last executing test programs:

3m19.58993352s ago: executing program 32 (id=67):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000180)={'veth1_macvtap\x00'})

2m59.701443451s ago: executing program 0 (id=230):
r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x40002)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)

2m59.57139278s ago: executing program 0 (id=231):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000006e53f070c0000002a9000070100f3ff83000000008b09007a1593"], 0x0}, 0x0)

2m57.994914441s ago: executing program 0 (id=236):
keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffd)

2m57.994745843s ago: executing program 0 (id=237):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

2m57.915724001s ago: executing program 0 (id=238):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x8, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}}, 0x4000)

2m57.634646666s ago: executing program 0 (id=241):
bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x36}, 0x18)

2m57.503025683s ago: executing program 33 (id=241):
bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x36}, 0x18)

2m43.002735309s ago: executing program 2 (id=401):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2m42.94857672s ago: executing program 2 (id=403):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x4000)

2m42.833524919s ago: executing program 2 (id=404):
r0 = userfaultfd(0x80001)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x60000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_SET_SOCK(r1, 0xab03, r2)
close_range(r0, 0xffffffffffffffff, 0x0)

2m42.634469407s ago: executing program 2 (id=406):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

2m42.522742505s ago: executing program 2 (id=407):
syz_clone3(&(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000040), 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000300)=""/26, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x9}, 0x58)

2m42.323061932s ago: executing program 2 (id=408):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x77}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x77}, 0x8)

2m42.214661988s ago: executing program 34 (id=408):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x77}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x77}, 0x8)

2m22.582163805s ago: executing program 3 (id=564):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)

2m22.488880431s ago: executing program 3 (id=565):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6)

2m22.032347198s ago: executing program 3 (id=567):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000004000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fc0100000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

2m21.233291597s ago: executing program 3 (id=572):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a0524010107"], 0x0)
write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "1f411d410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6ab298482db008bfbacb4b4b61d310e792a75979c5906929bcb6bd7c7cca9a27667f6bfba807bb2afa4a4347d8edd80ad1267c852fca228c8074606fc8162eec18ea30c0a062be6997ffa1e08eac22ab6fc56eb62847deb0786b59852c7f09836b6634f7b68d5d54a7e67d8049fba8a16bb611fd3f5327db0531c8986dd3"}, 0xbc)
prctl$PR_SCHED_CORE(0x23, 0x3, 0xffffffffffffffff, 0x3, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[], 0x28)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x2c0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000005c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sync_file_range(r0, 0x2, 0x3, 0x5)

2m19.238628685s ago: executing program 3 (id=588):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x402, &(0x7f0000001280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="ec1a3881369fae6987d7a6922db874bcb0563edbf212875f142a04bbe14fd11ed31543677ddfbd12a760f13dd2fd476b0d7e088b2ac5eaebe64ab225975b882e26ccc04ae1e56422927a5de974cf1bc2873d781e837bdea83a1a8ff1fc5670132de294b6b2ae840099cb4d037cc46b3980928a506f800befa5037ecc4c128dc83d62f8d7ede6c05d595ab96a009e378894d776a0e83d4c1bbd9cfe6dbf29c3c5", @ANYRESOCT, @ANYBLOB="650dff969a08ff9e724d5d7c4ef89e23d56dda29c31665f63ec8a6f772a525c5b7212d46fcdce41a1775bdc7ae8d824d46ff9c67feac09d995afa0aed98ce5381701ee97a11793808dbb0a95927953efd647f04a4d25be7c929451bd4f6a217f6976fe903f0542222969f6d90184c98b67298ed804d7b1b0e667a2c734bec13f27287182ddd1e4f5ecf7"], 0x1, 0x242, &(0x7f0000000e40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/202, 0xca)

2m19.004520612s ago: executing program 3 (id=591):
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
pipe2(0x0, 0x880)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff7c, 0x4)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="2e000400010002", 0x7)
connect$packet(r2, 0x0, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8)
shutdown(r2, 0x1)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000002900"], 0x30}, 0x0)

2m16.260309761s ago: executing program 4 (id=599):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x3e}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004051}, 0x40)

2m16.174616985s ago: executing program 4 (id=600):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

2m16.078152281s ago: executing program 4 (id=602):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x0, 0x1d4, &(0x7f0000000980)="$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")

2m15.707294158s ago: executing program 4 (id=605):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2m15.624556242s ago: executing program 4 (id=606):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0})

2m15.624304034s ago: executing program 4 (id=607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone3(&(0x7f00000003c0)={0xac021080, &(0x7f0000000040), 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2m3.96298041s ago: executing program 35 (id=591):
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
pipe2(0x0, 0x880)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff7c, 0x4)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="2e000400010002", 0x7)
connect$packet(r2, 0x0, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8)
shutdown(r2, 0x1)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000002900"], 0x30}, 0x0)

2m0.609281798s ago: executing program 36 (id=607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone3(&(0x7f00000003c0)={0xac021080, &(0x7f0000000040), 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m58.863452011s ago: executing program 6 (id=698):
syz_mount_image$zonefs(&(0x7f0000000000), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009ec0)={[{@errors_zone_offline}, {@explicit_open}, {@errors_zone_offline}]}, 0x4, 0x9dc3, &(0x7f0000000040)="$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")

1m58.764496955s ago: executing program 6 (id=699):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0)

1m58.693071694s ago: executing program 6 (id=700):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0xd, 0xb, 0x1)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3)

1m58.220106643s ago: executing program 6 (id=703):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0)

1m56.784004768s ago: executing program 6 (id=712):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x20, 0x10, 0x2, {0x2, 0x7}}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x1d9}}}}, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0x20, 0x1, 0x6d, "87ee7d32421046a0fdc33f7c00689cddab2c8317c6ee60bdb6bdd810c322e4103b0b1e4a8b0822e00073acea2c4d93009d6ce7c29444452a6210bccc1bc7643de18846a83df84b484a197596e684061dfc569c8d4a57693ad4d565ac506cf6f7329ecf7441d00b71bf8fb4845e"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xff}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

1m54.011291276s ago: executing program 6 (id=725):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000780)='/dev/comedi0\x00', 0x101001, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'netpci0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0xf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000380), 0x20000000, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
getdents64(r5, &(0x7f0000001f00)=""/4111, 0x100f)
recvfrom(r4, &(0x7f0000000200)=""/84, 0x54, 0x1, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x800, @private0}, 0x80)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0))
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
socket$netlink(0x10, 0x3, 0x9)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x5, 0x80008000, 0x9, 0x2, 0xfffffffe, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x836, 0x3, 0x3fb, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x4, 0x3, 0x7, 0x5, 0x8005]})

1m38.954628621s ago: executing program 37 (id=725):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000780)='/dev/comedi0\x00', 0x101001, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'netpci0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0xf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000380), 0x20000000, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
getdents64(r5, &(0x7f0000001f00)=""/4111, 0x100f)
recvfrom(r4, &(0x7f0000000200)=""/84, 0x54, 0x1, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x800, @private0}, 0x80)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0))
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
socket$netlink(0x10, 0x3, 0x9)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_iiro_16\x00', [0x5, 0x80008000, 0x9, 0x2, 0xfffffffe, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x836, 0x3, 0x3fb, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x4, 0x3, 0x7, 0x5, 0x8005]})

31.962604433s ago: executing program 7 (id=1277):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
inotify_init1(0x80000)

31.832749964s ago: executing program 7 (id=1278):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x7d3, 0x9, 0xf909, 0x899d, 0x80, 0x98a, 0x7, 0x1010, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x4, 0x0], 0x1, 0x4000007})

31.76284363s ago: executing program 7 (id=1279):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000000)=0x9c)

30.869387708s ago: executing program 7 (id=1290):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@data_journal}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

30.687343966s ago: executing program 7 (id=1294):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
unshare(0x8000000)
r2 = semget$private(0x0, 0x4000, 0x555)
semtimedop(r2, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0)
unshare(0x2c040000)

30.345244733s ago: executing program 7 (id=1297):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)

30.212109306s ago: executing program 38 (id=1297):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)

23.662017793s ago: executing program 8 (id=1372):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x7c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x68, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x7c}, 0x1, 0x2b1e, 0x0, 0x10}, 0x24040010)

23.57152348s ago: executing program 8 (id=1374):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

23.571149207s ago: executing program 8 (id=1375):
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@order_relaxed}, {@order_strict}, {@nodiscard}, {@nodiscard}, {@errors_remount_ro}, {@order_strict}]}, 0x0, 0xa02, &(0x7f0000001ec0)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000500)={0x0, @bt={0x8, 0x9, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x4, 0x2800, 0x9, 0x1, 0xba2, 0x0, 0x2a, {0xa, 0x20000a}, 0xce, 0x9}})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0)

22.592925296s ago: executing program 8 (id=1376):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

22.521455751s ago: executing program 8 (id=1377):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x3}, 0x8)

22.282634352s ago: executing program 8 (id=1378):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002000d5"], 0x14}], 0x1}, 0x4000)

22.14514899s ago: executing program 39 (id=1378):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002000d5"], 0x14}], 0x1}, 0x4000)

2.441854911s ago: executing program 5 (id=1586):
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043607"], 0xa)

