last executing test programs:

12.659784612s ago: executing program 1 (id=1668):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001f0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)='_', 0x1}], 0x1, 0x0, 0x0, 0x8)

11.690424399s ago: executing program 1 (id=1672):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x18, &(0x7f00000002c0)={[{@flushoncommit}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@autodefrag}, {@nobarrier}, {@clear_cache}, {@datacow}, {@nobarrier}, {@nodiscard}, {@ref_verify}, {@ref_verify}]}, 0x3, 0x55a3, &(0x7f0000005640)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r3, 0x0)

8.345795956s ago: executing program 1 (id=1687):
r0 = io_uring_setup(0x5d7e, &(0x7f0000000000)={0x0, 0x62a7})
r1 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1)

6.408265809s ago: executing program 1 (id=1701):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="06f7", 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40)

5.952528214s ago: executing program 1 (id=1706):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000000000006700000008000e"], 0x2c}}, 0x0)

5.736884102s ago: executing program 0 (id=1708):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
syslog(0x0, 0x0, 0x0)

5.422670582s ago: executing program 1 (id=1709):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4800)
mount$9p_tcp(&(0x7f0000000580), &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000740), 0x80, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e24,access=any,uid=', @ANYRESDEC=r0, @ANYBLOB="2c646566636f6e746578743d73797374656d5f752c646f6e745f6d6561737572652c016f6e746578743d726f6f742c00"])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
pipe2(&(0x7f0000000000), 0x84000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

5.315490244s ago: executing program 2 (id=1710):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"})

5.296025077s ago: executing program 0 (id=1711):
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000000c00020000000000000000000c00020006000000040000001c0003800c00010000000000000000000c00010000000000000000001c0004800c00011502000000080000000c00010099f6fffff9a5000008000500", @ANYRES32=r4], 0x94}}, 0x0)

4.936151694s ago: executing program 2 (id=1714):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
personality(0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x810000, &(0x7f00000025c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
read$FUSE(r3, &(0x7f000000a600)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r5, 0x8931, &(0x7f0000000100)={'bond_slave_0\x00', 0x0})
write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x9}}, 0x50)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
statfs(&(0x7f00000001c0)='./file1\x00', &(0x7f00000007c0)=""/137)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='xprt_retransmit\x00', r6}, 0x10)

4.535474214s ago: executing program 4 (id=1716):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="06f7", 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40)

4.359883288s ago: executing program 0 (id=1717):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040))

3.806847646s ago: executing program 3 (id=1718):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40)
syz_emit_ethernet(0x40000, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

3.783814639s ago: executing program 0 (id=1719):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000000000006700000008000e"], 0x2c}}, 0x0)

3.234063412s ago: executing program 4 (id=1720):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_OPERSTATE={0x5}]}, 0x38}}, 0x0)

2.310605751s ago: executing program 0 (id=1721):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
syslog(0x0, 0x0, 0x0)

2.259478259s ago: executing program 4 (id=1722):
io_setup(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r3 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)

2.232079544s ago: executing program 3 (id=1723):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
write$binfmt_elf32(r3, 0x0, 0x58)
dup3(r0, r1, 0x0)
execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)

1.677550981s ago: executing program 0 (id=1724):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.610760489s ago: executing program 2 (id=1725):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x1fe, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x20, 0x0, 0x0, r0, 0x0}])

1.361490623s ago: executing program 3 (id=1726):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xfffffffffffffd6c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x3c}}, 0x0)

1.144353908s ago: executing program 2 (id=1727):
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000000c00020000000000000000000c00020006000000040000001c0003800c00010000000000000000000c00010000000000000000001c0004800c00011502000000080000000c00010099f6fffff9a5000008000500", @ANYRES32=r4], 0x94}}, 0x0)

1.127265712s ago: executing program 4 (id=1728):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffd9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

956.773492ms ago: executing program 3 (id=1729):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040))

669.335052ms ago: executing program 4 (id=1730):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="06f7", 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd67a0b4c5557abae6849917dc51a89d47b72800c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0ff0f0000c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75831fd2f612063168c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f05407b1fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244d8cfd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40)

437.916822ms ago: executing program 2 (id=1731):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000000000006700000008000e"], 0x2c}}, 0x0)

431.758811ms ago: executing program 3 (id=1732):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0x33, 0x0, &(0x7f0000000100))

273.496866ms ago: executing program 4 (id=1733):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40)
syz_emit_ethernet(0x40000, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

75.654556ms ago: executing program 3 (id=1734):
syz_emit_ethernet(0xc6, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\a\x00', 0x90, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x4, "00d414ce8ad48b29bc0ace1fe0ae3b9068bcf462125fca2560c049f6ee8b"}, {0x0, 0xa, "a78ce54406598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0)

0s ago: executing program 2 (id=1735):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000010140000000e0a000000000000000000000000000014000000a18e01"], 0x98}}, 0x0)

kernel console output (not intermixed with test programs):

