last executing test programs:

3.094403971s ago: executing program 2 (id=1158):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)

2.977552334s ago: executing program 2 (id=1161):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, &(0x7f0000001a40)=""/4096, 0x1000}, 0xffffdff9}], 0x1, 0x2121, 0x0)
sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40008d4}, 0xc840)

2.554455108s ago: executing program 4 (id=1166):
r0 = syz_io_uring_setup(0x3df, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x13}, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000009c0)=[r1], 0x1)
r2 = dup2(r0, r1)
io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0)

2.341695555s ago: executing program 4 (id=1168):
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x13}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24004004}, 0x40054)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0)

2.131960541s ago: executing program 4 (id=1169):
io_setup(0x7ff, &(0x7f0000000100)=<r0=>0x0)
r1 = eventfd2(0x8, 0x0)
io_submit(r0, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r1, 0x0}])
write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r1, &(0x7f0000000480)=""/82, 0x52)

1.88987402s ago: executing program 2 (id=1171):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0x4e25, 0x1, 0x2, 0x20, 0x20, 0x33}, {0x0, 0x8000000000000001, 0x10001, 0x0, 0x0, 0x2}, {0x3, 0x0, 0xa, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
r1 = socket(0x2, 0x3, 0x6)
bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
sendto$inet(r1, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)

1.778732553s ago: executing program 4 (id=1172):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0x1000e, 0xffffffff, 0x7}]})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003f80)=@vmx={0x7, 0x0, 0x2080, {0x26000, 0x40000, {}, 0x0, 0x6}, {"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", "74485c02cc3d2feede8f343ae164753039c041dc8e83cbb16678625e308951b919ec42532b0ddebf7bd568e938d258f3ee00d3c529fa5056f3c4ba54a8a4a57e03b62d308475e0403e0169eae259f614fdb3572e19dacebbff87a37f3fadc45c37fa5c0ada4ad4777018737d1a633402cb48311c00a365ea9d15d383e5a9a1b8510350d8e353ba46ab94629d2c9d865b5ab0142faa11b9b3b75a010c3fa12fb17b7f22889d64516b98ecb1d3d5abdd1a9065ea3c61b75a381ca3fc72833aeb3ce266350618d35206a9fd47328077a3407f75b965a36f422cb7ccf0cdd3320bc89f8d43f54db8ad280d988f31e4bd2e0b349207c746737eaec5763673e460d3fc1ca92e147c0c0076b5ee01ef09015936e5ff2a722b0f30b853de48db22251fff8db43f5aff7cfda61aa8a30acc52547fc4f1ba86d65c5cff8a8fd4f14292d647e41fd91a8926f5ce0a92a217b47cb4a01eb1fe44da0badaa18e63df95ebd492401e4f19c351a77b4915d14dc0903ffd196bdb3bae0841dabd83c3bd336d2eb8d2b1d52e351cf1d13d2556bec6c3773cbc8326a5b1e029a9a0d5501e8615e8a2693097c32cf504806c94bd6292a0e9c273bdb7418bcd6dcab07fde463d85b0ae7a273adbfa7a6bcaf62f59d9ceb5b90ddf2fa09335e2499bc18a1c0ec28f83424571022f6e03e4b06c96ae14d25ed4655c30be46ab30ad742380a4733782ec29fcb17b0c42a18ec98d39143679cf6021e1866eb78d734417a7a90fe94ff1f7d63252a3f2f552f61d5629c4834e144a83dbf47753770fa1169a9d7581b2d2f913048d1019c35a993d20803435696eaf879060c03c1fc133773db22f0dd29064129e87bb4cb810afa8b3a4c211f5ed4ee82e542c1802001ccdd2cf4bb44655bbc18bdd810dec8bf439880402573a58ec5d98dffe37bdda12610d78ca9149111b67682f563efd0ff43d99c763fe441577287d9ea38950d9d0c488d6ccb15d7ef6bd42298e54f62914e4cc37a7affc60d5ed630d490ae630d905ac5357882458d13e1e143d3ed86196a45507a3fec8aaf538ed46c3fcc0899f20361cb7620ee559fc2d5e59381cf0475702eeadd1cde56495304b553127c8450083cd003c6a28833e5844d6c044b293bea77c2c37f0ba360fdd9df8fe29e975c18a152691b66ec0c48ca023dc2ef1e231f0239093dd85c3ac5c25099480fb45759483f7627b76ae71422352180cefd8aec61dd11fade823d272813eddfdab2c34d69822844457ed47b37249cc1fc1da7e786d0fe8897bada810a775fe63b24becd28553267057cd5a9f967196ca2d26f31a379a45e9046b1d52880393efa7daa5bbfd9709ea28b7c736cca866db084519da5a249d418d6c00291d553c6d37f3c2688ff4db0d1b29a8af482b7e17d802063b03122e4bab958db144c9ef2ef21b4789a5263a14a15d5e698509f0e1d51a0bb4e37f4a12f8a7dda9e4afe5058abaf7d6d134db578e93debc6b275fbb83833b3fed96def21326626df8e81ca29e5e6538c38afec7740c7b80dfbd57021ea9e268383a08f09ac42cf53ae6df0cdc6605c29496c816b9bfb06dd7314c360fc4d2bea8ca6121eb989ff7a0eaef8b40f77057d5f7111195ce663516842430f3b8725eab2b60988eebb93c2ac5b0cbc0e8751bedeeb2cb728ea23530b14948fcef6c6d16bacc952fdf5dcb5fc281680d9464b549357cd65d26f9a50dd4bbb48f509e4a8e1f9ce73900e61b52e4aa66f7d627e9261e7ae30d5ee7edaa1b31b851718bd66ad72f33f968b2889d7fd9583a490f8f05a45b4f67030dad0773b6ff133fa50eeda36a4f8bd9caed0d0e6acac29992e28194ccb909b5f9f72839960e2a6f773f7e71214c3d6c06dc05660d9084993f8e9775cb27c3514476ab27b07e4942a36cecc24399bcacf9b254dc8de0a14edfff1faa48ee4a86f17b5e7303cf543378f4606664bd7b4ee00bb31869047b1048afbee53489b529e0d4de612f922f0faefc741df7db47a59bf42e14be1db6c54297853cd1cf694368696006f4a2b49e7283f05479363343a121811d67df6130ac6a728668d354fa3fa98ad3ebd266e0c427366d0253e4c470b458551ef46c41764e84f90ea7f680a57f8f63988ee3f44e541139915786f1440858fa343a068f3d5337295b8d6faa846595b0ab536ed9b8eba2a5e79d83074300979573e9630fdc73fd071ee65a1519df075c5496de01ecc80724598e3c65e60b4f07738de5928ad43290c5c166cd510299408a46b29980cc488316d6f4e70b167ecc45ce62faacf3c37e59bd31961830d62b33888e7a4c0a4a294bcde3515a0b4b3312c3ec97a64036368de747b01787e9cceb13bdf08438627772d56be7b3267bb18516ccb7992d8ac18e2d7c93964893403f13c118b3c56d4f749875e85f8cb2188afb420961313cbac5ab21dbd3a8d26bfcf32068b1044079a77a79135064b00f081cd62f5312c251ddaad2c08dacef1e15eab544c6823c73abda1a7532eaa040ace18bd360bb6acbf62677665f1f681b8bac479ae3e29c7c9621ea96a439636a7c6fe2bf67f369b232dec683ed6e638c4fead14927c59a1b8201e3b90cf789128e1cf85f9db332ee539d77a5286ea8bed0cbc82ea219e9d6fc052879cb0e1a0cf78969e24e8fa9fbfd6652deb1f8237d3700810c9d8f85684b12c6f7801f591fc141a2fdf18b88bb4a97fb4f582600b130a34885c734e7abf1b5aaa9049e23118d696cf093f11524cb1c9218d1758b584f65b81b97983d350a6c67f395119716540e67f481b825d3a43213c4d86b4fca718f76625200f011ff5f504bbcb877439b9f222007ad885e6172b21ebf5482d4bd15c39b71fa980f339d141638e71ce602c898b82d6f3ebe2fe46939501a297582f1800e57610fd402297a2887d02cdffafcecf4055668f55ffb2c1a303f0d5f4cd340a6e6ae607c1626e3474835c38270ac2c4787bcbea8b3789299288c5b21a1720146a3aefcc435ea9ecbad7168ecf8e74af571e94335646bbfacdf60bec560565322ddf1359189706da5df598d97569a006d708a96a45e9537d0d6876bbdb69f438fb5f8bfe249870dd15a973d844f2645d36a09c5ad6d68830bab9ddebd683ff2edccec842bfbcff3ad3f4041c116a250650f6b1696f24c0280246b3cda9ee278b40edbd1719187836dc0139e528e6e271ca288477e09371f67c3a6755257498fb6587a24fb33cd6a75453b1607eb89dd6cb8fccc162ca030aa6ecc374c09d3d15c8d8aaeb356a5dcb8c61232b460d4faf13f842bd57f23f54dc15a3c29c31b659df855c0006fd91e7c7ef04e157c1302a3c9b8f03e26e8f820f42753d96d35f0e2c9b4205a72ddfdc583d8cd08132d5571f20e7ae2fabd40eddb159cf48930823ee81e55d9574ef263d642cb3b355315cb2647b3786050044b0442d5dd7227d338231aa618a6425e34d86fa9e9cabefed142f8d7038fb12c264ff3461e500744e7ed43e0c1b285d24e09c5aac636c222417d76e871825e9eb59552cd78c1a7beede494c351a9b933829f8d8afe1c31d07a3f87972c199cd6db93d0d4df05d6f3ee418a244933b3d013f5f6b7f2bbc44a23a77daef007c5e63beac083557da3957504e631c68294a3c5bc05e28b4a61d86304b36e52e56a6aa51405eca433d7374d022fa61b34df6fb1f648adc7c8e54b6d4b70b4218321e7cdd101c50b2b3fbe749e51b833db3b0f2108011d66a205fe2e520872404edc075defbd4e5ff9932bacd2f1e28d0c64d5d8ce07e587e1662487855103b5c473593292e392181e8609fc6986b3c99013a75c80c7c55689ae7f6ae4d1b3699138eb76b123814b6bdbf592803fcd0cfe1e7cd9a7a8d04ef5ab0cc6c12079452d6232b1aec88b1b2c99f50032b30861f1f0047e0f22fa2412d2052f788b3921f6e19a1a09fb4b319d6fc19662ef69d0b311a1b6bf8bb1c4a41032beb217102b999ab00b73158c2c91aa07ce08a4d01b7d24128514d830e8d0717dc315d73ee624ffda68d83ac8b2686b126af3e9d549adbf52443733587baaf511589b93e7606be7fefd973cf8e719b08508ac67715a77e4e40be56dfd4f5d173a73527bb900bbc8f61b94cd601261af24e4945b30fed761a101b2a732fa21a8a347041ced5551738ed2ffd822e1090e3b1129c3a569c4eaa298349b73d4a1329c8a91492f053c26378f0e7f5f8e2ba478b14de7a0fb22b7ca3f0c57ef34ad597f77d9e4d52709d0942fd618f47a03c07e32551b47f62b78c2063b08b0e4f06c5bf61a384a2e93df6445166279b3e515e08c41148f49f2e981df4dbe24b8efb52b3a3397a1d8d8ea277404c9516c9aeae255003f8df8ad2bf95eb1087859a55341b6bbfd39a37d26ed5607b465cbe6fcb34e3d456ec6023e8cb1347c1b9d816e32064945740982d16332683d2a106e66c96b7c4301865073bde539820d8c3c87542a7db15da3210a8997d1a163dfda978902e6572f1753913350b0b8d34cc6a5866c31968ae71a0c3110b3b8efd0c1ea9deeb44f9d9176e49576a0c0e9f7ec344de985c8256dad9025b1c94cac913b43388aa8e34191557b024edcfe2c9dde1547946e20e993782f2ca007ca5fc4cc9ecfa40f5f35e8ecde53fd62790c86921246783ebea20bbfcb8c6952bbd0863b7a0acb510f19fd8835184fcbd795fb0f50e1e61ec1544c56e1080eb8e566f507d550380104c82b1e064c6a25b391dc77c774e76532e2866a9f2bfdccc03b627db83556e6247872c56408876011afa0fd746c84d49034d896b555fae2a74d70b176b9ec64416cab9b249822be2a01de20a1157b729c7eab21107f20fab5be9f2644556cdf4ddcdad7438f9e60129a4451486a9eea253d54072e0a0b8b796b3bb7d9008a4616d028966c5078540c248ad5e3433982abb0097975d23ca3a9a7f3a8713cfa4107129d5281ac0b1fc68bf9a865c69b0651e40d6a4b96a71c3d009e4cf309dbffaf2fb0f52920ef473ac4717d7fe5d3b0eca4976c6bb153c5855a1594cd23704be42876e66253c104d69081c8d7f49c0480144623bfb426cf1b55c1af78023fcdcfcc76f411101456982a045e774d3a1ce63bc20bb23622732a3d95ace5f9d9f2ad390e0f3ca557068db53bcec9ae5f8f20531c5229a92ee9d9d594b6edf0ada953ea27b2289493a907602d25ecb0fd74161a4585b2a89cec0f869cc9130615aaf0952bd71a6f3039731f53f277fb016a18e14a01b4999742c5de7141148697e448fb4f9293ef4e87a716fca9f9ef59cfca10630a099ec8a58e1c92e19f4ecf8c9422107d375b0bbea135e48b0c9baaabaeba4397dc198dac83a656912178bce22569379e9dac575fef89d743d36f4b627a9639cd3649e498270b966c0b5eaa235e7e2b8bf1d26214af7d3649e2a6b9386151c6170c142d0db167cbd4f152ad8f561169c135fe8114fba923e6e70c7060a75344a620b127eea66ce6932e2b4c9952cf18a05faf989b8fa0cfa7e36e3898a4a8e8c98ba5f812e713f0a5d9850f5e991ddb417a7974f68fd4d4e5a8c41f7f0d903108ca374d79000c67f28614c2023c31284bd22cde507dec0e643dfa6b588d870fcaf3182c0064d58d1c27ced135e28ba6ae0a3c09b8f276dbf5bda96b3819218204e88ec1e5c517d87353d6539b3c75bb97922c5ce2b75c4d34070ab15bfb4f4320fc5855c16d405c28d0797af878798187277a899036d7f79efbc062d22f897065989937d0cb1b31b00"}})

1.660491287s ago: executing program 0 (id=1174):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0987f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a01eeb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e1bd33ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a1200000000000", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
unshare(0x600)
fdatasync(r0)

1.579353559s ago: executing program 2 (id=1175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x8000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.530286311s ago: executing program 1 (id=1176):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c03431"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005000000"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