2.441656296s ago: executing program 5 (id=1587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$eJzs3WuQXNV9IPBzu3s0Lz1GAgcZzGiQ0Ybg2BrxKj9SsZJN7BQQSi5SDmJlw4BGRLYkVHoEECSILHhRAS6cIpXg5ANxYXYxiosq2BiFMuGxEmtjq9h4qS1MrZ3F/uAtwqIKoKVcXs/W9NzT032779yenh4hid+vYG7fM6f/99xzT9++/9NX0wEAAID3hEN37Dx62em/+90/G3/71t/7h623hcFytbwvVhhKlze+Wy3kWOqtLK8us+PiV2/+xk9Hrv3t7zw68PV3Dm48a9MPf+eUa5/8wsUH7v/rZ95a9PgvXy2KG8fTudPryetJCH3fPvIXXzr4wmmTZcniyZ+lvSEsTZY9szQJ4fb6EKM/DyFsTFeWZ+I/9vb5myaXt93V21C+JFPPeH9vmzzOSQhhz9EbPhR+9Fvrb//+im/+Xc/+1/ZOV0n66sZTCIuvrn9+TwihP/1/UhxtcTwm6XJdCGGg7nkfLWjXB9to96TVmfK4fka6XJAuBwvixd+vzKyXMvWy61FPZjlQsL25ymtHp/WKLMysJ12KG+W1M5YvTZffSpfnzjJ+Od2HchJKSajUmr8lmR4joe64JSGpHsu+2nqpdmxDuv+Z9SSzXsqsl3sy+1XdbjrQyknSWB7rZcrj6biSlp9Vf65u4fK6x/X13h/L0hfqO9k6maCDTQ9q+1UV23VkhrYcC6W6c1Cr8tqBTw/GYFo2mCxres5EC/F3B9ffvaq84dlDQzntSB5N0vhJR/H3fG/pws8/sm939n29Fv/qUhq/1FH8H19y+I0r933tq7nx743xyx3FP++pgdcvee6Olbn9cyT2T6Wj+GOvPn/PilOv2Z/b/gdi/L6O4q89cLh30dGnns5t/2jsn/6O4r/yiU/95OGXnngtN36I8Qc6ir/hwPYv9w4fPSc3/tOxfwY7Gz9v7r/o5eHhn43kxX8xxl/UUfyH9vZ+/MEld12ce3zXxf4Z6ij+pWc/efvCo0+cmXfuTB7o1jsnwHvTKek11p3peqd55lzV5Qt/NVKZuuZbmP6/qJsbylx8ZvMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiG933ov376f3126PVKut6bPnilNLWM5QtCSPpDCDt3je3YtXnbdSNfuH73jm1jW0bGdo2Mb9u146aRC359ZMf49i1jN03+dvTD5089b1lIppbJmU3b7p2YmCgNNZbF7f3bs/f/aNVH//e/hDD6vh8MV3Lbv/r+rQ+e2uJnRrJ24pNbd1/2gwv/Nt2vobRdQy3aNTExMRFy2vV/rvjFg39+5KfnhDD6KzO16/lXfvMfGxpULZiOkyr1hqkG9SYDLdtRa3XanthflU2bt4yPzty/k88v5+zHv7v5tZ9vuvErv5jq377c/Wizf/vXTmwp/eX6S//fX94yVVDUrnfruE/2dzkn5mS74l7E9sX+60v7e3G6X4tz9quSs193fP/pl759+r639obRypsrmo910X71pAOgJ3l/W9uNWxhIljaU96X14xGPz1u9a+v21Ttv2vPhzVvHrhu/bnzbx9ZcsOai0QsvunB1dc9Xd3n/4/b/TZv7f2zG05I/3vut+LO98dTYrgWz7o/JdhX3R32L8l5/A5d/6b6P3f/cZVMFReeVWLt2PkmXA5PHeU2oG2/NfdVqv4qOTwhhpFU/vPHWxeG0/7H59qLzUP2Rqf+ZkaydeGHlv/7tR/9m+W9MFRyT83x9gzo8z9daPd2ean/1pcdj4jjt3970bNqbDLZs15oXnuu5+9C//EmtfQsWhBvHdu3asWbq58K0pQuTM1q2K1sa92tF9Wc5pN0SasO0xXid1BOm2pc9f8bq2V4dTH83mCxruV9Z8XcH19+9qrzh2UN5PZ08OrXF/rBoapl8IKfmlswTy7UGt9r+8fr6Kxofw5/+m8c/+/jfX9A0Ps6b+lm0X0nOfn3zpYfu+/pX/sPfd2+/Pv2bh4f+9X/+0aqpgmNwXglzOq+UpxpSa3XanqT+vHJeCEWvvxWh9X7kvv5Krfen6PWX3c50/dbxRjLrg6Hc0ev1vKcGXr/kuTtW5r5ej8z0eq3f2VsanlcueL0eL+9L2ddXUmlsx/y9vhoGSrJ24jt3nrL3mVvXnT5VUPR+Wavdalyf30b+kbNf/3jly8PXj/z7/96988Y3fv2xq344tvZPpwo6P+6xLd057n1p//bl9G+t1THvrO/fj1x7/ZaNU+VF/fzuXf+my4L8J55Kdt6054tjW7aM79jZ3n61+34at5Pt5U7fT+PZbVnBfpWa9mv+HrTTX+2+3mL7N3bcX42vt8GQdPS+sOd7Sxd+/pF9u4eanpVu6OpSGr/UUfwfX3L4jSv3fe2rufHvjfErHcUfe/X5e1aces3+3PgPJGn8vuL4i0NT/LUHDvcuOvrU07nxR2P7+ztq/yuf+NRPHn7piddy44cYf7Cz/n9z/0UvDw//LDf+i0m6nclrpBAee/v8TVPrSehJX2+xHT0N7QrZ9SSzXsqsl+vXS3EWId1AOUkay2O9tPysura08oc55fEqrG/51PKduB6yD2YuP96U6s79rcqLrlMBAE528fP/eA0aP/8fTy+U8mcaYNpc87DlOXFjHjY9n9P4GevyNH58fpwHHP5IGJ1c3jYydaE/288R4ushO88Zt3POBxtjtJyfOFC/ker2m+Y5i+bfV2bWY7um5ssrdXloqjmvqYQ25t+btzPz/Htm94s/zxq5s6lZI3XzVtnj15POmLW63yHT3spkhLzxkZ0Xi/dzDC8O66rba3N8ZO+jicchex9N3M7pmRNnp/fR5I2PoeZ+aGhXHB+x3gzjo9rk4s8jm49fmKF/p49f62jZ4zeL4903WX++P5/twrxhy1PasZs3nN/Pw46LeckW8Y/xvOTCpvjpC+x4nzeM5bGfKm3OJ342p7xb84nxdBHbdWSGthwL5hOBk1XM/+N7xGT+P3kB/n8z9YrylOxVY4yXe59Qzk3YRXlH8316Ax29j284sP3LvcNHz8m9znm63fv0tjesDRTc91PUj6sy64X9mDNBU5TvZbdT1O/Z+zIGw6KO+v2hvfd//MEld12c2+/rpt5Ii/v9voa1RQX9fgLkC63jyxdOpnyhOX6X7mMomj/Lz0fKtXbMSz6S3vg0X/nIH+SUzzYfGWh6UNuvquM3H5l+I23IR3qObbsAgBNHzP9rn5+l+f8/xwuL9DqiKG89N7Me4+XmrTnXJ3l56++nyxsz9QfTf1Ex2+vmS89+8vaFR584MzdveaDdPPQ/NawNFeahc8ubc/OIdd25Xzw3j6jlWXPLE3PbX8sT55an53xMW5enzy2Pzu2fWh7dOA9w3+HpTGOm+HEeIDd+bR6gi3nuL6crHbs8t2C+LrOxuNrufN2xzqMnS3oWN+5nY1480J08Ov3ns/OVR1+eUz7bPHqw6UFtv6qO3zy6sVweDQCcrGL+Hy/jqvl/bwjPxQr98cHcPmfPzQu6dN2e/XsgtfgvzkteOR2/S5//Fud98523zndeP9/zEif657/zPS80VP0DnvM1T/au3e86L3nxP9cetZ0XpxuVFwMAcDyL+X9M8+Pn/89l6s01P2nK33qmLiGn85MTLz+vr3cC5+dXhGOVn/eeyPn5iT7/Nb/3yZxc+f+0Dj8Xf2fiJM7/q22W/wMAnJBi/h//2WP8+3//JV3P/t36NvP0B7K38/oc3efoQZ7eRp7e5Xm2GL/+PoATeB6gPPd5gP5jfn98/3T9k2keoKonmAwAADgB9FQzpeZ/Z/+5dJn9d/Z5/y7/ypz67aqkl8fX7NoxPn7V7u0bx3aNX7Xt+o3jO6+6YcfmXbvGa9fOc8sbc/OWNG/sCZW0P1rXy+ZtS9K/h7Ak5+8hZOvHsGdUHzT/PYTsZvsL/o7A9PFrr715x680Q/1W4yPveOfF/8Oc+lHt+F/7R+ddtWnnVZu3bd61eWzL5j3jjfWGqv+Suv3vzYyfU87q+1IzP5qUZv/9nfHwzK0dpaZ29KT9kff97EmmHUvTlizN+/6DnHZ/97/9+R+fPfGLh0MYfV/5A3Pqv2TtxH++Yvz3dx36wfbJ9pdmbH+tZtquou8rzdaP+1PZcv3OXR/adP3ubdlvlOxMnM8o1dbn6b6G9OVfbnN+YkNO+Wz//X656cHxqe35CQAAGsTP/+P1bPz88CvpBVQsL8zTt03Vm+vnx7l5+mh7eXr2e8mK8vRs/bi/7ebpfXPM07PbL8rTW9Vvlafn5d158f8gp/5stT9OOrjPo5L2wyP7dueOk6vbGyfZ7zMoGifZ+rMdJ8kcx0l2+0XjpFX9VuMk77jnxf9MTv08ReOhUhsPc7svJ3c83NveePi1zHrReMjWn+14KM1xPGS3XzQeWtVvNR7yjm9z/MYJgu7M/04OjOq4GL/qhut3fLGu3nx//0VoviWjnfYtmH7u/H7/R6fa79/5ve9r7u0PYW21JK/98fOBBbNqf7v3lc29/UX9P4v7yhaHpvvKctv/4txmwtpv/6zuS7wt/q7d73fJyKve/PxjNV+bDrui+8+K5nHX55TPdh53QdOD45N5XHj3xPw/Xs3F/P+udNntj4FO/O9J6+D++3gO9j1m+f3f5nXMe+79PPuRu/dzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJNCb2V5dXnojp1HLzv9d7/7Z+Nv3/p7/7D1tl+9+Rs/Hbn2t7/z6MDX3zm48axNP/ydU6598gsXH7j/r595a9Hjv3y1MPBQ9Wfl3HS1L4Tk9SSEvm8f+YsvHXzhtMmyJIRQTob2hrA0WfbM0iQTYfTnIYSNtXY2/vKxt8/fNLm87a7ehvIlmSDZ/QqD5die+naGcGPhHnEC6kvH2Z6jN3wo/Oi31t/+/RXf/Lue/a/tna6S9NWNpxAWX13//J4QQn/6/6Q42pbHJ6fLdSGEgbrnfbSgXR9ss/2rc9bPSJcL0uVgQZz4+5WZ9VKmXnY96sks6/a1v2DTHclrR6f1iizMrGdPRnOV185YvjRdfitdnjvL+OX4fxJKSajUmr8lmR4joe64JSGpHsu+2nqpdmxDuv+Z9SSzXsqsl3sy+1XdbjrQyknSWB7rZcrj6biSlp9Vf65u4fKc8veny770hfpOXA/ZB1MGmx7U9qsqtuvIDG1J/cfWxZXiZ7ahVHcOalVeO/DpwRhMywaTZU3PmWgh/u7g+rtXlTc8e2gopx3Jo0kaP+ko/p7vLV34+Uf27V6eF//qUhq/1FH8H19y+I0r933tq7nx743xyx3FP++pgdcvee6Olbn9cyT2T6Wj+GOvPn/PilOv2Z/b/gdi/L6O4q89cLh30dGnns5t/2jsn/6O4r/yiU/95OGXnngtN36I8Qc6ir/hwPYv9w4fPSc3/tOxfwY7Gz9v7r/o5eHhn43kxX8xxl/UUfyH9t7/8QeX3HVx7vFdF/tnqKP4l5795O0Ljz5xZt65M3mgW++cAO9Np6TXWHem653mmXNVly/81Uhl6ppvYfr/om5uKGNyO4vnMT4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACenf7rlgs9d8cnPrK8kISQ5dSZaiL8rL1i7dqSD7Y69+vw9K069Zn992fIO4gAAAADFYh5eqpX0heXhhqQ/nNGyfpwjOCOuJY3l2TmEGCc7R9BpnFKLOKUO4pS71J5Kl+L0dCnOgi7F6e1SnL6COH2hvTj9M8SpTI6ANtszMGN72o8z2KU4C7sUZ1EmRKdxFnepPUu6FGdoxjjtj8OlXYqzrEtxTulSnFO7FOd9XYrzK12Kc1qX4mTnlGc7DhelNU/Pi1N9UC6MU0nKtV+0mk8/Ld3OmXPczmDBdhYVvR+3uZ3+NrfzwczzSrPcTl+b27lgjttJ2tzOr81xO6WC7cRxe2O2fXE7ca3N8X9Tl+Ls6VKcm7sU55YuxfmTLsX50y7FuTU0XpzONg5Au2L+P53vDYXeym+EgfSMk50FiPnuiurP5ve7vBNSjPeBTPmConjZRD0Tb8Vs25edQMjEW5kp72mIV6nlIzPE66uPtyrzy5n29xNrW7etPt65mfLeGeI17AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAP/dMsFn7vik59ZH5Iw+V9LEy3E35UXrF070sF2D66/e1V5w7OH6st6Kx0EAgAAAArFPLynVtIXeitrQm+yoKFeXzoP0Jeul4emlsOLw7rJZTJSqq4PJEtnfF4lfd7qXVu3r955054Pb946dt34dePbPrbmgjUXjV540YWrN23eMj469TOE3oJ4IYTq9MPOm/Z8cWzLlvEdO6cKs+1fnj5vebqepM8b/kgYnVzelrZ/WcH2Sk3bm78HxUcPAAAAAAAAAAAAAAAAAAAAAAD+P7v2GyJpXQcA/PvMzM6Mq5cb/hsP7xzOU6ys9FpDS9wHggT/HC5CzFqbHHmStHqH3onZpAepKUWgHBwXvujCJE1645+UyD8cGGYJ7XWESvmiXhRahoovQpnY3Xnm38442yS35/X5vJjnme/v+/t9f7+H4+D7zAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxa8/XJ2drU9Mx4EpEMyGn0kY3li2laHaHuV57c/oPS+nfO7IyVCiMsBAAAAAyV9eFjrUg5SoV85OPkxW8bomMg2n0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2e+Pjlbm5qeOTqJSAbkNPrIxvLFNK2OUPfVtx7+7Evr1/+tM1YZYR0AAABguKwPz7Ui5ajEaTGWnLzQ+bei2buBtT3zl/LasnXWrTCv993BoLzTVph3xgrzPjYkb3PzenMAAADAh1/W/xdakYkoFdYs64ez/n9YX5/lndqTl29eq51J76u4kiQAAABgBbL+v9SKVKJUqLT69ZX2+xvaocWfzrP5w363z+af3pOXzR/2e/5lzavf6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgw2O+Pjlbm5qeyScRyYCcRh/ZWL6YptUR6m56avwfl+y/Y0NnrFQYYSEAAABgqKwPb7fe5SgVxmMsjl7s+9dfdN+jX3r08cmIWGrzi8W4ecuOHTdsWviMTVneOS/sH/v+c69/e1neOUufq3ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgAzNfn5ytTU3PHJVEJANyGn1kY/limlZHqPvK57/4lwcPPvFaZ6wywjoAAADAcFkf3u79y1GJYhTjxMVvnb3+glzP/EHvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAjx43fvOUbW+bmtt7gZnVuGvmIw2Ab/+NN9s/pcNnPh/+mvNrbWN3/lwAAgA/eqZFE47900uWrvWsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBwMF+fnK1NTc+Uk4hkQE4jU2oHsrF8MU2rI9RNn3yxtOadp57pjFVGWAcAAAAYLuvD271/OSoxFmNxwuK3fu8EGgv9/8Qh3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWJmvT87WpqZn1iQRyYCcRh/ZWL6YptUR6j6wa+/n7j/2exd3xkqFERYCAAAAhsr68GIrUo5S4eNRilOa3+e6JyT55rX/e4H2vO1d08ZXPK/eNS//fvOSQkRr3l09Jys0T7M0r5ytN7F0bdWrtuflmvOqHfMq0Spfbc1bfFi7u6qtGXK+5U8eAAAADp2s/y+1IhNRKpQ6+v+fNq9HNa+D+tzcod04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDYma9PztampmeSJCIZkNPoIxvLF9O0OkLdW3770WO++rO7d3bGKiOsAwAAAAyX9eHt3r8clVgXH4l1i31/THTnZ3n/rL17/73/+uuZEWefeGB9oXfZH2U3v37lwqd7PyJy3dm5iGOb9ZIB9X7z+3tv2th498GIs0/In7KsXrx/ve4l08Zjta2X7XjuwPYhDwcAAACOEFn/P9aKTESpcP3A/j/rvIf0/y2LDfixN+36xfHNz2ZH3jMjN9GslxtQ7wsbH/7z6ef9/fWF/n95vU+27j6997r7j+8quBTpkaSNqet2bj5w7r5cduql+vme+tlz+fK3Xvv3NTff8+5S/XKUm/G1PVtZqrb8s6d8pI253J6ZS9/bU++uXxhw/jt+98zBX629++2F+m+dOt6qf0b0q7908sLA+nFU2hi/4s7d5+/dv7m7fkRU+9V/4+2L46Q/Xnt77/nH42DXwp1PvvOz9wGkjRc2vLnvvPsqF3TXT3rqZ8//5wcf2P2Te777eFY/+1uRM0+LFdbP9dR//q7jdj172+Vru+vnBpz/6StfWr+t+p0/9J7/6q5VCwN3sfz8D531yFUvb0lv7R0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4sszXJ2drU9MzuSQiGZDT6CMbyxfTtDpC3VcvefGNK+/+8Q87Y5UR1gEAAACGy/rwdu9fjkoUoxjji33/Y7Wtl+147sD2mFgaTZrXwty2G3d84pptO6+/epV2DgAAAKzUq5cki/1/oRWZiFJhY4w1+/+p63ZuPnDuvlzW/+cWrklEXHPt3Nazo5X3/F3H7Xr2tsvXtt4TRCz+WUB5Ie8z7byLLnxx4s0/ff30vnmb2nkvbHhz33n3VS7I8qIz75xovZ946KxHrnp5S3pra3+deZ/62ra55uuJbN3xK+7cff7e/Ztz2XuM5nW8uW6WN5fbM3Ppe3vquYkoLYznm3nl5rkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOXm65OztanpmchHJANyGp2agWwsX0zT6gh1L934y9uPeeeJdZ2xUmGEhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+wAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhf36CY2j7OMA/jy7yZtNNmmT9gWjYppWRamHFgURvaioSCtS8FQpUm3tQRQEEaUeTKUVS1W8CFYvRVRQoxQq2FgsrZKK/4oXDyooVA9CKQY0S/Ggks0zm81kpxs3KiifDyxPnmdmvvObmWefzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL9KT9dwvT2x56Ha7Rfc/MkT904/fut7D+y67LE3fhjdduPHB/tePTu5ffWOr29aue3IfRsm9r90/JeBd3471Tb40dlmbepWQohnYgiV96eef3Ly0/NmxmIIoRwHx0IYiiuOD8VcwvpfQwjbG3XO33ho+qodM+2ufT3zxpfnQvLXFarlrJ5Zg/Pr5b+lkubZztojV4Rvb9i8+/NVb7/VPX56bG6XOLNPOc2nEJZtbT6+O4TQmz4zstk2nB2c2k0hhL6m465pU9fFi6x/XQi1XL/uwtT+L7XVNjnZ9jW5fim3X76f6c61fW3Ot1RFdbTdr7ez8/Xn+vnFaKkada5rPT6U2ndTu/ZP5pezTwylGLoa5d8f5+ZIaHpuMcT6s6w0+qXGsw3p+nP9mOuXcv1yd+666udNE60c4/zxbL/ceLYcd6Xx1c1rdQt3FIyfn9pK+qKezfoh/8es6oI/GtdVl9U1dY5a/gmlpjWo1XjjwaeHUU1j1bhiwTG/t5Btm9z89KXlLR+cGCyoIx6MKT92lL/zs6H+u97c+/BwUf7WUsovdZT/3caTP9259+UXC/Ofy/LLHeVfebTvzMYP96wpvD9TcyvIYvJj6mfb7j710TOr/n/PeKtnXc88kN3/Skf1Xz9xsmegdvRYYf3rs/vT21H+N9fd8v3rXx4+XZgfsvy+jvK3TDz4bM9I7fLC/GOzX4VqfYZ2MH9+Hr/6q5GRH0eL8r/I7v9Ai/zYNv+1sf3XvrJ834bC+bkpuz+DKX/hD9u58m+75Mju/trhi4rWznhgsb+wALSyMv2P9VTqt3vPPDRdavmeuVRN7wsvjHbN/gL1p8/AX3minJnzLPsb8wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//0wFDK4=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000140))