m syz.0.1008: bg 0: block 64: padding at end of block bitmap is not set
[  532.431582][ T8422] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  532.470454][ T8422] EXT4-fs (loop0): 1 orphan inode deleted
[  532.478583][ T8422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  532.663267][ T8422] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ
[  532.663267][ T8422] SÃȘØÈžZ§6ŸÂ'
[  532.764598][   T11] hfsplus: b-tree write err: -5, ino 4
[  532.765519][ T7339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.972218][ T8432] sctp: [Deprecated]: syz.3.1010 (pid 8432) Use of int in max_burst socket option deprecated.
[  532.972218][ T8432] Use struct sctp_assoc_value instead
[  533.074400][ T7237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.214821][ T8438] loop4: detected capacity change from 0 to 128
[  533.376093][ T8440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.425327][ T8438] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  533.499966][    T8] IPVS: starting estimator thread 0...
[  533.553066][ T8438] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  533.577263][ T8445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.617822][ T8444] IPVS: using max 240 ests per chain, 12000 per kthread
[  534.011337][ T8438] fscrypt: Error allocating hmac(sha512): -2
[  534.479979][ T7285] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  534.855505][ T8467] loop3: detected capacity change from 0 to 512
[  534.973436][ T8467] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  535.047672][ T8467] EXT4-fs (loop3): 1 truncate cleaned up
[  535.055607][ T8467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.928735][ T8477] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies.
[  536.045872][ T8480] loop4: detected capacity change from 0 to 512
[  536.104516][ T8480] EXT4-fs: Ignoring removed mblk_io_submit option
[  536.181462][ T8480] EXT4-fs (loop4): filesystem is read-only
[  536.233982][ T8480] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  536.245830][ T8428] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  536.323056][ T8428] EXT4-fs (loop3): Remounting filesystem read-only
[  536.336645][ T8480] EXT4-fs (loop4): filesystem is read-only
[  536.343398][ T8480] EXT4-fs (loop4): orphan cleanup on readonly fs
[  536.351856][ T8480] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1024: bg 0: block 64: padding at end of block bitmap is not set
[  536.490790][ T8480] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  536.532921][ T7364] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.599193][ T8480] EXT4-fs (loop4): 1 orphan inode deleted
[  536.606914][ T8480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  536.728146][ T8480] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ
[  536.728146][ T8480] SÃȘØÈžZ§6ŸÂ'
[  536.890267][ T8491] sctp: [Deprecated]: syz.3.1027 (pid 8491) Use of int in max_burst socket option deprecated.
[  536.890267][ T8491] Use struct sctp_assoc_value instead
[  537.020791][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  537.088785][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  537.109481][ T7285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.150101][    T8] IPVS: starting estimator thread 0...
[  537.184078][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  537.271726][ T8498] IPVS: using max 288 ests per chain, 14400 per kthread
[  537.324540][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  537.410708][    C0] eth0: bad gso: type: 1, size: 1408
[  537.482623][ T8502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.210558][ T8508] loop0: detected capacity change from 0 to 64
[  538.673208][ T8505] loop2: detected capacity change from 0 to 4096
[  539.409069][ T8512] loop1: detected capacity change from 0 to 256
[  539.482730][ T8514] loop0: detected capacity change from 0 to 128
[  540.046993][ T8510] loop3: detected capacity change from 0 to 32768
[  540.088749][ T8510] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1032 (8510)
[  540.131483][ T8514] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0.
[  541.314766][ T8516] loop4: detected capacity change from 0 to 32768
[  542.191391][ T8525] loop0: detected capacity change from 0 to 512
[  542.473393][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'.
[  542.522247][ T8525] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  542.653299][ T8525] EXT4-fs (loop0): 1 truncate cleaned up
[  542.654930][ T8535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  542.660685][ T8525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.666511][ T8535] IPv6: NLM_F_CREATE should be set when creating new route
[  543.691488][ T5067] Bluetooth: hci2: command 0x0406 tx timeout
[  544.805578][ T7237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.602088][    C0] eth0: bad gso: type: 1, size: 1408
[  546.154263][ T8548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  550.293670][ T8557] loop0: detected capacity change from 0 to 4096
[  551.672074][ T8559] loop3: detected capacity change from 0 to 32768
[  551.865657][ T8561] loop4: detected capacity change from 0 to 128
[  553.675785][ T8567] loop4: detected capacity change from 0 to 32768
[  553.745697][ T8567] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1055 (8567)
[  553.769622][ T8567] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  553.780182][ T8567] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[  553.790542][ T8567] BTRFS error (device loop4): superblock checksum mismatch
[  553.798466][ T8567] BTRFS error (device loop4): open_ctree failed
[  554.081735][ T5067] Bluetooth: hci4: command 0x0406 tx timeout
[  554.296728][    C0] eth0: bad gso: type: 1, size: 1408
[  554.548574][ T8569] loop4: detected capacity change from 0 to 16
[  554.609520][ T8571] loop0: detected capacity change from 0 to 128
[  554.642686][ T8569] erofs: (device loop4): mounted with root inode @ nid 36.
[  554.704071][ T8574] loop1: detected capacity change from 0 to 128
[  554.746465][ T8575] loop2: detected capacity change from 0 to 16
[  554.784156][ T8575] erofs: (device loop2): mounted with root inode @ nid 36.
[  555.137840][ T8577] loop4: detected capacity change from 0 to 16
[  555.215517][ T8577] erofs: (device loop4): mounted with root inode @ nid 36.
[  555.328545][ T8580] loop1: detected capacity change from 0 to 256
[  556.286720][ T8589] loop1: detected capacity change from 0 to 128
[  556.498307][ T8581] loop0: detected capacity change from 0 to 4096
[  556.663389][ T8581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  556.904718][ T8583] loop2: detected capacity change from 0 to 4096
[  557.064029][ T8583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  557.277592][ T7237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.588806][ T8587] loop4: detected capacity change from 0 to 32768
[  557.643539][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.373157][ T8598] loop2: detected capacity change from 0 to 512
[  558.508986][ T8598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  558.682892][ T8594] loop1: detected capacity change from 0 to 4096
[  559.065679][ T5060] Bluetooth: hci3: command 0x0406 tx timeout
[  559.192629][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.791429][ T8596] loop0: detected capacity change from 0 to 32768
[  559.818671][ T8596] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1067 (8596)
[  559.929878][ T8601] loop3: detected capacity change from 0 to 512
[  559.988495][ T8596] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  559.999285][ T8596] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  560.010574][ T8596] BTRFS error (device loop0): superblock checksum mismatch
[  560.020691][ T8596] BTRFS error (device loop0): open_ctree failed
[  560.065857][ T8594] ntfs3: loop1: Failed to read $UpCase (-4).
[  560.234587][ T8601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  560.289795][    C0] eth0: bad gso: type: 1, size: 1408
[  560.353344][ T8604] loop2: detected capacity change from 0 to 512
[  560.590969][ T8604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  560.604349][ T8604] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  560.881687][ T7364] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.170437][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.623667][ T8616] loop3: detected capacity change from 0 to 1024
[  561.922991][ T8616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.322835][ T8627] loop2: detected capacity change from 0 to 512
[  562.464612][ T7364] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.643114][ T8627] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  562.912468][ T8627] EXT4-fs (loop2): 1 truncate cleaned up
[  562.927438][ T8627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.335983][ T8634] loop4: detected capacity change from 0 to 32768
[  564.671820][ T8630] loop0: detected capacity change from 0 to 2048
[  564.868820][ T8630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.882659][ T8630] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  565.548361][ T7237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.501661][ T8625] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  567.031462][ T8642] loop0: detected capacity change from 0 to 32768
[  567.064099][ T8642] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1082 (8642)
[  567.252080][ T8642] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  567.262688][ T8642] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  567.273699][ T8642] BTRFS error (device loop0): superblock checksum mismatch
[  567.281762][ T8625] EXT4-fs (loop2): Remounting filesystem read-only
[  567.313945][ T8642] BTRFS error (device loop0): open_ctree failed
[  567.693710][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.595863][ T8656] loop4: detected capacity change from 0 to 128
[  571.879251][ T8666] loop3: detected capacity change from 0 to 732
[  572.111714][ T8670] loop2: detected capacity change from 0 to 132
[  573.324886][ T8676] loop0: detected capacity change from 0 to 1764
[  573.463508][ T8679] loop2: detected capacity change from 0 to 512
[  573.706171][ T8679] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  573.805104][ T8679] EXT4-fs (loop2): 1 truncate cleaned up
[  573.813327][ T8679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.164000][ T8686] loop0: detected capacity change from 0 to 64
[  574.356058][ T8688] loop1: detected capacity change from 0 to 64
[  574.789445][ T8690] loop0: detected capacity change from 0 to 128
[  575.110153][ T8692] loop1: detected capacity change from 0 to 512
[  576.196016][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.588832][ T8701] loop2: detected capacity change from 0 to 128
[  576.711630][ T8703] loop3: detected capacity change from 0 to 256
[  577.344600][ T8708] loop2: detected capacity change from 0 to 128
[  577.944688][ T8711] loop3: detected capacity change from 0 to 256
[  578.324896][ T8713] loop2: detected capacity change from 0 to 512
[  578.999816][ T8715] loop3: detected capacity change from 0 to 2048
[  579.246425][    C0] eth0: bad gso: type: 1, size: 1408
[  579.920532][ T8719] loop4: detected capacity change from 0 to 2048
[  580.303971][ T8726] loop1: detected capacity change from 0 to 512
[  580.422608][ T8725] loop3: detected capacity change from 0 to 2048
[  580.515438][ T8726] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  580.562289][ T8729] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  580.652690][ T8726] EXT4-fs (loop1): 1 truncate cleaned up
[  580.660153][ T8726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  582.797465][ T7339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.602498][ T8742] loop2: detected capacity change from 0 to 4096
[  584.324008][ T8744] loop1: detected capacity change from 0 to 4096
[  584.401776][ T8744] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  587.744726][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  587.753102][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[  590.927198][ T8771] loop1: detected capacity change from 0 to 512
[  591.082287][ T8771] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  591.336211][ T8771] EXT4-fs (loop1): 1 truncate cleaned up
[  591.344269][ T8771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  593.189785][ T7339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.578884][ T8780] syz.3.1136: attempt to access beyond end of device
[  593.578884][ T8780] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0
[  593.592720][ T8780] SQUASHFS error: Failed to read block 0x0: -5
[  593.599239][ T8780] unable to read squashfs_super_block
[  594.215589][ T8783] loop3: detected capacity change from 0 to 8
[  594.282677][ T8785] syz.4.1138: attempt to access beyond end of device
[  594.282677][ T8785] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  594.296403][ T8785] SQUASHFS error: Failed to read block 0x0: -5
[  594.303047][ T8785] unable to read squashfs_super_block
[  594.729475][ T8787] loop4: detected capacity change from 0 to 128
[  594.806131][ T8787] VFS: unable to find oldfs superblock on device loop4
[  595.280703][ T8789] loop3: detected capacity change from 0 to 2048
[  595.368166][ T8789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  595.875560][ T8795] loop2: detected capacity change from 0 to 256
[  595.934577][ T8795] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  596.003624][ T8795] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  596.016775][ T8795] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  596.025428][ T8795] UDF-fs: Scanning with blocksize 512 failed
[  596.077506][ T8795] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  596.127516][ T8797] loop3: detected capacity change from 0 to 256
[  596.174794][ T8797] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  596.192806][ T8795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  596.254149][ T8797] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  596.264209][ T8797] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  596.272263][ T8797] UDF-fs: Scanning with blocksize 512 failed
[  596.387340][ T8797] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  596.466720][ T8797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  597.376419][ T8803] loop4: detected capacity change from 0 to 512
[  597.553560][ T8809] loop1: detected capacity change from 0 to 512
[  597.567424][ T8803] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  597.601447][ T8809] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  597.609279][ T8809] UDF-fs: Scanning with blocksize 512 failed
[  597.731718][ T8803] EXT4-fs (loop4): 1 truncate cleaned up
[  597.739505][ T8803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  597.792639][ T8809] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  597.800456][ T8809] UDF-fs: Scanning with blocksize 1024 failed
[  597.853046][ T8809] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  597.863774][ T8809] UDF-fs: Scanning with blocksize 2048 failed
[  597.914077][ T8809] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  598.028773][ T8809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  598.723105][ T8813] loop1: detected capacity change from 0 to 128
[  598.813356][ T8813] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  598.928839][ T8813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  599.696371][ T8815] loop1: detected capacity change from 0 to 512
[  599.709134][ T7285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.768860][ T8815] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  599.776757][ T8815] UDF-fs: Scanning with blocksize 512 failed
[  599.895779][ T8815] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  599.906376][ T8815] UDF-fs: Scanning with blocksize 1024 failed