1.397158345s ago: executing program 4 (id=1177):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtLOLKF4gLHl4C3PSGi76RIvEKEC+ASDZXlaAMGvucZLxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R9e6ETEjV+kB05G/F/0IroR83W9GPXMtbx8PyJOxWZzPBcRvdmIev3Nf56JuBwRH5+IWN9YWaofvrjPflw5f+/Op9/91t9+/fu1Uz9+80cfDrf/4P8vffSb+xEnv//aR5/eP5htBwAAgFJUVVV10tv80+n9fbftTgEAE5GP/1WSH1er1Wr1gda/605Xf9SF1k3VaPebRUSsNtepXzM4HQ8AR8xqfNJ2F2iR/IvWj4in2u4EMNU6bXeAQ7G+sbLUSfl2mseDxa32/HfKbfmvdh7e37HbdJzha0wm9fO1Fr14dpf+zE+oD9Mk598dzv/GVvsgLXfY+U/KbvkPtm59Kk7Ovzec/5Bt+f8hIo5s/t2R+Zcq599/nPxXe0d4/5c/AAAAAADHX/77/8mWz//OPvmm7Mte538XJ9QHAAAAAAAAADhoTzr+30PG/wMAAICpVb9Xr/3xxKPHdvsstvrx652Ip4eWBwqTbpZZaLsfAAAAAAAAAAAAAFCS/tY1vNc7ETMR8fTCQlVV9VfTcP24nnT9o6707YeStf1LHgAAtnx8It3Lnwfg60TMRcT19Fl/MwsLC1U1N79QLVTzs/n17GB2rppvvK/N0/qx2cE+XhD3B1X9zeYa6zWNe788rn34+9XPNah6++jYZLQcOgDF2zoarTsiHTNV9Uy0/SqHo8H+f/zY/9mPtn9OAQAAgMNXVVXVSR/nfTqd8++23SkAYBLm8vF/+LyAWq1Wq9Xq41c3VaPdbxYRsdpcp37NYDh+ADhiVuOTtrtAi+RftH5EnGq7E8BU67TdAQ7F+sbKUifl22keD9L47vlakG35r3Y218vrj5qOM3yNyaR+vtaiF8/u0p/nJtSHaZLz7w7nf2OrfZCWO+z8J2W3/OvtPNlCf9qW8+8N5z/k+OTfHZl/qXL+/cfKvyd/AAAAAACYYvnv/yfLPf/by/1ZnFAfAAAAAAAAAOCgrW+sLOX7XvP5/8+OWK7TnHP/57GR8+/sO3/3/x4nOf/ucP5DF+T0GvMP3niU/z83VpY+vPePz+Tp1Oc/0xvUzz3T6fb66ZqfauatuBW3YznO71i+v639wo72mW3tF8e0X9rRPqjb53P72ViKn8btePNh++yYC6PmxrRXY9pz/j37f5Fy/v3GV53/QmrvDE1rDz7o7tjvm9NRz3Ptz/9+cefeNXlr0Xu4bU319p1poT+b/ydPDeLnd5fvnP3lzXv37lyINNn26MVIkwOW859JXzn/l17Yas+/95v764MPBo+d/7RYi/6u+b/QmK+39+UJ960NOf9B+sr55yPQ6P3/KOe/+/7/Sgv9AQAAAAAAAAAAAAAAgL1UVbV5i+i1iLia7v9p695MAGCifvu9NFMloVar1Wq1+tjWTdVorzeLmNu+ztWI+NWobwYATLP/RMTf2+4ErZF/wfLn/dXTz7XdGWCi7r73/k9u3r69fOdu2z0BAAAAAAAAAP5XefzPxcb4z5vXAQ2NG71t/Nc3YvHIjv/ZHfQ2xzpPG/R87D3+95nYe/zv/pjnmxnTPhjTPjumfW5M+8gbPRpy/s+njHP+p9OGlTT+60st9KdtOf8zaaznnP8XhpZr5l/96Sjn392W/7l77/zs3N333n/11js3315+e/ndC+evXr505fKlK1fOvXXr9vL5rX9b7PHhyvnnsa9dB1qWnH/OXP5lyfl/PtXyL0vO/8VUy78sOf/8ek/+Zcn55/c+8i9Lzv/lVMu/LDn/L6Za/mXJ+b+SavmXJef/pVTLvyw5/1dTLf+y5PzPplr+Zcn5n0u1/MuS889nuORflpx/vrJB/mXJ+V9MtfzLkvO/lGr5lyXnfznV8i9Lzv9KquVflpz/1VTLvyw5/y+nWv5lyfl/JdXyL0vO/7VUy78sOf+vplr+Zcn5fy3V8i9Lzv/rqZZ/WXL+30i1/MuS8/9mquVflpz/66mWf1keff6/mQnP/OsvEVPQDTOlzrz7172Wafs3EwAAAAAAAAAAAAAwbBJXGre9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7uxi5zvoM4Ge/7LUTiEtCCMGQteMEQzbeXX8lJhgcIDQNLU0DoaUNdYy9/gB/1buGJIqaTZO2QURqpPYivSgFRBFSWyVCSKVSiiIVqb1rrkC5Qa2UC0tNKhNBJaokW5057/vuzOzszPpj7Tnn/H5R/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmm34+PSfD2RZlv/f+GNdll2Z/31Ntif/cm7n5V4hAAAAcKHebPz5D1elE/Ys40JN2/zb+/7jB/Pz8/PZF18/89Zfzs+nM8aybGh1ljXOi/79V7+cb94meCIbHRhs+nqwx80P9Th/uMf5Iz3OX9Xj/NU9zh/tcf6iHbDImuL3MY0r29T467pil2bXZCON8zZ1uNQTA6sHB+PvchoGGpeZHzmYHcmOZtPZ5KLLDDT+y7IXNuS3dXcWb2uw6bbWZ1l29ueP7o9rGAj7eFPWcmMNzY/da3dmY6///NH935199d2dZs/dsGilWbZ5Y77OJ7Ns4ddV2UC2Ou2TuM7BpnWu77DOoZZ1DjQul/+9fZ1nl7nOeL9Hwzpf6rLO9eG0h27MsmwuW3Kbdk9kg9natltN+3u0OCLy68gfyndkw+d0nGxYxnGSX+aVG1uPk/ZjMu7/DWGfDC+xhuaH47XHVy3a7+d7nOT3uh+O1fy6781vdHS0+VerLcdqvs2jNy19DHR87DocA+lYbjoGNvY6BgZXDTWOgcGFNW9sOQamFl1mMBto3NaZm7ofAxOzx05OzDz8yK1Hju07NH1o+vjU5M7t23Zs37Zjx8TBI0enJ4s/z22XlsjabDAdgxvDa008Bt/ftm3zITn/rYv3PBjtk+dBft8/e3O+oCsHsyWO8XybJzdf+PMgfd9veh4MNz0POr6mdngeDC/jeZBvc3bz8r5nDjf932kNK/VauK7pGLic3w/z23zgA0u/Fq4P63rqg+f6/XBo0TEQ79ZAeO7lp6Sf90ZvD/tl8XFxfX7GFauy0zPTp7Y8tG929tRUFsYlcXXTY9V+vKxtuk/ZouNl8JyPlz1//8bN13c4fV3YV6O3dH+s8m22j3d/rBqv7q37c1VW7M+WU7dmYVxkl3p/dvpulu/PlCW67M98mydvvfCfBVMuaXr9G+n1+jc0Mly8/g2lvTHS8vq3+KEZaqwsy87eurzXv5Hw/6V+/bumT17/8n31wJbux0C+zVMT53oMDHd9/bsxzIGwng+ExDDalPvfapw/VxymTY9lz+NmeHgkHDfD8RZbj5ttiy6TX1t+25snz++42Xxj62PV8nNLBY+bfF/91WT34ybf5sWpC3/tWBP/2vTasarXMTAytCpf70g6CIrXu/k18RjYku3PTmRHswPpMvmjnN/W+NblHQOrwv+X+rXjuj45BvJ99ezW7sdAvs2Pt13cn502h1PSNk0/O7X/fmGpzH/98ML1te+2i53583V+4iefTqd1yhD5Nq9uP9ec0X0/3RJOuaLDfmp//ix1TB/ILs1+ui6s8+iO7r+byre5Zucyj6c9WZa9PPVy4/dd4fe73z/9kx+0/N630++UX556+Z6J+356LusHAOD8vdX4c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/8O27nnvzsSy9G+B8EM+Pu+HejxTbxY73XPh6bH5BfvrHvjPy3NceW95tD2ZZ9sY97+m4/eGPxHUVTsZ1fqj19EWuu2FZt//g/QvbNb9/wtldxfXH+7PcwyB2lV+Y2Nq43rGHpxrzxXuyxrxv7qkniusvvo7bn9lWbP834U1L9hwcaLn85rCeTWGOhfeUuXfPwn7IZ7zcc+vf969Xf27h9uLlBja+vXE3n/3j4nrje0Q9c3WxfbzfS63/X77+vefy7R+6qfP6HxvsvP4z4XpfCfNXu4vtm/f515rW/6dh/fH24uW2fPtHHdf//LuK7Z8Px8U3w2xf/51/8d43Oz1e8Xb23FFcLt7+5P9ub1wuXl+8/vb1jz421bI/2q//xdeL69n9lV8MNW8fT4+3Ez14R+vxPRAe35YeeZZl3/uzrGU/Zx8uLvfPbeuP13fyjs7rv6VtnScHbmhcfuH+rGu5X9/4u60d729cz55/XNdyf565K+y/1yd+nF/vmfvC8RjO/7+Xiutrfy/T5+9qfb2J239zXfG8jdc30bb+Z9rWP3dDvu96r//u14v1P//R1S3r3/PJcDzdXcxe6z/0t1e1XP5b3y0ej1NfHT9+Yub0kQNNe7X5ebx6dM3aK65829uvCq+l7V/vPTF7ePrU2OTYZJaNlfAtA1d6/d8O83+KMXfxb6Hw018Ux93Tnyq+b73/l8XXz4TTHwyPZ/z++I2/Hmk5Xtsf97mPFvNC1//BsI7letfX/+uGZW145gsvnP6nP3m1/eeCeH9OvnO0cf+e3XBt47yBF4vz21+vevnPd7Y+r382PNmYPwz7dT68M/PGa4vba7/++N4kT3+meP7Gn+Ti5bO29xNZN9R6Py50/T8LP8f86LrW1794fPzwsbZ3c16XDeRLmAuvD9lccX7cKu7vp89e2/H24vvwZHPvPpdlLmnm4ZmJo0eOn35oYnZ6ZnZi5uFH9h47cfr47N7Ge5fu/VKvyy88v9c2nt8HpnduzxrP9hPFWGGXe/0n799/4LbJmw9MH9x3+uDs/SenTx3aPzOzf/rAzM37Dh6c/mqvyx85sHtq665tt20dP3TkwO7bd+3atmv8yPET+TKKRfWwc/LL48dP7W1cZGb39l1TO3Zsnxw/duLA9O7bJifHT/e6fON703h+6a+Mn5o+um/2yLHp8Zkjj0zvntq1c+fWnu/+eOzkwZmxiVOnj0+cnpk+NVHcl7HZxsn5975el6ceZk6E17s2A+Gn88/fsjO9P27uO48veVXFJq0/nmavhfeCit/fen0dc/9ImElN8j8AAADUQcz94Y3/F86Q/wEAAKAyYu5fHWYi/wMAAEBlxNxfJP/R9PHvdcn/F6v//7j+f4P+v/5/pv+f6P/r/2f6//r/Pej/6/+Xef36//r/9NZv/f+Q+7M1Webf/wEAAKCiYu5fG2Yi/wMAAEBlxNx/RZiJ/A8AAACVEXP/lWEmNcn/Pv9f/1//v1v/P26r/5/p//dD/3/Tf+v/L6L/r/+f6f+ft8vdny/7+vuw/79G/59+02/9/5j73xZmUpP8DwAAAHUQc//bw0zkfwAAAKiMmPuvCjOR/wEAAKAyYu5fF2ZSk/yv/6//r//v8//1/0vT//f5/x3o/+v/Z/r/5+1y9+fLvv4+7P/7/H/6Tr/1/2Pu/7Uwk5rkfwAAAKiDmPvfEWYi/wMAAEBlxNx/dZiJ/A8AAACVEXP/NWEmNcn/9ez/v5Jlmf5/pv+v/9+2Tv1//f+VoP+v/9+N/r/+f5nXr/+v/09v/db/j7n/nWEmNcn/AAAAUAcx918bZiL/AwAAQGXE3P+uMBP5HwAAACoj5v7rwkxqkv/r2f/3+f/6/wX9/9Z16v/r/6+EWvf/3zis/9+D/r/+f5nXr/+v/09v/db/j7n/3WEmNcn/AAAAUAcx918fZiL/AwAAQGXE3P+eMBP5HwAAACoj5v71YSY1yf/6//r/+v/6//r/+v8rqVz9/8Elz/H5/wX9/1YXr/8/t7AA/f/SrF//X/+f3vqt/x9z/3vDTGqS/wEAAKAOYu5/X5iJ/A8AAACVEXP/DWEm8j8AAABURsz9Y2EmNcn/+v/6//r/+v/6//r/K6lc/f+l6f8X9P9b+fx//X/9f/1/uuu3/n/M/RvCTGqS/wEAAKAOYu7fGGYi/wMAAEBlxNx/Y5iJ/A8AAACVEXP/pjCTyuT/t3U9V/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7r8pzKQy+R8AAACIuf/mMBP5HwAAACoj5v73h5nI/wAAAFAZMfdvDjOpSf7X/9f/1/8vcf9/SP8/0//ve/r/+v/d6P/r/5d5/fr/+v/01m/9/5j7PxBmUpP8DwAAAHUQc/8Hw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu4fDzOpSf7X/9f/1/8vcf/f5/+3rF//vz/p/5el/z/S+qX+/7Lo/+v/6//r/9Ndv/X/Y+6/NcykJvkfAAAA6iDm/i1hJvI/AAAAVEbM/RNhJvI/AAAAVEbM/ZNhJjXJ//r/+v/6//r/+v/6/ytJ/78s/f82+v/Lov+v/6//r/9Pd/3W/4+5fyrMpCb5HwAAAOog5v6tYSbyPwAAAFRGzP3bwkzkfwAAAKiMmPu3h5nUJP+XpP+/JRWg9P/1//X/9f/1/0tF/1//vxv9f/3/Mq9f/1//n1aDHU7rt/5/zP07wkxqkv8BAACgDmLu3xlmspD/1136VQEAAAAXU8z9t4WZ+Pd/AAAAqIyY+28PM6lJ/i9J/9/n/+v/6/830f/X/y8T/X/9/270//X/y7x+/X/9f3rrt/5/zP27wkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/x1hJvI/AAAAlEqnzyGMYu7/cJhJTfK//n/V+//zq/X/9f/1/7uvX/9/Zen/6/93o/+v/1/m9ev/6//TW7/1/2Pu3x1mUpP8DwAAAHUQc/9HwkzkfwAAAKiMmPs/GmYi/wMAAEBlxNy/J8ykJvlf/7/q/X+f/6//r//fa/36/ytL/1//vxv9/3L2/8OPLfr/fdT/z48h/X/6Ub/1/2PuvzPMpCb5HwAAAOog5v6PhZnI/wAAAFAZMfd/PMxE/gcAAIDKiLn/E2EmNcn/+v/6//r/+v/l7P+P6P+XhP7/ivX/Gy+F+v8F/f/zc7n782Vffz/1/33+P/2q3/r/MfffFWZSk/wPAAAAdRBz/yfDTOR/AAAAqIyY+389zET+BwAAgMqIuf/uMJOa5H/9f/1//X/9/3L2/33+f1no//v8/270//X/y7x+/X/9f3rrt/5/zP2/EWZSk/wPAAAAdRBz/z1hJvI/AAAAVEbM/Z8KM5H/AQAAoGRWLXlOzP2/GWZSk/xfvv7/WCn7/4Pp+vX/9f/1//X/9f8vJv1//f9M//+8Xe7+fNnXr/+v/09v/db/j7n/t8JMapL/AQAAoA5i7v90mIn8DwAAAJURc/9vh5nI/wAAAFAZMfffG2ZSk/x/sfv/7Zfvxuf/6/9n+v/6//r/+v8XSP9f/z/T/z9vl7s/X+L1xx9F9P/1/+mh3/r/Mff/TphJTfI/AAAA1EHM/feFmcj/AAAA0KcOn/MlYu7/TJiJ/A8AAACVEXP/Z8NMapL/y/f5//r/+v/6//r/+v9lov+v/9+N/r/+f5nX7/P/9f/prd/6/zH33x9mUpP8DwAAAHUQc//nwkzkfwAAAKiMmPt/N8xE/gcAAIDKiLn/98JMapL/9f/1//X/9f/1//X/V5L+/+L+f/4apv9f0P/X/y/z+vX/9f/prd/6/zH3fz7MpCb5HwAAAOog5v7fDzOR/wEAAKAyYu7/gzAT+R8AAAAqI+b+B8JMapL/9f/1//X/9f/1//X/V5L+v8//70b/X/+/zOvX/9f/p7d+6//H3P+FMJOa5H8AAACog5j7/zDMRP4HAACAyoi5f2+YifwPAAAAlRFz/4NhJjXJ//r/+v/6//r/+v/6/ytJ/1//vxv9f/3/Mq9f/1//n976rf8fc/++MJM9rTcDAAAAlFfM/V8MM6nJv/8DAABAHcTcvz/MRP4HAACAyoi5/0CYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/zOvX/9f/p7d+6//H3D8dZlKT/A8AAAB1EHP/wTAT+R8AAAAqI+b+Q2Em8j8AAABURsz9h8NMapL/9f/1//X/a9v/f+n7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+4+EmdQk/wMAAEAdxNz/pTAT+R8AAAAqI+b+L4eZyP8AAABQGTH3Hw0zqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4f+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/mNhJjXJ/wAAAFAHMfcfDzOR/wEAAKAyYu4/EWYi/wMAAEBlxNx/MsykJvlf///c+v8DS3QD9f87r1//vwL9/yb6//r/50P/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/KsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afDTGqS//+fvfte8qys9jjcNGcOQ1HeA+UdeAVegtdgleUlmAOYMSvmnDAnzIo555wxZ1EUc6zSonuthQw9e/cw/et597ue5w8Wp+EULwVW+a3xUxsAAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/98l/b/+f4n+X/+/5ffr//X/rBut/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBq5+x8at9j/AAAAMI3c/Q+LW5rsf/2//l//r//X/+v/d0n/r/9fov/X/2/5/fp//T/rRuv/c/c/PG5psv8BAACgg9z9j4hb7H8AAACYRu7+R8Yt9j8AAABMI3f/NXFLk/2v/9f/6/832P//n/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7/9q4pcn+BwAAgA5y9z8qbrH/AQAAYHPuef+jf567/9Fxi/0PAAAA08jd/5i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/7FxS5P9DwAAAB3k7n9c3GL/AwAAwDRy9z8+brH/AQAAYOvO5O/k7n9C3NJk/+v/T6//v0z/r//X/+v/9f8nTv+v/9/T/99tl7qf3/r79f/6f9btvP+/z3UH97j9f+7+6+KWJvsfAAAAOsjd/8S4xf4HAACAaeTuf1LcYv8DAADANHL3PzluabL/9f++/39H//+fy/T/+n/9/x0/1/+fDP2//n+J/l//v+X36//1/6zbef+/0vuf+3/n7n9K3NJk/wMAAEAHufufGrfY/wAAADCN3P1Pi1vsfwAAAJhG7v6nxy1N9r/+X//v+//6f/2//n+X9P/D9v/n/kfvzvT/x6L/1/+fr/+/9zHer/+ng9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7//q4xf4HAACAaeTuf1bc0mT/6//1//p//f+d+//9lv3/7T/T/++G/n/Y/n+Z/v9Y9P/6f9//1/+zbLT+P3f/s+OWJvsfAAAAOsjd/5y4xf4HAACAaeTuf27cYv8DAADANHL3Py9u2b9ULzpd+n/9v/5f/39R3/+/fI7+3/f/d0f/r/9fov/X/2/5/fp//T/rRuv/c/c/P27x6/8AAAAwh/292v0viFvsfwAAAJhG7v4Xxi32PwAAAEwjd/+L4pYm+1//r//X/+v/L6r/n+T7//r/3dH/6/+XHLf/39P/19+L/n+c9+v/9f+sG63/z93/4rilyf4HAACADnL3vyRusf8BAABgGrn7Xxq32P8AAAAwjdz9L4tbmux//b/+X/+v/9f/6/93Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/Vdxy7v7fP81XnR79v/5f/6//1//r/3dJ/6//X6L/P7r/P3uev57+f6z36//1/6wbrf/P3X9D3OLX/wEAAGAauftfHbfY/wAAADCN3P2viVvsfwAAAJhG7v7Xxi1N9v/5+v/brjr84/r/49H/H/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/dXFLk/0PAAAAHeTuf33cYv8DAADANHL3vyFusf8BAABgGrn73xi3NNn/J//9/6v1//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xS3NNn/AAAA0EHu/jfHLfY/AAAATCN3/1viFvsfAAAAppG7/61xS5P9f/L9v+//6/8vsP/f1/8n/X/8c9X/6/8vwFb7/339/wH9v/5/y+/X/+v/WTda/5+7/8aDqddv/wMAAEAHNx789uze2+IW+x8AAACmkbv/7XGL/Q8AAADTyN3/jrilyf7X/+v/L3n/7/v/Rf8f/1z1//r/C7DV/t/3/w/p//X/W36//l//z7rR+v/c/e+MW5rsfwAAAOggd/+74hb7HwAAAKYRu//wf/xu/wMAAMCU3n3w27N774lbmuz/xv3/1Rfb/1/5P7+v/z/6/fr/E+n/bzz33z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Rv/PeEbr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAmEbu/pviFvsfAAAAppG7//1xS5P937j/n+T7//e9NV6g/5+3//f9/7j6f/3/UfT/E/T/t//XL/1//fX1/9t5/zj9v+//M67R+v/c/R+IW5rsfwAAAOggd/8H4xb7HwAAAKaRu/9DcYv9DwAAANPI3f/huKXJ/tf/b73/9/1//b/+X/8/Nv2//n+J7//r/7f8fv2//p91o/X/ufs/Erc02f8AAADQQe7+j8Yt9j8AAABMI3f/x+IW+x8AAACmkbv/43FLk/2v/9f/76r/v/0vov9v0v9fe0X++fp//f9d6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/ELU32PwAAAHSQu/+TcYv9DwAAANPI3f+puMX+BwAAgGnk7v903HCve1y6J52sM+f5eeS6+n/9v+//6/99/1//v0v6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLX/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5/s/3/lfr/O79f/z8m/b/+f4n+X/+/5fcfu/+/+ej/f/0/HYzW/+fu/0Lc0mT/AwAAQAe5+78Yt9j/AAAAMI3c/V+KW+x/AAAAmEbu/i/HLU32v/5f/6//32z/7/v/57xf/z8m/b/+/9AtR/5U/6//3/L7ff9f/8+60fr/3P1fiVua7H8AAADoIHf/V+MW+x8AAACmkbv/a3GL/Q8AAADTyN3/9bilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt+v/9f/s260/j93/zfilib7HwAAADrI3f/NuMX+BwAAgGnk7v9W3GL/AwAAwDRy9387bmmy/2fu/5f+NP3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+sG63/z93/nbilyf4HAACADnL3fzdusf8BAABgGrn7b45b7H8AAACYRu7+78UtTfb/zP3/Ev3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+su0T9/5m98/T/ufu/H7c02f8AAADQQe7+H8Qt9j8AAABMI3f/D+MW+x8AAACmkbv/R3HLPPv/fjct/EH9/4n3/wf/Eun/9f97+n/9v/7/gP5f/79E/6//3/L79f/6f9aN9v3/3P0/jlvm2f8AAADQXu7+n8Qt9j8AAABMI3f/T+MW+x8AAACmkbv/Z3FLk/2v//f9f/1/q/7/8j39v/7/lOn/9f9L9P/6/y2/X/+v/2fdaP1/7v6fxy05/K66O3+XAAAAwEhy9/8ibmny6/8AAADQQe7+X8Yt9j8AAABMI3f/r+KWJvtf/6//1/+36v99/1//f+r0//r/Jfp//f+W35/9f/57p//X/3NXo/X/uft/Hbc02f8AAADQQe7+W+IW+x8AAACmkbv/N3GL/Q8AAADTyN3/27ilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt/v+//6f9aN1v/n7r81bmmy/wEAAKCD3P2/i1vsfwAAAJhG7v7fxy32PwAAAEwjd/9tcUuT/a//1/9P2f9fof/X/+v/R6H/1/8v0f/r/7f8fv2//p91o/X/ufv/ELc02f8AAADQQe7+P8Yt9j8AAABMI3f/n+IW+x8AAACmkbv/z3FLk/2v/9f/X3j/f6b+voft/33/X/+v/x/GvP3//+v/j+r/z17Y+7v3/9ffcPhj/f8236//1/+zbrT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAaeTu/1vcYv8DAADANHL3/z1uabL/9f/6/ym//6//1//r/4cxb//v+/++/+/7//p//b/+nzWj9f+5+/8RtzTZ/wAAANBB7v5/xi32PwAAAEwjd/+/4hb7HwAAAKaRu//fcUuT/a//1//r//X/+n/9/y7p//X/S/T/+v8tv1//r/9n3Wj9f+7+/wYAAP//lgIt2A==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x1080000, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f00000003c0)='./bus\x00')
symlink(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00')
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.319598518s ago: executing program 1 (id=1178):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.270365929s ago: executing program 2 (id=1179):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)