2.078825578s ago: executing program 5 (id=1589):
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x3200401, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0)

1.518070866s ago: executing program 1 (id=1592):
r0 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
close(0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00')
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r2, 0x0, r0}, 0x10)

1.517861285s ago: executing program 1 (id=1593):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}})

1.452536843s ago: executing program 1 (id=1594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000013c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7023e78cf7f48cbf400008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x4804)

1.452251886s ago: executing program 1 (id=1595):
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)

960.35198ms ago: executing program 5 (id=1596):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{0x0, 0x35}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000000)=""/148, 0x94}], 0x3, 0x0, 0x10065a)

912.308414ms ago: executing program 5 (id=1597):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

846.225839ms ago: executing program 9 (id=1598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c000780080008000000009a090002"], 0x54}}, 0x0)

845.894167ms ago: executing program 9 (id=1599):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = inotify_init1(0x800)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x445c, &(0x7f000000c300)="$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")
fcntl$setown(r1, 0x8, r2)
fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, <r3=>0x0})
syz_open_procfs$pagemap(r3, &(0x7f0000000100))

571.588137ms ago: executing program 9 (id=1600):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004)

465.962983ms ago: executing program 9 (id=1601):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@loopback, 0x2, 0x6, 0x9}}]}, 0x38}}, 0x4000800)

465.820328ms ago: executing program 9 (id=1602):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

465.730914ms ago: executing program 9 (id=1603):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

141.927418ms ago: executing program 1 (id=1604):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macsec0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0)

464.767µs ago: executing program 1 (id=1605):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3d0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"])

0s ago: executing program 5 (id=1606):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'aio_iiro_16\x00', [0x4f27, 0x20, 0x2, 0x10, 0x5, 0x6, 0x8, 0x7, 0xa, 0x100, 0x7, 0x1, 0x1, 0x20001, 0x6, 0x101, 0x3, 0x80000000, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0xffffffff, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0xfffffff8]})

kernel console output (not intermixed with test programs):