[  599.986388][ T8815] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  599.994209][ T8815] UDF-fs: Scanning with blocksize 2048 failed
[  600.049764][ T8815] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  600.151314][ T8815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  600.638745][ T8819] loop2: detected capacity change from 0 to 128
[  600.684247][ T8819] VFS: could not find a valid V7 on loop2.
[  600.838140][ T8824] loop3: detected capacity change from 0 to 512
[  601.111455][ T8823] loop0: detected capacity change from 0 to 2048
[  601.150954][ T8825] loop1: detected capacity change from 0 to 2048
[  601.197373][    C0] eth0: bad gso: type: 1, size: 1408
[  601.517434][ T8829] loop3: detected capacity change from 0 to 128
[  601.776697][ T8827] loop2: detected capacity change from 0 to 2048
[  601.935212][ T8832] loop0: detected capacity change from 0 to 128
[  603.168664][ T8842] loop2: detected capacity change from 0 to 512
[  603.361973][ T8842] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  603.460573][ T8842] EXT4-fs (loop2): 1 truncate cleaned up
[  603.469101][ T8842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.645622][    C0] eth0: bad gso: type: 1, size: 1408
[  603.811509][ T5112] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  604.084609][ T5112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.096556][ T5112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.107853][ T5112] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  604.121744][ T5112] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  604.131280][ T5112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.234198][ T5112] usb 1-1: config 0 descriptor??
[  604.712146][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.722234][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.730161][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.738752][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.746799][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.755199][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.763360][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.771426][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.779211][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.787624][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.795525][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.803433][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.811414][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.820072][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.828134][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.836124][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.844309][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.852331][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.860336][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.868379][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.876942][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.885147][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.893243][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.901237][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.908851][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.916485][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.924620][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.933118][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.941254][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.949154][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.957288][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.965713][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.973853][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.981919][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.990167][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  604.998390][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  605.006446][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  605.014700][ T5112] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  605.299880][ T8844] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  605.355314][ T8844] EXT4-fs (loop2): Remounting filesystem read-only
[  605.375011][ T5112] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  605.457505][ T5112] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  605.577475][ T5112] usb 1-1: USB disconnect, device number 8
[  606.048866][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.075358][ T8853] loop1: detected capacity change from 0 to 128
[  606.147463][ T8853] VFS: could not find a valid V7 on loop1.
[  611.771331][    T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  612.033468][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.045003][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.046256][ T8879] loop2: detected capacity change from 0 to 512
[  612.055125][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  612.055355][    T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  612.084387][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.162239][    T8] usb 2-1: config 0 descriptor??
[  612.263091][ T8879] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  612.286364][ T8879] EXT4-fs (loop2): 1 truncate cleaned up
[  612.296951][ T8879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.667754][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.675670][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.683535][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.691301][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.698879][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.709480][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.717801][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.727306][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.735343][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.743127][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.750856][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.758802][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.766597][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.771728][ T8881] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, 
[  612.774249][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.774435][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.782851][ T8881] block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  612.790196][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.817298][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.825169][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.832945][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.840649][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.848430][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.856071][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.863718][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.871411][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.878977][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.886688][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.894310][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.901954][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.912376][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.919949][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.928055][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.937362][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.945103][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.952735][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.960304][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.967946][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.975594][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  612.983339][    T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  613.131794][ T8881] EXT4-fs (loop2): Remounting filesystem read-only
[  613.307437][    T8] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  613.417391][    T8] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  613.538296][ T8886] loop4: detected capacity change from 0 to 128
[  613.551419][    T8] usb 2-1: USB disconnect, device number 11
[  613.669145][ T8886] VFS: could not find a valid V7 on loop4.
[  614.421588][ T8891] loop3: detected capacity change from 0 to 512
[  614.446527][ T8891] EXT4-fs: Ignoring removed mblk_io_submit option
[  614.453818][ T8891] EXT4-fs: Ignoring removed bh option
[  614.527529][ T8891] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  614.673771][ T8891] EXT4-fs (loop3): 1 truncate cleaned up
[  614.681450][ T8891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  614.846230][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.977304][ T8891] loop3: detected capacity change from 512 to 0
[  614.992396][ T8905] syz.3.1182: attempt to access beyond end of device
[  614.992396][ T8905] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0
[  615.006501][ T8905] syz.3.1182: attempt to access beyond end of device
[  615.006501][ T8905] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0
[  615.020468][ T8905] syz.3.1182: attempt to access beyond end of device
[  615.020468][ T8905] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0
[  615.034252][ T8905] syz.3.1182: attempt to access beyond end of device
[  615.034252][ T8905] loop3: rw=12288, sector=14, nr_sectors = 2 limit=0
[  615.048009][ T8905] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #12: block 7: comm syz.3.1182: unable to read itable block
[  615.049943][    C1] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  615.063474][ T8905] syz.3.1182: attempt to access beyond end of device
[  615.063474][ T8905] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0
[  615.084958][ T8905] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[  615.093646][ T8905] EXT4-fs (loop3): I/O error while writing superblock
[  615.480428][ T7364] syz-executor: attempt to access beyond end of device
[  615.480428][ T7364] loop3: rw=12288, sector=26, nr_sectors = 2 limit=0
[  615.803471][ T7364] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.846607][ T8914] loop4: detected capacity change from 0 to 64
[  615.918870][ T7364] syz-executor: attempt to access beyond end of device
[  615.918870][ T7364] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0
[  615.932993][ T7364] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[  615.941769][ T7364] EXT4-fs (loop3): I/O error while writing superblock
[  616.341631][   T29] audit: type=1326 audit(1721848400.759:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.1.1193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d1b75f19 code=0x0
[  616.410044][   T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  616.420955][   T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.574599][   T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  616.586413][   T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.779257][   T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  616.791410][   T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.989716][   T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  617.000648][   T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.326261][   T60] bridge_slave_1: left allmulticast mode
[  617.332425][   T60] bridge_slave_1: left promiscuous mode
[  617.339036][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.416448][   T60] bridge_slave_0: left allmulticast mode
[  617.423267][   T60] bridge_slave_0: left promiscuous mode
[  617.429817][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.003777][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  618.114885][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  618.170384][   T60] bond0 (unregistering): Released all slaves
[  618.313680][ T8937] loop1: detected capacity change from 0 to 1024
[  618.743443][ T5067] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  618.755437][ T5067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  618.766241][ T5067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  618.779256][ T5067] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  618.817068][ T5067] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  618.830438][ T5067] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  618.930860][   T60] hsr_slave_0: left promiscuous mode
[  618.948534][   T60] hsr_slave_1: left promiscuous mode
[  618.961771][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.969513][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  619.007140][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  619.015480][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  619.046185][ T8949] loop1: detected capacity change from 0 to 16
[  619.138114][   T60] veth1_macvtap: left promiscuous mode
[  619.139123][ T8949] cramfs: empty filesystem
[  619.143932][   T60] veth0_macvtap: left promiscuous mode
[  619.144223][   T60] veth1_vlan: left promiscuous mode
[  619.144432][   T60] veth0_vlan: left promiscuous mode
[  619.484859][ T8952] loop4: detected capacity change from 0 to 64
[  620.072673][ T8955] loop2: detected capacity change from 0 to 1764
[  620.104811][ T8955] iso9660: Unknown parameter '18446744073709551615'
[  620.458259][   T60] team0 (unregistering): Port device team_slave_1 removed
[  620.543450][   T60] team0 (unregistering): Port device team_slave_0 removed
[  620.989394][ T5065] Bluetooth: hci3: command tx timeout
[  621.858360][   T29] audit: type=1326 audit(1721848406.309:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.1211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d1b75f19 code=0x0
[  622.320955][ T8989] netlink: 'syz.2.1215': attribute type 3 has an invalid length.
[  622.445386][ T8987] loop4: detected capacity change from 0 to 1024
[  622.621839][ T8944] chnl_net:caif_netlink_parms(): no params data found
[  622.980055][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'.
[  622.989495][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'.
[  623.005821][ T8998] loop1: detected capacity change from 0 to 64
[  623.044449][ T5065] Bluetooth: hci3: command tx timeout
[  623.070841][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  623.876751][ T9006] loop2: detected capacity change from 0 to 1764
[  623.933489][ T9006] iso9660: Unknown parameter '18446744073709551615'
[  624.489172][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.498309][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.506405][ T8944] bridge_slave_0: entered allmulticast mode
[  624.515975][ T8944] bridge_slave_0: entered promiscuous mode
[  624.671193][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.693879][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.701916][ T8944] bridge_slave_1: entered allmulticast mode
[  624.711015][ T8944] bridge_slave_1: entered promiscuous mode
[  625.100522][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  625.132727][ T9010] loop4: detected capacity change from 0 to 4096
[  625.143282][ T5065] Bluetooth: hci3: command tx timeout
[  625.154071][   T29] audit: type=1326 audit(1721848409.609:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.1.1227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d1b75f19 code=0x0
[  625.250474][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  625.400149][ T8944] team0: Port device team_slave_0 added
[  625.473058][ T8944] team0: Port device team_slave_1 added
[  625.814264][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  625.821586][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  625.847972][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  625.918850][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  625.927041][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  625.953499][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  626.396748][ T9041] loop2: detected capacity change from 0 to 64
