206.986610][T10421]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.986610][T10421] 
[  207.008186][ T5990] 
[  207.008186][ T5990]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.008186][ T5990] 
[  207.013585][ T5990] 
[  207.013585][ T5990]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.013585][ T5990] 
[  207.018244][ T8908] 
[  207.018244][ T8908]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.018244][ T8908] 
[  207.025911][ T8908] 
[  207.025911][ T8908]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.025911][ T8908] 
[  207.032584][  T116] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[  207.036589][  T116] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  207.040617][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  207.044696][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.048085][  T116] RIP: 0010:lmLogSync+0xfb/0x9d0
[  207.049847][  T116] Code: 99 7e fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 43 02 e2 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 27 02 e2 fe 49 8b 3f e8 cf 05 b5 fe
[  207.056400][  T116] RSP: 0018:ffffc9000243fb00 EFLAGS: 00010206
[  207.058457][  T116] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0000000000000000
[  207.060996][  T116] RDX: ffff88801e685640 RSI: 0000000000000001 RDI: 0000000000000000
[  207.063718][  T116] RBP: ffffc9000243fc08 R08: 0000000000000003 R09: 0000000000000000
[  207.066364][  T116] R10: ffffc9000243fb60 R11: fffff52000487f70 R12: ffff88811c669000
[  207.069135][  T116] R13: dffffc0000000000 R14: ffff88810f75fc38 R15: 0000000000000030
[  207.071885][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  207.074815][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.076945][  T116] CR2: 00007ffdc48c2b48 CR3: 0000000026f60000 CR4: 00000000000006f0
[  207.079629][  T116] Call Trace:
[  207.080786][  T116]  <TASK>
[  207.081946][  T116]  ? __pfx___mutex_lock+0x10/0x10
[  207.083768][  T116]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  207.085835][  T116]  ? __pfx_lmLogSync+0x10/0x10
[  207.087533][  T116]  jfs_syncpt+0x7b/0x90
[  207.089279][  T116]  txEnd+0x2e5/0x530
[  207.090938][  T116]  jfs_lazycommit+0x5ba/0xa90
[  207.092946][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  207.095143][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  207.097581][  T116]  ? __kthread_parkme+0x7b/0x200
[  207.099665][  T116]  ? __kthread_parkme+0x1a1/0x200
[  207.101783][  T116]  kthread+0x711/0x8a0
[  207.103523][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  207.105470][  T116]  ? __pfx_kthread+0x10/0x10
[  207.107055][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  207.108877][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.110717][  T116]  ? __pfx_kthread+0x10/0x10
[  207.112686][  T116]  ret_from_fork+0x3fc/0x770
[  207.114729][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  207.117019][  T116]  ? __switch_to_asm+0x39/0x70
[  207.119062][  T116]  ? __switch_to_asm+0x33/0x70
[  207.121126][  T116]  ? __pfx_kthread+0x10/0x10
[  207.123071][  T116]  ret_from_fork_asm+0x1a/0x30
[  207.125103][  T116]  </TASK>
[  207.126436][  T116] Modules linked in:
[  207.128634][  T116] ---[ end trace 0000000000000000 ]---
[  207.144645][  T116] RIP: 0010:lmLogSync+0xfb/0x9d0
[  207.146411][  T116] Code: 99 7e fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 43 02 e2 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 27 02 e2 fe 49 8b 3f e8 cf 05 b5 fe
[  207.186465][  T116] RSP: 0018:ffffc9000243fb00 EFLAGS: 00010206
[  207.188618][  T116] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0000000000000000
[  207.191598][  T116] RDX: ffff88801e685640 RSI: 0000000000000001 RDI: 0000000000000000
[  207.194753][  T116] RBP: ffffc9000243fc08 R08: 0000000000000003 R09: 0000000000000000
[  207.197541][   T10] pegasus 3-1:0.0: can't reset MAC
[  207.199325][   T10] pegasus 3-1:0.0: probe with driver pegasus failed with error -5
[  207.202931][   T10] usb 3-1: USB disconnect, device number 21
[  207.206106][  T116] R10: ffffc9000243fb60 R11: fffff52000487f70 R12: ffff88811c669000
[  207.209065][  T116] R13: dffffc0000000000 R14: ffff88810f75fc38 R15: 0000000000000030
[  207.211910][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  207.216225][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.218515][  T116] CR2: 00007ffe3e89bb68 CR3: 0000000028e1e000 CR4: 00000000000006f0
[  207.221201][  T116] Kernel panic - not syncing: Fatal exception
[  207.223960][  T116] Kernel Offset: disabled
[  207.225438][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:49:48  Registers:
info registers vcpu 0

CPU#0
RAX=70e6187422969100 RBX=0000000000000000 RCX=ffffffff81703967 RDX=0000000000000000
RSI=ffffffff8be333e0 RDI=ffffffff8be333a0 RBP=0000000000000001 RSP=ffffc90000007f78
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=dffffc0000000000 R13=0000000000000000 R14=1ffff11009604720 R15=0000000000000000
RIP=ffffffff8b796162 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe4a4b85453 CR3=000000011aa70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc20ee12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000243f330
R8 =ffff888108358237 R9 =1ffff1102106b046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af991e R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdc48c2b48 CR3=0000000026f60000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=000000000000002d 0000000000002f2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=303a312d332f312d 332f336273752f32
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