und, idVendor=1235, idProduct=0010, bcdDevice=59.84
[  181.253698][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.263188][ T5913] usb 9-1: config 0 descriptor??
[  181.494891][ T5913] usb 9-1: string descriptor 0 read error: -71
[  181.592216][ T5913] usb 9-1: USB disconnect, device number 3
[  181.693273][ T8793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.697294][ T8793] IPv6: NLM_F_CREATE should be set when creating new route
[  181.783467][ T8797] loop5: detected capacity change from 0 to 8
[  181.795405][ T8797] SQUASHFS error: lzo decompression failed, data probably corrupt
[  181.799232][ T8797] SQUASHFS error: Failed to read block 0x91: -5
[  181.801263][ T8797] SQUASHFS error: Unable to read metadata cache entry [8f]
[  181.806892][ T8797] SQUASHFS error: Unable to read inode 0x11f
[  181.866088][ T8799] loop5: detected capacity change from 0 to 128
[  181.995686][  T793] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  182.155734][  T793] usb 8-1: too many configurations: 65, using maximum allowed: 8
[  182.172782][  T793] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  182.182888][  T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.191175][  T793] usb 8-1: Product: syz
[  182.192743][  T793] usb 8-1: Manufacturer: syz
[  182.199203][  T793] usb 8-1: SerialNumber: syz
[  182.209629][  T793] usb 8-1: config 0 descriptor??
[  182.327630][ T8805] loop8: detected capacity change from 0 to 32768
[  182.362938][ T8805] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode.
[  182.371103][ T5896] (kworker/u8:3,5896,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1
[  182.428123][  T793] usb 8-1: USB disconnect, device number 6
[  182.476639][ T8477] ocfs2: Unmounting device (7,8) on (node local)
[  183.130628][ T8817] loop8: detected capacity change from 0 to 32768
[  183.202490][ T8815] loop5: detected capacity change from 0 to 40427
[  183.219647][ T8815] F2FS-fs: quotafile must be on filesystem root
[  183.229153][ T8817] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode.
[  183.438876][ T8477] ocfs2: Unmounting device (7,8) on (node local)
[  183.894663][ T8836] overlay: filesystem on ./bus is read-only
[  184.139988][ T8824] loop7: detected capacity change from 0 to 40427
[  184.173302][ T8824] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  184.199748][ T8824] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  184.222677][ T8824] F2FS-fs (loop7): invalid crc value
[  184.333004][ T8847] Invalid ELF header magic: != ELF
[  184.358793][ T8824] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.388492][ T8824] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  184.391113][ T8824] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  184.562608][ T8854] loop5: detected capacity change from 0 to 4096
[  184.969604][ T8858] loop7: detected capacity change from 0 to 128
[  184.982259][ T8858] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  184.990468][ T8858] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  185.027624][ T8157] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  185.261346][ T8854] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  185.316150][ T8854] ntfs3(loop5): ino=1a, mi_enum_attr
[  185.318470][ T8854] ntfs3(loop5): ino=1a, mi_enum_attr
[  185.320650][ T8854] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  185.416152][ T8854] ntfs3(loop5): ino=1a, mi_enum_attr
[  185.629505][ T8867] loop7: detected capacity change from 0 to 1024
[  185.636825][ T8869] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  185.660392][ T8869] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  185.679712][ T8869] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  185.683348][ T8869] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  185.699228][ T8869] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  185.701382][ T8869] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  185.726244][ T8869] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  185.740910][ T8869] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  185.772551][ T8869] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  185.795897][ T8869] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  185.822714][ T8869] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  185.837072][ T8869] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  185.849716][ T8869] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  185.872771][ T8869] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  186.160099][ T8883] loop7: detected capacity change from 0 to 512
[  186.175637][ T8883] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  186.209830][ T8883] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.956: invalid indirect mapped block 4294967295 (level 0)
[  186.227785][ T8886] loop8: detected capacity change from 0 to 512
[  186.237999][ T8883] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.956: invalid indirect mapped block 4294967295 (level 1)
[  186.279398][ T8883] EXT4-fs (loop7): 1 orphan inode deleted
[  186.281976][ T8886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.288458][ T8883] EXT4-fs (loop7): 1 truncate cleaned up
[  186.296660][ T8883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.303153][ T8886] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.334292][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.348310][ T8157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.554889][ T8892] netlink: 'syz.8.959': attribute type 2 has an invalid length.
[  186.654545][ T8892] : entered promiscuous mode
[  186.816272][ T8900] loop7: detected capacity change from 0 to 1024
[  187.060378][ T8909] loop8: detected capacity change from 0 to 512
[  187.063920][ T8909] EXT4-fs (loop8): Test dummy encryption mode enabled
[  187.066888][ T8909] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  187.095355][ T8909] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.968: bad orphan inode 131083
[  187.100448][ T8909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.201768][ T8909] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  187.618691][   T33] audit: type=1800 audit(1755258213.190:18): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.968" name="file1" dev="loop8" ino=19 res=0 errno=0
[  188.973553][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.390637][ T8925] loop5: detected capacity change from 0 to 32768
[  189.403510][ T8925] bcachefs (/dev/loop5): error validating superblock: Not a bcachefs superblock layout
[  189.423391][ T8925] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout
[  189.468042][ T8932] loop8: detected capacity change from 0 to 1024
[  189.507227][ T8932] hfsplus: found bad thread record in catalog
[  189.834079][ T8944] loop5: detected capacity change from 0 to 8
[  189.877377][ T8944] unable to read xattr id index table
[  190.001702][ T8952] fuse: Invalid rootmode
[  190.117013][ T8958] loop8: detected capacity change from 0 to 128
[  190.171363][  T793] Process accounting resumed
[  190.190835][  T793] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512)
[  190.203702][  T793] FAT-fs (loop8): Filesystem has been set read-only
[  190.322000][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.991'.
[  190.367012][ T8969] loop5: detected capacity change from 0 to 1024
[  190.422081][ T8969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.448873][ T8969] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.472608][ T8969] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.993: lblock 3 mapped to illegal pblock 3 (length 13)
[  190.485929][ T8969] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  190.512670][ T8969] EXT4-fs (loop5): This should not happen!! Data will be lost
[  190.512670][ T8969] 
[  190.524866][ T8978] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.993: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.559674][ T8978] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.993: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.572081][ T8978] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.993: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.617162][ T8969] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.993: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  190.633219][ T8969] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem
[  190.728691][ T7207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.761512][ T8983] dvmrp5: entered allmulticast mode
[  190.766926][ T8985] program syz.8.999 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.780261][ T8983] pimreg: entered allmulticast mode
[  190.927829][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1002'.
[  191.294776][ T9001] netlink: 'syz.8.1006': attribute type 21 has an invalid length.
[  193.247933][ T9013] loop8: detected capacity change from 0 to 164
[  193.314050][   T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  193.475695][ T9002] loop5: detected capacity change from 0 to 512
[  193.479384][ T9002] EXT4-fs: Ignoring removed mblk_io_submit option
[  193.482239][ T9002] EXT4-fs: Ignoring removed bh option
[  193.493175][ T9002] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  193.527671][   T10] usb 8-1: Using ep0 maxpacket: 32
[  193.531970][ T9002] EXT4-fs (loop5): 1 truncate cleaned up
[  193.535740][ T9002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.547494][   T10] usb 8-1: config 0 has an invalid interface number: 50 but max is 0
[  193.558838][   T10] usb 8-1: config 0 has no interface number 0
[  193.603441][   T10] usb 8-1: config 0 interface 50 has no altsetting 0
[  193.616635][   T10] usb 8-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=13.70
[  193.622870][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.636691][   T10] usb 8-1: Product: syz
[  193.640803][   T10] usb 8-1: Manufacturer: syz
[  193.750673][   T10] usb 8-1: SerialNumber: syz
[  193.770649][ T7207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.777544][   T10] usb 8-1: config 0 descriptor??
[  193.798500][   T10] pl2303 8-1:0.50: required interrupt-in endpoint missing
[  193.988574][ T5913] usb 8-1: USB disconnect, device number 7
[  194.039729][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.041764][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.446388][ T9025] loop8: detected capacity change from 0 to 32768
[  194.468904][ T9025] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  194.515158][ T9025] XFS (loop8): Ending clean mount
[  194.712467][ T9039] loop7: detected capacity change from 0 to 256
[  194.757367][ T9039] FAT-fs (loop7): Directory bread(block 64) failed
[  194.759717][ T9039] FAT-fs (loop7): Directory bread(block 65) failed
[  194.761905][ T9039] FAT-fs (loop7): Directory bread(block 66) failed
[  194.773695][ T9039] FAT-fs (loop7): Directory bread(block 67) failed
[  194.776281][ T9039] FAT-fs (loop7): Directory bread(block 68) failed
[  194.778451][ T9039] FAT-fs (loop7): Directory bread(block 69) failed
[  194.786008][ T9039] FAT-fs (loop7): Directory bread(block 70) failed
[  194.788243][ T9039] FAT-fs (loop7): Directory bread(block 71) failed
[  194.790676][ T9039] FAT-fs (loop7): Directory bread(block 72) failed
[  194.803936][ T9039] FAT-fs (loop7): Directory bread(block 73) failed
[  194.865922][ T9039] syz.7.1019: attempt to access beyond end of device
[  194.865922][ T9039] loop7: rw=1, sector=1224, nr_sectors = 64 limit=256
[  194.870346][ T9039] syz.7.1019: attempt to access beyond end of device
[  194.870346][ T9039] loop7: rw=1, sector=1320, nr_sectors = 36 limit=256
[  195.363864][  T793] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  195.520039][  T793] usb 6-1: unable to get BOS descriptor or descriptor too short
[  195.523497][  T793] usb 6-1: not running at top speed; connect to a high speed hub
[  195.528160][  T793] usb 6-1: config 8 has an invalid interface number: 24 but max is 0
[  195.530821][  T793] usb 6-1: config 8 has no interface number 0
[  195.532760][  T793] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64
[  195.540284][  T793] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  195.548146][  T793] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0
[  195.551373][  T793] usb 6-1: config 8 interface 24 has no altsetting 0
[  195.559765][  T793] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  195.563422][  T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.566953][  T793] usb 6-1: Product: syz
[  195.568409][  T793] usb 6-1: Manufacturer: syz
[  195.570068][  T793] usb 6-1: SerialNumber: syz
[  195.573701][ T9051] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  195.811410][  T793] vmk80xx 6-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  195.815833][  T793] vmk80xx 6-1:8.24: probe with driver vmk80xx failed with error -22
[  195.825637][  T793] usb 6-1: USB disconnect, device number 15
[  196.332319][ T8477] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  196.582475][ T9055] netlink: 'syz.7.1022': attribute type 21 has an invalid length.
[  196.608348][ T9055] netlink: 'syz.7.1022': attribute type 15 has an invalid length.
[  196.611820][ T9055] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1022'.
[  196.623423][ T9055] IPv6: NLM_F_CREATE should be specified when creating new route
[  196.644417][ T9055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.647566][ T9055] IPv6: NLM_F_CREATE should be set when creating new route
[  196.650710][ T9055] IPv6: NLM_F_CREATE should be set when creating new route
[  196.653997][ T9055] IPv6: NLM_F_CREATE should be set when creating new route
[  196.873262][ T9061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.930764][ T9063] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1031'.
[  197.030527][ T9065] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1032'.
[  197.139572][ T9069] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8)
[  197.944608][ T9084] syzkaller1: entered promiscuous mode
[  197.946902][ T9084] syzkaller1: entered allmulticast mode
[  198.322683][ T9095] netlink: 'syz.7.1042': attribute type 11 has an invalid length.
[  199.013895][ T9103] loop7: detected capacity change from 0 to 2048
[  199.017981][ T9103] EXT4-fs (loop7): unsupported descriptor size 3
[  199.517965][ T9113] loop8: detected capacity change from 0 to 16
[  199.554092][ T9113] erofs: Unknown parameter '0000000000000000000418446744073709551615'
[  199.568304][ T9117] loop7: detected capacity change from 0 to 512
[  199.589295][ T9113] loop8: detected capacity change from 0 to 2048
[  199.633041][ T9117] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1052: casefold flag without casefold feature
[  199.669581][ T9117] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1052: couldn't read orphan inode 15 (err -117)
[  199.679331][ T9122] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.721705][ T9117] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.758910][ T9113] NILFS (loop8): error -2 truncating bmap (ino=16)
[  199.848638][ T8157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.149885][ T9128] loop5: detected capacity change from 0 to 1024
[  200.163211][ T9128] EXT4-fs: Ignoring removed bh option
[  200.204200][ T9128] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  200.730013][ T9141] loop8: detected capacity change from 0 to 4096
[  200.747054][ T9141] EXT4-fs: Conflicting test_dummy_encryption options
[  203.008173][ T9144] loop8: detected capacity change from 0 to 2048
[  203.020896][ T9144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.961679][ T9162] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  204.938774][ T9154] 9pnet_fd: p9_fd_create_tcp (9154): problem connecting socket to 127.0.0.1
[  205.138539][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1076'.
[  205.184405][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1080'.
[  205.603864][ T5913] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  205.753831][ T5913] usb 8-1: Using ep0 maxpacket: 32
[  205.762944][ T5913] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  205.781821][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.805796][ T5913] usb 8-1: config 0 descriptor??
[  206.025626][ T5913] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  206.058460][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  206.079576][ T5913] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  206.099509][ T5913] usb 8-1: media controller created
[  206.154640][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  206.300581][ T5913] az6027: usb out operation failed. (-71)
[  206.348114][ T5913] az6027: usb out operation failed. (-71)
[  206.356061][ T5913] stb0899_attach: Driver disabled by Kconfig
[  206.373835][ T5913] az6027: no front-end attached
[  206.373835][ T5913] 
[  206.391081][ T5913] az6027: usb out operation failed. (-71)
[  206.412561][ T5913] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  206.426148][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9
[  206.460093][ T5913] dvb-usb: schedule remote query interval to 400 msecs.
[  206.485413][ T5913] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  206.492287][ T9209] binder: BINDER_SET_CONTEXT_MGR already set
[  206.508704][ T5913] usb 8-1: USB disconnect, device number 8
[  206.517100][ T9209] binder: 9208:9209 ioctl 40046207 0 returned -16
[  206.645287][  T793] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  206.652863][ T5913] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  206.852073][  T793] usb 6-1: Using ep0 maxpacket: 32
[  206.866920][  T793] usb 6-1: config 6 has an invalid interface number: 140 but max is 0
[  206.879611][  T793] usb 6-1: config 6 has no interface number 0
[  206.900445][  T793] usb 6-1: config 6 interface 140 has no altsetting 0
[  206.938980][  T793] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= a.2b
[  206.942890][  T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.969268][  T793] usb 6-1: Product: syz
[  206.971170][  T793] usb 6-1: Manufacturer: syz
[  206.977512][  T793] usb 6-1: SerialNumber: syz
[  207.229693][ T9225] mmap: syz.8.1100 (9225) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  207.238682][  T793] mvusb_mdio 6-1:6.140: probe with driver mvusb_mdio failed with error -5
[  207.251934][  T793] usb 6-1: USB disconnect, device number 16
[  208.122878][ T9231] loop8: detected capacity change from 0 to 2048
[  208.144497][ T9231] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  208.158869][ T9231] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  208.161880][ T9231] UDF-fs: Scanning with blocksize 512 failed
[  208.200532][ T9231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.254376][ T9229] loop5: detected capacity change from 0 to 40427
[  208.292022][ T9229] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  208.312397][ T9229] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  208.333387][ T9229] F2FS-fs (loop5): invalid crc value
[  208.455064][ T9236] Bluetooth: MGMT ver 1.23
[  208.477441][ T9229] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  208.512863][ T9229] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  208.523597][ T9229] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  208.660159][ T9244] loop8: detected capacity change from 0 to 1024
[  208.681067][ T9244] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  208.698523][ T9244] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.732049][ T9244] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.1107: missing EA_INODE flag
[  208.762463][ T9244] EXT4-fs (loop8): Remounting filesystem read-only
[  208.801082][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.907338][ T9251] netlink: 'syz.8.1110': attribute type 1 has an invalid length.
[  208.910130][ T9251] netlink: 'syz.8.1110': attribute type 1 has an invalid length.
[  209.359269][ T9262] loop5: detected capacity change from 0 to 4096
[  209.390415][ T9263] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.810471][ T9271] use of bytesused == 0 is deprecated and will be removed in the future,
[  209.818559][ T9271] use the actual size instead.
[  211.478895][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  213.836294][ T9277] loop8: detected capacity change from 0 to 128
[  213.851527][ T9278] loop5: detected capacity change from 0 to 512
[  213.870095][ T9277] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.919089][ T9278] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  213.927727][ T9277] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.949823][ T9278] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1122: invalid indirect mapped block 2683928664 (level 1)
[  214.000567][ T9278] EXT4-fs (loop5): 1 truncate cleaned up
[  214.066849][ T9278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.289353][ T9278] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1122: Invalid block bitmap block 3 in block_group 0
[  214.497772][ T8477] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.510151][ T7207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.586901][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.591636][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  214.931024][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.954501][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  215.074497][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.078908][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  215.197268][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.201569][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  215.378805][ T9307] loop5: detected capacity change from 0 to 32768
[  215.394251][ T6031] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  215.401704][ T9307] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1134 (9307)
[  215.433580][   T13] bridge_slave_1: left allmulticast mode
[  215.440222][   T13] bridge_slave_1: left promiscuous mode
[  215.443562][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.443768][ T9307] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.465348][ T9307] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  215.468986][ T9307] BTRFS info (device loop5): using free-space-tree
[  215.499494][   T13] bridge_slave_0: left allmulticast mode
[  215.501468][   T13] bridge_slave_0: left promiscuous mode
[  215.503319][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.556778][ T6031] usb 9-1: Using ep0 maxpacket: 16
[  215.564908][ T6031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.568882][ T6031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.583873][ T6031] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  215.603902][ T6031] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  215.609414][ T9307] BTRFS info (device loop5): rebuilding free space tree