[  626.759746][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'.
[  626.871833][ T8944] hsr_slave_0: entered promiscuous mode
[  626.924994][ T8944] hsr_slave_1: entered promiscuous mode
[  626.980131][ T8944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  626.988113][ T8944] Cannot create hsr debugfs directory
[  627.203118][ T5065] Bluetooth: hci3: command tx timeout
[  627.544777][ T9053] loop1: detected capacity change from 0 to 1024
[  628.049084][ T4401] hfsplus: b-tree write err: -5, ino 4
[  628.344777][   T29] audit: type=1326 audit(1721848412.769:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.4.1240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7105175f19 code=0x0
[  628.658756][ T1044] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  629.012291][ T1044] usb 3-1: Using ep0 maxpacket: 16
[  629.148843][ T1044] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  629.158465][ T1044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.167180][ T1044] usb 3-1: Product: syz
[  629.171673][ T1044] usb 3-1: Manufacturer: syz
[  629.176495][ T1044] usb 3-1: SerialNumber: syz
[  629.314658][ T1044] usb 3-1: config 0 descriptor??
[  629.490550][ T1044] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  629.713575][ T1044] usb 3-1: USB disconnect, device number 10
[  630.305151][ T8944] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  630.538603][ T8944] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  630.618338][ T9072] loop1: detected capacity change from 0 to 40427
[  630.633359][ T9072] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  630.641533][ T9072] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  630.732913][ T8944] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  630.748766][ T9072] F2FS-fs (loop1): Found nat_bits in checkpoint
[  630.974203][ T8944] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  631.048279][ T9072] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  631.055829][ T9072] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  631.547628][   T29] audit: type=1804 audit(1721848416.039:19): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1241" name="/newroot/114/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  631.734871][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'.
[  631.847799][ T9090] syz.1.1241: attempt to access beyond end of device
[  631.847799][ T9090] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  632.033659][ T9093] syz.1.1241: attempt to access beyond end of device
[  632.033659][ T9093] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  632.178066][ T9080] loop4: detected capacity change from 0 to 4096
[  632.306356][ T9080] ntfs3: loop4: Failed to load $Volume (-22).
[  632.539795][ T9090] syz.1.1241: attempt to access beyond end of device
[  632.539795][ T9090] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  632.554447][ T9090] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  632.562469][ T9090] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  632.570345][ T9090] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  632.769538][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.119605][ T8944] 8021q: adding VLAN 0 to HW filter on device team0
[  633.220301][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.228084][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.287539][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.295376][ T5110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  633.608052][ T9103] loop4: detected capacity change from 0 to 1024
[  634.505416][ T4401] hfsplus: b-tree write err: -5, ino 4
[  634.647148][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'.
[  636.418330][ T9108] loop2: detected capacity change from 0 to 40427
[  636.458858][ T9108] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  636.469110][ T9108] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  636.494630][ T9108] F2FS-fs (loop2): invalid crc value
[  636.508209][ T9108] F2FS-fs (loop2): Found nat_bits in checkpoint
[  636.671822][    T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  636.852233][ T9108] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  636.859558][ T9108] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  637.004270][    T8] usb 1-1: Using ep0 maxpacket: 16
[  637.097336][    T8] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  637.106917][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.115327][    T8] usb 1-1: Product: syz
[  637.119718][    T8] usb 1-1: Manufacturer: syz
[  637.124760][    T8] usb 1-1: SerialNumber: syz
[  637.127267][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  637.258477][    T8] usb 1-1: config 0 descriptor??
[  637.330878][    T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  637.556894][    T8] usb 1-1: USB disconnect, device number 9
[  637.835513][ T8944] veth0_vlan: entered promiscuous mode
[  637.931964][ T8944] veth1_vlan: entered promiscuous mode
[  638.237317][ T8944] veth0_macvtap: entered promiscuous mode
[  638.314625][ T8944] veth1_macvtap: entered promiscuous mode
[  638.544820][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.556123][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.566610][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.577382][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.587557][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.598328][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.608522][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.619991][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.630554][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.641341][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.656580][ T9134] loop1: detected capacity change from 0 to 2048
[  638.656659][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.070282][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.081352][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.091615][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.102352][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.112425][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.125751][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.136466][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.147209][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.157283][ T8944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.168026][ T8944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.183303][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.425826][ T8944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.435210][ T8944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.444441][ T8944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.456401][ T8944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.064401][ T9141] loop4: detected capacity change from 0 to 40427
[  641.176467][ T9141] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  641.184813][ T9141] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  641.251777][ T9141] F2FS-fs (loop4): Found nat_bits in checkpoint
[  642.867133][ T9154] loop1: detected capacity change from 0 to 32768
[  642.895031][ T9154] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1265 (9154)
[  643.723679][ T9155] loop2: detected capacity change from 0 to 40427
[  643.749180][ T9155] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  643.757408][ T9155] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  643.819583][ T9154] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  643.831595][ T9154] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  643.845719][ T9154] BTRFS info (device loop1): using free-space-tree
[  643.926224][ T9155] F2FS-fs (loop2): Found nat_bits in checkpoint
[  644.173606][ T9154] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  644.174801][ T9154] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  644.186009][ T9154] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  644.196770][ T9154] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  644.429805][ T9154] BTRFS error (device loop1): open_ctree failed
[  645.686902][ T9201] loop2: detected capacity change from 0 to 256
[  649.168784][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  649.175643][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[  649.387088][ T9223] loop1: detected capacity change from 0 to 40427
[  649.401702][ T9223] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  649.409699][ T9223] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  649.467489][ T9223] F2FS-fs (loop1): Found nat_bits in checkpoint
[  649.772455][ T9223] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  649.779777][ T9223] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  649.906307][ T9223] syz.1.1277: attempt to access beyond end of device
[  649.906307][ T9223] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  649.940545][ T9223] syz.1.1277: attempt to access beyond end of device
[  649.940545][ T9223] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  650.048237][ T7339] syz-executor: attempt to access beyond end of device
[  650.048237][ T7339] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  650.064067][ T7339] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  650.170005][ T9251] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1283'.
[  650.205341][ T9236] loop4: detected capacity change from 0 to 4096
[  650.359244][ T9253] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  650.784327][ T9257] loop2: detected capacity change from 0 to 256
[  651.860995][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  651.939915][ T9271] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  652.470880][ T5166] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  652.736649][ T5166] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  652.746830][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.823051][ T5166] usb 1-1: config 0 descriptor??
[  652.871238][    C1] hrtimer: interrupt took 271930 ns
[  653.511740][ T5166] [drm] vendor descriptor length:c3 data:2e 0f bd 00 00 00 00 00 00 00 80
[  653.520518][ T5166] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  653.542106][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.550239][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.810544][ T5166] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  653.817861][ T5166] [drm] Initialized udl on minor 2
[  653.852920][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.861547][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.930707][ T5166] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  653.940363][ T5166] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  653.954135][   T44] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  654.002029][   T44] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  654.010762][   T44] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  654.036839][ T9295] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1295'.
[  654.040200][ T5166] usb 1-1: USB disconnect, device number 10
[  654.860501][ T9305] loop2: detected capacity change from 0 to 256
[  655.801764][ T9300] loop1: detected capacity change from 0 to 4096
[  656.045844][ T9321] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  656.673157][ T9325] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1307'.
[  657.300593][ T9330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  657.472301][ T9330] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  657.533563][ T9317] loop2: detected capacity change from 0 to 32768
[  657.549435][ T9317] bcachefs (/dev/loop2): error reading default superblock: Unsupported superblock version_min 0.7: (unknown version) (min 0.9: (unknown version), max 1.9: disk_accounting_v2)
[  657.614179][ T9317] bcachefs (/dev/loop2): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 3)
[  657.628689][ T9317] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  658.232194][   T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  658.521353][ T9339] loop2: detected capacity change from 0 to 256
[  658.544512][   T44] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  658.554537][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.598295][   T44] usb 5-1: config 0 descriptor??
[  659.288185][   T44] [drm] vendor descriptor length:c3 data:2e 0f bd 00 00 00 00 00 00 00 80
[  659.300434][   T44] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  659.613755][   T44] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  659.620713][   T44] [drm] Initialized udl on minor 2
[  659.732114][ T5065] Bluetooth: hci2: unexpected event for opcode 0x2012
[  659.794679][ T9355] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1321'.
[  659.839351][   T44] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  659.848763][   T44] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  659.865293][ T5166] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  659.912147][ T5166] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  659.920661][ T5166] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  659.957255][   T44] usb 5-1: USB disconnect, device number 11
[  662.211323][ T9358] loop2: detected capacity change from 0 to 40427
[  662.239653][ T9360] loop0: detected capacity change from 0 to 32768
[  662.261640][ T9358] F2FS-fs (loop2): Unrecognized mount option "lazytime" or missing value
[  662.261778][ T9360] bcachefs (/dev/loop0): error reading default superblock: Unsupported superblock version_min 0.7: (unknown version) (min 0.9: (unknown version), max 1.9: disk_accounting_v2)
[  662.300281][ T9360] bcachefs (/dev/loop0): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 3)
[  662.317237][ T9360] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  662.409171][ T9361] loop2: detected capacity change from 0 to 1024
[  662.549305][ T9361] loop2: detected capacity change from 0 to 1024
[  663.629107][ T9371] loop1: detected capacity change from 0 to 1764
[  663.761384][ T5065] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  663.769977][ T5065] Bluetooth: hci2: Injecting HCI hardware error event
[  663.778459][ T5065] Bluetooth: hci2: hardware error 0x00
[  664.813718][ T9391] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  665.290595][ T9388] loop0: detected capacity change from 0 to 2048
[  665.514195][ T9394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  665.545362][ T9388] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  665.653008][ T9395] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode
[  665.854612][ T5065] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  666.043101][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'.
[  666.357319][ T9387] loop3: detected capacity change from 0 to 32768
[  666.388403][ T9387] bcachefs (/dev/loop3): error reading default superblock: Unsupported superblock version_min 0.7: (unknown version) (min 0.9: (unknown version), max 1.9: disk_accounting_v2)
[  666.421642][ T5112] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  666.448666][ T9387] bcachefs (/dev/loop3): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 3)
[  666.465401][ T9387] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  666.711441][ T5112] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  666.721005][ T5112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.845742][ T5112] usb 2-1: config 0 descriptor??
[  667.288756][ T9405] loop4: detected capacity change from 0 to 1764
[  668.100974][ T5112] [drm] vendor descriptor length:c3 data:2e 0f bd 00 00 00 00 00 00 00 80
[  668.113935][ T5112] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  668.358907][ T5112] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  668.365992][ T5112] [drm] Initialized udl on minor 2