1.198208502s ago: executing program 3 (id=1180):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast1}}}, 0x108)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

1.197732862s ago: executing program 0 (id=1181):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e20, 0x80000001, @mcast1, 0x100}}, 0x0, 0x0, 0x16, 0x0, "cbb115846dedcb47489f6340dc6c556e795ef8d273df2e1169c59fdb6c3dfc845a88e96b87135bceecfdcbfbf80a9d1a0bcee86f0b66905174e308247ca3c4971659040d3aef84bf11581f68ded3e9fe"}, 0xd8)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x400002a5, 0x2}}}}}}}, 0x0)

1.030690517s ago: executing program 1 (id=1182):
io_setup(0x7ff, &(0x7f0000000100)=<r0=>0x0)
r1 = eventfd2(0x8, 0x0)
io_submit(r0, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r1, 0x0}])
write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r1, &(0x7f0000000480)=""/82, 0x52)

975.753018ms ago: executing program 2 (id=1183):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

940.926ms ago: executing program 3 (id=1184):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x2, 0x0, 0x5, 0x0, 0xd}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x6}, 0x8)

826.326743ms ago: executing program 0 (id=1185):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x47, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

756.644656ms ago: executing program 0 (id=1186):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'ip6gre0\x00'}}, 0x1e)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000004800)={'veth0_vlan\x00', 0x133})

683.098718ms ago: executing program 1 (id=1187):
pipe(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10)

637.504769ms ago: executing program 3 (id=1188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

474.811804ms ago: executing program 1 (id=1189):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp={0x44, 0x4, 0xe6, 0x0, 0x7}]}}, "2197e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f686"}}, 0xfce)

474.537404ms ago: executing program 0 (id=1190):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
write$sequencer(r1, &(0x7f0000000000), 0xca80)
write$binfmt_misc(r1, &(0x7f00000005c0)="3f1c2049543aeffc525dcf48fe81910977eb1c3ccb5204fdc3ec5a8a92e9c26d8b3c1a7dc21cae48848e0be0568a87e5152573e2bebdb82e1ee3074acf291c7934529a0b9a4d31605e52e4c34ff5090b5114a9915b7aabb896b465f3970f1bd88f10aff20d47a30befbeb49fc3193a0a9142b66552c91e57e103000000000000007e5b9621624902aedd7d81b0120c1cf3a5c6846e20", 0xcaaf)

330.387409ms ago: executing program 3 (id=1191):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0xc4)

238.209282ms ago: executing program 0 (id=1192):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0)
syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9, 0x80000000}, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

171.421634ms ago: executing program 1 (id=1193):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x0, 0x660f537f, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

117.574256ms ago: executing program 3 (id=1194):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4)
sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/90, 0x5a}, 0xa}], 0x1, 0x0, 0x0)

39.762628ms ago: executing program 3 (id=1195):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x906c40, &(0x7f0000000a80), 0x0, 0x516, &(0x7f0000000ac0)="$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")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000400), 0x32)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

0s ago: executing program 4 (id=1196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004e9d0000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37)

kernel console output (not intermixed with test programs):