[  215.613223][ T6031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.632679][ T6031] usb 9-1: config 0 descriptor??
[  215.818510][ T7207] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  216.064980][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.067439][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.070137][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.072560][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.077622][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.081177][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.084133][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.087679][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.091356][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.101983][ T6031] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  216.107242][ T6031] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  216.116826][ T6031] microsoft 0003:045E:07DA.0008: no inputs found
[  216.119033][ T6031] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  216.129945][ T9353] loop5: detected capacity change from 0 to 512
[  216.141761][ T9353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  216.153215][ T9353] EXT4-fs (loop5): 1 truncate cleaned up
[  216.157286][ T9353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.231902][ T7207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.239676][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.250897][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.255880][   T13] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  216.261938][   T13] bond0 (unregistering): Released all slaves
[  216.270165][ T6031] usb 9-1: USB disconnect, device number 4
[  216.742751][   T13] hsr_slave_0: left promiscuous mode
[  216.746536][   T13] hsr_slave_1: left promiscuous mode
[  216.749469][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.752794][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.762170][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.765474][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.779666][   T13] veth1_macvtap: left promiscuous mode
[  216.788277][   T13] veth0_macvtap: left promiscuous mode
[  216.792498][   T13] veth1_vlan: left promiscuous mode
[  216.801173][   T13] veth0_vlan: left promiscuous mode
[  216.884353][ T5898] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  217.045051][ T5898] usb 6-1: Using ep0 maxpacket: 32
[  217.048664][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  217.062800][ T5898] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  217.066663][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.069888][ T5898] usb 6-1: Product: syz
[  217.071616][ T5898] usb 6-1: Manufacturer: syz
[  217.073507][ T5898] usb 6-1: SerialNumber: syz
[  217.088533][ T5898] usb 6-1: config 0 descriptor??
[  217.118387][ T5898] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  217.268869][   T13] team0 (unregistering): Port device team_slave_1 removed
[  217.299539][   T12] usb 6-1: Failed to submit usb control message: -71
[  217.299722][ T5898] usb 6-1: USB disconnect, device number 17
[  217.303009][   T12] usb 6-1: unable to send the bmi data to the device: -71
[  217.309550][   T12] usb 6-1: unable to get target info from device
[  217.312075][   T12] usb 6-1: could not get target info (-71)
[  217.319200][   T12] usb 6-1: could not probe fw (-71)
[  217.416081][   T13] team0 (unregistering): Port device team_slave_0 removed
[  218.374583][ T9398] loop5: detected capacity change from 0 to 40427
[  218.385405][ T9398] F2FS-fs (loop5): Image doesn't support compression
[  218.393458][ T9398] F2FS-fs (loop5): build fault injection rate: 690
[  218.399635][ T9398] F2FS-fs (loop5): invalid crc value
[  218.413785][ T5913] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  218.472596][ T9398] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  218.476710][ T9398] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  218.506177][ T9403] loop8: detected capacity change from 0 to 32768
[  218.515827][ T9403] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  218.515827][ T9403] members_v2 (size 152):
[  218.515827][ T9403] Device:                        0
[  218.515827][ T9403]   Label:                       (none)
[  218.515827][ T9403]   UUID:                        7af6772b-00de-4159-84cd-1faead7f0000
[  218.515827][ T9403]   Size:                        0
[  218.515827][ T9403]   read errors:                 0
[  218.515827][ T9403]   write errors:                0
[  218.515827][ T9403]   checksum errors:             0
[  218.515827][ T9403]   seqread iops:                0
[  218.515827][ T9403]   seqwrite iops:               0
[  218.515827][ T9403]   randread iops:               0
[  218.515827][ T9403]   randwrite iops:              0
[  218.515827][ T9403]   Bucket size:                 131072
[  218.515827][ T9403]   First bucket:                0
[  218.515827][ T9403]   Buckets:                     0
[  218.515827][ T9403]   Last mount:                  1714681267
[  218.515827][ T9403]   Last superblock write:       83886122
[  218.515827][ T9403]   State:                       rw
[  218.515827][ T9403]   Data allowed:                journal,btree,user
[  218.515827][ T9403]   Has data:                    (none)
[  218.515827][ T9403]   Btree allocated bitmap blocksize:256
[  218.515827][ T9403]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  218.515827][ T9403]   Durability:   
[  218.515904][ T9403] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  218.584643][ T5913] usb 8-1: Using ep0 maxpacket: 32
[  218.587901][ T5913] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  218.591468][ T5913] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  218.613741][ T5913] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.636414][ T5913] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  218.640026][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  218.642855][ T5913] usb 8-1: Product: syz
[  218.653722][ T5913] usb 8-1: Manufacturer: syz
[  218.655305][ T5913] usb 8-1: SerialNumber: syz
[  218.695622][ T5913] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input11
[  218.858260][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.914589][  T793] usb 8-1: USB disconnect, device number 9
[  218.924654][  T793] appletouch 8-1:1.0: input: appletouch disconnected
[  219.027727][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.061607][ T9422] loop8: detected capacity change from 0 to 32768
[  219.073027][ T9422] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1165 (9422)
[  219.109994][ T9422] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.113358][ T9422] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  219.126243][ T9422] BTRFS info (device loop8): using free-space-tree
[  219.140988][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.242467][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.281603][ T8477] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.338132][ T5898] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  219.445104][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.500189][ T5898] usb 6-1: Using ep0 maxpacket: 16
[  219.512485][ T5898] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  219.520444][ T5898] usb 6-1: config 0 has no interface number 0
[  219.534795][ T5898] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  219.539210][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.541899][ T5898] usb 6-1: Product: syz
[  219.543302][ T5898] usb 6-1: Manufacturer: syz
[  219.548112][ T9453] loop8: detected capacity change from 0 to 16
[  219.550319][ T5898] usb 6-1: SerialNumber: syz
[  219.558205][ T5898] usb 6-1: config 0 descriptor??
[  219.576111][ T5898] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  219.583315][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.706978][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.818733][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.946435][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1176'.
[  220.070193][   T13] bridge_slave_1: left allmulticast mode
[  220.074479][   T13] bridge_slave_1: left promiscuous mode
[  220.076509][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.093153][   T13] bridge_slave_0: left allmulticast mode
[  220.104504][   T13] bridge_slave_0: left promiscuous mode
[  220.106672][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.120203][   T13] bridge_slave_1: left allmulticast mode
[  220.122228][   T13] bridge_slave_1: left promiscuous mode
[  220.137696][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.148719][   T13] bridge_slave_0: left allmulticast mode
[  220.150679][   T13] bridge_slave_0: left promiscuous mode
[  220.152666][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.212619][   T13] bond_slave_0: left promiscuous mode
[  220.215933][   T13] bond_slave_1: left promiscuous mode
[  220.242502][ T9474] loop8: detected capacity change from 0 to 32768
[  220.289827][ T9474] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.319418][ T9474] XFS (loop8): Ending clean mount
[  220.331246][ T9474] XFS (loop8): Quotacheck needed: Please wait.
[  220.378350][ T9474] XFS (loop8): Quotacheck: Done.
[  220.436700][ T8477] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.460417][   T13] bond1 (unregistering): (slave gretap1): Releasing active interface
[  220.794375][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.798785][ T9507] loop8: detected capacity change from 0 to 64
[  220.811616][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.828007][   T13] bond0 (unregistering): Released all slaves
[  220.943342][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1184'.
[  220.960943][   T13] bond1 (unregistering): Released all slaves
[  221.028892][ T9513] loop8: detected capacity change from 0 to 128
[  221.041012][ T9513] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  221.057660][ T9513] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  221.204466][ T5898] gspca_spca1528: reg_r err -71
[  221.206110][ T5898] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  221.212281][ T5898] usb 6-1: USB disconnect, device number 18
[  221.242696][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.257784][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.260206][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.262734][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.265551][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.268151][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.270682][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.273226][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.275568][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.277814][ T9517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  221.660229][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.665940][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.671002][   T13] bond0 (unregistering): Released all slaves
[  221.682151][ T9494] netlink: 'syz.7.1181': attribute type 4 has an invalid length.
[  221.772610][ T9527] loop5: detected capacity change from 0 to 1024
[  221.821885][ T9527] hfsplus: keylen 65060 too large
[  221.833372][ T9527] hfsplus: xattr searching failed
[  221.853880][ T5898] usb 9-1: new low-speed USB device number 5 using dummy_hcd
[  222.016367][ T5898] usb 9-1: unable to get BOS descriptor or descriptor too short
[  222.022706][ T5898] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.039117][ T5898] usb 9-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  222.191309][ T5898] usb 9-1: config 1 interface 0 has no altsetting 0
[  222.204741][ T5898] usb 9-1: string descriptor 0 read error: -22
[  222.206864][ T5898] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  222.250752][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.260282][ T5898] cdc_ether 9-1:1.0: skipping garbage
[  222.262074][ T5898] usb 9-1: bad CDC descriptors
[  222.322217][ T9548] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1196'.
[  222.428847][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1199'.
[  222.473003][ T5898] usb 9-1: USB disconnect, device number 5
[  222.659880][   T13] hsr_slave_0: left promiscuous mode
[  222.666023][   T13] hsr_slave_1: left promiscuous mode
[  222.674785][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.678363][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.699128][ T9578] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1206'.
[  222.704479][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.711705][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.742388][   T13] hsr_slave_0: left promiscuous mode
[  222.752638][   T13] hsr_slave_1: left promiscuous mode
[  222.756891][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.759929][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.765797][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.768990][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.781837][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1208'.
[  222.821693][ T5854] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  222.825962][   T13] veth1_macvtap: left promiscuous mode
[  222.828392][   T13] veth0_macvtap: left promiscuous mode
[  222.830759][   T13] veth1_vlan: left promiscuous mode
[  222.832977][   T13] veth0_vlan: left promiscuous mode
[  222.844093][ T9522] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  222.847455][   T13] veth1_macvtap: left promiscuous mode
[  222.850067][   T13] veth0_macvtap: left promiscuous mode
[  222.854177][   T13] veth1_vlan: left promiscuous mode
[  222.857317][   T13] veth0_vlan: left promiscuous mode
[  222.958666][ T9590] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1212'.
[  223.003606][ T9522] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.008508][ T9522] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.011675][ T9522] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  223.021146][ T9522] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  223.031089][ T9522] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.045696][ T9522] usb 8-1: config 0 descriptor??
[  223.293875][ T9592] loop8: detected capacity change from 0 to 32768
[  223.331819][ T9592] XFS (loop8): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  223.393060][ T9592] XFS (loop8): Ending clean mount
[  223.451316][ T8477] XFS (loop8): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  223.485734][ T9522] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  223.515690][ T9522] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  223.561978][   T13] team0 (unregistering): Port device team_slave_1 removed
[  223.677518][   T13] team0 (unregistering): Port device team_slave_0 removed
[  223.778443][ T5897] usb 8-1: USB disconnect, device number 10
[  223.973813][ T6031] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  224.126015][ T6031] usb 9-1: unable to get BOS descriptor or descriptor too short
[  224.131937][ T6031] usb 9-1: not running at top speed; connect to a high speed hub
[  224.136361][ T6031] usb 9-1: config 1 has an invalid interface number: 138 but max is 0
[  224.139648][ T6031] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.144037][ T6031] usb 9-1: config 1 has no interface number 0
[  224.146446][ T6031] usb 9-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  224.151612][ T6031] usb 9-1: config 1 interface 138 has no altsetting 0
[  224.162352][ T6031] usb 9-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  224.166042][ T6031] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.169529][ T6031] usb 9-1: Product: syz
[  224.171161][ T6031] usb 9-1: Manufacturer: syz
[  224.172978][ T6031] usb 9-1: SerialNumber: syz
[  224.383158][   T13] team0 (unregistering): Port device team_slave_1 removed
[  224.409256][ T6031] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  224.430561][   T13] team0 (unregistering): Port device team_slave_0 removed
[  224.460016][ T6031] usb 9-1: USB disconnect, device number 6
[  225.030237][ T9623] loop8: detected capacity change from 0 to 128
[  225.055296][ T9623] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  225.074036][ T9623] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.117963][ T9623] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #2: comm syz.8.1220: No space for directory leaf checksum. Please run e2fsck -D.
[  225.138221][ T9623] EXT4-fs error (device loop8): htree_dirblock_to_tree:1051: inode #2: comm syz.8.1220: Directory block failed checksum
[  225.210801][ T9616] loop7: detected capacity change from 0 to 32768
[  225.228580][ T8477] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.312241][ T9614] loop5: detected capacity change from 0 to 32768
[  225.388469][ T9640] loop8: detected capacity change from 0 to 256
[  225.392562][ T9640] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  225.417851][ T9614] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  225.441360][ T9614] XFS (loop5): Ending clean mount
[  225.445320][ T9616] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  225.445331][ T9616]   allowing incompatible features above 0.0: (unknown version)
[  225.445335][ T9616]   features: 
[  225.456802][ T9640] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  225.473233][ T9614] XFS (loop5): Quotacheck needed: Please wait.
[  225.490689][ T9614] XFS (loop5): Quotacheck: Done.
[  225.519345][   T33] audit: type=1800 audit(1755258251.150:19): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1217" name="bus" dev="loop5" ino=4426 res=0 errno=0
[  225.565354][ T9616] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  225.571590][ T9616] bcachefs (loop7): initializing new filesystem
[  225.587999][ T9616] bcachefs (loop7): going read-write
[  225.601190][ T7207] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  225.621220][ T9616] bcachefs (loop7): marking superblocks
[  225.764371][ T9616] bcachefs (loop7): initializing freespace
[  225.777637][ T9616] bcachefs (loop7): done initializing freespace
[  225.802430][ T9616] bcachefs (loop7): reading snapshots table
[  225.805577][ T9616] bcachefs (loop7): reading snapshots done
[  225.844288][ T9616] bcachefs (loop7): done starting filesystem
[  225.928557][   T33] audit: type=1800 audit(1755258251.560:20): pid=9616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1218" name="file1" dev="loop7" ino=4098 res=0 errno=0
[  226.005072][ T9616] syz.7.1218 (9616) used greatest stack depth: 17448 bytes left
[  226.027492][ T8157] bcachefs (loop7): shutting down
[  226.029322][ T8157] bcachefs (loop7): going read-only
[  226.031560][ T8157] bcachefs (loop7): finished waiting for writes to stop
[  226.072939][ T8157] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3
[  226.119082][ T8157] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  226.125543][ T8157] bcachefs (loop7): clean shutdown complete, journal seq 4
[  226.133915][ T8157] bcachefs (loop7): marking filesystem clean
[  226.201925][ T9681] loop8: detected capacity change from 0 to 8
[  226.207537][ T8157] bcachefs (loop7): shutdown complete
[  226.241533][ T9667] loop5: detected capacity change from 0 to 40427
[  226.252404][ T9667] F2FS-fs (loop5): invalid crc value
[  226.256702][ T9681] SQUASHFS error: Failed to read block 0x1ec: -5
[  226.259521][ T9681] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  226.345142][ T9667] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  226.352567][ T9667] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  226.513951][ T9691] loop8: detected capacity change from 0 to 32768
[  226.517305][ T9691] XFS: ikeep mount option is deprecated.
[  226.546774][ T7207] syz-executor: attempt to access beyond end of device
[  226.546774][ T7207] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  226.568491][ T9691] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  226.571924][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  226.571948][ T7207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.571956][ T7207] Call Trace:
[  226.571961][ T7207]  <TASK>
[  226.571966][ T7207]  dump_stack_lvl+0x189/0x250
[  226.571988][ T7207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.572002][ T7207]  ? __pfx_queue_work_on+0x10/0x10
[  226.572013][ T7207]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  226.572029][ T7207]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  226.572052][ T7207]  f2fs_handle_critical_error+0x37c/0x540
[  226.572073][ T7207]  f2fs_write_end_io+0x886/0xb60
[  226.572097][ T7207]  __submit_merged_bio+0x27a/0x6a0
[  226.572118][ T7207]  __submit_merged_write_cond+0x255/0x530
[  226.572139][ T7207]  f2fs_write_data_pages+0x261d/0x3000
[  226.572180][ T7207]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  226.572235][ T7207]  ? folios_put_refs+0x559/0x640
[  226.572255][ T7207]  ? __pfx_folios_put_refs+0x10/0x10
[  226.572267][ T7207]  ? rcu_is_watching+0x15/0xb0
[  226.572285][ T7207]  ? __lock_acquire+0xab9/0xd20
[  226.572313][ T7207]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  226.572331][ T7207]  do_writepages+0x32e/0x550
[  226.572354][ T7207]  ? do_raw_spin_unlock+0x4d/0x240
[  226.572372][ T7207]  filemap_fdatawrite+0x199/0x240
[  226.572389][ T7207]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  226.572465][ T7207]  ? do_raw_spin_unlock+0x4d/0x240
[  226.572484][ T7207]  f2fs_sync_dirty_inodes+0x31f/0x830
[  226.572508][ T7207]  f2fs_write_checkpoint+0x95a/0x1df0
[  226.572537][ T7207]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  226.572582][ T7207]  ? kill_f2fs_super+0x298/0x6c0
[  226.572598][ T7207]  kill_f2fs_super+0x2c3/0x6c0
[  226.572614][ T7207]  ? __pfx_kill_f2fs_super+0x10/0x10
[  226.572615][ T9691] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  226.572624][ T7207]  ? radix_tree_delete_item+0x2b6/0x400
[  226.572645][ T7207]  ? shrinker_free+0x2ce/0x3e0
[  226.572660][ T7207]  deactivate_locked_super+0xbc/0x130
[  226.572676][ T7207]  cleanup_mnt+0x425/0x4c0
[  226.572689][ T7207]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.572706][ T7207]  task_work_run+0x1d4/0x260
[  226.572724][ T7207]  ? __pfx_task_work_run+0x10/0x10
[  226.572737][ T7207]  ? __x64_sys_umount+0x122/0x160
[  226.572756][ T7207]  ? exit_to_user_mode_loop+0x40/0x110
[  226.572774][ T7207]  exit_to_user_mode_loop+0xec/0x110
[  226.572810][ T7207]  do_syscall_64+0x2bd/0x3b0