[  669.292527][ T5065] Bluetooth: hci4: unexpected event for opcode 0x2012
[  669.522029][ T5112] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  669.531320][ T5112] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  669.648068][ T9427] loop0: detected capacity change from 0 to 512
[  669.694720][ T5110] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  669.738037][ T5112] usb 2-1: USB disconnect, device number 12
[  669.831873][ T5110] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  669.840389][ T5110] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  670.065583][ T9427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  670.079082][ T9427] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  670.266883][    C0] eth0: bad gso: type: 1, size: 1408
[  670.859631][ T9436] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  670.895319][ T7237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  671.002324][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'.
[  671.861569][ T9446] loop2: detected capacity change from 0 to 1764
[  672.531456][ T5112] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  673.110363][ T9444] loop0: detected capacity change from 0 to 32768
[  673.126682][ T9444] bcachefs (/dev/loop0): error reading default superblock: Unsupported superblock version_min 0.7: (unknown version) (min 0.9: (unknown version), max 1.9: disk_accounting_v2)
[  673.153597][ T9444] bcachefs (/dev/loop0): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 3)
[  673.168141][ T9444] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  673.361745][ T5065] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  673.370334][ T5065] Bluetooth: hci4: Injecting HCI hardware error event
[  673.380477][ T5065] Bluetooth: hci4: hardware error 0x00
[  673.435808][ T9458] bond0: (slave caif0): Error: Device type is different from other slaves
[  673.721350][ T5112] usb 2-1: Using ep0 maxpacket: 32
[  673.766155][ T5112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.777570][ T5112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.787810][ T5112] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  673.797333][ T5112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.876111][ T5112] usb 2-1: config 0 descriptor??
[  673.878645][ T9462] loop3: detected capacity change from 0 to 128
[  673.970230][ T9462] EXT4-fs: Ignoring removed nobh option
[  674.121781][ T5112] usb 2-1: can't set config #0, error -71
[  674.132374][ T5112] usb 2-1: USB disconnect, device number 13
[  674.134702][ T9462] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  674.217215][ T9462] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  674.298289][ T9468] loop4: detected capacity change from 0 to 512
[  674.430948][    C0] eth0: bad gso: type: 1, size: 1408
[  674.573086][ T9468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  674.586461][ T9468] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  674.750706][ T9476] input: syz0 as /devices/virtual/input/input7
[  674.834282][ T8944] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  675.074077][ T7285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  675.442111][ T5065] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  675.629325][ T9490] bond0: (slave caif0): Error: Device type is different from other slaves
[  675.774536][ T9486] loop4: detected capacity change from 0 to 1024
[  676.062167][ T9486] hfsplus: keylen 65060 too large
[  677.391969][ T9488] loop2: detected capacity change from 0 to 32768
[  677.487687][ T9488] bcachefs (/dev/loop2): error reading default superblock: Unsupported superblock version_min 0.7: (unknown version) (min 0.9: (unknown version), max 1.9: disk_accounting_v2)
[  677.508878][ T9488] bcachefs (/dev/loop2): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 3)
[  677.525958][ T9488] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  678.226178][ T9508] loop2: detected capacity change from 0 to 512
[  678.541636][ T9508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  678.557221][ T9508] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  678.576348][    C0] eth0: bad gso: type: 1, size: 1408
[  679.010098][ T9502] loop0: detected capacity change from 0 to 4096
[  679.142866][ T9502] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  679.677984][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  679.738746][ T9502] ntfs3: loop0: $Secure::$SDH is corrupted.
[  679.745278][ T9502] ntfs3: loop0: Failed to initialize $Secure (-22).
[  680.294979][ T9524] input: syz0 as /devices/virtual/input/input8
[  680.481438][ T1044] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  680.760338][ T1044] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  680.773019][ T1044] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  680.784633][ T1044] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  680.798591][ T1044] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  680.810129][ T1044] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.907915][ T1044] usb 4-1: config 0 descriptor??
[  680.915549][ T9521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  681.357820][ T9530] loop0: detected capacity change from 0 to 1024
[  681.430401][ T1044] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd
[  681.587259][ T1044] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  681.607185][ T9530] hfsplus: keylen 65060 too large
[  681.704172][ T1044] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  681.886370][    T8] usb 4-1: USB disconnect, device number 10
[  683.253015][    C0] eth0: bad gso: type: 1, size: 1408
[  688.876159][ T1044] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  689.076217][ T9586] loop3: detected capacity change from 0 to 64
[  689.228709][ T1044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  689.240478][ T1044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  689.252311][ T1044] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  689.265718][ T1044] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  689.275276][ T1044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.465155][ T1044] usb 2-1: config 0 descriptor??
[  689.473249][ T9577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  689.965106][ T1044] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd
[  690.060005][ T1044] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  690.156298][ T1044] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  690.295253][ T1044] usb 2-1: USB disconnect, device number 14
[  690.575035][ T5067] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  690.585595][ T5067] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  690.598352][ T5067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  690.618250][ T5067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  690.634596][ T5067] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  690.650211][ T5067] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  691.050026][ T9599] loop2: detected capacity change from 0 to 128
[  692.281956][ T9596] chnl_net:caif_netlink_parms(): no params data found
[  692.722048][ T5067] Bluetooth: hci5: command tx timeout
[  692.797170][ T9621] loop0: detected capacity change from 0 to 64
[  693.384101][ T9618] sctp: failed to load transform for md5: -2
[  694.269391][ T9641] loop3: detected capacity change from 0 to 256
[  694.368492][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.376339][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.385279][ T9596] bridge_slave_0: entered allmulticast mode
[  694.394598][ T9596] bridge_slave_0: entered promiscuous mode
[  694.449345][ T9637] loop2: detected capacity change from 0 to 1764
[  694.551903][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.559762][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.572502][ T9596] bridge_slave_1: entered allmulticast mode
[  694.581903][ T9596] bridge_slave_1: entered promiscuous mode
[  694.618337][ T9641] FAT-fs (loop3): Directory bread(block 64) failed
[  694.628512][ T9641] FAT-fs (loop3): Directory bread(block 65) failed
[  694.637252][ T9641] FAT-fs (loop3): Directory bread(block 66) failed
[  694.644441][ T9641] FAT-fs (loop3): Directory bread(block 67) failed
[  694.651528][ T9641] FAT-fs (loop3): Directory bread(block 68) failed
[  694.658360][ T9641] FAT-fs (loop3): Directory bread(block 69) failed
[  694.665930][ T9641] FAT-fs (loop3): Directory bread(block 70) failed
[  694.672918][ T9641] FAT-fs (loop3): Directory bread(block 71) failed
[  694.680041][ T9641] FAT-fs (loop3): Directory bread(block 72) failed
[  694.687040][ T9641] FAT-fs (loop3): Directory bread(block 73) failed
[  694.812583][ T5067] Bluetooth: hci5: command tx timeout
[  694.862361][ T9596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  695.009883][ T9596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  695.392136][ T9596] team0: Port device team_slave_0 added
[  695.439795][ T9596] team0: Port device team_slave_1 added
[  695.775872][ T9651] loop2: detected capacity change from 0 to 256
[  695.811423][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.818736][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  695.846116][ T9596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  696.275696][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  696.283003][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  696.309570][ T9596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  696.662586][ T9655] loop3: detected capacity change from 0 to 64
[  696.891328][ T5067] Bluetooth: hci5: command tx timeout
[  697.198374][ T9659] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  697.312392][ T9596] hsr_slave_0: entered promiscuous mode
[  697.394546][ T9650] loop1: detected capacity change from 0 to 32768
[  697.405243][ T9650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1434 (9650)
[  697.409132][ T9596] hsr_slave_1: entered promiscuous mode
[  697.505308][ T9650] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  697.516049][ T9650] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  697.525874][ T9650] BTRFS info (device loop1): using free-space-tree
[  697.566802][ T9596] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  697.574880][ T9596] Cannot create hsr debugfs directory
[  697.620746][ T9661] loop0: detected capacity change from 0 to 512
[  697.690741][ T9661] FAT-fs (loop0): bogus number of FAT sectors
[  697.699510][ T9661] FAT-fs (loop0): Can't find a valid FAT filesystem
[  698.111665][ T9650] BTRFS info (device loop1): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[  698.362174][ T7339] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  698.963914][ T5067] Bluetooth: hci5: command tx timeout
[  698.975770][ T9596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.110055][ T9596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.393591][ T9690] loop3: detected capacity change from 0 to 256
[  699.409675][ T9596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.633600][ T9596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.778219][ T9690] FAT-fs (loop3): Directory bread(block 64) failed
[  699.785351][ T9690] FAT-fs (loop3): Directory bread(block 65) failed
[  699.792599][ T9690] FAT-fs (loop3): Directory bread(block 66) failed
[  699.799243][ T9690] FAT-fs (loop3): Directory bread(block 67) failed
[  699.806067][ T9690] FAT-fs (loop3): Directory bread(block 68) failed
[  699.812806][ T9690] FAT-fs (loop3): Directory bread(block 69) failed
[  699.819527][ T9690] FAT-fs (loop3): Directory bread(block 70) failed
[  699.826268][ T9690] FAT-fs (loop3): Directory bread(block 71) failed
[  699.833071][ T9690] FAT-fs (loop3): Directory bread(block 72) failed
[  699.839710][ T9690] FAT-fs (loop3): Directory bread(block 73) failed
[  700.228451][ T9695] loop0: detected capacity change from 0 to 64
[  700.362957][ T9596] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  700.393849][ T9596] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  700.504584][ T9596] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  700.613322][ T9596] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  700.734625][ T9697] loop2: detected capacity change from 0 to 64
[  701.180951][ T9700] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  701.664089][ T9704] loop0: detected capacity change from 0 to 1024
[  701.877246][ T9704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  702.380090][ T9712] loop3: detected capacity change from 0 to 1024
[  702.655168][ T9712] loop3: detected capacity change from 1024 to 0
[  702.784872][ T3718] kworker/u8:22: attempt to access beyond end of device
[  702.784872][ T3718] loop3: rw=1, sector=206, nr_sectors = 8 limit=0
[  702.814400][ T9596] 8021q: adding VLAN 0 to HW filter on device bond0
[  702.949370][ T3718] kworker/u8:22: attempt to access beyond end of device
[  702.949370][ T3718] loop3: rw=2049, sector=198, nr_sectors = 16 limit=0
[  703.101021][ T9713] syz.3.1452: attempt to access beyond end of device
[  703.101021][ T9713] loop3: rw=2049, sector=2, nr_sectors = 1 limit=0
[  703.229132][ T9596] 8021q: adding VLAN 0 to HW filter on device team0
[  703.403481][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.411544][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  703.511435][ T9707] loop2: detected capacity change from 0 to 32768
[  703.527479][ T9707] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1451 (9707)
[  703.557963][ T9707] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  703.568525][ T9707] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  703.578372][ T9707] BTRFS info (device loop2): using free-space-tree
[  703.677172][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.685024][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  703.709817][ T7237] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11
[  703.795806][ T8944] syz-executor: attempt to access beyond end of device
[  703.795806][ T8944] loop3: rw=2049, sector=2, nr_sectors = 1 limit=0
[  703.815120][ T8944] syz-executor: attempt to access beyond end of device
[  703.815120][ T8944] loop3: rw=2049, sector=2, nr_sectors = 1 limit=0
[  703.868692][ T7237] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11
[  704.165935][ T9707] BTRFS info (device loop2): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[  704.509894][ T7237] syz_tun (unregistering): left allmulticast mode
[  704.542546][ T6597] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  704.645015][ T7237] team0: Port device macvlan2 removed
[  705.015955][ T7237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  705.408327][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  705.419213][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.660113][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  705.671769][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.717162][ T9746] loop3: detected capacity change from 0 to 256
[  705.890737][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  705.902010][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.092266][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  706.104614][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.246997][ T9746] FAT-fs (loop3): Directory bread(block 64) failed
[  706.254018][ T9746] FAT-fs (loop3): Directory bread(block 65) failed
[  706.260919][ T9746] FAT-fs (loop3): Directory bread(block 66) failed
[  706.268345][ T9746] FAT-fs (loop3): Directory bread(block 67) failed
[  706.275466][ T9746] FAT-fs (loop3): Directory bread(block 68) failed
[  706.282359][ T9746] FAT-fs (loop3): Directory bread(block 69) failed
[  706.289239][ T9746] FAT-fs (loop3): Directory bread(block 70) failed