omm="syz.3.404" name="file0" dev="loop3" ino=258 res=0 errno=0
[  136.132267][ T5476] fs-verity: sha512 using implementation "sha512-avx2"
[  136.235340][ T5493] chnl_net:caif_netlink_parms(): no params data found
[  136.312525][   T26] audit: type=1800 audit(1781614809.599:9): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.404" name="file0" dev="loop3" ino=258 res=0 errno=0
[  136.351134][ T5476] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4)
[  136.525834][ T4286] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  136.545672][ T4286] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  136.746524][ T4288] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  136.826726][ T5268] usb 1-1: USB disconnect, device number 7
[  136.888439][ T5548] loop1: detected capacity change from 0 to 256
[  137.022987][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[  137.202849][ T5552] loop2: detected capacity change from 0 to 256
[  137.210213][ T5552] exfat: Deprecated parameter 'namecase'
[  137.258427][ T5552] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e3e, chksum : 0x55507476, utbl_chksum : 0xe619d30d)
[  137.272340][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'.
[  137.441899][ T5268] libceph: connect (1)[c::]:6789 error -101
[  137.451194][ T5268] libceph: mon0 (1)[c::]:6789 connect error
[  137.476693][ T5558] ceph: No mds server is up or the cluster is laggy
[  137.510053][ T5566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.422'.
[  137.564935][ T5493] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.572103][ T5493] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.645661][ T5493] device bridge_slave_0 entered promiscuous mode
[  137.854587][ T5571] loop3: detected capacity change from 0 to 64
[  138.018316][ T5493] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.029101][ T5493] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.057225][ T5493] device bridge_slave_1 entered promiscuous mode
[  138.060056][ T5571] syz.3.424: attempt to access beyond end of device
[  138.060056][ T5571] loop3: rw=2049, sector=65, nr_sectors = 1 limit=64
[  138.077158][ T5571] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  138.085778][ T5571] syz.3.424: attempt to access beyond end of device
[  138.085778][ T5571] loop3: rw=2049, sector=66, nr_sectors = 1 limit=64
[  138.096134][ T5493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.099240][ T5571] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  138.113001][ T5493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.117666][ T5571] syz.3.424: attempt to access beyond end of device
[  138.117666][ T5571] loop3: rw=2049, sector=67, nr_sectors = 1 limit=64
[  138.140295][ T5571] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  138.151125][ T5571] syz.3.424: attempt to access beyond end of device
[  138.151125][ T5571] loop3: rw=2049, sector=68, nr_sectors = 1 limit=64
[  138.165540][ T5571] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  138.174176][ T5571] syz.3.424: attempt to access beyond end of device
[  138.174176][ T5571] loop3: rw=2049, sector=72, nr_sectors = 1 limit=64
[  138.187412][ T5571] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  138.196175][ T5571] syz.3.424: attempt to access beyond end of device
[  138.196175][ T5571] loop3: rw=2049, sector=73, nr_sectors = 1 limit=64
[  138.209685][ T5571] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  138.218400][ T5571] syz.3.424: attempt to access beyond end of device
[  138.218400][ T5571] loop3: rw=2049, sector=76, nr_sectors = 1 limit=64
[  138.231703][ T5571] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  138.240487][ T5571] syz.3.424: attempt to access beyond end of device
[  138.240487][ T5571] loop3: rw=2049, sector=77, nr_sectors = 1 limit=64
[  138.253909][ T5571] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  138.262783][ T5571] syz.3.424: attempt to access beyond end of device
[  138.262783][ T5571] loop3: rw=2049, sector=78, nr_sectors = 93 limit=64
[  138.267503][   T11] device hsr_slave_0 left promiscuous mode
[  138.310600][   T11] device hsr_slave_1 left promiscuous mode
[  138.344090][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.380782][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.422284][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.447532][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.468880][   T11] device bridge_slave_1 left promiscuous mode
[  138.491275][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.563617][   T11] device bridge_slave_0 left promiscuous mode
[  138.579130][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.733726][   T11] device veth1_macvtap left promiscuous mode
[  138.762326][   T11] device veth0_macvtap left promiscuous mode
[  138.785176][   T11] device veth1_vlan left promiscuous mode
[  138.805217][   T11] device veth0_vlan left promiscuous mode
[  138.924058][ T4326] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  139.113055][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[  139.124955][ T4326] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  139.140921][ T4326] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  139.163760][ T4326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  139.194793][ T4326] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  139.203058][ T5580] loop0: detected capacity change from 0 to 32768
[  139.230086][ T4326] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  139.268392][ T4326] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  139.282752][   T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  139.307541][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  139.336626][ T4326] usb 2-1: Product: syz
[  139.353640][ T4326] usb 2-1: Manufacturer: syz
[  139.391826][ T4326] cdc_wdm 2-1:1.0: skipping garbage
[  139.412679][ T4326] cdc_wdm 2-1:1.0: skipping garbage
[  139.434912][ T4326] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  139.447853][ T4326] cdc_wdm 2-1:1.0: Unknown control protocol
[  139.484599][   T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.504366][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.530061][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.558698][   T14] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  139.578262][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.619187][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  139.625866][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  139.631778][   T14] usb 4-1: config 0 descriptor??
[  139.637415][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  139.644150][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  139.657695][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  139.664372][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  139.672460][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  139.679120][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  139.686532][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  139.693218][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  139.699636][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  139.706281][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  139.714490][ T4326] usb 2-1: USB disconnect, device number 5
[  140.103476][   T14] hid-rmi 0003:0461:4E72.0006: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0
[  140.225482][ T5268] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  140.292952][   T14] usb 4-1: USB disconnect, device number 7
[  140.381609][   T11] team0 (unregistering): Port device team_slave_1 removed
[  140.429465][ T5268] usb 1-1: Using ep0 maxpacket: 8
[  140.451232][ T5268] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  140.463317][ T5268] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  140.474507][ T5268] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  140.489657][ T5268] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  140.500487][ T5268] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  140.514647][ T5268] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  140.523997][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.538970][ T5605] loop1: detected capacity change from 0 to 4096
[  140.601889][   T11] team0 (unregistering): Port device team_slave_0 removed
[  140.688384][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.748639][ T5268] usb 1-1: usb_control_msg returned -32
[  140.757293][ T5268] usbtmc 1-1:16.0: can't read capabilities
[  140.810034][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.879989][ T4278] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  140.909680][ T4278] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  141.155274][ T5611] usbtmc 1-1:16.0: INDICATOR_PULSE returned 0
[  141.199926][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[  141.226704][ T4326] libceph: connect (1)[c::]:6789 error -101
[  141.248658][ T4326] libceph: mon0 (1)[c::]:6789 connect error
[  141.258497][ T5613] ceph: No mds server is up or the cluster is laggy
[  141.358016][ T4326] usb 1-1: USB disconnect, device number 8
[  141.575183][   T11] bond0 (unregistering): Released all slaves
[  141.768260][ T5493] team0: Port device team_slave_0 added
[  141.784851][ T5493] team0: Port device team_slave_1 added
[  141.861936][ T5493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.902123][ T5493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.928392][    C0] vkms_vblank_simulate: vblank timer overrun
[  142.018583][ T5493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.033957][ T5493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.066111][ T5631] loop0: detected capacity change from 0 to 128
[  142.068427][ T5493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.098528][    C0] vkms_vblank_simulate: vblank timer overrun
[  142.099449][ T5631] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  142.121830][ T5493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.292407][ T5493] device hsr_slave_0 entered promiscuous mode
[  142.310058][ T5493] device hsr_slave_1 entered promiscuous mode
[  142.338439][ T5493] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.361781][ T5493] Cannot create hsr debugfs directory
[  142.379006][ T5624] device syzkaller1 entered promiscuous mode
[  143.052617][ T4326] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  143.262637][ T4326] usb 1-1: Using ep0 maxpacket: 8
[  143.262744][ T4281] Bluetooth: hci3: command 0x0419 tx timeout
[  143.289618][ T4326] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  143.370432][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.379960][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'.
[  143.386032][ T5651] loop1: detected capacity change from 0 to 64
[  143.424516][ T4326] usb 1-1: Product: syz
[  143.428757][ T4326] usb 1-1: Manufacturer: syz
[  143.443590][ T4326] usb 1-1: SerialNumber: syz
[  143.520048][ T4326] usb 1-1: config 0 descriptor??
[  143.560200][ T4326] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  143.586679][ T5658] input: syz0 as /devices/virtual/input/input8
[  144.001794][ T5668] tun0: tun_chr_ioctl cmd 1074025675
[  144.013004][ T5668] tun0: persist enabled
[  144.029039][ T5670] netlink: 44 bytes leftover after parsing attributes in process `syz.2.451'.
[  144.036733][ T5668] tun0: tun_chr_ioctl cmd 1074025675
[  144.053481][ T5668] tun0: persist enabled
[  144.095210][ T5493] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  144.111350][ T5670] netlink: 43 bytes leftover after parsing attributes in process `syz.2.451'.
[  144.136719][ T5493] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  144.181177][ T5493] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  144.202436][ T5670] netlink: 'syz.2.451': attribute type 6 has an invalid length.
[  144.229115][ T5670] netlink: 'syz.2.451': attribute type 5 has an invalid length.
[  144.282564][ T5670] netlink: 43 bytes leftover after parsing attributes in process `syz.2.451'.
[  144.295384][ T5493] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  144.521390][ T5493] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.528829][ T5279] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  144.560075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  144.570497][ T4326] gspca_sonixj: reg_w1 err -71
[  144.603234][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  144.625767][ T5493] 8021q: adding VLAN 0 to HW filter on device team0
[  144.633629][ T4326] sonixj: probe of 1-1:0.0 failed with error -71
[  144.659843][ T4326] usb 1-1: USB disconnect, device number 9
[  144.671483][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  144.720658][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  144.732644][ T5279] usb 2-1: Using ep0 maxpacket: 16
[  144.739668][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  144.743187][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.757023][ T5554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.758774][ T5279] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  144.774408][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.782691][ T5279] usb 2-1: Product: syz
[  144.787060][ T5279] usb 2-1: Manufacturer: syz
[  144.793779][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  144.801935][ T5279] usb 2-1: SerialNumber: syz
[  144.810315][ T5279] usb 2-1: config 0 descriptor??
[  144.820190][ T5279] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  144.829969][ T5279] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  144.830900][ T5683] device team_slave_0 entered promiscuous mode
[  144.843469][ T5683] device team_slave_1 entered promiscuous mode
[  144.859283][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'.
[  144.885624][ T5684] device team_slave_0 left promiscuous mode
[  144.900460][ T5684] device team_slave_1 left promiscuous mode
[  145.026541][ T5684] team0 (unregistering): Port device team_slave_0 removed
[  145.066446][ T5684] team0 (unregistering): Port device team_slave_1 removed
[  145.129281][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  145.151600][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.206545][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.213840][ T5554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.262249][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  145.293325][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  145.333561][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  145.386300][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  145.413570][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  145.425544][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.434580][ T5279] em28xx 2-1:0.0: chip ID is em2765
[  145.469955][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  145.479400][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.490773][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.500028][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.509472][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.523938][ T5493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  145.910581][ T5279] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  145.920304][ T5279] em28xx 2-1:0.0: board has no eeprom
[  146.002671][ T5279] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  146.019068][ T5279] em28xx 2-1:0.0: dvb set to bulk mode.
[  146.043640][ T5269] em28xx 2-1:0.0: Binding DVB extension
[  146.063840][ T5279] usb 2-1: USB disconnect, device number 6
[  146.070557][ T5279] em28xx 2-1:0.0: Disconnecting em28xx
[  146.230856][ T5269] em28xx 2-1:0.0: Registering input extension
[  146.249895][ T5279] em28xx 2-1:0.0: Closing input extension
[  146.318495][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  146.333266][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  146.368801][ T5493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.369307][ T5279] em28xx 2-1:0.0: Freeing device
[  146.497307][ T5709] input: syz1 as /devices/virtual/input/input10
[  146.545629][ T4326] libceph: connect (1)[c::]:6789 error -101
[  146.552694][ T4326] libceph: mon0 (1)[c::]:6789 connect error
[  146.565116][ T5710] ceph: No mds server is up or the cluster is laggy
[  146.714284][ T5720] loop1: detected capacity change from 0 to 256
[  147.101311][ T5730] netlink: 'syz.1.465': attribute type 3 has an invalid length.
[  147.764649][ T5749] netlink: 'syz.0.472': attribute type 11 has an invalid length.
[  148.030023][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.045611][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.114756][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.145500][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.164281][ T5493] device veth0_vlan entered promiscuous mode
[  148.186842][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.207525][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.252282][ T5493] device veth1_vlan entered promiscuous mode
[  148.405928][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  148.419875][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  148.481907][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.529991][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.592937][ T5493] device veth0_macvtap entered promiscuous mode
[  148.628664][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.676407][ T5493] device veth1_macvtap entered promiscuous mode
[  148.801385][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.842501][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.892644][ T5782] loop0: detected capacity change from 0 to 512
[  148.902263][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.947358][ T5782] EXT4-fs: Ignoring removed nomblk_io_submit option
[  148.954331][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.994699][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.033782][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.080654][ T5782] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  149.141770][ T5782] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.483: corrupted in-inode xattr
[  149.155641][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.217691][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.238493][ T5782] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.483: couldn't read orphan inode 15 (err -117)
[  149.275027][ T5493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.309586][ T5782] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  149.334445][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.360313][ T5793] loop2: detected capacity change from 0 to 512
[  149.362693][ T4326] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  149.368011][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.440231][ T5793] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  149.441903][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.502326][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.538723][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.572590][ T4326] usb 2-1: Using ep0 maxpacket: 8
[  149.577956][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.579626][ T4326] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  149.591275][ T5793] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  149.612172][ T4326] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.628441][ T4326] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.639238][ T5793] EXT4-fs (loop2): 1 truncate cleaned up
[  149.640700][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.650370][ T4326] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.672559][ T5793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  149.675912][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.688381][ T4326] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.732630][ T4326] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  149.737651][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.751705][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.779007][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.806106][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  149.821254][ T5493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.862806][ T5793] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  149.879988][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.894824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.947412][ T5493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.975891][ T5493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.991380][ T4326] usb 2-1: usb_control_msg returned -32
[  150.005533][ T5493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.016105][ T4326] usbtmc 2-1:16.0: can't read capabilities
[  150.031142][ T5493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.076211][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  150.285651][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.316178][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.336686][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.414795][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.448990][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.498609][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  150.504031][ T5811] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0
[  150.710985][ T5268] usb 2-1: USB disconnect, device number 7
[  151.043670][ T5826] loop0: detected capacity change from 0 to 256
[  151.101218][ T5826] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  151.421604][ T5830] loop0: detected capacity change from 0 to 512
[  151.491565][ T5830] EXT4-fs (loop0): 1 truncate cleaned up
[  151.504163][ T5830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  151.550050][ T5830] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 42175 (only 1 groups)
[  151.770608][ T5815] loop2: detected capacity change from 0 to 40427
[  151.785966][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  151.806220][ T5842] device team_slave_0 entered promiscuous mode
[  151.812555][ T5842] device team_slave_1 entered promiscuous mode
[  151.852699][ T5815] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64)
[  151.880948][ T5815] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  151.892883][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'.