[  226.572827][ T7207]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.572841][ T7207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.572852][ T7207]  ? exc_page_fault+0x9f/0xf0
[  226.572868][ T7207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.572879][ T7207] RIP: 0033:0x7fd4fc58ff17
[  226.572891][ T7207] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  226.572901][ T7207] RSP: 002b:00007ffca57b5548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  226.572914][ T7207] RAX: 0000000000000000 RBX: 00007fd4fc611c05 RCX: 00007fd4fc58ff17
[  226.572922][ T7207] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca57b5600
[  226.572929][ T7207] RBP: 00007ffca57b5600 R08: 0000000000000000 R09: 0000000000000000
[  226.572942][ T7207] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca57b6690
[  226.572950][ T7207] R13: 00007fd4fc611c05 R14: 0000000000037441 R15: 00007ffca57b66d0
[  226.572971][ T7207]  </TASK>
[  226.573352][ T7207] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  226.632216][ T9691] XFS (loop8): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c.  Caller xlog_header_check_mount+0x93/0xe0
[  226.724839][ T9691] CPU: 1 UID: 0 PID: 9691 Comm: syz.8.1233 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  226.724859][ T9691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.724867][ T9691] Call Trace:
[  226.724871][ T9691]  <TASK>
[  226.724877][ T9691]  dump_stack_lvl+0x189/0x250
[  226.724900][ T9691]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.724918][ T9691]  ? __phys_addr+0xd3/0x180
[  226.724935][ T9691]  ? __kasan_kmalloc_large+0x85/0xa0
[  226.724954][ T9691]  ? is_vmalloc_addr+0x52/0xb0
[  226.724974][ T9691]  xfs_corruption_error+0x122/0x170
[  226.724989][ T9691]  ? xlog_header_check_mount+0x93/0xe0
[  226.725009][ T9691]  xlog_header_check_mount+0xc6/0xe0
[  226.725025][ T9691]  ? xlog_header_check_mount+0x93/0xe0
[  226.725042][ T9691]  xlog_find_verify_log_record+0x32e/0x500
[  226.725065][ T9691]  xlog_find_zeroed+0x327/0x410
[  226.725086][ T9691]  xlog_find_head+0x5f/0x700
[  226.725101][ T9691]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.725118][ T9691]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  226.725137][ T9691]  xlog_find_tail+0x3d/0x840
[  226.725154][ T9691]  ? try_to_wake_up+0x7f5/0x12b0
[  226.725174][ T9691]  xlog_recover+0x4b/0x3e0
[  226.725193][ T9691]  xfs_log_mount+0x253/0x3e0
[  226.725215][ T9691]  xfs_mountfs+0xe5e/0x2330
[  226.725248][ T9691]  ? __pfx_xfs_mountfs+0x10/0x10
[  226.725267][ T9691]  ? xfs_setup_dax_always+0x20f/0x290
[  226.725283][ T9691]  xfs_fs_fill_super+0x11b3/0x1600
[  226.725301][ T9691]  get_tree_bdev_flags+0x40e/0x4d0
[  226.725319][ T9691]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  226.725332][ T9691]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  226.725358][ T9691]  vfs_get_tree+0x92/0x2b0
[  226.725377][ T9691]  do_new_mount+0x2a2/0x9e0
[  226.725394][ T9691]  ? ns_capable+0x8a/0xf0
[  226.725405][ T9691]  ? __pfx_do_new_mount+0x10/0x10
[  226.725421][ T9691]  ? path_mount+0x61c/0xfe0
[  226.725463][ T9691]  ? user_path_at+0x44/0x60
[  226.725485][ T9691]  __se_sys_mount+0x317/0x410
[  226.725508][ T9691]  ? __pfx___se_sys_mount+0x10/0x10
[  226.725532][ T9691]  ? do_syscall_64+0xbe/0x3b0
[  226.725548][ T9691]  ? __x64_sys_mount+0x20/0xc0
[  226.725567][ T9691]  do_syscall_64+0xfa/0x3b0
[  226.725582][ T9691]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.725597][ T9691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.725609][ T9691]  ? exc_page_fault+0x9f/0xf0
[  226.725626][ T9691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.725638][ T9691] RIP: 0033:0x7ff586f9038a
[  226.725650][ T9691] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.725660][ T9691] RSP: 002b:00007ff587e7de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  226.725673][ T9691] RAX: ffffffffffffffda RBX: 00007ff587e7def0 RCX: 00007ff586f9038a
[  226.725681][ T9691] RDX: 0000200000000500 RSI: 0000200000000040 RDI: 00007ff587e7deb0
[  226.725690][ T9691] RBP: 0000200000000500 R08: 00007ff587e7def0 R09: 000000000300c880
[  226.725698][ T9691] R10: 000000000300c880 R11: 0000000000000246 R12: 0000200000000040
[  226.725705][ T9691] R13: 00007ff587e7deb0 R14: 000000000000970d R15: 0000200000000080
[  226.725726][ T9691]  </TASK>
[  226.725731][ T9691] XFS (loop8): Corruption detected. Unmount and run xfs_repair
[  226.853778][ T5854] Bluetooth: hci0: command 0x0406 tx timeout
[  226.854487][ T9691] XFS (loop8): log has mismatched uuid - can't recover
[  226.859547][ T9691] XFS (loop8): empty log check failed
[  226.861737][ T9691] XFS (loop8): log mount/recovery failed: error -117
[  226.872915][ T9691] XFS (loop8): log mount failed
[  227.052002][ T9718] loop8: detected capacity change from 0 to 16
[  227.065034][ T9718] erofs (device loop8): mounted with root inode @ nid 36.
[  227.893825][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  228.060659][   T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  228.072079][   T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  228.093600][   T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  228.108139][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.127736][ T9750] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  228.154611][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  228.405882][   T10] usb 6-1: USB disconnect, device number 19
[  228.500799][ T9777] program syz.8.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  228.575148][   T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  228.691157][ T9786] loop8: detected capacity change from 0 to 1024
[  228.721284][ T9786] hfsplus: failed to load root directory
[  228.734110][   T24] usb 8-1: Using ep0 maxpacket: 32
[  228.754730][   T24] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  228.759653][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[  228.761894][   T24] usb 8-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00
[  228.783883][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.789780][   T24] usb 8-1: config 0 descriptor??
[  228.983512][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1258'.
[  229.219602][   T24] smartjoyplus 0003:6666:8801.000A: unknown main item tag 0x2
[  229.232784][   T24] smartjoyplus 0003:6666:8801.000A: hidraw0: USB HID vf.fe Device [HID 6666:8801] on usb-dummy_hcd.7-1/input0
[  229.246386][   T24] smartjoyplus 0003:6666:8801.000A: no output reports found
[  229.335623][ T9806] loop5: detected capacity change from 0 to 32768
[  229.340342][ T9806] bcachefs (/dev/loop5): error validating superblock: Filesystem has incompatible feature bit 96, highest supported small_image (22)
[  229.354343][ T9806] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  229.423621][   T24] usb 8-1: USB disconnect, device number 11
[  229.893725][ T5913] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  230.042460][ T9859] netlink: 27 bytes leftover after parsing attributes in process `syz.8.1274'.
[  230.068658][ T5913] usb 6-1: Using ep0 maxpacket: 32
[  230.073151][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short
[  230.079974][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.091859][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  230.097782][ T5913] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.114492][ T5913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  230.119054][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.125337][ T5913] usb 6-1: Product: syz
[  230.131608][ T5913] usb 6-1: Manufacturer: syz
[  230.135298][ T5913] usb 6-1: SerialNumber: syz
[  230.220499][ T5913] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  230.239801][ T5913] cdc_ncm 6-1:1.0: bind() failure
[  230.446870][ T9865] net_ratelimit: 3320 callbacks suppressed
[  230.446879][ T9865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  230.460847][ T5913] usb 6-1: USB disconnect, device number 20
[  230.552422][   T33] audit: type=1326 audit(1755258256.180:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.7.1277" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63c38ebe9 code=0x7ffc0000
[  230.577533][   T33] audit: type=1326 audit(1755258256.180:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.7.1277" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63c38ebe9 code=0x7ffc0000
[  230.599025][   T33] audit: type=1326 audit(1755258256.190:23): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.8.1276" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff586f8ebe9 code=0x0
[  230.622487][   T33] audit: type=1326 audit(1755258256.210:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.7.1277" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe63c38ebe9 code=0x7ffc0000
[  230.636725][   T33] audit: type=1326 audit(1755258256.210:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.7.1277" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63c38ebe9 code=0x7ffc0000
[  230.656442][   T33] audit: type=1326 audit(1755258256.210:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.7.1277" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63c38ebe9 code=0x7ffc0000
[  231.032800][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1280'.
[  231.299266][ T9909] loop5: detected capacity change from 0 to 164
[  231.305791][ T9909] Unable to read rock-ridge attributes
[  231.317536][ T9909] Unable to read rock-ridge attributes
[  231.546037][ T9925] program syz.5.1289 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  231.601560][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1291'.
[  231.604940][ T9929] loop7: detected capacity change from 0 to 512
[  231.605683][ T9929] EXT4-fs: inline encryption not supported
[  231.611155][ T9929] EXT4-fs (loop7): Test dummy encryption mode enabled
[  231.623278][ T9929] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  231.641025][ T9929] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #17: comm syz.7.1290: corrupted in-inode xattr: e_name out of bounds
[  231.650738][ T9929] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1290: couldn't read orphan inode 17 (err -117)
[  231.678334][ T9929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.719167][ T9929] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  231.729487][ T9929] EXT4-fs: journaled quota format not specified
[  231.786414][ T8157] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  231.798073][ T8157] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 17
[  231.803898][ T8157] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 17
[  231.964645][ T9079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.004883][ T9949] mkiss: ax0: crc mode is auto.
[  232.062604][ T9936] loop8: detected capacity change from 0 to 32768
[  232.106380][ T9936] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 1 out of order with next entry (56 > 0)
[  232.106380][ T9936] journal_seq_blacklist (size 640):
[  232.106380][ T9936] 0-56 0-0 0-34 0-0 0-0 45-0 45-26 6-11 0-0 0-11 33-11 5-0 0-0 0-4 4-8 0-0 0-0 0-0 0-0 0-0 0-2 0-0 0-0 0-0 0-0 0-0 0-0 1-12 0-2 0-0 0-0 0-0 0-0 0-1 0-0 2-17 182-41 0-0 0-0
[  232.106380][ T9936] 
[  232.128381][ T9936] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[  232.165017][ T5896] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.168855][ T5896] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.318406][ T5896] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.326090][ T5896] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.378300][ T9961] loop5: detected capacity change from 0 to 164
[  232.404245][ T9961] Unsupported NM flag settings (8)
[  232.456112][ T5896] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.473325][ T5896] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.498847][ T9967] loop8: detected capacity change from 0 to 512
[  232.527568][ T9967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  232.547232][ T9967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.552439][ T9967] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.572218][ T9967] EXT4-fs: Cannot change quota options when quota turned on
[  232.615338][ T5896] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.616677][ T8477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.618732][ T5896] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.637666][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  232.656765][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  232.661497][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  232.679854][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  232.683256][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  232.735602][ T9983] kAFS: unable to lookup cell '\/'
[  232.800502][ T9986] binder: 9985:9986 ioctl c0306201 200000000240 returned -14
[  232.842802][ T9990] loop8: detected capacity change from 0 to 256
[  232.977712][ T9994] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  232.977757][ T8242] IPVS: starting estimator thread 0...
[  233.008122][ T9975] chnl_net:caif_netlink_parms(): no params data found
[  233.074177][ T9997] IPVS: using max 47 ests per chain, 112800 per kthread
[  233.107442][ T9975] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.109852][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.112230][ T9975] bridge_slave_0: entered allmulticast mode
[  233.115544][ T9975] bridge_slave_0: entered promiscuous mode
[  233.118727][ T9975] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.121136][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.123547][ T9975] bridge_slave_1: entered allmulticast mode
[  233.126472][ T9975] bridge_slave_1: entered promiscuous mode
[  233.144100][ T9975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.148782][ T9975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.170495][ T9975] team0: Port device team_slave_0 added
[  233.175025][ T9975] team0: Port device team_slave_1 added
[  233.192183][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.195030][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.203125][ T9975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.209919][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.212477][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.224368][ T9975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.259747][ T9975] hsr_slave_0: entered promiscuous mode
[  233.262473][ T9975] hsr_slave_1: entered promiscuous mode
[  233.347460][T10006] loop8: detected capacity change from 0 to 40427
[  233.370672][ T9975] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  233.375737][ T9975] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  233.379928][T10006] F2FS-fs (loop8): invalid crc value
[  233.381055][ T9975] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  233.388635][ T9975] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  233.435535][T10006] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  233.439166][T10006] F2FS-fs (loop8): Start checkpoint disabled!
[  233.440723][ T9975] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.444354][ T9975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.447410][ T9975] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.450463][ T9975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.455163][T10006] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  233.516230][ T9975] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.530303][   T87] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.535631][   T87] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.547888][ T9975] 8021q: adding VLAN 0 to HW filter on device team0
[  233.557806][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.560525][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.572104][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.574997][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.740619][ T9975] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.829431][T10028] netlink: 'syz.8.1313': attribute type 15 has an invalid length.
[  234.042669][ T9975] veth0_vlan: entered promiscuous mode
[  234.065076][ T9975] veth1_vlan: entered promiscuous mode
[  234.102318][T10037] comedi comedi0: adq12b: I/O port conflict (0xffffffffffffffff,16)
[  234.106459][ T9975] veth0_macvtap: entered promiscuous mode
[  234.116315][ T9975] veth1_macvtap: entered promiscuous mode
[  234.127880][ T9975] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.134634][ T9975] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.155095][ T6719] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.160548][ T6719] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.166434][ T6719] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.176057][ T6719] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.487696][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.494234][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.519489][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.524162][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.730688][T10052] loop9: detected capacity change from 0 to 256
[  234.754072][ T5854] Bluetooth: hci1: command tx timeout
[  234.909705][ T5896] bridge_slave_1: left allmulticast mode
[  234.912121][ T5896] bridge_slave_1: left promiscuous mode
[  234.915304][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.920148][ T5896] bridge_slave_0: left allmulticast mode
[  234.922176][ T5896] bridge_slave_0: left promiscuous mode
[  234.924874][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.130833][ T5896] dvmrp5 (unregistering): left allmulticast mode
[  235.293420][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.298639][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.302943][ T5896] bond0 (unregistering): Released all slaves
[  235.420850][T10063] netlink: 'syz.8.1325': attribute type 1 has an invalid length.
[  235.501015][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1326'.
[  235.506236][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1326'.
[  235.663544][T10074] loop8: detected capacity change from 0 to 256
[  235.672853][T10074] exfat: Deprecated parameter 'utf8'
[  235.678110][T10074] exfat: Deprecated parameter 'utf8'
[  235.686029][T10074] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  235.717675][ T5896] hsr_slave_0: left promiscuous mode
[  235.729584][ T5896] hsr_slave_1: left promiscuous mode
[  235.747351][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.768995][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.777500][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.780375][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.850888][ T5896] veth1_macvtap: left promiscuous mode
[  235.853046][ T5896] veth0_macvtap: left promiscuous mode
[  235.856699][ T5896] veth1_vlan: left promiscuous mode
[  235.858800][ T5896] veth0_vlan: left promiscuous mode
[  235.966267][T10082] loop5: detected capacity change from 0 to 32768
[  235.983286][T10082] JBD2: Ignoring recovery information on journal
[  235.988103][T10082] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75
[  235.991571][T10082] JBD2: bad block at offset 32
[  236.002612][T10082] (syz.5.1332,10082,0):ocfs2_load_local_alloc:312 ERROR: Invalid local alloc inode, 75
[  236.006465][T10082] (syz.5.1332,10082,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  236.009780][T10082] (syz.5.1332,10082,0):ocfs2_check_volume:2404 ERROR: status = -22
[  236.013172][T10082] (syz.5.1332,10082,0):ocfs2_check_volume:2432 ERROR: status = -22
[  236.016697][T10082] (syz.5.1332,10082,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  236.028497][T10082] (syz.5.1332,10082,0):ocfs2_fill_super:1177 ERROR: status = -22
[  236.149891][   T33] audit: type=1800 audit(1755258261.760:27): pid=10087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1334" name="bus" dev="overlay" ino=68 res=0 errno=0
[  236.208655][ T5896] pimreg (unregistering): left allmulticast mode
[  236.295867][T10100] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1339'.
[  236.549433][T10110] futex_wake_op: syz.9.1345 tries to shift op by -1; fix this program
[  236.600488][T10095] loop8: detected capacity change from 0 to 32768
[  236.652723][T10102] loop5: detected capacity change from 0 to 32768
[  236.660632][T10102] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  236.660632][T10102] clean (size 2912):
[  236.660632][T10102] flags:          0
[  236.660632][T10102] journal_seq:    10
[  236.660632][T10102] usage: type=inodes v=8
[  236.660632][T10102] usage: type=key_version v=0
[  236.660632][T10102] usage: type=reserved v=0
[  236.660632][T10102] usage: type=reserved v=0
[  236.660632][T10102] usage: type=reserved v=0
[  236.660632][T10102] usage: type=reserved v=0
[  236.660632][T10102] data_usage: btree: 1/1 [0]=2816
[  236.660632][T10102] data_usage: journal: 1/1 [0]=0
[  236.660632][T10102] data_usage: user: 1/1 [0]=16
[  236.660632][T10102] btree_keys: 
[  236.660632][T10102] clock: read=0
[  236.660632][T10102] clock: write=1280
[  236.660632][T10102] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN ptr: 0:6912 gen 0
[  236.660632][T10102] btree_root: btree=inodes level=0 u64s 11 type logged_op_truncate SPOS_MAX len 0 ver 0: subvol=0 inum=8469488994664696954 new_i_size=24
[  236.660632][T10102] btree_root: btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN ptr: 0:10496 gen 0
[  236.660632][T10102] btree_root: btree=xattrs level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 
[  236.660712][T10102] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  236.724992][T10095] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  236.744551][T10095] XFS (loop8): Ending clean mount
[  236.802689][T10095] XFS (loop8): Quotacheck needed: Please wait.
[  236.835280][ T5854] Bluetooth: hci1: command tx timeout
[  236.857276][ T4241] XFS (loop8): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1806 dinode
[  236.879797][ T4241] XFS (loop8): Unmount and run xfs_repair
[  236.881724][ T4241] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[  236.895513][ T4241] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  236.899030][ T4241] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.901941][ T4241] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  236.908652][ T4241] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a  4.Xh...=........
[  236.911729][ T4241] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  236.914988][ T4241] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 2c 50 36 f0  ..e.........,P6.
[  236.917804][ T4241] 00000060: ff ff ff ff cb 1f f2 eb 00 00 00 00 00 00 00 08  ................
[  236.920673][ T4241] 00000070: 00 00 00 01 00 00 00 0d 00 00 00 00 00 00 00 08  ................