[  706.296101][ T9746] FAT-fs (loop3): Directory bread(block 71) failed
[  706.306943][ T9746] FAT-fs (loop3): Directory bread(block 72) failed
[  706.313834][ T9746] FAT-fs (loop3): Directory bread(block 73) failed
[  706.583219][   T11] bridge_slave_1: left allmulticast mode
[  706.589189][   T11] bridge_slave_1: left promiscuous mode
[  706.596633][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  706.742996][   T11] bridge_slave_0: left allmulticast mode
[  706.748978][   T11] bridge_slave_0: left promiscuous mode
[  706.755805][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.532495][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  707.626187][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  707.722324][   T11] bond0 (unregistering): Released all slaves
[  707.925653][ T9596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  708.572092][ T9759] loop3: detected capacity change from 0 to 1024
[  708.670830][   T11] hsr_slave_0: left promiscuous mode
[  708.741300][   T11] hsr_slave_1: left promiscuous mode
[  708.836155][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  708.844148][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  708.925858][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.934771][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.065098][   T11] veth1_macvtap: left promiscuous mode
[  709.070858][   T11] veth0_macvtap: left promiscuous mode
[  709.077284][   T11] veth1_vlan: left promiscuous mode
[  709.082873][   T11] veth0_vlan: left promiscuous mode
[  709.362369][ T5065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  709.374299][ T5065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  709.385593][ T5065] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  709.398705][ T5065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  709.412885][ T5065] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  709.421750][ T5065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  710.274721][    C0] eth0: bad gso: type: 1, size: 1408
[  710.453709][   T11] team0 (unregistering): Port device team_slave_1 removed
[  710.599836][   T11] team0 (unregistering): Port device team_slave_0 removed
[  710.617705][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  710.624492][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[  710.917701][ T9777] loop2: detected capacity change from 0 to 512
[  711.714898][ T5067] Bluetooth: hci0: command tx timeout
[  712.365789][   T11] bridge_slave_1: left allmulticast mode
[  712.371979][   T11] bridge_slave_1: left promiscuous mode
[  712.378578][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.452807][   T11] bridge_slave_0: left allmulticast mode
[  712.458703][   T11] bridge_slave_0: left promiscuous mode
[  712.466088][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.909976][ T9798] loop2: detected capacity change from 0 to 1024
[  713.336528][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.435806][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.506623][   T11] bond0 (unregistering): Released all slaves
[  713.763655][ T5067] Bluetooth: hci0: command tx timeout
[  714.134504][ T9817] tun0: tun_chr_ioctl cmd 1074025677
[  714.140365][ T9817] tun0: linktype set to 512
[  714.320709][   T11] hsr_slave_0: left promiscuous mode
[  714.353683][   T11] hsr_slave_1: left promiscuous mode
[  714.392460][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  714.400207][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  714.484121][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  714.494859][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.562391][   T11] veth1_macvtap: left promiscuous mode
[  714.568156][   T11] veth0_macvtap: left promiscuous mode
[  714.574210][   T11] veth1_vlan: left promiscuous mode
[  714.579821][   T11] veth0_vlan: left promiscuous mode
[  714.710787][ T9822] loop3: detected capacity change from 0 to 164
[  715.607520][   T11] team0 (unregistering): Port device team_slave_1 removed
[  715.646662][   T11] team0 (unregistering): Port device team_slave_0 removed
[  715.842487][ T5067] Bluetooth: hci0: command tx timeout
[  716.339790][ T9764] chnl_net:caif_netlink_parms(): no params data found
[  716.411671][ T9596] veth0_vlan: entered promiscuous mode
[  716.706629][ T9837] loop1: detected capacity change from 0 to 1024
[  716.762756][ T9596] veth1_vlan: entered promiscuous mode
[  716.781854][ T9840] loop3: detected capacity change from 0 to 256
[  717.120289][ T9840] FAT-fs (loop3): Directory bread(block 64) failed
[  717.130794][ T9840] FAT-fs (loop3): Directory bread(block 65) failed
[  717.138635][ T9840] FAT-fs (loop3): Directory bread(block 66) failed
[  717.145587][ T9840] FAT-fs (loop3): Directory bread(block 67) failed
[  717.154573][ T9840] FAT-fs (loop3): Directory bread(block 68) failed
[  717.162127][ T9840] FAT-fs (loop3): Directory bread(block 69) failed
[  717.169059][ T9840] FAT-fs (loop3): Directory bread(block 70) failed
[  717.176031][ T9840] FAT-fs (loop3): Directory bread(block 71) failed
[  717.183195][ T9840] FAT-fs (loop3): Directory bread(block 72) failed
[  717.189961][ T9840] FAT-fs (loop3): Directory bread(block 73) failed
[  717.641412][ T9596] veth0_macvtap: entered promiscuous mode
[  717.881578][ T9596] veth1_macvtap: entered promiscuous mode
[  717.921635][ T5067] Bluetooth: hci0: command tx timeout
[  717.960185][ T9853] loop1: detected capacity change from 0 to 164
[  718.224279][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  718.235354][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.245727][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  718.256521][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.266760][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  718.280409][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.297912][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  718.308886][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.324052][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  718.460642][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  718.471975][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.485020][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  718.496394][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.506578][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  718.517294][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.527418][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  718.538122][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  718.552946][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  719.039965][ T9596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  719.049173][ T9596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  719.058286][ T9596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  719.067296][ T9596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  719.103986][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.111826][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.119427][ T9764] bridge_slave_0: entered allmulticast mode
[  719.129776][ T9764] bridge_slave_0: entered promiscuous mode
[  719.190923][ T9865] loop3: detected capacity change from 0 to 1024
[  719.341483][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.349171][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.357218][ T9764] bridge_slave_1: entered allmulticast mode
[  719.365379][ T9764] bridge_slave_1: entered promiscuous mode
[  719.519537][ T3718] hfsplus: b-tree write err: -5, ino 4
[  719.719543][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  719.808878][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  720.190442][ T9764] team0: Port device team_slave_0 added
[  720.280793][ T9764] team0: Port device team_slave_1 added
[  720.610135][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.617574][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.645998][ T9764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  720.828352][ T9877] loop3: detected capacity change from 0 to 2048
[  720.844359][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  720.854588][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.865145][ T9883] loop2: detected capacity change from 0 to 1024
[  720.881861][ T9764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  720.958057][ T9877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  721.212549][ T9764] hsr_slave_0: entered promiscuous mode
[  721.250636][ T9764] hsr_slave_1: entered promiscuous mode
[  722.181946][ T9897] loop2: detected capacity change from 0 to 164
[  723.140670][ T9908] loop2: detected capacity change from 0 to 512
[  723.241325][ T9908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  723.520474][ T9764] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  723.593069][ T9908] fs-verity: sha512 using implementation "sha512-generic"
[  723.675477][ T9908] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1503: bg 0: block 144: padding at end of block bitmap is not set
[  723.696966][ T9764] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  723.834885][ T9764] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  723.962623][ T9764] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  724.925409][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  725.644219][ T9926] loop3: detected capacity change from 0 to 2048
[  725.792289][ T9926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  725.932532][ T9920] loop1: detected capacity change from 0 to 32768
[  726.420008][ T9764] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.719918][ T9764] 8021q: adding VLAN 0 to HW filter on device team0
[  726.857374][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.865236][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.995178][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.002966][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.894232][ T9948] loop2: detected capacity change from 0 to 128
[  728.069624][ T9948] syz.2.1511: attempt to access beyond end of device
[  728.069624][ T9948] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128
[  728.161826][ T9953] loop3: detected capacity change from 0 to 256
[  728.234078][ T9950] syz.2.1511: attempt to access beyond end of device
[  728.234078][ T9950] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128
[  728.248629][ T9950] syz.2.1511: attempt to access beyond end of device
[  728.248629][ T9950] loop2: rw=34817, sector=145, nr_sectors = 88 limit=128
[  728.291300][ T9953] FAT-fs (loop3): Directory bread(block 1285) failed
[  728.545344][   T29] audit: type=1326 audit(1721848512.979:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.3.1513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63ab375f19 code=0x0
[  729.053049][ T3309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.061326][ T3309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.373025][ T3718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.381300][ T3718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.711377][ T9971] loop3: detected capacity change from 0 to 512
[  729.727769][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  729.918348][ T9971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  730.191854][ T9971] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1516: bg 0: block 144: padding at end of block bitmap is not set
[  730.344431][ T9973] loop2: detected capacity change from 0 to 2048
[  730.456954][ T9973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  730.573747][ T9764] veth0_vlan: entered promiscuous mode
[  730.704735][ T9764] veth1_vlan: entered promiscuous mode
[  731.109688][ T9764] veth0_macvtap: entered promiscuous mode
[  731.155782][ T8944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.194820][ T9764] veth1_macvtap: entered promiscuous mode
[  731.468557][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  731.480522][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.494688][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  731.506678][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.516906][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  731.527725][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.537970][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  731.548868][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.559050][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  731.569922][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.585540][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  731.727560][ T9994] loop2: detected capacity change from 0 to 128
[  731.885741][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.900551][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.912108][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.923129][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.933323][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.944139][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.954348][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.955567][ T9991] syz.2.1523: attempt to access beyond end of device
[  731.955567][ T9991] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128
[  731.965175][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.965269][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.965359][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.970009][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  732.133110][ T9994] syz.2.1523: attempt to access beyond end of device
[  732.133110][ T9994] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128
[  732.147588][ T9994] syz.2.1523: attempt to access beyond end of device
[  732.147588][ T9994] loop2: rw=34817, sector=145, nr_sectors = 40 limit=128
[  732.231737][ T9764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  732.240983][ T9764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  732.256306][ T9764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  732.265486][ T9764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  732.990279][T10002] loop3: detected capacity change from 0 to 256
[  733.159874][T10002] FAT-fs (loop3): Directory bread(block 1285) failed
[  733.210256][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'.
[  733.463802][   T29] audit: type=1326 audit(1721848517.859:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.3.1524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63ab375f19 code=0x0
[  734.088805][T10024] loop1: detected capacity change from 0 to 256
[  734.332619][T10024] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xd8f6e64a, utbl_chksum : 0xe619d30d)
[  734.695064][   T29] audit: type=1800 audit(1721848519.079:22): pid=10024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1528" name="bus" dev="loop1" ino=1048766 res=0 errno=0
[  734.757053][T10035] loop4: detected capacity change from 0 to 512
[  734.864332][T10035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  735.146553][T10035] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1531: bg 0: block 144: padding at end of block bitmap is not set
[  735.366917][T10036] loop2: detected capacity change from 0 to 2048
[  735.589115][T10036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  736.363316][ T9596] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  736.409235][T10056] loop1: detected capacity change from 0 to 128
[  736.568663][T10056] syz.1.1535: attempt to access beyond end of device
[  736.568663][T10056] loop1: rw=2049, sector=145, nr_sectors = 88 limit=128
[  736.746669][T10059] syz.1.1535: attempt to access beyond end of device
[  736.746669][T10059] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128
[  736.761331][T10059] syz.1.1535: attempt to access beyond end of device
[  736.761331][T10059] loop1: rw=34817, sector=145, nr_sectors = 88 limit=128