[  151.939292][ T5842] device team_slave_0 left promiscuous mode
[  151.947362][ T5815] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff
[  152.006311][ T5842] device team_slave_1 left promiscuous mode
[  152.042893][ T5815] F2FS-fs (loop2): invalid crc value
[  152.090706][ T5815] F2FS-fs (loop2): Found nat_bits in checkpoint
[  152.202814][ T5815] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  152.212244][ T5815] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  152.271903][ T5855] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  152.332571][ T5268] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  152.339496][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  152.366418][ T5815] F2FS-fs (loop2) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0
[  152.420952][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  152.523043][ T5268] usb 1-1: Using ep0 maxpacket: 16
[  152.531375][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.552439][ T4273] syz-executor: attempt to access beyond end of device
[  152.552439][ T4273] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.591372][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.622298][ T5268] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  152.662541][ T5268] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  152.688268][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.744148][ T5268] usb 1-1: config 0 descriptor??
[  152.803208][ T5865] loop1: detected capacity change from 0 to 16
[  152.845523][ T5865] erofs: (device loop1): mounted with root inode @ nid 36.
[  153.169958][ T5268] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  153.185177][ T5268] microsoft 0003:045E:07DA.0007: No inputs registered, leaving
[  153.235478][ T5268] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  153.278123][ T5268] microsoft 0003:045E:07DA.0007: no inputs found
[  153.303118][ T5268] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[  153.411118][ T5268] usb 1-1: USB disconnect, device number 10
[  153.561649][ T5857] loop3: detected capacity change from 0 to 32768
[  153.691526][ T5877] fido_id[5877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  153.721513][ T5857] XFS (loop3): Mounting V5 Filesystem
[  153.912390][ T5857] XFS (loop3): Ending clean mount
[  153.974038][ T5857] XFS (loop3): Quotacheck needed: Please wait.
[  154.058821][ T5857] XFS (loop3): Quotacheck: Done.
[  154.101797][   T26] audit: type=1800 audit(1781614827.389:10): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.505" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  154.261278][ T5874] loop2: detected capacity change from 0 to 32768
[  154.315811][ T5874] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.507 (5874)
[  154.423828][ T5874] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  154.502393][ T5874] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  154.537211][ T5874] BTRFS info (device loop2): using free space tree
[  154.590997][ T4288] XFS (loop3): Unmounting Filesystem
[  154.598303][ T5902] Invalid argument reading file caps for ./file0
[  154.877349][ T5874] BTRFS info (device loop2): enabling ssd optimizations
[  155.020781][   T26] audit: type=1800 audit(1781614828.309:11): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.507" name="file0" dev="loop2" ino=258 res=0 errno=0
[  155.041349][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.067900][ T5874] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  155.105308][ T5928] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'gid'
[  155.105308][ T5928] 
[  155.131121][ T5931] netlink: 'syz.4.518': attribute type 1 has an invalid length.
[  155.149926][   T26] audit: type=1800 audit(1781614828.439:12): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.507" name="file0" dev="loop2" ino=258 res=0 errno=0
[  155.179788][ T5931] netlink: 76 bytes leftover after parsing attributes in process `syz.4.518'.
[  155.313359][ T4273] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  155.487254][ T5937] loop3: detected capacity change from 0 to 1024
[  155.635028][ T5937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  155.742085][ T5937] EXT4-fs (loop3): shut down requested (1)
[  156.065717][ T4288] EXT4-fs (loop3): unmounting filesystem.
[  157.104873][ T5988] loop1: detected capacity change from 0 to 1024
[  157.179622][ T5988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  157.232588][ T4702] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  157.332681][ T5979] loop0: detected capacity change from 0 to 32768
[  157.339360][ T5988] EXT4-fs (loop1): shut down requested (1)
[  157.357943][ T5979] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.531 (5979)
[  157.387080][ T5979] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  157.421280][ T5979] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  157.440594][ T5979] BTRFS info (device loop0): using free space tree
[  157.443519][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  157.453198][ T4702] usb 5-1: Using ep0 maxpacket: 32
[  157.461845][ T4702] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  157.485150][ T4702] usb 5-1: config 0 has no interface number 0
[  157.517468][ T4702] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  157.585407][ T4702] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  157.610100][ T5979] BTRFS info (device loop0): enabling ssd optimizations
[  157.636972][ T4702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.698284][ T4702] usb 5-1: Product: syz
[  157.732563][ T4702] usb 5-1: Manufacturer: syz
[  157.737246][ T4702] usb 5-1: SerialNumber: syz
[  157.782101][ T4702] usb 5-1: config 0 descriptor??
[  157.810632][ T6017] loop2: detected capacity change from 0 to 512
[  157.814137][ T5986] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  157.849593][   T26] audit: type=1800 audit(1781614831.139:13): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.531" name="file0" dev="loop0" ino=258 res=0 errno=0
[  157.887156][ T5979] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4)
[  157.947706][   T26] audit: type=1800 audit(1781614831.239:14): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.531" name="file0" dev="loop0" ino=258 res=0 errno=0
[  157.971667][ T6017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  158.037753][ T6017] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.055420][ T5986] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  158.212269][ T4274] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  158.319004][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  158.738823][ T6038] loop0: detected capacity change from 0 to 512
[  158.849939][ T6038] EXT4-fs (loop0): 1 truncate cleaned up
[  158.863124][ T6038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  158.912127][   T26] audit: type=1800 audit(1781614832.199:15): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.545" name="file0" dev="loop0" ino=13 res=0 errno=0
[  158.951410][ T4702] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  159.004532][ T4702] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  159.034036][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  159.115135][ T4702] asix: probe of 5-1:0.188 failed with error -71
[  159.143702][ T4702] usb 5-1: USB disconnect, device number 5
[  159.146335][ T6046] loop2: detected capacity change from 0 to 16
[  159.210234][ T6050] loop1: detected capacity change from 0 to 256
[  159.227138][ T6046] erofs: (device loop2): mounted with root inode @ nid 36.
[  159.257401][ T6050] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.307874][   T26] audit: type=1800 audit(1781614832.599:16): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.551" name="file1" dev="loop1" ino=1048608 res=0 errno=0
[  159.537110][ T6050] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  159.583788][ T6050] FAT-fs (loop1): Filesystem has been set read-only
[  159.590645][ T6050] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  159.642416][ T6055] loop2: detected capacity change from 0 to 512
[  159.643263][ T6053] loop3: detected capacity change from 0 to 2048
[  159.654557][ T6050] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  159.687621][ T6050] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  159.713675][ T6055] EXT4-fs (loop2): orphan cleanup on readonly fs
[  159.764956][ T6055] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.553: ea_inode with extended attributes
[  159.810853][ T6055] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.553: error while reading EA inode 11 err=-117
[  159.862705][ T6053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.874193][ T6055] EXT4-fs (loop2): 1 orphan inode deleted
[  159.892669][ T6055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  160.178645][ T6062] netlink: 'syz.4.556': attribute type 3 has an invalid length.
[  160.183555][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  160.212600][ T6062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.556'.
[  160.800852][ T6076] loop1: detected capacity change from 0 to 2048
[  160.866226][ T6076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.112553][ T4321] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  161.334598][ T4321] usb 5-1: config 0 has no interfaces?
[  161.340218][ T4321] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  161.385374][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.438301][ T4321] usb 5-1: config 0 descriptor??
[  161.494308][ T6089] loop0: detected capacity change from 0 to 512
[  161.542701][ T6089] EXT4-fs (loop0): orphan cleanup on readonly fs
[  161.557714][ T6089] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.568: ea_inode with extended attributes
[  161.593010][ T6089] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.568: error while reading EA inode 11 err=-117
[  161.647728][ T6089] EXT4-fs (loop0): 1 orphan inode deleted
[  161.670716][ T6089] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  161.864040][ T6094] loop1: detected capacity change from 0 to 1024
[  161.957300][   T26] audit: type=1800 audit(1781614835.249:17): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.570" name=80E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E
[  162.167494][ T4334] hfsplus: b-tree write err: -5, ino 4
[  162.167984][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  162.255026][    C0] vkms_vblank_simulate: vblank timer overrun
[  162.418940][ T4334] hfsplus: b-tree write err: -5, ino 2
[  162.702677][ T4702] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  162.892537][ T4702] usb 3-1: Using ep0 maxpacket: 16
[  162.899983][ T4702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  162.947021][ T4702] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  162.981602][ T6110] loop3: detected capacity change from 0 to 512
[  162.982518][ T4702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.015009][ T4702] usb 3-1: Product: syz
[  163.022579][ T4702] usb 3-1: Manufacturer: syz
[  163.027498][ T4702] usb 3-1: SerialNumber: syz
[  163.045635][ T4702] usb 3-1: config 0 descriptor??
[  163.045866][ T6110] EXT4-fs (loop3): Test dummy encryption mode enabled
[  163.076536][ T4702] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  163.085055][ T6110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  163.109676][ T4702] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  163.210520][ T6110] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.577: bad orphan inode 131083
[  163.323707][ T6110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  163.680513][ T4702] em28xx 3-1:0.0: chip ID is em2765
[  163.730151][ T4288] EXT4-fs (loop3): unmounting filesystem.
[  163.834168][ T5278] usb 5-1: USB disconnect, device number 6
[  163.888173][ T6126] loop0: detected capacity change from 0 to 8
[  164.170689][ T4702] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  164.238817][ T4702] em28xx 3-1:0.0: board has no eeprom
[  164.239553][ T6136] netlink: 'syz.4.589': attribute type 3 has an invalid length.
[  164.345937][ T4702] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  164.373242][ T4702] em28xx 3-1:0.0: dvb set to bulk mode.
[  164.415786][ T5182] em28xx 3-1:0.0: Binding DVB extension
[  164.452245][ T4702] usb 3-1: USB disconnect, device number 5
[  164.470729][ T4702] em28xx 3-1:0.0: Disconnecting em28xx
[  164.674647][ T5182] em28xx 3-1:0.0: Registering input extension
[  164.683350][ T4702] em28xx 3-1:0.0: Closing input extension
[  164.723415][ T4702] em28xx 3-1:0.0: Freeing device
[  164.839590][ T6151] loop2: detected capacity change from 0 to 512
[  164.881279][ T6151] EXT4-fs (loop2): Test dummy encryption mode enabled
[  164.913624][ T6151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  164.949059][ T6154] loop0: detected capacity change from 0 to 512
[  164.969721][ T5268] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  164.998446][ T6151] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.595: bad orphan inode 131083
[  165.045408][ T6151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  165.061100][ T6154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  165.093890][ T6154] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.218569][ T5268] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  165.259322][ T5268] usb 5-1: config 0 interface 0 has no altsetting 0
[  165.272534][ T4702] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  165.299255][ T5268] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  165.318179][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  165.338514][ T5268] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  165.372740][ T5268] usb 5-1: Product: syz
[  165.376972][ T5268] usb 5-1: Manufacturer: syz
[  165.416171][ T5268] usb 5-1: SerialNumber: syz
[  165.433719][ T5268] usb 5-1: config 0 descriptor??
[  165.450189][ T5268] usb 5-1: selecting invalid altsetting 0
[  165.460653][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  165.470972][ T4702] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  165.499852][ T4702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.533135][ T4702] usb 2-1: Product: syz
[  165.537373][ T4702] usb 2-1: Manufacturer: syz
[  165.552778][ T4702] usb 2-1: SerialNumber: syz
[  165.580422][ T4702] usb 2-1: config 0 descriptor??
[  165.858729][ T4321] usb 5-1: USB disconnect, device number 7
[  165.950585][ T4702] usb 2-1: USB disconnect, device number 8
[  167.123065][ T6192] loop1: detected capacity change from 0 to 2048
[  167.152675][ T6186] loop3: detected capacity change from 0 to 4096
[  167.194054][ T6192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.250902][ T6186] NILFS (loop3): invalid segment: Checksum error in segment payload
[  167.368747][ T6186] NILFS (loop3): trying rollback from an earlier position
[  167.424990][ T6186] NILFS (loop3): recovery complete
[  167.442064][ T6198] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.734824][ T6182] loop0: detected capacity change from 0 to 40427
[  167.816033][ T6182] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64)
[  167.834287][ T6182] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  167.872928][ T6182] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  167.900028][ T6206] loop1: detected capacity change from 0 to 512
[  167.908459][ T6182] F2FS-fs (loop0): invalid crc value
[  167.975535][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.616'.
[  168.007102][ T6182] F2FS-fs (loop0): Found nat_bits in checkpoint
[  168.042805][ T6206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  168.093305][ T6206] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.225568][ T6182] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  168.263160][ T6182] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  168.377539][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  168.547922][ T6182] F2FS-fs (loop0) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0
[  168.720445][ T4274] syz-executor: attempt to access beyond end of device
[  168.720445][ T4274] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  169.226401][ T6245] loop2: detected capacity change from 0 to 256
[  169.825701][ T6263] loop2: detected capacity change from 0 to 64
[  170.185377][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'.
[  170.242714][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'.
[  170.288863][ T6275] netlink: 116 bytes leftover after parsing attributes in process `syz.2.645'.
[  170.302371][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'.
[  170.365290][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'.
[  170.391260][ T6279] netlink: 'syz.4.647': attribute type 11 has an invalid length.
[  170.433704][ T6282] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0105 with DS=0x91
[  170.487087][ T6277] loop3: detected capacity change from 0 to 8192
[  170.539001][ T6277] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  170.553555][ T6277] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  170.571303][ T6277] REISERFS (device loop3): using ordered data mode
[  170.578477][ T6277] reiserfs: using flush barriers
[  170.601019][ T6277] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  170.634059][ T6277] REISERFS (device loop3): checking transaction log (loop3)
[  170.669725][ T5182] kernel write not supported for file [eventfd] (pid: 5182 comm: kworker/1:14)
[  170.730288][ T6277] REISERFS (device loop3): Using r5 hash to sort names
[  170.756419][ T6277] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  171.603437][ T6316] loop4: detected capacity change from 0 to 256
[  171.673944][ T6316] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  171.978557][ T6327] loop3: detected capacity change from 0 to 256
[  172.003545][ T6327] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  172.276635][ T6334] random: crng reseeded on system resumption
[  172.287133][ T6306] loop0: detected capacity change from 0 to 32768
[  172.451688][ T6306] XFS (loop0): Mounting V5 Filesystem
[  172.550390][ T6306] XFS (loop0): Ending clean mount
[  172.575374][ T6353] loop2: detected capacity change from 0 to 128
[  173.353472][ T4274] XFS (loop0): Unmounting Filesystem
[  174.396226][ T6398] loop2: detected capacity change from 0 to 4096
[  174.460662][ T6398] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  174.488523][ T6405] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.526494][ T6398] NILFS (loop2): mounting fs with errors
[  174.665579][ T6409] netlink: 'syz.0.699': attribute type 11 has an invalid length.
[  174.689423][   T26] audit: type=1800 audit(1781614847.969:18): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.693" name="file1" dev="loop2" ino=15 res=0 errno=0
[  175.409787][ T6433] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  175.906233][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.917066][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.237844][ T6464] loop3: detected capacity change from 0 to 1024
[  176.256175][ T6464] EXT4-fs: Ignoring removed bh option
[  176.351597][ T6464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  176.512768][ T6469] virtio-fs: tag </dev/md0> not found
[  176.672712][ T4288] EXT4-fs (loop3): unmounting filesystem.
[  176.928362][ T6484] TCP: MD5 Hash mismatch for [fe88::105]:20004->[fe80::aa]:20004 L3 index 0
[  177.258414][ T6495] netlink: 104 bytes leftover after parsing attributes in process `syz.4.735'.
[  178.232490][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  178.252498][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  178.262491][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  178.272487][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  178.282492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  178.292491][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  178.302494][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  178.312493][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  178.322493][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  178.332496][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  178.359088][ T6521] loop0: detected capacity change from 0 to 32768
[  178.395999][ T6521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.745 (6521)
[  178.422040][ T6521] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.432625][ T6521] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  178.441468][ T6521] BTRFS info (device loop0): metadata ratio 0
[  178.447647][ T6521] BTRFS info (device loop0): setting nodatasum
[  178.454008][ T6521] BTRFS info (device loop0): using free space tree
[  178.532618][ T6521] BTRFS info (device loop0): enabling ssd optimizations
[  178.583885][   T26] audit: type=1800 audit(1781614851.869:19): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.745" name="file1" dev="loop0" ino=260 res=0 errno=0
[  178.700165][ T4274] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.962016][ T4544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4544)
[  179.072599][ T4702] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  179.305747][ T4702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.326426][ T4702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.370374][ T4702] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  179.422522][ T4702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  179.450164][ T4702] usb 2-1: SerialNumber: syz
[  179.687298][ T4702] usb 2-1: 0:2 : does not exist
[  179.757603][ T4702] usb 2-1: USB disconnect, device number 9
[  179.826725][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.509056][ T6556] loop0: detected capacity change from 0 to 40427
[  180.549475][ T6547] loop3: detected capacity change from 0 to 32768
[  180.550135][  T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  180.575334][ T6556] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  180.615552][ T6556] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  180.660261][ T6556] F2FS-fs (loop0): invalid crc value
[  180.674984][ T6547] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  180.714945][ T6556] F2FS-fs (loop0): Found nat_bits in checkpoint
[  180.752585][ T6547] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  180.786346][  T126] usb 3-1: Using ep0 maxpacket: 16