[  236.949211][T10095] XFS (loop8): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  236.973806][ T8477] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  236.989581][ T8477] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair.
[  237.243487][ T5896] team0 (unregistering): Port device team_slave_1 removed
[  237.286112][ T5896] team0 (unregistering): Port device team_slave_0 removed
[  238.161736][T10158] netlink: 'syz.9.1361': attribute type 25 has an invalid length.
[  238.172733][T10145] loop8: detected capacity change from 0 to 32768
[  238.210798][   T33] audit: type=1800 audit(1755258263.840:28): pid=10145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1358" name="file1" dev="loop8" ino=4 res=0 errno=0
[  238.291885][   T33] audit: type=1800 audit(1755258263.920:29): pid=10145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1358" name="file1" dev="loop8" ino=4 res=0 errno=0
[  238.568183][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1367'.
[  238.683572][T10197] netlink: 'syz.9.1369': attribute type 1 has an invalid length.
[  238.693759][T10197] netlink: 15 bytes leftover after parsing attributes in process `syz.9.1369'.
[  238.826099][T10205] netlink: 'syz.8.1372': attribute type 7 has an invalid length.
[  238.836997][T10205] netlink: 'syz.8.1372': attribute type 8 has an invalid length.
[  238.917469][ T5854] Bluetooth: hci1: command tx timeout
[  238.951732][T10213] loop8: detected capacity change from 0 to 2048
[  238.958176][T10213] NILFS (loop8): invalid segment: Magic number mismatch
[  238.961110][T10213] NILFS (loop8): trying rollback from an earlier position
[  238.973387][T10213] NILFS (loop8): recovery complete
[  238.980167][T10215] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  239.500232][ T8242] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  239.653738][ T8242] usb 10-1: Using ep0 maxpacket: 8
[  239.657523][ T8242] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.667551][ T8242] usb 10-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  239.671065][ T8242] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.675372][ T8242] usb 10-1: Product: syz
[  239.677114][ T8242] usb 10-1: Manufacturer: syz
[  239.679016][ T8242] usb 10-1: SerialNumber: syz
[  239.682785][ T8242] usb 10-1: config 0 descriptor??
[  239.695225][ T8242] redrat3 10-1:0.0: Couldn't find all endpoints
[  239.910181][ T8242] usb 10-1: USB disconnect, device number 2
[  240.994271][ T5854] Bluetooth: hci1: command tx timeout
[  241.076902][   T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  241.174280][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  241.183299][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  241.188804][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  241.196000][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  241.202292][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  241.233840][   T10] usb 10-1: Using ep0 maxpacket: 8
[  241.251424][   T10] usb 10-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  241.267443][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.274437][   T10] usb 10-1: Product: syz
[  241.276871][   T10] usb 10-1: Manufacturer: syz
[  241.283013][   T10] usb 10-1: SerialNumber: syz
[  241.294969][   T10] usb 10-1: config 0 descriptor??
[  241.309600][   T10] ipw 10-1:0.0: IPWireless converter converter detected
[  241.440670][T10294] Bluetooth: (null): Invalid header checksum
[  241.500392][T10281] chnl_net:caif_netlink_parms(): no params data found
[  241.517943][T10284] usb 10-1: USB disconnect, device number 3
[  241.542486][T10284] ipw 10-1:0.0: device disconnected
[  241.618724][T10281] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.621286][T10281] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.624321][T10281] bridge_slave_0: entered allmulticast mode
[  241.627194][T10281] bridge_slave_0: entered promiscuous mode
[  241.630949][T10281] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.633236][T10281] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.636769][T10281] bridge_slave_1: entered allmulticast mode
[  241.639447][T10281] bridge_slave_1: entered promiscuous mode
[  241.668627][T10281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.676041][T10281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.717907][T10281] team0: Port device team_slave_0 added
[  241.721107][T10281] team0: Port device team_slave_1 added
[  241.754741][T10281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.757422][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.768958][T10281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.773495][T10281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.776275][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.785133][T10281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.829345][T10281] hsr_slave_0: entered promiscuous mode
[  241.835588][T10281] hsr_slave_1: entered promiscuous mode
[  241.841910][T10281] debugfs: 'hsr0' already exists in 'hsr'
[  241.844271][T10281] Cannot create hsr debugfs directory
[  242.141988][T10325] input: syz1 as /devices/virtual/input/input12
[  242.190889][T10328] loop5: detected capacity change from 0 to 1024
[  242.835236][T10281] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  242.842791][T10281] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  242.864788][T10281] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  242.882587][T10281] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  243.026296][T10281] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.044871][T10281] 8021q: adding VLAN 0 to HW filter on device team0
[  243.050517][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.053228][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.063070][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.065615][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.073025][T10379] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  243.234255][ T5854] Bluetooth: hci2: command tx timeout
[  243.251265][T10281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.321032][T10281] veth0_vlan: entered promiscuous mode
[  243.349588][T10281] veth1_vlan: entered promiscuous mode
[  243.391268][T10281] veth0_macvtap: entered promiscuous mode
[  243.409349][T10281] veth1_macvtap: entered promiscuous mode
[  243.432540][T10281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.449468][T10281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.459543][ T5896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.462572][ T5896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.471409][ T5896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.490984][ T5896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.728584][T10410] fuse: Bad value for 'fd'
[  245.154105][ T5854] Bluetooth: hci1: command tx timeout
[  245.154194][T10380] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  245.313937][ T5854] Bluetooth: hci2: command tx timeout
[  245.982565][T10380] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  245.987974][T10380] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  245.993551][T10380] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  246.007193][T10380] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  246.009964][T10380] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  246.016973][T10380] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  246.124330][T10514] loop5: detected capacity change from 0 to 512
[  246.129885][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.132858][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.153209][T10514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  246.164905][T10514] System zones: 1-12
[  246.172540][T10514] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.1413: Directory hole found for htree index block 0
[  246.197682][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.198492][T10514] EXT4-fs (loop5): Remounting filesystem read-only
[  246.210354][T10514] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[  246.216357][T10514] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  246.220032][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.221321][T10514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.234809][T10514] EXT4-fs (loop5): shut down requested (1)
[  246.276687][ T7207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.390878][T10530] netlink: 'syz.5.1416': attribute type 25 has an invalid length.
[  246.395376][T10530] netlink: 'syz.5.1416': attribute type 7 has an invalid length.
[  246.523226][T10541] loop9: detected capacity change from 0 to 256
[  246.552274][T10541] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  246.574516][T10541] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  246.684062][ T6032] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  246.845649][ T6032] usb 6-1: Using ep0 maxpacket: 8
[  246.869669][ T6032] usb 6-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9
[  246.873478][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.885767][ T6032] usb 6-1: config 0 descriptor??
[  246.905536][ T6032] usblcd 6-1:0.0: USBLCD model not supported.
[  246.958015][T10571] loop9: detected capacity change from 0 to 512
[  246.971128][T10571] EXT4-fs: user quota file already specified
[  247.032804][T10574] loop1: detected capacity change from 0 to 1024
[  247.059753][T10574] EXT4-fs: Ignoring removed nobh option
[  247.061946][T10574] EXT4-fs: Ignoring removed bh option
[  247.094155][T10574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.108022][ T6032] usb 6-1: USB disconnect, device number 21
[  247.140047][T10281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.235274][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout
[  247.583767][ T9522] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  247.739658][ T9522] usb 10-1: Using ep0 maxpacket: 16
[  247.751790][ T9522] usb 10-1: config 0 has an invalid interface number: 35 but max is 0
[  247.767852][ T9522] usb 10-1: config 0 has no interface number 0
[  247.774968][ T9522] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  247.779820][ T9522] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  247.787010][ T9522] usb 10-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  247.791862][ T9522] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.801733][ T9522] usb 10-1: Product: syz
[  247.810350][ T9522] usb 10-1: Manufacturer: syz
[  247.812431][ T9522] usb 10-1: SerialNumber: syz
[  247.824866][ T9522] usb 10-1: config 0 descriptor??
[  247.839914][ T9522] cypress_m8 10-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  248.034526][ T5854] Bluetooth: hci2: command 0x0419 tx timeout
[  248.055308][ T9522] usb 10-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[  248.078929][ T9522] usb 10-1: USB disconnect, device number 4
[  248.101439][ T9522] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  248.116703][ T9522] cypress_m8 10-1:0.35: device disconnected
[  248.256255][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'.
[  248.950887][T10668] loop9: detected capacity change from 0 to 256
[  248.970810][T10668] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  248.983992][T10668] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[  248.988360][T10668] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  248.993753][T10668] UDF-fs: Scanning with blocksize 512 failed
[  248.996785][T10668] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  249.007544][T10668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  249.304697][T10691] loop1: detected capacity change from 0 to 512
[  249.315742][ T9522] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  249.324081][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout
[  249.336254][T10691] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  249.346076][T10691] EXT4-fs (loop1): orphan cleanup on readonly fs
[  249.354296][T10691] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  249.359697][T10691] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  249.379026][T10691] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  249.387339][T10691] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1454: bg 0: block 40: padding at end of block bitmap is not set
[  249.404388][T10691] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  249.410894][T10691] EXT4-fs (loop1): 1 truncate cleaned up
[  249.422709][T10691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  249.466007][ T9522] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.470903][ T9522] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  249.492594][ T9522] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  249.504095][ T9522] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.515241][T10281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.525509][ T9522] usb 10-1: config 0 descriptor??
[  249.543406][ T9522] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  249.577261][ T9522] dvb-usb: bulk message failed: -22 (3/0)
[  249.599391][ T9522] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  249.607896][ T9522] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  249.610707][ T9522] usb 10-1: media controller created
[  249.626663][ T9522] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  249.656902][ T9522] dvb-usb: bulk message failed: -22 (6/0)
[  249.659797][ T9522] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  249.696950][ T9522] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input13
[  249.720313][ T9522] dvb-usb: schedule remote query interval to 150 msecs.
[  249.723299][ T9522] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  249.877634][ T9522] dvb-usb: bulk message failed: -22 (1/0)
[  249.882069][ T9522] dvb-usb: error while querying for an remote control event.
[  249.907300][T10719] loop5: detected capacity change from 0 to 1024
[  249.965301][ T1091] hfsplus: b-tree write err: -5, ino 4
[  249.970286][T10284] usb 10-1: USB disconnect, device number 5
[  250.005383][T10284] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  250.062324][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1464'.
[  250.123906][ T5854] Bluetooth: hci2: command 0x0419 tx timeout
[  250.183249][T10741] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1468'.
[  250.280490][T10750] loop5: detected capacity change from 0 to 512
[  250.308066][T10750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.324845][T10750] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.349167][T10756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'.
[  250.352666][T10756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'.
[  250.358820][T10756] netlink: 'syz.1.1473': attribute type 6 has an invalid length.
[  250.407151][ T7207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.707235][T10783] loop3: detected capacity change from 0 to 1
[  250.723489][T10783] Dev loop3: unable to read RDB block 1
[  250.738743][T10783]  loop3: unable to read partition table
[  250.741319][T10783] loop3: partition table beyond EOD, truncated
[  250.748898][T10783] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[  251.063346][T10788] loop1: detected capacity change from 0 to 32768
[  251.090153][T10788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1485 (10788)
[  251.110879][T10788] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.123882][T10788] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  251.127431][T10788] BTRFS info (device loop1): using free-space-tree
[  251.255519][T10833] loop9: detected capacity change from 0 to 8
[  251.279668][T10833] SQUASHFS error: Unable to read inode 0x127
[  251.308869][T10281] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.404392][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout
[  251.662945][T10853] loop1: detected capacity change from 0 to 1024
[  251.729155][T10853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.743112][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.754270][T10853] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1501: Allocating blocks 497-513 which overlap fs metadata
[  251.764593][T10853] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 117
[  251.768683][T10853] EXT4-fs (loop1): This should not happen!! Data will be lost
[  251.768683][T10853] 
[  251.800061][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.800137][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.804390][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.807535][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.810870][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.816292][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.823739][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.836021][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.842041][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.847804][T10281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.853828][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.853868][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.858661][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.861982][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.875853][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.885134][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.890455][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.913564][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.921420][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.935753][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.939855][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.946158][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.960342][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.964190][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.966910][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.969409][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.971982][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.974819][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.979963][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.983322][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.987505][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.989996][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  251.992470][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.003778][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.006559][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.009333][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.011821][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.014705][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.017362][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.026419][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.029552][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.032667][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.047192][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.053963][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.064461][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.068813][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.075569][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.086425][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.096565][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.103898][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.109861][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.112340][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.124885][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.137358][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.149548][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.157904][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.167953][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.179157][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.181780][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.191776][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.194498][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.197125][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.199890][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.202450][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.204158][ T5854] Bluetooth: hci2: command 0x0419 tx timeout