[  737.858764][   T29] audit: type=1326 audit(1721848522.259:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10074 comm="syz.4.1542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df3575f19 code=0x0
[  738.923636][T10093] loop3: detected capacity change from 0 to 512
[  739.085524][T10093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  739.332019][T10102] loop4: detected capacity change from 0 to 1024
[  739.807287][T10111] loop2: detected capacity change from 0 to 128
[  739.937623][T10111] syz.2.1550: attempt to access beyond end of device
[  739.937623][T10111] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128
[  740.134293][ T8944] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 144: padding at end of block bitmap is not set
[  740.143496][T10119] syz.2.1550: attempt to access beyond end of device
[  740.143496][T10119] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128
[  740.163643][T10119] syz.2.1550: attempt to access beyond end of device
[  740.163643][T10119] loop2: rw=34817, sector=145, nr_sectors = 88 limit=128
[  740.233455][ T8944] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  740.263606][T10102] EXT4-fs: Ignoring removed orlov option
[  740.285063][T10102] EXT4-fs (loop4): Test dummy encryption mode enabled
[  740.347465][T10102] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  740.409524][ T8944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.517353][T10102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  741.229794][T10132] syzkaller0: entered promiscuous mode
[  741.236012][T10132] syzkaller0: entered allmulticast mode
[  741.270307][T10132] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  741.379432][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.388577][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.710663][ T2824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.719417][ T2824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.803614][T10102] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  742.117188][T10102] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  742.189777][T10102] overlayfs: upper fs does not support tmpfile.
[  742.283764][T10102] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  742.551714][   T29] audit: type=1326 audit(1721848526.919:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d1b75f19 code=0x0
[  743.017474][ T9596] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.023502][T10180] syzkaller0: entered promiscuous mode
[  744.029230][T10180] syzkaller0: entered allmulticast mode
[  744.273822][ T5119] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  744.587056][ T5119] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  744.599618][ T5119] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  744.611254][ T5119] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  744.620517][ T5119] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  744.717902][ T5119] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  744.728078][ T5119] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  744.736577][ T5119] usb 5-1: Product: syz
[  744.741012][ T5119] usb 5-1: Manufacturer: syz
[  744.858497][ T5119] cdc_wdm 5-1:1.0: skipping garbage
[  744.864132][ T5119] cdc_wdm 5-1:1.0: skipping garbage
[  744.923160][ T5119] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  744.929509][ T5119] cdc_wdm 5-1:1.0: Unknown control protocol
[  745.194194][ T5110] usb 5-1: USB disconnect, device number 12
[  745.820368][T10203] loop0: detected capacity change from 0 to 1024
[  745.895397][T10203] EXT4-fs: Ignoring removed orlov option
[  745.988514][T10203] EXT4-fs (loop0): Test dummy encryption mode enabled
[  746.087432][T10203] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  746.430961][T10203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  746.462349][   T29] audit: type=1326 audit(1721848530.949:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10213 comm="syz.4.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df3575f19 code=0x0
[  746.884399][T10221] syzkaller0: entered promiscuous mode
[  746.890289][T10221] syzkaller0: entered allmulticast mode
[  746.918807][T10203] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  746.980191][T10203] overlayfs: upper fs does not support tmpfile.
[  747.046399][T10203] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  747.739764][ T9764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.374276][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'.
[  748.618266][T10250] loop4: detected capacity change from 0 to 2048
[  748.826999][T10250]  loop4: p3 < > p4 < >
[  748.831733][T10250] loop4: partition table partially beyond EOD, truncated
[  748.839358][T10250] loop4: p3 start 4284289 is beyond EOD, truncated
[  749.713022][   T29] audit: type=1326 audit(1721848534.109:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4040775f19 code=0x7ffc0000
[  749.739538][   T29] audit: type=1326 audit(1721848534.109:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4040775f19 code=0x7ffc0000
[  749.763402][   T29] audit: type=1326 audit(1721848534.159:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4040775f19 code=0x7ffc0000
[  749.786206][   T29] audit: type=1326 audit(1721848534.159:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4040775f19 code=0x7ffc0000
[  749.808978][   T29] audit: type=1326 audit(1721848534.179:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f4040775f19 code=0x7ffc0000
[  749.835312][   T29] audit: type=1326 audit(1721848534.179:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4040775f19 code=0x7ffc0000
[  749.859096][   T29] audit: type=1326 audit(1721848534.179:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4040775f19 code=0x7ffc0000
[  749.881852][   T29] audit: type=1326 audit(1721848534.179:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d1b75f19 code=0x0
[  750.137571][T10270] loop2: detected capacity change from 0 to 1024
[  750.196925][T10270] EXT4-fs: Ignoring removed orlov option
[  750.276486][T10270] EXT4-fs (loop2): Test dummy encryption mode enabled
[  750.322347][T10270] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  750.479370][T10270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  750.700359][T10278] syzkaller0: entered promiscuous mode
[  750.706318][T10278] syzkaller0: entered allmulticast mode
[  750.956888][T10257] loop3: detected capacity change from 0 to 40427
[  751.002242][T10257] F2FS-fs (loop3): Unrecognized mount option "lazytime" or missing value
[  751.163279][T10270] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  751.285366][T10270] overlayfs: upper fs does not support tmpfile.
[  751.342280][T10288] bridge0: port 3(bond0) entered blocking state
[  751.349193][T10288] bridge0: port 3(bond0) entered disabled state
[  751.361728][T10288] bond0: entered allmulticast mode
[  751.367109][T10288] bond_slave_0: entered allmulticast mode
[  751.373220][T10288] bond_slave_1: entered allmulticast mode
[  751.384564][T10288] bond0: entered promiscuous mode
[  751.389849][T10288] bond_slave_0: entered promiscuous mode
[  751.396796][T10288] bond_slave_1: entered promiscuous mode
[  751.406016][T10288] bridge0: port 3(bond0) entered blocking state
[  751.413042][T10288] bridge0: port 3(bond0) entered forwarding state
[  751.444017][T10270] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  751.532716][T10288] bond0: left allmulticast mode
[  751.537847][T10288] bond_slave_0: left allmulticast mode
[  751.543729][T10288] bond_slave_1: left allmulticast mode
[  751.549449][T10288] bond0: left promiscuous mode
[  751.554561][T10288] bond_slave_0: left promiscuous mode
[  751.567351][T10288] bond_slave_1: left promiscuous mode
[  751.575454][T10288] bridge0: port 3(bond0) entered disabled state
[  751.996759][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.453558][    C0] eth0: bad gso: type: 1, size: 1408
[  755.007262][T10323] loop3: detected capacity change from 0 to 32768
[  755.017678][ T5065] Bluetooth: hci3: command 0x0406 tx timeout
[  755.162464][T10323] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1606 (10323)
[  755.276071][T10318] loop2: detected capacity change from 0 to 40427
[  755.295302][T10318] F2FS-fs (loop2): Unrecognized mount option "lazytime" or missing value
[  755.709048][T10328] loop0: detected capacity change from 0 to 1024
[  755.739018][T10328] EXT4-fs: Ignoring removed orlov option
[  755.776201][T10328] EXT4-fs (loop0): Test dummy encryption mode enabled
[  755.807191][T10328] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  755.831950][T10323] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  755.842606][T10323] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  755.853771][T10323] BTRFS info (device loop3): using free-space-tree
[  755.966417][T10328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  756.130896][T10323] BTRFS error (device loop3): open_ctree failed
[  756.217327][T10345] overlayfs: failed to resolve './file1': -2
[  756.553002][ T9764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  757.592502][T10365] loop3: detected capacity change from 0 to 256
[  757.763080][T10365] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  757.822947][T10365] syz.3.1611: attempt to access beyond end of device
[  757.822947][T10365] loop3: rw=0, sector=295096, nr_sectors = 1 limit=256
[  757.968214][T10370] loop1: detected capacity change from 0 to 512
[  757.995996][    C0] eth0: bad gso: type: 1, size: 1408
[  758.072748][T10373] Bluetooth: MGMT ver 1.23
[  758.209894][T10370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  758.227321][T10370] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  758.284946][T10379] af_packet: tpacket_rcv: packet too big, clamped from 65340 to 3952. macoff=96
[  758.380978][T10370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1618: bg 0: block 18: invalid block bitmap
[  758.394326][ T5112] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  758.426798][T10370] Quota error (device loop1): write_blk: dquota write failed
[  758.434982][T10370] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  758.445485][T10370] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1618: Failed to acquire dquot type 1
[  758.627196][ T5112] usb 3-1: Using ep0 maxpacket: 32
[  758.701634][ T5112] usb 3-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71
[  758.711010][ T5112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.719716][ T5112] usb 3-1: Product: syz
[  758.724199][ T5112] usb 3-1: Manufacturer: syz
[  758.732703][ T5112] usb 3-1: SerialNumber: syz
[  758.789386][ T5112] usb 3-1: config 0 descriptor??
[  758.825660][ T5112] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  758.839116][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  758.847191][T10370] syz.1.1618 (10370) used greatest stack depth: 3832 bytes left
[  758.856603][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  758.866249][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  758.874528][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  758.882724][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  758.890845][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  758.899124][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  758.947403][ T5112] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  758.957999][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  758.966316][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  758.974877][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  758.983125][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  758.991443][ T5112] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  759.034532][ T7339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.043236][ T5112] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  759.089741][ T5112] usb 3-1: USB disconnect, device number 11
[  759.148806][ T5112] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  759.183636][ T5112] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  759.196645][ T5112] keyspan 3-1:0.0: device disconnected
[  759.323488][T10394] loop1: detected capacity change from 0 to 128
[  759.363958][T10394] EXT4-fs (loop1): Test dummy encryption mode enabled
[  759.409338][T10394] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  759.433851][T10394] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  759.633306][T10398] loop3: detected capacity change from 0 to 256
[  759.683168][ T5067] Bluetooth: hci5: command tx timeout
[  759.768399][T10401] loop4: detected capacity change from 0 to 256
[  760.213143][T10401] exfat: Deprecated parameter 'utf8'
[  760.218747][T10401] exfat: Bad value for 'dmask'
[  760.515083][T10398] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  760.711218][T10398] syz.3.1631: attempt to access beyond end of device
[  760.711218][T10398] loop3: rw=0, sector=295096, nr_sectors = 1 limit=256
[  760.840238][T10394] overlayfs: failed to resolve './file0': -2
[  761.833220][ T5067] Bluetooth: hci5: command 0x0406 tx timeout
[  761.862795][T10413] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[  761.954878][T10399] Invalid ELF header magic: != ELF
[  762.386927][T10416] loop2: detected capacity change from 0 to 512
[  762.580529][T10416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  762.594323][T10416] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  762.656535][T10416] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1636: bg 0: block 18: invalid block bitmap
[  762.671767][T10416] Quota error (device loop2): write_blk: dquota write failed
[  762.679989][T10416] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  762.690508][T10416] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1636: Failed to acquire dquot type 1
[  762.735251][ T7339] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  762.887286][T10422] loop0: detected capacity change from 0 to 2048
[  762.949618][ T6597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.973834][T10429] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  763.073466][   T29] audit: type=1800 audit(1721848547.499:34): pid=10422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1639" name="bus" dev="loop0" ino=18 res=0 errno=0
[  763.293886][T10429] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  763.305276][T10429] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  763.367384][T10429] Remounting filesystem read-only
[  763.391866][  T949] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  763.399088][  T949] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  763.406867][  T949] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.416261][  T949] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.426340][  T949] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.536562][  T949] NILFS (loop0): discard dirty page: offset=0, ino=2
[  763.547976][  T949] NILFS (loop0): discard dirty block: blocknr=18, size=1024
[  763.556757][  T949] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.566062][  T949] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.575288][  T949] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.611265][T10442] Bluetooth: hci3: too big key_count value 28672
[  763.662447][ T9764] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  763.683621][ T9764] NILFS (loop0): discard dirty page: offset=0, ino=6
[  763.690580][ T9764] NILFS (loop0): discard dirty block: blocknr=35, size=1024
[  763.698609][ T9764] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[  763.706257][ T9764] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[  763.713989][ T9764] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[  763.778807][ T9764] NILFS (loop0): discard dirty page: offset=0, ino=5
[  763.786233][ T9764] NILFS (loop0): discard dirty block: blocknr=41, size=1024