[  180.811969][  T126] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.870397][ T6547] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  180.900102][  T126] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.907344][ T6577] loop4: detected capacity change from 0 to 128
[  180.921501][ T6556] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  180.934408][ T6556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  180.946405][ T4703] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  180.961408][  T126] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  180.971210][ T4703] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  181.022837][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.076028][ T6577] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  181.141650][ T6577] hpfs: filesystem error: improperly stopped
[  181.169638][ T6577] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  181.194248][ T4703] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 223ms
[  181.225327][ T4703] gfs2: fsid=syz:syz.0: jid=0: Done
[  181.237597][ T6577] hpfs: You really don't want any checks? You are crazy...
[  181.253188][ T6547] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  181.254216][ T6577] hpfs: hpfs_map_sector(): read error
[  181.276155][ T6577] hpfs: code page support is disabled
[  181.305882][ T6577] hpfs: hpfs_map_4sectors(): unaligned read
[  181.326655][ T6577] hpfs: hpfs_map_4sectors(): unaligned read
[  181.352592][ T6577] hpfs: filesystem error: unable to find root dir
[  181.454924][ T6577] hpfs: hpfs_map_4sectors(): unaligned read
[  181.503922][ T6577] hpfs: hpfs_map_sector(): read error
[  181.524538][  T126] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  181.554430][ T6577] hpfs: hpfs_map_4sectors(): unaligned read
[  181.593160][ T6577] hpfs: hpfs_map_sector(): read error
[  181.762736][  T126] usb 3-1: USB disconnect, device number 6
[  182.056530][ T6547] gfs2: fsid=syz:syz.0: found 1 quota changes
[  182.113714][ T6588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.766'.
[  182.166887][ T6588] netlink: 'syz.1.766': attribute type 32 has an invalid length.
[  182.198157][ T6588] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  182.218286][ T4288] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  182.218286][ T4288]   inode = 11 2339
[  182.218286][ T4288]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413
[  182.285366][ T6591] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  182.305809][ T6591] EXT4-fs (loop9): unable to read superblock
[  182.322278][ T4288] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  182.336616][ T6586] loop4: detected capacity change from 0 to 8192
[  182.359211][ T4288] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:4288 [syz-executor] gfs2_quota_sync+0x32c/0x700
[  182.390132][ T4288] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0
[  182.425759][ T4288] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  182.476220][ T6586]  loop4: p1 p2 p3 p4
[  182.494823][ T4288] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  182.511631][ T6586] loop4: p1 start 51379968 is beyond EOD, truncated
[  182.525561][ T4288] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  182.540766][ T6586] loop4: p3 size 100663552 extends beyond EOD, truncated
[  182.567637][ T4288] gfs2: fsid=syz:syz.0: File system withdrawn
[  182.590824][ T6586] loop4: p4 size 81920 extends beyond EOD, truncated
[  182.603565][ T4288] CPU: 0 PID: 4288 Comm: syz-executor Not tainted syzkaller #0
[  182.611151][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  182.621297][ T4288] Call Trace:
[  182.624579][ T4288]  <TASK>
[  182.627705][ T4288]  dump_stack_lvl+0x188/0x24e
[  182.632483][ T4288]  ? kobject_uevent_env+0x35f/0x8a0
[  182.637712][ T4288]  ? show_regs_print_info+0x12/0x12
[  182.642907][ T4288]  ? load_image+0x400/0x400
[  182.647411][ T4288]  ? kobject_uevent_env+0x35f/0x8a0
[  182.652811][ T4288]  gfs2_withdraw+0xde6/0x15d0
[  182.657509][ T4288]  ? gfs2_lm+0x240/0x240
[  182.661751][ T4288]  ? gfs2_consist_inode_i+0xf1/0x110
[  182.667036][ T4288]  gfs2_inode_refresh+0xc2a/0x1140
[  182.672249][ T4288]  ? gfs2_inode_metasync+0xf0/0xf0
[  182.677552][ T4288]  ? gfs2_glock_nq+0xcf0/0x14e0
[  182.682519][ T4288]  gfs2_instantiate+0x15e/0x210
[  182.687403][ T4288]  gfs2_glock_wait+0x1d0/0x2a0
[  182.692194][ T4288]  do_sync+0x4bf/0xc40
[  182.696267][ T4288]  ? gfs2_quota_sync+0x32c/0x700
[  182.701207][ T4288]  ? slot_put+0x1e0/0x1e0
[  182.705632][ T4288]  ? gfs2_quota_sync+0x32c/0x700
[  182.710597][ T4288]  ? do_raw_spin_unlock+0x11d/0x230
[  182.715798][ T4288]  gfs2_quota_sync+0x32c/0x700
[  182.720584][ T4288]  gfs2_sync_fs+0x48/0xb0
[  182.724931][ T4288]  sync_filesystem+0xe6/0x220
[  182.729627][ T4288]  generic_shutdown_super+0x6b/0x340
[  182.734949][ T4288]  kill_block_super+0x7c/0xe0
[  182.739746][ T4288]  deactivate_locked_super+0x93/0xf0
[  182.745049][ T4288]  cleanup_mnt+0x42c/0x4b0
[  182.749570][ T4288]  ? lockdep_hardirqs_on+0x94/0x140
[  182.754795][ T4288]  task_work_run+0x1d0/0x260
[  182.759598][ T4288]  ? task_work_cancel+0x220/0x220
[  182.764641][ T4288]  ? exit_to_user_mode_loop+0x3b/0x110
[  182.770108][ T4288]  exit_to_user_mode_loop+0xe6/0x110
[  182.775397][ T4288]  exit_to_user_mode_prepare+0xee/0x180
[  182.780942][ T4288]  syscall_exit_to_user_mode+0x16/0x40
[  182.786484][ T4288]  do_syscall_64+0x58/0xa0
[  182.791006][ T4288]  ? clear_bhb_loop+0x60/0xb0
[  182.795692][ T4288]  ? clear_bhb_loop+0x60/0xb0
[  182.800371][ T4288]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  182.806966][ T4288] RIP: 0033:0x7f182399e097
[  182.811471][ T4288] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  182.831104][ T4288] RSP: 002b:00007fffdd934fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  182.839551][ T4288] RAX: 0000000000000000 RBX: 00007f1823a321ca RCX: 00007f182399e097
[  182.847528][ T4288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdd935080
[  182.855592][ T4288] RBP: 00007fffdd935080 R08: 00007fffdd936080 R09: 00000000ffffffff
[  182.863578][ T4288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdd936110
[  182.871668][ T4288] R13: 00007f1823a321ca R14: 000000000002ba5d R15: 00007fffdd936150
[  182.879776][ T4288]  </TASK>
[  182.882926][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.255815][ T4288] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  183.259592][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  183.273742][ T4544] udevd[4544]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  183.306817][ T4393] udevd[4393]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  183.329376][ T4288] CPU: 0 PID: 4288 Comm: syz-executor Not tainted syzkaller #0
[  183.336996][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  183.347092][ T4288] Call Trace:
[  183.350395][ T4288]  <TASK>
[  183.353355][ T4288]  dump_stack_lvl+0x188/0x24e
[  183.358081][ T4288]  ? gfs2_assert_warn_i+0xc3/0x2c0
[  183.363232][ T4288]  ? show_regs_print_info+0x12/0x12
[  183.368467][ T4288]  ? load_image+0x400/0x400
[  183.373021][ T4288]  ? do_raw_spin_unlock+0x11d/0x230
[  183.378280][ T4288]  gfs2_assert_warn_i+0x18f/0x2c0
[  183.383365][ T4288]  gfs2_quota_cleanup+0x4b4/0x6a0
[  183.388446][ T4288]  gfs2_put_super+0x22f/0x8c0
[  183.393183][ T4288]  ? gfs2_evict_inode+0x11d0/0x11d0
[  183.398433][ T4288]  generic_shutdown_super+0x130/0x340
[  183.403865][ T4288]  kill_block_super+0x7c/0xe0
[  183.408595][ T4288]  deactivate_locked_super+0x93/0xf0
[  183.413942][ T4288]  cleanup_mnt+0x42c/0x4b0
[  183.418404][ T4288]  ? lockdep_hardirqs_on+0x94/0x140
[  183.423654][ T4288]  task_work_run+0x1d0/0x260
[  183.428293][ T4288]  ? task_work_cancel+0x220/0x220
[  183.433372][ T4288]  ? exit_to_user_mode_loop+0x3b/0x110
[  183.438885][ T4288]  exit_to_user_mode_loop+0xe6/0x110
[  183.444218][ T4288]  exit_to_user_mode_prepare+0xee/0x180
[  183.449819][ T4288]  syscall_exit_to_user_mode+0x16/0x40
[  183.455326][ T4288]  do_syscall_64+0x58/0xa0
[  183.459774][ T4288]  ? clear_bhb_loop+0x60/0xb0
[  183.464498][ T4288]  ? clear_bhb_loop+0x60/0xb0
[  183.469222][ T4288]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.475248][ T4288] RIP: 0033:0x7f182399e097
[  183.479705][ T4288] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  183.499351][ T4288] RSP: 002b:00007fffdd934fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  183.507815][ T4288] RAX: 0000000000000000 RBX: 00007f1823a321ca RCX: 00007f182399e097
[  183.515824][ T4288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdd935080
[  183.523846][ T4288] RBP: 00007fffdd935080 R08: 00007fffdd936080 R09: 00000000ffffffff
[  183.531862][ T4288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdd936110
[  183.539924][ T4288] R13: 00007f1823a321ca R14: 000000000002ba5d R15: 00007fffdd936150
[  183.547964][ T4288]  </TASK>
[  183.551136][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.763806][ T6598] loop2: detected capacity change from 0 to 32768
[  183.800198][ T6598] XFS (loop2): Mounting V5 Filesystem
[  183.903018][  T126] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  183.910801][ T4702] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  183.925246][ T6598] XFS (loop2): Ending clean mount
[  183.974823][ T6598] XFS (loop2): User initiated shutdown received.
[  183.981541][ T6598] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  184.032602][ T6598] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  184.102697][ T4702] usb 1-1: Using ep0 maxpacket: 8
[  184.109948][ T4702] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  184.128310][  T126] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  184.142626][ T4702] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  184.162082][  T126] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  184.182765][ T4702] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  184.194083][  T126] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  184.208361][ T4702] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.219098][  T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.242687][ T6610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  184.265341][ T4702] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  184.288606][ T4702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.320802][ T4273] XFS (loop2): Unmounting Filesystem
[  184.370173][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'.
[  184.513508][ T6632] loop4: detected capacity change from 0 to 64
[  184.526182][ T4702] usb 1-1: GET_CAPABILITIES returned 0
[  184.531757][ T4702] usbtmc 1-1:16.0: can't read capabilities
[  184.590039][  T126] usb 2-1: USB disconnect, device number 10
[  184.698130][ T6635] syz.4.782: attempt to access beyond end of device
[  184.698130][ T6635] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64
[  184.759487][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.769096][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.774927][ T6635] Buffer I/O error on dev loop4, logical block 512, async page read
[  184.778197][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.787113][ T6635] syz.4.782: attempt to access beyond end of device
[  184.787113][ T6635] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64
[  184.861964][ T6635] Buffer I/O error on dev loop4, logical block 56576, async page read
[  184.882912][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.892059][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.901182][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.910390][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.919516][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.928726][    C0] vkms_vblank_simulate: vblank timer overrun
[  184.981300][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.990467][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  184.999598][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  185.008709][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  185.026256][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  185.035450][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  185.044595][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  185.053881][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  185.131775][ T4703] usb 1-1: USB disconnect, device number 11
[  185.673013][ T4326] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  185.742704][ T4703] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  185.758543][ T6662] loop1: detected capacity change from 0 to 64
[  185.844231][ T6665] loop0: detected capacity change from 0 to 256
[  185.889445][ T4326] usb 4-1: Using ep0 maxpacket: 16
[  185.898995][ T6665] exfat: Unknown parameter '0xffffffffffffffff'
[  185.907426][ T4326] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  185.932556][ T4703] usb 3-1: Using ep0 maxpacket: 16
[  185.939690][ T4703] usb 3-1: config index 0 descriptor too short (expected 100, got 36)
[  185.958057][ T4326] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  185.973270][ T4703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.991768][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.010504][ T4703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  186.023964][ T4326] usb 4-1: Product: syz
[  186.028339][ T4326] usb 4-1: Manufacturer: syz
[  186.037671][ T4326] usb 4-1: SerialNumber: syz
[  186.044244][ T4703] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  186.054487][ T6667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13
[  186.089895][ T4326] r8152-cfgselector 4-1: config 0 descriptor??
[  186.106904][ T4703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.183068][ T4703] usb 3-1: config 0 descriptor??
[  186.330371][ T4326] r8152-cfgselector 4-1: Unknown version 0x0000
[  186.361040][ T4326] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  186.512042][ T6681] loop0: detected capacity change from 0 to 512
[  186.536788][ T6681] EXT4-fs: Ignoring removed bh option
[  186.579214][ T6681] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.801: corrupted in-inode xattr
[  186.581089][ T4326] usb 4-1: USB disconnect, device number 8
[  186.605211][ T4703] hid-led 0003:0FC5:B080.0009: unknown main item tag 0xd
[  186.613953][ T6681] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.801: couldn't read orphan inode 15 (err -117)
[  186.652360][ T4703] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0
[  186.660828][ T6681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  186.675758][ T4703] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0
[  186.725154][ T4703] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0
[  186.755514][ T4703] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0
[  186.766180][ T4703] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0
[  186.773831][ T4703] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0
[  186.886254][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  186.956100][ T6692] loop1: detected capacity change from 0 to 512
[  187.019950][ T6697] loop0: detected capacity change from 0 to 512
[  187.042353][ T6692] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  187.076031][ T6692] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  187.097394][ T6697] EXT4-fs: Ignoring removed oldalloc option
[  187.116864][ T6692] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #13: comm syz.1.806: iget: bad i_size value: 12154757448730
[  187.149155][ T6697] EXT4-fs (loop0): Test dummy encryption mode enabled
[  187.206325][ T6692] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.806: couldn't read orphan inode 13 (err -117)
[  187.246745][ T6697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  187.254273][ T5280] usb 3-1: USB disconnect, device number 7
[  187.297507][ T6692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  187.561897][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  187.893290][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  188.025922][ T6724] loop8: detected capacity change from 0 to 8
[  188.037113][ T4544] Dev loop8: unable to read RDB block 8
[  188.048921][ T4544]  loop8: unable to read partition table
[  188.055431][ T4544] loop8: partition table beyond EOD, truncated
[  188.073484][ T6724] Dev loop8: unable to read RDB block 8
[  188.079248][ T6724]  loop8: unable to read partition table
[  188.085904][ T6724] loop8: partition table beyond EOD, truncated
[  188.099940][ T6724] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  188.192707][ T4323] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  188.395223][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.420996][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.435374][ T4323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  188.451782][ T4323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  188.461241][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.489702][ T4323] usb 3-1: config 0 descriptor??
[  188.552564][  T126] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  188.746809][  T126] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  188.772611][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.790967][  T126] usb 5-1: Product: syz
[  188.804600][  T126] usb 5-1: Manufacturer: syz
[  188.809266][  T126] usb 5-1: SerialNumber: syz
[  188.825119][  T126] usb 5-1: config 0 descriptor??
[  188.847822][  T126] hub 5-1:0.0: bad descriptor, ignoring hub
[  188.857212][ T6748] loop3: detected capacity change from 0 to 1024
[  188.869326][  T126] hub: probe of 5-1:0.0 failed with error -5
[  188.910472][ T4323] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  188.940957][ T4323] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  189.038387][  T126] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  189.077469][  T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  189.119810][  T126] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  189.151038][  T126] usb 5-1: media controller created
[  189.257698][  T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  189.957002][  T126] DVB: Unable to find symbol dib7000p_attach()
[  189.967241][  T126] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  190.010546][ T6758] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15
[  190.276518][ T6754] loop3: detected capacity change from 0 to 131072
[  190.286425][ T6754] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  190.294792][ T6754] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  190.307164][ T6754] F2FS-fs (loop3): invalid crc value
[  190.316164][ T6754] F2FS-fs (loop3): Found nat_bits in checkpoint
[  190.416835][ T6754] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  190.424194][ T6754] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  190.447584][  T126] rc_core: IR keymap rc-dib0700-rc5 not found
[  190.471210][  T126] Registered IR keymap rc-empty
[  190.496857][  T126] dvb-usb: could not initialize remote control.
[  190.524929][  T126] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  190.571708][  T126] usb 5-1: USB disconnect, device number 8
[  190.598923][ T6775] loop1: detected capacity change from 0 to 512
[  190.655759][  T126] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  190.694512][ T6775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  190.821434][ T6775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  190.830993][ T6775] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.051024][ T5280] usb 3-1: USB disconnect, device number 8
[  191.134993][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  191.377313][ T6791] vxcan1: tx drop: invalid sa for name 0x0000000000000004
[  192.277069][ T6788] loop0: detected capacity change from 0 to 131072
[  192.327071][ T6788] F2FS-fs (loop0): invalid crc value
[  192.399946][ T6788] F2FS-fs (loop0): Found nat_bits in checkpoint
[  192.452758][ T6788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  193.097146][ T6797] loop2: detected capacity change from 0 to 32768
[  193.194120][ T6797] XFS (loop2): Mounting V5 Filesystem
[  193.295409][ T6797] XFS (loop2): Ending clean mount
[  193.340669][ T4323] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  193.541145][ T4323] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  193.575937][ T4323] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.600767][ T4273] XFS (loop2): Unmounting Filesystem
[  193.636738][ T4323] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  193.645868][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.065485][ T6819] loop0: detected capacity change from 0 to 32768
[  194.143804][ T6819] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.848 (6819)
[  194.573895][ T6841] loop3: detected capacity change from 0 to 32768
[  194.627067][ T6841] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.856 (6841)
[  194.932140][ T6843] loop4: detected capacity change from 0 to 131072
[  194.943203][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  194.948563][ T4323] usb 2-1: usb_control_msg returned -32
[  194.949591][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  194.955739][ T4323] usbtmc 2-1:16.0: can't read capabilities
[  194.982545][ T6843] F2FS-fs (loop4): invalid crc value
[  194.998571][ T6841] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.009765][ T6819] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.058896][ T6819] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  195.061923][ T6841] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  195.070568][ T6843] F2FS-fs (loop4): Found nat_bits in checkpoint
[  195.091957][ T6819] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  195.104471][ T6841] BTRFS info (device loop3): using free space tree
[  195.123154][ T6819] BTRFS info (device loop0): use zstd compression, level 3
[  195.148031][ T6843] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  195.192376][ T6819] BTRFS info (device loop0): using free space tree
[  195.250707][   T26] audit: type=1800 audit(1781615636.528:20): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.858" name="file1" dev="loop4" ino=7 res=0 errno=0
[  195.454824][ T6841] BTRFS info (device loop3): enabling ssd optimizations
[  195.543750][ T6819] BTRFS info (device loop0): enabling ssd optimizations