[  252.205157][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.212570][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.223758][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.226487][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.229085][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.231826][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.234873][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.238233][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.241418][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.246003][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.249457][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.262643][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.265320][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.268046][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.270603][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.273150][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.275758][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.278541][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.281142][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.283746][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.286328][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.288999][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.291702][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.294666][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.297839][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.300975][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.304092][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.306945][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.309510][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.312296][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.315109][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.317991][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.320519][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.323045][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.325651][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.328274][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.330820][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.333429][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.336154][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.338781][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.341260][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.343934][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.347845][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.350450][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.352975][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.355596][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.358399][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.360834][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.363358][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.365969][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.368594][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.371354][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.373885][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.377249][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.380632][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.384045][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.387380][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.390686][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.393308][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.396424][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.399711][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.403008][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.406330][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.409582][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.412730][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.416660][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.419989][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.423308][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.426586][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.429811][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.433095][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.436754][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.440120][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.443310][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.446725][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.454121][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.457491][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.460888][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.464371][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.467684][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.471000][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.474344][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.477622][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.480503][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.483598][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.486960][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.490211][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.493277][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.496541][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.499679][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.502824][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.506320][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.509742][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.513122][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.516509][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.519840][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.523256][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.526629][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.533736][T10856] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  252.698329][T10877] loop1: detected capacity change from 0 to 32768
[  252.891535][   T33] audit: type=1326 audit(1755258278.520:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.5.1509" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4fc58ebe9 code=0x0
[  253.739700][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1515'.
[  254.269321][T10966] netlink: 'syz.5.1528': attribute type 1 has an invalid length.
[  254.284304][ T5854] Bluetooth: hci2: command 0x0419 tx timeout
[  254.306465][T10966] 8021q: adding VLAN 0 to HW filter on device bond1
[  254.310105][T10954] loop1: detected capacity change from 0 to 32768
[  254.314725][T10954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1524 (10954)
[  254.339515][T10966] vlan2: entered allmulticast mode
[  254.341719][T10966] veth1: entered allmulticast mode
[  254.356474][T10954] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  254.359071][T10966] bond1: (slave vlan2): making interface the new active one
[  254.364082][T10966] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  254.373116][T10954] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  254.382318][T10963] loop9: detected capacity change from 0 to 32768
[  254.397926][T10954] BTRFS info (device loop1): using free-space-tree
[  254.467599][T10963] ERROR: (device loop9): diAllocBit: iag inconsistent
[  254.467599][T10963] 
[  254.473967][T10963] ialloc: diAlloc returned -5!
[  254.546411][T10281] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  254.653762][ T5913] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  254.823789][ T5913] usb 6-1: Using ep0 maxpacket: 8
[  254.836964][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short
[  254.841456][ T5913] usb 6-1: config 8 has an invalid interface number: 255 but max is 0
[  254.849573][ T5913] usb 6-1: config 8 has no interface number 0
[  254.852361][ T5913] usb 6-1: config 8 interface 255 has no altsetting 0
[  254.888531][ T5913] usb 6-1: string descriptor 0 read error: -22
[  254.891477][ T5913] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  254.901516][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.386008][ T5913] catc 6-1:8.255: Can't set altsetting 1.
[  255.393285][ T5913] catc 6-1:8.255: probe with driver catc failed with error -5
[  255.399634][ T5913] usb 6-1: USB disconnect, device number 22
[  255.481541][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.484455][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.615131][T11025] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  256.019464][T11054] loop9: detected capacity change from 0 to 1024
[  256.178649][T11062] loop5: detected capacity change from 0 to 256
[  256.218041][T11062] FAT-fs (loop5): Directory bread(block 64) failed
[  256.220722][T11062] FAT-fs (loop5): Directory bread(block 65) failed
[  256.223506][T11062] FAT-fs (loop5): Directory bread(block 66) failed
[  256.233328][T11062] FAT-fs (loop5): Directory bread(block 67) failed
[  256.237371][T11062] FAT-fs (loop5): Directory bread(block 68) failed
[  256.240474][T11062] FAT-fs (loop5): Directory bread(block 69) failed
[  256.243411][T11062] FAT-fs (loop5): Directory bread(block 70) failed
[  256.249260][T11062] FAT-fs (loop5): Directory bread(block 71) failed
[  256.252117][T11062] FAT-fs (loop5): Directory bread(block 72) failed
[  256.255258][T11062] FAT-fs (loop5): Directory bread(block 73) failed
[  256.332190][   T33] audit: type=1326 audit(1755258281.960:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c878ebe9 code=0x7ffc0000
[  256.909737][T11078] loop9: detected capacity change from 0 to 131072
[  257.011768][T11078] F2FS-fs (loop9): Test dummy encryption mode enabled
[  257.017788][T11078] F2FS-fs (loop9): invalid crc value
[  257.073306][T11078] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  257.083315][T11078] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  257.176144][T11074] loop5: detected capacity change from 0 to 32768
[  257.226871][T11074] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  257.246383][T11074] XFS (loop5): Ending clean mount
[  257.256951][T11074] XFS (loop5): Quotacheck needed: Please wait.
[  257.294593][T11074] XFS (loop5): Quotacheck: Done.
[  257.320644][   T33] audit: type=1326 audit(1755258281.960:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f98c878ebe9 code=0x7ffc0000
[  257.328545][   T33] audit: type=1326 audit(1755258281.960:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c878ebe9 code=0x7ffc0000
[  257.336167][   T33] audit: type=1326 audit(1755258281.960:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c878ebe9 code=0x7ffc0000
[  257.343972][   T33] audit: type=1326 audit(1755258281.970:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f98c878ebe9 code=0x7ffc0000
[  257.358848][   T33] audit: type=1326 audit(1755258281.970:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c878ebe9 code=0x7ffc0000
[  257.370323][   T33] audit: type=1326 audit(1755258281.970:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c878ebe9 code=0x7ffc0000
[  257.383759][   T33] audit: type=1326 audit(1755258281.970:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f98c878ebe9 code=0x7ffc0000
[  257.390947][   T33] audit: type=1326 audit(1755258281.970:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98c8785ba7 code=0x7ffc0000
[  257.408271][   T33] audit: type=1326 audit(1755258281.970:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.9.1550" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98c872add9 code=0x7ffc0000
[  257.411674][ T7207] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  257.962966][T11106] loop9: detected capacity change from 0 to 2048
[  257.971868][T11107] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  257.979513][T11101] loop5: detected capacity change from 0 to 32768
[  257.988221][T11106] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5
[  258.007816][T11101] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  258.011462][T11106] Remounting filesystem read-only
[  258.082434][T11111] loop9: detected capacity change from 0 to 1024
[  258.101240][ T7207] ocfs2: Unmounting device (7,5) on (node local)
[  258.227492][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1562'.
[  258.421789][T11129] loop1: detected capacity change from 0 to 1024
[  258.437101][T11129] EXT4-fs: Ignoring removed bh option
[  258.439287][T11129] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  258.455176][T11129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.619160][T10281] EXT4-fs error (device loop1): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /56/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  258.638197][T10281] EXT4-fs (loop1): Remounting filesystem read-only
[  258.643616][T10281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.863768][ T5897] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  259.035186][ T5897] usb 10-1: Using ep0 maxpacket: 16
[  259.061648][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.068056][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.071764][ T5897] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  259.108157][ T5897] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  259.117540][T11155] netlink: 'syz.1.1577': attribute type 2 has an invalid length.
[  259.118231][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.120173][T11155] netlink: 'syz.1.1577': attribute type 8 has an invalid length.
[  259.125500][T11155] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1577'.
[  259.145754][ T5897] usb 10-1: config 0 descriptor??
[  259.335914][T11161] loop5: detected capacity change from 0 to 32768
[  259.340437][T11161] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1580 (11161)
[  259.360032][T11161] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.363550][T11161] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  259.366417][T11161] BTRFS info (device loop5): disk space caching is enabled
[  259.369140][T11161] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  259.414840][T11161] BTRFS info (device loop5): rebuilding free space tree
[  259.433443][T11161] BTRFS info (device loop5): disabling free space tree
[  259.440126][T11161] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  259.443273][T11161] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  259.453710][ T8544] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  259.560934][ T7207] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.611193][ T5897] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.000B/input/input14
[  259.625536][ T8544] usb 2-1: Using ep0 maxpacket: 16
[  259.638732][ T8544] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.642530][ T8544] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.648081][ T8544] usb 2-1: config 0 interface 0 has no altsetting 0
[  259.651465][ T8544] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  259.657423][ T5897] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[  259.662145][ T8544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.684999][ T8544] usb 2-1: config 0 descriptor??
[  259.800592][ T5897] usb 10-1: USB disconnect, device number 6
[  259.813459][T11180] sp0: Synchronizing with TNC
[  260.103108][ T8544] apple 0003:05AC:0247.000C: unexpected long global item
[  260.110205][ T8544] apple 0003:05AC:0247.000C: parse failed
[  260.112846][ T8544] apple 0003:05AC:0247.000C: probe with driver apple failed with error -22
[  260.150180][T11192] loop5: detected capacity change from 0 to 32768
[  260.217161][T11192] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  260.217174][T11192]   allowing incompatible features above 0.0: (unknown version)
[  260.217178][T11192]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  260.232473][T11192] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  260.235289][T11192] bcachefs (loop5): initializing new filesystem
[  260.241871][T11192] bcachefs (loop5): going read-write
[  260.246855][T11192] bcachefs (loop5): marking superblocks
[  260.254217][T11192] bcachefs (loop5): initializing freespace
[  260.257790][T11192] bcachefs (loop5): done initializing freespace
[  260.261026][T11192] bcachefs (loop5): reading snapshots table
[  260.263044][T11192] bcachefs (loop5): reading snapshots done
[  260.290895][T11192] bcachefs (loop5): done starting filesystem
[  260.330199][ T8544] usb 2-1: USB disconnect, device number 3
[  260.360832][T11192] syz.5.1587 (11192) used greatest stack depth: 16824 bytes left
[  260.401217][ T7207] bcachefs (loop5): shutting down
[  260.403500][ T7207] bcachefs (loop5): going read-only
[  260.410724][ T7207] bcachefs (loop5): finished waiting for writes to stop
[  260.419599][ T7207] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  260.451298][ T7207] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  260.458248][ T7207] bcachefs (loop5): clean shutdown complete, journal seq 4
[  260.461783][ T7207] bcachefs (loop5): marking filesystem clean
[  260.485412][ T7207] bcachefs (loop5): shutdown complete
[  260.663820][ T5897] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  260.814141][ T5897] usb 10-1: Using ep0 maxpacket: 32
[  260.818339][ T5897] usb 10-1: config 14 has an invalid interface number: 137 but max is 3
[  260.821778][ T5897] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  260.828240][ T5897] usb 10-1: config 14 has 2 interfaces, different from the descriptor's value: 4
[  260.831980][ T5897] usb 10-1: config 14 has no interface number 1
[  260.834787][ T5897] usb 10-1: config 14 interface 137 has no altsetting 0
[  260.839844][ T5897] usb 10-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a
[  260.843497][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.848815][ T5897] usb 10-1: Product: syz
[  260.850394][ T5897] usb 10-1: Manufacturer: syz
[  260.852215][ T5897] usb 10-1: SerialNumber: syz
[  261.012041][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1594'.
[  261.071348][ T5897] ati_remote2 10-1:14.0: ati_remote2_probe(): interface 0 must have an endpoint
[  261.082741][ T5897] usb 10-1: USB disconnect, device number 7
[  261.294933][ T8544] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  261.422260][T11218] loop5: detected capacity change from 0 to 2048
[  261.445847][ T8544] usb 2-1: config 0 interface 0 has no altsetting 0
[  261.448571][ T8544] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  261.452110][ T8544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.475470][ T8544] usb 2-1: config 0 descriptor??
[  261.681125][ T8544]  (null): keene_cmd_main failed (-71)
[  261.703751][ T8544] video4linux radio48: keene_cmd_main failed (-71)
[  261.706140][ T8544] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  261.716588][ T8544] usb 2-1: USB disconnect, device number 4
[  261.830540][T11227] loop9: detected capacity change from 0 to 32768
[  262.288850][ T5897] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  262.445463][ T5897] usb 10-1: unable to get BOS descriptor or descriptor too short
[  262.448380][ T5897] usb 10-1: not running at top speed; connect to a high speed hub
[  262.459740][ T5897] usb 10-1: config 1 interface 0 has no altsetting 0
[  262.465081][ T5897] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  262.468716][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.472029][ T5897] usb 10-1: Product: syz
[  262.473744][ T5897] usb 10-1: Manufacturer: syz
[  262.475615][ T5897] usb 10-1: SerialNumber: syz
[  262.511840][T11245] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  262.515949][T11245] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  262.519671][T11245] CPU: 0 UID: 0 PID: 11245 Comm: syz.5.1606 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  262.525044][T11245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.528453][T11245] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  262.530395][T11245] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 5e 36 f9 4d 8b 24 24 48 83 c3
[  262.537329][T11245] RSP: 0018:ffffc9000296fa60 EFLAGS: 00010206
[  262.539688][T11245] RAX: 0000000000000005 RBX: ffff88803f2a1780 RCX: 0000000000080000
[  262.542447][T11245] RDX: ffffc900035d9000 RSI: 00000000000003b4 RDI: 00000000000003b5
[  262.544979][T11245] RBP: 0000000000000001 R08: ffff88810783292f R09: 1ffff11020f06525
[  262.547954][T11245] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  262.551233][T11245] R13: dffffc0000000000 R14: ffff888107832800 R15: dffffc0000000000
[  262.554519][T11245] FS:  00007fd4fd4d46c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  262.557967][T11245] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  262.560454][T11245] CR2: 0000001b2f823ffc CR3: 00000000282fc000 CR4: 00000000000006f0
[  262.563358][T11245] Call Trace:
[  262.564579][T11245]  <TASK>
[  262.565734][T11245]  pcl818_detach+0x66/0xd0
[  262.567329][T11245]  comedi_device_detach_locked+0x178/0x750
[  262.569336][T11245]  comedi_unlocked_ioctl+0xcde/0x1020
[  262.571397][T11245]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  262.573413][T11245]  ? __lock_acquire+0xab9/0xd20
[  262.575440][T11245]  ? __fget_files+0x2a/0x420
[  262.577333][T11245]  ? __fget_files+0x2a/0x420
[  262.579238][T11245]  ? __fget_files+0x3a0/0x420
[  262.581065][T11245]  ? __fget_files+0x2a/0x420
[  262.582560][T11245]  ? bpf_lsm_file_ioctl+0x9/0x20
[  262.584147][T11245]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  262.586112][T11245]  __se_sys_ioctl+0xfc/0x170
[  262.587650][T11245]  do_syscall_64+0xfa/0x3b0
[  262.589126][T11245]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.590776][T11245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.592816][T11245]  ? exc_page_fault+0x9f/0xf0
[  262.594361][T11245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.596286][T11245] RIP: 0033:0x7fd4fc58ebe9
[  262.597992][T11245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.604981][T11245] RSP: 002b:00007fd4fd4d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  262.608017][T11245] RAX: ffffffffffffffda RBX: 00007fd4fc7b5fa0 RCX: 00007fd4fc58ebe9
[  262.610807][T11245] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  262.613512][T11245] RBP: 00007fd4fc611e19 R08: 0000000000000000 R09: 0000000000000000
[  262.616054][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.618703][T11245] R13: 00007fd4fc7b6038 R14: 00007fd4fc7b5fa0 R15: 00007ffca57b62b8
[  262.622066][T11245]  </TASK>
[  262.623396][T11245] Modules linked in:
[  262.625240][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.628850][T11245] ---[ end trace 0000000000000000 ]---
[  262.635201][T11245] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  262.637344][T11245] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 5e 36 f9 4d 8b 24 24 48 83 c3
[  262.672945][T11245] RSP: 0018:ffffc9000296fa60 EFLAGS: 00010206
[  262.688136][T11245] RAX: 0000000000000005 RBX: ffff88803f2a1780 RCX: 0000000000080000
[  262.703503][T11245] RDX: ffffc900035d9000 RSI: 00000000000003b4 RDI: 00000000000003b5
[  262.709391][T11245] RBP: 0000000000000001 R08: ffff88810783292f R09: 1ffff11020f06525
[  262.711994][T11245] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  262.715298][T11245] R13: dffffc0000000000 R14: ffff888107832800 R15: dffffc0000000000
[  262.718399][T11245] FS:  00007fd4fd4d46c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  262.721363][T11245] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  262.723455][T11245] CR2: 0000001b2f823ffc CR3: 00000000282fc000 CR4: 00000000000006f0
[  262.726211][T11245] Kernel panic - not syncing: Fatal exception
[  262.728866][T11245] Kernel Offset: disabled
[  262.730285][T11245] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:44:48  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000ff2 RDI=0000000000000ff3 RBP=00000000000003f8 RSP=ffffc9000296f290
R8 =ffff888021490237 R9 =1ffff11004292046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af991d R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd4fd4d46c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f823ffc CR3=00000000282fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd4fc787498 00007fd4fc787470 XMM03=00007fd4fc7874a8 00007fd4fc7874a0
XMM04=00007fd4fd2ed100 00007fd4fc787460 XMM05=00007fd4fc787478 00007fd4fc7874c0
XMM06=00007fd4fc7874b8 00007fd4fc7874b0 XMM07=00007fd4fc7874a8 00007fd4fc7874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd4fc612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=8d2c3b2d8b2a2c00 RBX=ffffffff81968308 RCX=8d2c3b2d8b2a2c00 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f74757f72e4 CR3=0000000027152000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000021 0000000000000039
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffff00 XMM09=2e6364755f796d6d 75642f6364752f39
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