[  763.791453][ T5118] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  763.793766][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.810722][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.819916][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.896161][ T9764] NILFS (loop0): discard dirty page: offset=0, ino=4
[  763.903936][ T9764] NILFS (loop0): discard dirty block: blocknr=40, size=1024
[  763.911606][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.920714][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.930060][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  763.954045][T10428] loop3: detected capacity change from 0 to 4096
[  763.959438][ T9764] NILFS (loop0): discard dirty page: offset=0, ino=3
[  763.967889][ T9764] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  763.975697][ T9764] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  763.983469][ T9764] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  763.991000][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  764.000275][ T9764] NILFS (loop0): discard dirty page: offset=196608, ino=3
[  764.007897][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  764.011580][T10428] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  764.016997][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  764.035209][ T9764] NILFS (loop0): discard dirty block: blocknr=49, size=1024
[  764.042975][ T9764] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  764.082564][ T5118] usb 3-1: Using ep0 maxpacket: 32
[  764.115093][ T5118] usb 3-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71
[  764.124890][ T5118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.133458][ T5118] usb 3-1: Product: syz
[  764.137878][ T5118] usb 3-1: Manufacturer: syz
[  764.142842][ T5118] usb 3-1: SerialNumber: syz
[  764.189190][ T5118] usb 3-1: config 0 descriptor??
[  764.222959][ T5118] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  764.230940][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  764.239752][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  764.249615][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  764.263289][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  764.272923][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  764.280993][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  764.284187][T10428] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  764.289226][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  764.377781][ T5118] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  764.388350][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  764.399046][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  764.407262][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  764.415566][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  764.423846][ T5118] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  764.443045][ T5118] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  764.463242][   T29] audit: type=1800 audit(1721848548.869:35): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1640" name="bus" dev="loop3" ino=33 res=0 errno=0
[  764.484588][   T29] audit: type=1800 audit(1721848548.899:36): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1640" name="bus" dev="loop3" ino=33 res=0 errno=0
[  764.605551][ T5118] usb 3-1: USB disconnect, device number 12
[  764.635081][ T5118] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  764.707269][ T5118] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  764.718617][ T5118] keyspan 3-1:0.0: device disconnected
[  765.095155][T10458] loop3: detected capacity change from 0 to 128
[  765.127087][T10458] EXT4-fs (loop3): Test dummy encryption mode enabled
[  765.162053][T10458] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  765.315331][T10458] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  765.662317][T10466] loop1: detected capacity change from 0 to 2048
[  766.433915][T10466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  767.014047][ T7339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.040210][T10462] loop0: detected capacity change from 0 to 32768
[  767.058838][T10462] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1653 (10462)
[  767.112173][T10475] Bluetooth: hci3: too big key_count value 28672
[  767.142368][T10462] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  767.153188][T10462] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  767.172600][T10462] BTRFS info (device loop0): using free-space-tree
[  767.179177][T10471] overlayfs: failed to resolve './file0': -2
[  767.453096][T10462] BTRFS info (device loop0): rebuilding free space tree
[  767.614821][   T29] audit: type=1800 audit(1721848552.069:37): pid=10462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1653" name="bus" dev="loop0" ino=263 res=0 errno=0
[  767.829376][ T9764] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  769.038236][T10510] loop1: detected capacity change from 0 to 2048
[  769.184532][T10510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  769.330593][T10518] Bluetooth: hci3: too big key_count value 28672
[  769.584495][ T5118] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  769.643942][ T7339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.782091][ T5118] usb 1-1: Using ep0 maxpacket: 32
[  769.825303][ T5118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  769.835435][ T5118] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  769.847426][ T5118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  769.858750][ T5118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  769.952375][ T5118] usb 1-1: New USB device found, idVendor=1fb9, idProduct=0404, bcdDevice=17.93
[  769.961840][ T5118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.970086][ T5118] usb 1-1: Product: syz
[  769.974630][ T5118] usb 1-1: Manufacturer: syz
[  769.979462][ T5118] usb 1-1: SerialNumber: syz
[  770.053322][ T5118] usb 1-1: config 0 descriptor??
[  770.081425][ T5118] cp210x 1-1:0.0: cp210x converter detected
[  772.021614][ T1222] ieee802154 phy0 wpan0: encryption failed: -22
[  772.028761][ T1222] ieee802154 phy1 wpan1: encryption failed: -22
[  772.109659][T10527] loop1: detected capacity change from 0 to 32768
[  772.124360][T10527] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1672 (10527)
[  772.154336][ T5118] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71
[  772.162748][ T5118] cp210x 1-1:0.0: querying part number failed
[  772.199879][ T5118] usb 1-1: cp210x converter now attached to ttyUSB0
[  772.212775][ T5118] usb 1-1: USB disconnect, device number 11
[  772.231559][T10527] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  772.246997][T10527] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  772.263572][T10527] BTRFS info (device loop1): using free-space-tree
[  772.286395][ T5118] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  772.296893][ T5118] cp210x 1-1:0.0: device disconnected
[  772.571537][T10527] BTRFS info (device loop1): rebuilding free space tree
[  772.798155][   T29] audit: type=1800 audit(1721848557.239:38): pid=10527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1672" name="bus" dev="loop1" ino=263 res=0 errno=0
[  773.014539][ T7339] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  773.189965][T10574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1688'.
[  773.199499][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1688'.
[  774.632109][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1697'.
[  774.717964][ T8944] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  776.079114][T10629] loop1: detected capacity change from 0 to 128
[  776.140162][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'.
[  776.192030][T10629] EXT4-fs (loop1): Test dummy encryption mode enabled
[  776.265705][T10629] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  776.323084][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1712'.
[  776.333767][T10629] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  776.626568][T10639] loop2: detected capacity change from 0 to 128
[  778.012307][   T29] audit: type=1326 audit(1721848562.029:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.035162][   T29] audit: type=1326 audit(1721848562.029:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.057965][   T29] audit: type=1326 audit(1721848562.039:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.084111][   T29] audit: type=1326 audit(1721848562.039:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.107977][   T29] audit: type=1326 audit(1721848562.039:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.130690][   T29] audit: type=1326 audit(1721848562.039:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.153561][   T29] audit: type=1326 audit(1721848562.039:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.176248][   T29] audit: type=1326 audit(1721848562.039:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.202387][   T29] audit: type=1326 audit(1721848562.039:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6170375f19 code=0x7ffc0000
[  778.786894][T10657] overlayfs: failed to resolve './file0': -2
[  780.031425][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  780.078488][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1726'.
[  780.282960][   T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  780.293424][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.337466][   T10] usb 1-1: config 0 descriptor??
[  780.361286][   T10] cp210x 1-1:0.0: cp210x converter detected
[  780.377843][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'.
[  780.652321][   T10] usb 1-1: cp210x converter now attached to ttyUSB0
[  780.892165][   T10] usb 1-1: USB disconnect, device number 12
[  780.922608][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  780.932873][   T10] cp210x 1-1:0.0: device disconnected
[  781.181812][    C0] =====================================================
[  781.189141][    C0] BUG: KMSAN: uninit-value in xdp_do_check_flushed+0x41a/0x560
[  781.196995][    C0]  xdp_do_check_flushed+0x41a/0x560
[  781.202480][    C0]  __napi_poll+0x10d/0x980
[  781.207099][    C0]  net_rx_action+0xa5a/0x19b0
[  781.212073][    C0]  handle_softirqs+0x1ce/0x800
[  781.217028][    C0]  __do_softirq+0x14/0x1a
[  781.221608][    C0]  do_softirq+0x9a/0x100
[  781.226027][    C0]  __local_bh_enable_ip+0x9f/0xb0
[  781.231343][    C0]  tun_get_user+0x4d7a/0x6b50
[  781.236242][    C0]  tun_chr_write_iter+0x3af/0x5d0
[  781.241556][    C0]  vfs_write+0xb2f/0x1550
[  781.246085][    C0]  ksys_write+0x20f/0x4c0
[  781.250581][    C0]  __x64_sys_write+0x93/0xe0
[  781.255422][    C0]  x64_sys_call+0x3490/0x3c10
[  781.260288][    C0]  do_syscall_64+0xcd/0x1e0
[  781.265046][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.271293][    C0] 
[  781.273718][    C0] Local variable __bpf_net_ctx created at:
[  781.279656][    C0]  do_xdp_generic+0x47/0x1560
[  781.284615][    C0]  tun_get_user+0x4cd1/0x6b50
[  781.289498][    C0] 
[  781.292002][    C0] CPU: 0 UID: 0 PID: 10691 Comm: syz.4.1733 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0
[  781.302694][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  781.312969][    C0] =====================================================
[  781.320005][    C0] Disabling lock debugging due to kernel taint
[  781.326367][    C0] Kernel panic - not syncing: kmsan.panic set ...
[  781.332907][    C0] CPU: 0 UID: 0 PID: 10691 Comm: syz.4.1733 Tainted: G    B              6.10.0-syzkaller-12246-g786c8248dbd3 #0
[  781.345008][    C0] Tainted: [B]=BAD_PAGE
[  781.349261][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  781.359454][    C0] Call Trace:
[  781.362843][    C0]  <IRQ>
[  781.365793][    C0]  dump_stack_lvl+0x216/0x2d0
[  781.370651][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  781.376686][    C0]  dump_stack+0x1e/0x30
[  781.381020][    C0]  panic+0x4e2/0xcd0
[  781.385096][    C0]  ? kmsan_get_metadata+0xf1/0x1c0
[  781.390439][    C0]  kmsan_report+0x2c7/0x2d0
[  781.395165][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  781.401179][    C0]  ? __msan_warning+0x95/0x120
[  781.406127][    C0]  ? xdp_do_check_flushed+0x41a/0x560
[  781.411697][    C0]  ? __napi_poll+0x10d/0x980
[  781.416461][    C0]  ? net_rx_action+0xa5a/0x19b0
[  781.421491][    C0]  ? handle_softirqs+0x1ce/0x800
[  781.426609][    C0]  ? __do_softirq+0x14/0x1a
[  781.431254][    C0]  ? do_softirq+0x9a/0x100
[  781.435837][    C0]  ? __local_bh_enable_ip+0x9f/0xb0
[  781.441211][    C0]  ? tun_get_user+0x4d7a/0x6b50
[  781.446245][    C0]  ? tun_chr_write_iter+0x3af/0x5d0
[  781.451628][    C0]  ? vfs_write+0xb2f/0x1550
[  781.456277][    C0]  ? ksys_write+0x20f/0x4c0
[  781.460931][    C0]  ? __x64_sys_write+0x93/0xe0
[  781.465857][    C0]  ? x64_sys_call+0x3490/0x3c10
[  781.470881][    C0]  ? do_syscall_64+0xcd/0x1e0
[  781.475723][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.481995][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[  781.487398][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  781.493405][    C0]  ? sched_core_idle_cpu+0xad/0x2d0
[  781.498804][    C0]  ? __irq_exit_rcu+0x7f/0x120
[  781.503744][    C0]  ? irq_exit_rcu+0x12/0x20
[  781.508415][    C0]  ? common_interrupt+0x5b/0xa0
[  781.513450][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[  781.518862][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  781.524896][    C0]  ? kmsan_get_metadata+0xf0/0x1c0
[  781.530210][    C0]  __msan_warning+0x95/0x120
[  781.534986][    C0]  xdp_do_check_flushed+0x41a/0x560
[  781.540391][    C0]  __napi_poll+0x10d/0x980
[  781.544987][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[  781.550390][    C0]  net_rx_action+0xa5a/0x19b0
[  781.555252][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[  781.560641][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  781.566683][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  781.571994][    C0]  handle_softirqs+0x1ce/0x800
[  781.576970][    C0]  __do_softirq+0x14/0x1a
[  781.581468][    C0]  do_softirq+0x9a/0x100
[  781.585900][    C0]  </IRQ>
[  781.588922][    C0]  <TASK>
[  781.591953][    C0]  __local_bh_enable_ip+0x9f/0xb0
[  781.597172][    C0]  ? tun_get_user+0x4c51/0x6b50
[  781.602214][    C0]  tun_get_user+0x4d7a/0x6b50
[  781.607085][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[  781.612469][    C0]  ? kmsan_get_metadata+0x13e/0x1c0
[  781.617851][    C0]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  781.624410][    C0]  tun_chr_write_iter+0x3af/0x5d0
[  781.629638][    C0]  vfs_write+0xb2f/0x1550
[  781.634145][    C0]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  781.639901][    C0]  ksys_write+0x20f/0x4c0
[  781.644402][    C0]  __x64_sys_write+0x93/0xe0
[  781.649160][    C0]  x64_sys_call+0x3490/0x3c10
[  781.654020][    C0]  do_syscall_64+0xcd/0x1e0
[  781.658691][    C0]  ? clear_bhb_loop+0x25/0x80
[  781.663513][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.669612][    C0] RIP: 0033:0x7f0df3574a9f
[  781.674160][    C0] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48
[  781.693944][    C0] RSP: 002b:00007f0df43a6010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  781.702523][    C0] RAX: ffffffffffffffda RBX: 00007f0df3705f60 RCX: 00007f0df3574a9f
[  781.710631][    C0] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 00000000000000c8
[  781.718728][    C0] RBP: 00007f0df35e4e68 R08: 0000000000000000 R09: 0000000000000000
[  781.726822][    C0] R10: 0000000000040000 R11: 0000000000000293 R12: 0000000000000000
[  781.734916][    C0] R13: 000000000000000b R14: 00007f0df3705f60 R15: 00007ffc3b0da8f8
[  781.743038][    C0]  </TASK>
[  781.746376][    C0] Kernel Offset: disabled
[  781.750750][    C0] Rebooting in 86400 seconds..