[  195.671280][ T4288] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.771022][ T4274] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.964244][ T4544] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (4544)
[  196.754806][ T5277] usb 2-1: USB disconnect, device number 11
[  197.235860][ T6891] loop4: detected capacity change from 0 to 32768
[  197.421033][ T6891] XFS (loop4): Mounting V5 Filesystem
[  197.551344][ T6891] XFS (loop4): Ending clean mount
[  197.603344][ T6891] XFS (loop4): Quotacheck needed: Please wait.
[  197.718294][ T6891] XFS (loop4): Quotacheck: Done.
[  197.769490][   T26] audit: type=1800 audit(1781615640.033:21): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.862" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  197.790141][    C0] vkms_vblank_simulate: vblank timer overrun
[  198.130592][ T5493] XFS (loop4): Unmounting Filesystem
[  198.149719][ T6916] loop1: detected capacity change from 0 to 32768
[  198.277270][ T6916] JBD2: Ignoring recovery information on journal
[  198.361635][ T6916] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  198.778246][ T6957] loop2: detected capacity change from 0 to 256
[  198.801376][ T6957] exfat: Deprecated parameter 'utf8'
[  198.832715][ T6957] exfat: Deprecated parameter 'namecase'
[  198.840022][ T6957] exfat: Deprecated parameter 'namecase'
[  198.861005][ T6957] exfat: Deprecated parameter 'utf8'
[  198.912664][ T4278] ocfs2: Unmounting device (7,1) on (node local)
[  198.919688][ T6957] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  199.383528][ T6968] netlink: 198388 bytes leftover after parsing attributes in process `syz.2.882'.
[  199.408566][ T6943] loop3: detected capacity change from 0 to 32768
[  199.533665][ T6972] loop1: detected capacity change from 0 to 1764
[  199.602261][ T6943] XFS (loop3): Mounting V5 Filesystem
[  199.712625][ T6943] XFS (loop3): Ending clean mount
[  200.010263][ T4288] XFS (loop3): Unmounting Filesystem
[  200.029226][ T6980] loop0: detected capacity change from 0 to 4096
[  200.207234][ T6980] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  200.620430][ T6984] loop2: detected capacity change from 0 to 32768
[  200.690086][ T6904] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  200.729788][ T6984] XFS (loop2): Mounting V5 Filesystem
[  200.801822][ T6984] XFS (loop2): Ending clean mount
[  200.814981][ T6984] XFS (loop2): Quotacheck needed: Please wait.
[  200.867482][ T6984] XFS (loop2): Quotacheck: Done.
[  200.894166][ T6904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.906210][ T6904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.920675][   T26] audit: type=1800 audit(1781615643.193:22): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.885" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  200.941383][    C0] vkms_vblank_simulate: vblank timer overrun
[  200.951476][ T6904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  200.970022][ T4323] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  200.984058][ T6904] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  201.042791][ T6904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.089752][ T6904] usb 5-1: config 0 descriptor??
[  201.160155][ T4323] usb 2-1: Using ep0 maxpacket: 32
[  201.168941][ T4323] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  201.197852][ T4323] usb 2-1: config 0 has no interface number 0
[  201.218852][ T4323] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  201.248705][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.279221][ T4323] usb 2-1: Product: syz
[  201.291388][ T4323] usb 2-1: Manufacturer: syz
[  201.296071][ T4323] usb 2-1: SerialNumber: syz
[  201.343857][ T4323] usb 2-1: config 0 descriptor??
[  201.354536][ T4323] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  201.387252][ T4273] XFS (loop2): Unmounting Filesystem
[  201.523075][ T4285] Bluetooth: hci1: command 0x0406 tx timeout
[  201.523139][ T4281] Bluetooth: hci0: command 0x0406 tx timeout
[  201.529242][ T4285] Bluetooth: hci2: command 0x0406 tx timeout
[  201.535735][ T4281] Bluetooth: hci4: command 0x0406 tx timeout
[  201.564878][ T6904] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  201.565784][ T4323] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  201.587864][ T6904] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  201.598911][ T7021] loop0: detected capacity change from 0 to 256
[  201.609743][ T4323] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  201.611643][ T7021] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  201.649971][ T7021] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.719962][ T4702] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  201.916220][ T7024] raw_sendmsg: syz.0.900 forgot to set AF_INET. Fix it!
[  201.935869][ T4702] usb 4-1: Using ep0 maxpacket: 8
[  201.952454][ T4702] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  201.980024][ T4702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.988129][ T4702] usb 4-1: Product: syz
[  201.999918][ T4702] usb 4-1: Manufacturer: syz
[  202.004628][ T4702] usb 4-1: SerialNumber: syz
[  202.032384][ T4702] usb 4-1: config 0 descriptor??
[  202.060915][ T4702] gspca_main: sq930x-2.14.0 probing 2770:930c
[  202.081225][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  202.091966][ T4323] usb 2-1: USB disconnect, device number 12
[  202.113777][ T4323] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  202.191163][ T4323] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  202.224521][ T7026] netlink: 762 bytes leftover after parsing attributes in process `syz.0.901'.
[  202.234925][ T4323] quatech2 2-1:0.51: device disconnected
[  202.623918][ T7036] loop2: detected capacity change from 0 to 1024
[  202.940590][    C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1
[  202.980886][ T7042] loop2: detected capacity change from 0 to 512
[  202.998694][ T7042] ext2: Unknown parameter 'nouser_xattr'
[  203.099918][ T4702] gspca_sq930x: reg_w 0105 0f00 failed -71
[  203.108663][ T4702] sq930x: probe of 4-1:0.0 failed with error -71
[  203.133033][ T4702] usb 4-1: USB disconnect, device number 9
[  203.516842][ T7056] sock: sock_timestamping_bind_phc: sock not bind to device
[  203.532914][ T7054] loop1: detected capacity change from 0 to 2048
[  203.682073][ T7054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  203.720716][ T7054] EXT4-fs: Ignoring removed nobh option
[  203.726477][ T7054] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.750472][ T7054] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  203.800340][ T7054] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  203.825545][ T6904] usb 5-1: USB disconnect, device number 9
[  203.842956][ T7054] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  203.899195][ T7054] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  203.931373][ T7063] loop2: detected capacity change from 0 to 4096
[  203.991251][ T7044] loop0: detected capacity change from 0 to 32768
[  204.026173][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  204.205729][ T7044] XFS (loop0): Mounting V5 Filesystem
[  204.300880][ T7044] XFS (loop0): Ending clean mount
[  204.309173][ T4273] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  204.357378][ T7044] XFS (loop0): Quotacheck needed: Please wait.
[  204.381092][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  204.498003][ T7044] XFS (loop0): Quotacheck: Done.
[  204.582557][   T26] audit: type=1800 audit(1781615646.853:23): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.908" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  205.025351][ T4274] XFS (loop0): Unmounting Filesystem
[  205.059309][ T7067] loop4: detected capacity change from 0 to 40427
[  205.075094][ T7067] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  205.093590][ T7067] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  205.163650][ T7067] F2FS-fs (loop4): invalid crc value
[  205.250438][ T7067] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  205.555808][ T7067] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  205.574158][ T7067] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  205.613345][   T26] audit: type=1800 audit(1781615647.883:24): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.918" name="file1" dev="loop4" ino=10 res=0 errno=0
[  205.666114][ T7067] syz.4.918: attempt to access beyond end of device
[  205.666114][ T7067] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  205.779963][ T4326] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  205.866202][ T7110] loop1: detected capacity change from 0 to 4096
[  205.874306][ T4703] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  205.915603][ T5493] syz-executor: attempt to access beyond end of device
[  205.915603][ T5493] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.945101][ T4703] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  205.997830][ T4326] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  206.016993][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.059388][ T4326] usb 3-1: config 0 descriptor??
[  206.094328][ T4326] cp210x 3-1:0.0: cp210x converter detected
[  206.355845][ T6905] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  206.500292][ T4326] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  206.567311][ T6905] usb 2-1: Using ep0 maxpacket: 16
[  206.615682][ T6905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.666739][ T6905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  206.709395][ T6905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  206.726647][ T4326] usb 3-1: cp210x converter now attached to ttyUSB0
[  206.746273][ T6905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  206.757770][ T6905] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  206.791412][ T6905] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  206.800880][ T6905] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  206.809485][ T6905] usb 2-1: Manufacturer: syz
[  206.823278][ T6905] usb 2-1: config 0 descriptor??
[  206.855316][ T7129] loop3: detected capacity change from 0 to 16
[  206.870210][ T7129] erofs: (device loop3): mounted with root inode @ nid 36.
[  206.926799][ T4321] usb 3-1: USB disconnect, device number 9
[  206.944717][ T4321] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  207.023433][ T4321] cp210x 3-1:0.0: device disconnected
[  207.059930][ T6904] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  207.239959][ T6905] rc_core: IR keymap rc-hauppauge not found
[  207.290578][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  207.301114][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:3 Not tainted syzkaller #0
[  207.308728][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  207.318839][ T4281] Workqueue: hci4 hci_rx_work
[  207.323547][ T4281] Call Trace:
[  207.327013][ T4281]  <TASK>
[  207.329965][ T4281]  dump_stack_lvl+0x188/0x24e
[  207.334663][ T4281]  ? show_regs_print_info+0x12/0x12
[  207.339877][ T4281]  ? load_image+0x400/0x400
[  207.344406][ T4281]  sysfs_create_dir_ns+0x26a/0x290
[  207.349558][ T4281]  ? sysfs_warn_dup+0xa0/0xa0
[  207.354254][ T4281]  ? do_raw_spin_unlock+0x11d/0x230
[  207.359580][ T4281]  kobject_add_internal+0x61c/0xcc0
[  207.364806][ T4281]  kobject_add+0x160/0x230
[  207.369242][ T4281]  ? kobject_init+0x1d0/0x1d0
[  207.374044][ T4281]  ? klist_children_get+0x50/0x50
[  207.379086][ T4281]  ? get_device_parent+0x121/0x3f0
[  207.384300][ T4281]  device_add+0x48c/0x1000
[  207.388747][ T4281]  ? kmem_cache_free+0xf7/0x290
[  207.393612][ T4281]  hci_conn_add_sysfs+0xd1/0x1e0
[  207.398658][ T4281]  le_conn_complete_evt+0x1062/0x1670
[  207.404058][ T4281]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  207.410429][ T4281]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  207.416089][ T4281]  ? skb_pull_data+0xf7/0x200
[  207.420888][ T4281]  hci_le_conn_complete_evt+0x183/0x440
[  207.426452][ T4281]  ? hci_remote_host_features_evt+0x270/0x270
[  207.432615][ T4281]  hci_event_packet+0x7b9/0x1280
[  207.437576][ T4281]  ? bis_list+0x280/0x280
[  207.441915][ T4281]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  207.447825][ T4281]  ? kcov_remote_start+0x4c7/0x7e0
[  207.452947][ T4281]  ? mt_dump_node+0x750/0x1920
[  207.457739][ T4281]  ? hci_send_to_monitor+0x9c/0x4a0
[  207.462954][ T4281]  hci_rx_work+0x3eb/0xd40
[  207.467393][ T4281]  ? _raw_spin_unlock+0x40/0x40
[  207.472267][ T4281]  ? process_one_work+0x7b0/0x1160
[  207.477389][ T4281]  process_one_work+0x8a2/0x1160
[  207.482351][ T4281]  ? worker_detach_from_pool+0x240/0x240
[  207.488258][ T4281]  ? _raw_spin_lock_irq+0xb7/0xf0
[  207.493388][ T4281]  ? _raw_spin_lock_irqsave+0x100/0x100
[  207.498948][ T4281]  ? kthread_data+0x4b/0xc0
[  207.503475][ T4281]  worker_thread+0xaa2/0x1270
[  207.508192][ T4281]  kthread+0x29d/0x330
[  207.512270][ T4281]  ? worker_clr_flags+0x1a0/0x1a0
[  207.517310][ T4281]  ? kthread_blkcg+0xd0/0xd0
[  207.521906][ T4281]  ret_from_fork+0x1f/0x30
[  207.526349][ T4281]  </TASK>
[  207.529386][    C0] vkms_vblank_simulate: vblank timer overrun
[  207.536883][ T4281] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  207.550654][ T6904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.560907][ T4281] Bluetooth: hci4: failed to register connection device
[  207.562126][ T6905] Registered IR keymap rc-empty
[  207.574282][ T6904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.584555][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  207.609922][ T6904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  207.623536][ T6904] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  207.642175][ T6904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.651388][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  207.694378][ T6904] usb 5-1: config 0 descriptor??
[  207.701514][ T6905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  207.710760][ T7143] loop3: detected capacity change from 0 to 512
[  207.728269][ T7143] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  207.753143][ T6905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17
[  207.803479][ T7143] EXT4-fs (loop3): 1 truncate cleaned up
[  207.809220][ T7143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  207.906006][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  207.997858][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.051223][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.091115][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.132089][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.156221][ T6904] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  208.167861][ T4288] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  208.185051][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.196931][ T6904] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  208.220161][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.260268][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.268459][ T4288] EXT4-fs (loop3): unmounting filesystem.
[  208.311218][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.380186][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.433203][ T6905] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  208.447361][ T4702] usb 5-1: USB disconnect, device number 10
[  208.492794][ T6905] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  208.513205][ T6905] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  208.518824][ T7161] loop3: detected capacity change from 0 to 512
[  208.555434][ T6905] usb 2-1: USB disconnect, device number 13
[  208.620356][ T7161] EXT4-fs (loop3): 1 truncate cleaned up
[  208.629958][ T7161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  208.638609][ T7158] fido_id[7158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  208.764670][   T26] audit: type=1800 audit(1781615651.033:25): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.945" name="file1" dev="loop3" ino=13 res=0 errno=0
[  208.808836][ T7161] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.945: bg 0: block 465: padding at end of block bitmap is not set
[  208.900831][ T7161] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28
[  208.946918][ T7161] EXT4-fs (loop3): This should not happen!! Data will be lost
[  208.946918][ T7161] 
[  209.010084][ T7161] EXT4-fs (loop3): Total free blocks count 0
[  209.032656][ T7161] EXT4-fs (loop3): Free/Dirty block details
[  209.068275][ T7161] EXT4-fs (loop3): free_blocks=0
[  209.090833][ T7161] EXT4-fs (loop3): dirty_blocks=10
[  209.111314][ T7161] EXT4-fs (loop3): Block reservation details
[  209.149224][ T7161] EXT4-fs (loop3): i_reserved_data_blocks=10
[  209.181929][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'.
[  209.381038][ T4288] EXT4-fs (loop3): unmounting filesystem.
[  209.487960][   T26] audit: type=1326 audit(1781615651.753:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  209.598033][   T26] audit: type=1326 audit(1781615651.783:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  209.750689][   T26] audit: type=1326 audit(1781615651.783:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  209.794186][ T7192] loop4: detected capacity change from 0 to 2048
[  209.809615][ T7195] loop8: detected capacity change from 0 to 7
[  209.847865][ T7195] Dev loop8: unable to read RDB block 7
[  209.860141][ T7195]  loop8: unable to read partition table
[  209.866027][ T7195] loop8: partition table beyond EOD, truncated
[  209.880464][   T26] audit: type=1326 audit(1781615651.783:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  209.904712][ T7192] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  209.950315][ T7192] NILFS (loop4): mounting unchecked fs
[  209.994459][ T7195] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  210.019979][ T7192] NILFS (loop4): recovery complete
[  210.050305][   T26] audit: type=1326 audit(1781615651.783:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  210.075515][ T7203] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  210.249172][   T26] audit: type=1326 audit(1781615651.783:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  210.273268][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.404850][   T26] audit: type=1326 audit(1781615651.783:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  210.448814][ T7209] loop1: detected capacity change from 0 to 2048
[  210.546938][   T26] audit: type=1326 audit(1781615651.783:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  210.570921][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.593584][ T7209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  210.727150][   T26] audit: type=1326 audit(1781615651.793:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.2.953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6459ce59 code=0x7ffc0000
[  211.138683][ T7230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.967'.
[  211.212440][ T5554] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  211.280054][ T5554] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28
[  211.318799][ T5554] EXT4-fs (loop1): This should not happen!! Data will be lost
[  211.318799][ T5554] 
[  211.370019][ T5554] EXT4-fs (loop1): Total free blocks count 0
[  211.376091][ T5554] EXT4-fs (loop1): Free/Dirty block details
[  211.445511][ T5554] EXT4-fs (loop1): free_blocks=66060288
[  211.460142][ T5554] EXT4-fs (loop1): dirty_blocks=160
[  211.465409][ T5554] EXT4-fs (loop1): Block reservation details
[  211.489989][ T5554] EXT4-fs (loop1): i_reserved_data_blocks=10
[  211.507504][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  211.551297][ T4703] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  211.761788][ T4703] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  211.789940][ T4703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.815839][ T4703] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  211.864494][ T4703] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  211.883988][ T4703] usb 1-1: Manufacturer: syz
[  211.905223][ T4703] usb 1-1: config 0 descriptor??
[  212.110044][ T4703] rc_core: IR keymap rc-hauppauge not found
[  212.116029][ T4703] Registered IR keymap rc-empty
[  212.134275][ T4703] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  212.175756][ T4703] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18
[  212.220288][    C1] igorplugusb 1-1:0.0: Error: urb status = -32
[  212.224824][ T6905] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  212.237773][ T4703] usb 1-1: USB disconnect, device number 12
[  212.440184][ T6905] usb 4-1: Using ep0 maxpacket: 32
[  212.449149][ T6905] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.492323][ T6905] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.524533][ T6905] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  212.573286][ T6905] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  212.608948][ T6905] usb 4-1: Product: syz
[  212.623826][ T6905] usb 4-1: Manufacturer: syz
[  212.657769][ T6905] hub 4-1:4.0: USB hub found
[  212.809454][ T7277] loop4: detected capacity change from 0 to 512
[  212.832954][ T7279] input: syz0 as /devices/virtual/input/input19
[  212.853636][ T7277] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  212.893340][ T6905] hub 4-1:4.0: 7 ports detected
[  212.901658][ T6905] hub 4-1:4.0: insufficient power available to use all downstream ports
[  212.939372][ T7277] EXT4-fs (loop4): 1 truncate cleaned up
[  212.948656][ T7277] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  212.999445][ T7282] device syzkaller1 entered promiscuous mode
[  213.099756][ T6905] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  213.120542][ T6905] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  213.190748][ T6905] usb 4-1: USB disconnect, device number 10
[  213.212695][ T5493] EXT4-fs (loop4): unmounting filesystem.
[  213.465344][ T7294] loop4: detected capacity change from 0 to 2048
[  213.596385][ T7294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  213.679919][ T4281] Bluetooth: hci4: command 0x0406 tx timeout
[  213.809962][ T7287] loop0: detected capacity change from 0 to 32768
[  213.955454][ T7287] XFS (loop0): Mounting V5 Filesystem
[  214.132267][ T7287] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  214.187016][ T7287] XFS (loop0): Starting recovery (logdev: internal)
[  214.263793][ T7287] XFS (loop0): Ending recovery (logdev: internal)
[  214.284784][ T7294] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  214.372436][ T7294] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 125 with error 28
[  214.388149][ T4326] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 
[  214.418909][ T4326] XFS (loop0): Unmount and run xfs_repair
[  214.438093][ T7294] EXT4-fs (loop4): This should not happen!! Data will be lost
[  214.438093][ T7294] 
[  214.468594][ T7294] EXT4-fs (loop4): Total free blocks count 0
[  214.483443][ T7294] EXT4-fs (loop4): Free/Dirty block details
[  214.510952][ T7294] EXT4-fs (loop4): free_blocks=2415919504
[  214.540139][ T7294] EXT4-fs (loop4): dirty_blocks=128
[  214.559988][ T7294] EXT4-fs (loop4): Block reservation details
[  214.587112][ T7294] EXT4-fs (loop4): i_reserved_data_blocks=8
[  214.830268][ T5493] EXT4-fs (loop4): unmounting filesystem.
[  215.377829][ T7325] loop2: detected capacity change from 0 to 40427
[  215.400196][ T4326] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  215.407699][ T4326] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  215.416646][ T4326] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  215.425569][ T4326] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  215.481282][ T7325] F2FS-fs (loop2): invalid crc value
[  215.510672][ T7329] loop3: detected capacity change from 0 to 131072
[  215.520837][ T4326] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  215.529758][ T4326] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  215.542324][ T7325] F2FS-fs (loop2): Found nat_bits in checkpoint
[  215.579771][ T4326] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  215.601645][ T7329] F2FS-fs (loop3): Found nat_bits in checkpoint
[  215.644466][ T4326] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  215.663532][ T4326] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  215.672868][ T7329] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  215.690561][ T7287] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117
[  215.725562][ T7325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  215.819979][ T6904] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  215.889278][ T4274] XFS (loop0): Unmounting Filesystem
[  216.011792][ T6904] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  216.032311][ T6904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.100606][ T6904] usb 2-1: config 0 descriptor??
[  216.136771][ T6904] cp210x 2-1:0.0: cp210x converter detected
[  216.740535][ T6904] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  216.750458][ T6904] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  216.809482][ T6904] usb 2-1: cp210x converter now attached to ttyUSB0
[  216.850862][ T6904] usb 2-1: USB disconnect, device number 14
[  216.900452][ T6904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  216.936777][ T6904] cp210x 2-1:0.0: device disconnected
[  217.261472][ T7353] loop4: detected capacity change from 0 to 40427
[  217.324708][ T7353] F2FS-fs (loop4): invalid crc value
[  217.330191][ T4326] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  217.394094][ T7353] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  217.517815][ T7380] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1004'.
[  217.536035][ T4326] usb 4-1: Using ep0 maxpacket: 8
[  217.557891][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  217.589537][ T4326] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  217.651594][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.693861][ T7353] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  217.717002][ T4326] usb 4-1: config 0 descriptor??
[  217.759092][ T7353] F2FS-fs (loop4): Start checkpoint disabled!
[  217.816062][ T7353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  217.939023][ T7353] syz.4.993: attempt to access beyond end of device
[  217.939023][ T7353] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  218.152072][ T7396] loop0: detected capacity change from 0 to 256
[  218.164384][ T4326] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  218.302970][   T46] kworker/u4:3: attempt to access beyond end of device
[  218.302970][   T46] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  218.332263][ T7396] FAT-fs (loop0): Directory bread(block 64) failed
[  218.359295][ T7396] FAT-fs (loop0): Directory bread(block 65) failed
[  218.366574][ T4326] usb 4-1: USB disconnect, device number 11
[  218.389296][ T7396] FAT-fs (loop0): Directory bread(block 66) failed
[  218.439931][ T7396] FAT-fs (loop0): Directory bread(block 67) failed
[  218.470138][ T7396] FAT-fs (loop0): Directory bread(block 68) failed
[  218.506315][ T7396] FAT-fs (loop0): Directory bread(block 69) failed
[  218.560406][ T7396] FAT-fs (loop0): Directory bread(block 70) failed
[  218.603466][ T7396] FAT-fs (loop0): Directory bread(block 71) failed
[  218.645423][ T7396] FAT-fs (loop0): Directory bread(block 72) failed
[  218.684894][ T7396] FAT-fs (loop0): Directory bread(block 73) failed
[  218.989996][ T4326] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  219.210845][ T4326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.232697][ T7421] loop4: detected capacity change from 0 to 512
[  219.236095][ T4326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  219.255023][ T4326] usb 3-1: config 1 has no interface number 0
[  219.263134][ T4326] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  219.312876][ T4326] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  219.365611][ T4326] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  219.401759][ T7421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  219.420055][ T7421] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.458871][ T4326] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=10.40
[  219.463532][ T7433] loop3: detected capacity change from 0 to 8
[  219.520526][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.548283][ T4326] usb 3-1: Product: syz
[  219.558248][ T4326] usb 3-1: Manufacturer: syz
[  219.600030][ T4326] usb 3-1: SerialNumber: syz
[  219.641594][ T7409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  219.869237][ T5493] EXT4-fs (loop4): unmounting filesystem.
[  219.942406][ T7444] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1025'.
[  220.071002][ T7409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  220.503540][ T4326] cdc_ncm 3-1:1.1: bind() failure
[  220.576917][ T7452] loop0: detected capacity change from 0 to 256
[  220.773379][ T4326] usb 3-1: USB disconnect, device number 10
[  220.798679][ T7440] loop1: detected capacity change from 0 to 131072
[  220.806426][ T7440] XFS: ikeep mount option is deprecated.
[  220.974774][ T7440] XFS (loop1): Mounting V5 Filesystem
[  221.200876][ T7440] XFS (loop1): Starting recovery (logdev: internal)
[  221.245760][ T7440] XFS (loop1): Ending recovery (logdev: internal)
[  221.286993][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  221.287009][   T26] audit: type=1800 audit(1781615663.553:46): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1024" name="bus" dev="loop1" ino=41 res=0 errno=0
[  221.302876][ T7475] loop3: detected capacity change from 0 to 512
[  221.344870][ T7475] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  221.512731][ T4278] XFS (loop1): Unmounting Filesystem
[  221.998475][ T7475] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6
[  222.767149][ T7512] netlink: 'syz.2.1045': attribute type 2 has an invalid length.
[  223.331293][ T7534] loop2: detected capacity change from 0 to 512
[  223.471184][ T7540] loop3: detected capacity change from 0 to 4096
[  223.487820][ T7540] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  223.498850][ T7534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  223.523165][ T7537] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  223.644559][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  223.664708][ T7540] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  223.958652][ T7553] dlm: non-version read from control device 36
[  224.137536][ T4326] kernel write not supported for file /dsp (pid: 4326 comm: kworker/1:7)
[  224.509034][ T7572] loop4: detected capacity change from 0 to 512
[  224.557523][ T7572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  224.615439][ T7572] EXT4-fs (loop4): 1 truncate cleaned up
[  224.630778][ T7572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  224.654082][   T26] audit: type=1800 audit(1781615666.923:47): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1070" name="file1" dev="loop4" ino=15 res=0 errno=0
[  224.841358][ T5493] EXT4-fs (loop4): unmounting filesystem.
[  225.200186][ T6904] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  225.390029][ T6904] usb 3-1: Using ep0 maxpacket: 8
[  225.398869][ T6904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  225.431821][ T6904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  225.456137][ T6904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  225.471737][ T6904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  225.498116][ T6904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  225.528742][ T6904] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  225.543221][ T6904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.575319][ T7604] loop1: detected capacity change from 0 to 1024
[  225.578906][ T6904] usb 3-1: config 0 descriptor??
[  225.590783][ T7604] EXT4-fs: Ignoring removed orlov option
[  225.598801][ T7586] loop3: detected capacity change from 0 to 32768
[  225.659551][ T7604] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a00ec118, mo2=0002]
[  225.668423][ T4283] Bluetooth: hci5: urb ffff88802f671c00 submission failed (90)
[  225.687174][ T7604] System zones: 0-1, 3-12
[  225.693266][ T7586] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  225.731371][ T7604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  225.752811][ T7586] JBD2: Ignoring recovery information on journal
[  225.833687][ T6904] usb 3-1: USB disconnect, device number 11
[  225.930089][ T7586] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  226.178260][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  226.187344][ T4288] ocfs2: Unmounting device (7,3) on (node local)
[  226.446413][ T7622] loop5: detected capacity change from 0 to 7
[  226.493175][ T7622] Dev loop5: unable to read RDB block 7
[  226.520839][ T7622]  loop5: AHDI p1 p3 p4
[  226.535305][ T7622] loop5: partition table partially beyond EOD, truncated
[  226.558783][ T7622] loop5: p1 size 100663296 extends beyond EOD, truncated
[  226.564076][ T7626] loop4: detected capacity change from 0 to 256
[  226.587404][ T7624] loop0: detected capacity change from 0 to 1024
[  226.600720][ T7622] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  226.687175][ T7624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  226.749390][ T7626] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  226.797946][ T4544] udevd[4544]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  226.823428][ T6630] udevd[6630]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  226.910629][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  227.063405][ T6904] kernel write not supported for file /cpuinfo (pid: 6904 comm: kworker/0:27)
[  227.236826][ T7642] loop0: detected capacity change from 0 to 128
[  227.254027][ T7637] loop3: detected capacity change from 0 to 8192
[  227.313876][ T7637] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  227.368214][ T7637] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  227.378604][ T7637] REISERFS (device loop3): using ordered data mode
[  227.385554][ T7637] reiserfs: using flush barriers
[  227.415206][ T7637] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  227.432671][ T7637] REISERFS (device loop3): checking transaction log (loop3)
[  227.766274][ T7637] REISERFS (device loop3): Using tea hash to sort names
[  227.786973][ T7637] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  228.252110][ T7658] loop2: detected capacity change from 0 to 256
[  228.448077][ T7663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'.
[  228.649309][ T7667] loop0: detected capacity change from 0 to 1024
[  228.752461][ T7667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  228.937480][ T7669] loop3: detected capacity change from 0 to 4096
[  229.012880][ T7669] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  229.055293][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  229.175860][ T7669] ntfs: volume version 3.1.
[  229.190166][ T5279] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  229.227995][ T7686] loop0: detected capacity change from 0 to 256
[  229.321933][ T7686] FAT-fs (loop0): Directory bread(block 64) failed
[  229.336429][ T7686] FAT-fs (loop0): Directory bread(block 65) failed
[  229.364801][ T7686] FAT-fs (loop0): Directory bread(block 66) failed
[  229.386090][ T7686] FAT-fs (loop0): Directory bread(block 67) failed
[  229.395286][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.416411][ T7686] FAT-fs (loop0): Directory bread(block 68) failed
[  229.419072][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.433251][ T7686] FAT-fs (loop0): Directory bread(block 69) failed
[  229.465513][ T7686] FAT-fs (loop0): Directory bread(block 70) failed
[  229.484549][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  229.484868][ T7686] FAT-fs (loop0): Directory bread(block 71) failed
[  229.521575][ T5279] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  229.544947][ T7686] FAT-fs (loop0): Directory bread(block 72) failed
[  229.548739][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.565127][ T7686] FAT-fs (loop0): Directory bread(block 73) failed
[  229.595291][ T5279] usb 2-1: config 0 descriptor??
[  229.614371][ T4374] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  229.676942][ T4374] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  229.866677][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1121'.
[  230.026853][ T5279] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  230.069550][ T5279] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  230.083541][ T6904] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  230.279927][ T6904] usb 5-1: Using ep0 maxpacket: 8
[  230.287194][ T6904] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  230.315835][ T6904] usb 5-1: config 179 has no interface number 0
[  230.335428][ T6904] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  230.373684][ T6904] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  230.405598][ T6904] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  230.432850][ T6904] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  230.444855][ T6904] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  230.459015][ T6904] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  230.469135][ T6904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.504487][ T4321] usb 2-1: USB disconnect, device number 15
[  230.512829][ T7694] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  230.605544][   T26] audit: type=1800 audit(1781615672.873:48): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1126" name="file1" dev="loop2" ino=33 res=0 errno=0
[  230.783738][ T6904] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input20
[  230.961375][ T4321] usb 5-1: USB disconnect, device number 11
[  230.968484][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  231.004700][ T4321] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  231.260380][ T7724] set_capacity_and_notify: 1 callbacks suppressed
[  231.260398][ T7724] loop1: detected capacity change from 0 to 256
[  231.782225][ T7738] loop2: detected capacity change from 0 to 1024
[  231.845671][ T7740] loop3: detected capacity change from 0 to 2048
[  231.906314][ T7738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  231.924874][ T7740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  231.988722][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  232.220059][ T4323] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  232.267138][ T4374] Bluetooth: hci5: Frame reassembly failed (-84)
[  232.432840][ T4323] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  232.449227][ T4323] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  232.460417][ T4323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  232.469524][ T4323] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  232.481060][ T4323] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  232.511260][ T4323] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  232.530194][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  232.538651][ T4323] usb 5-1: Product: syz
[  232.546218][ T4323] usb 5-1: Manufacturer: syz
[  232.575129][ T4323] cdc_wdm 5-1:1.0: skipping garbage
[  232.582930][ T4323] cdc_wdm 5-1:1.0: skipping garbage
[  232.597168][ T4323] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  232.603392][ T4323] cdc_wdm 5-1:1.0: Unknown control protocol
[  232.780367][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  232.787046][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  232.800299][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  232.807065][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  232.820200][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  232.826874][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  232.833526][ T4323] usb 5-1: USB disconnect, device number 12
[  232.841544][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  232.848237][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  232.854354][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  233.399599][ T7789] tipc: Started in network mode
[  233.405582][ T7789] tipc: Node identity ac14140f, cluster identity 4711
[  233.414711][ T7789] tipc: Enabled bearer <udp:syz2>, priority 10
[  233.937424][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'.
[  234.329038][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  234.329977][ T4281] Bluetooth: hci5: command 0x1003 tx timeout
[  234.414574][ T4702] tipc: Node number set to 2886997007
[  234.637960][ T7816] loop0: detected capacity change from 0 to 128
[  234.781324][ T7822] syz.0.1174: attempt to access beyond end of device
[  234.781324][ T7822] loop0: rw=2049, sector=145, nr_sectors = 464 limit=128
[  235.010925][ T4374] kworker/u4:7: attempt to access beyond end of device
[  235.010925][ T4374] loop0: rw=1, sector=609, nr_sectors = 432 limit=128
[  235.811620][ T7825] loop4: detected capacity change from 0 to 32768
[  235.988486][ T7825] UFO tlock:0xffffc900028ba288
[  236.222775][  T107] list_add corruption. next is NULL.
[  236.228869][  T107] ------------[ cut here ]------------
[  236.234437][  T107] kernel BUG at lib/list_debug.c:26!
[  236.239852][  T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  236.245927][  T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0
[  236.253133][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  236.263265][  T107] RIP: 0010:__list_add_valid+0xb6/0xe0
[  236.268880][  T107] Code: 4c 89 fe 4c 89 f2 48 89 d9 e8 76 4f 0e 06 0f 0b 48 c7 c7 20 21 df 8a e8 68 4f 0e 06 0f 0b 48 c7 c7 c0 21 df 8a e8 5a 4f 0e 06 <0f> 0b 48 c7 c7 20 22 df 8a 4c 89 f6 48 89 d9 e8 46 4f 0e 06 0f 0b
[  236.288854][  T107] RSP: 0018:ffffc90002d57c90 EFLAGS: 00010046
[  236.294936][  T107] RAX: 0000000000000022 RBX: 0000000000000000 RCX: 8a6c4a92c0d56c00
[  236.302928][  T107] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  236.311450][  T107] RBP: ffff8880559bad90 R08: ffffc90002d57987 R09: 1ffff920005aaf30
[  236.319573][  T107] R10: dffffc0000000000 R11: fffff520005aaf31 R12: ffffc90002699340
[  236.327568][  T107] R13: 0000000000000000 R14: ffff8880559bae40 R15: ffff8880559bada0
[  236.335541][  T107] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  236.344562][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.351223][  T107] CR2: 00007ffef92fda8c CR3: 000000007de1a000 CR4: 00000000003506f0
[  236.359192][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  236.367197][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  236.375176][  T107] Call Trace:
[  236.378453][  T107]  <TASK>
[  236.381388][  T107]  diUpdatePMap+0x629/0xe50
[  236.385906][  T107]  txUpdateMap+0x6c2/0x890
[  236.390437][  T107]  jfs_lazycommit+0x425/0xa70
[  236.395126][  T107]  ? txFreelock+0x5a0/0x5a0
[  236.399808][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  236.405821][  T107]  ? do_task_dead+0xd0/0xd0
[  236.410347][  T107]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  236.416331][  T107]  ? __kthread_parkme+0x162/0x1c0
[  236.421573][  T107]  kthread+0x29d/0x330
[  236.425647][  T107]  ? txFreelock+0x5a0/0x5a0
[  236.430152][  T107]  ? kthread_blkcg+0xd0/0xd0
[  236.434736][  T107]  ret_from_fork+0x1f/0x30
[  236.439245][  T107]  </TASK>
[  236.442264][  T107] Modules linked in:
[  236.446181][  T107] ---[ end trace 0000000000000000 ]---
[  236.451628][  T107] RIP: 0010:__list_add_valid+0xb6/0xe0
[  236.457266][  T107] Code: 4c 89 fe 4c 89 f2 48 89 d9 e8 76 4f 0e 06 0f 0b 48 c7 c7 20 21 df 8a e8 68 4f 0e 06 0f 0b 48 c7 c7 c0 21 df 8a e8 5a 4f 0e 06 <0f> 0b 48 c7 c7 20 22 df 8a 4c 89 f6 48 89 d9 e8 46 4f 0e 06 0f 0b
[  236.476895][  T107] RSP: 0018:ffffc90002d57c90 EFLAGS: 00010046
[  236.482958][  T107] RAX: 0000000000000022 RBX: 0000000000000000 RCX: 8a6c4a92c0d56c00
[  236.490925][  T107] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  236.498921][  T107] RBP: ffff8880559bad90 R08: ffffc90002d57987 R09: 1ffff920005aaf30
[  236.506973][  T107] R10: dffffc0000000000 R11: fffff520005aaf31 R12: ffffc90002699340
[  236.514939][  T107] R13: 0000000000000000 R14: ffff8880559bae40 R15: ffff8880559bada0
[  236.522901][  T107] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  236.531994][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.538655][  T107] CR2: 00007ffef92fda8c CR3: 000000007de1a000 CR4: 00000000003506f0
[  236.546797][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  236.554767][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  236.562731][  T107] Kernel panic - not syncing: Fatal exception
[  237.706220][  T107] Shutting down cpus with NMI
[  237.711251][  T107] Kernel Offset: disabled
[  237.715577][  T107] Rebooting in 86400 seconds..