last executing test programs:

20.199534514s ago: executing program 1 (id=1673):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=0x2e3, 0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)}])
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x9f, "a691c371031da4e2c8026105985f1298416fdfee9f7351f7f09bd217dd6431f642521191c8cd20ffb174abd88d6bb30c411659ea155e542f40677eb49c97a50553a26a58cda8ba06f74977b17c5f2745ca0b2e78e2417051ff2439774f37285009c86340e20de6838d5a1acbfdc5d81d16f8ee43763532822b08c80537c5f914de074318dad47b082cc9386df8ebc2cdf9c627399acf664ad2fd527d92ce24"}, &(0x7f0000000300)=0xa7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl730\x00', [0x6a, 0x2165, 0x4, 0x100000, 0x88d7, 0x8f, 0x1, 0x3, 0x1002, 0xffffffff, 0x408, 0xfffffff7, 0x340, 0x1, 0x7, 0x2, 0x8, 0x3, 0xa, 0x1, 0x100, 0xffffffff, 0x7, 0xe, 0x4, 0x1, 0xb0c4, 0x7df, 0x7, 0x77, 0x8]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000099388bba8f91676e13ce9054350d10e819f38042e6cfd3818b0fde8cc8027c075909bbf573015890f8a933352d8cfc3636b991bc0187b3e3080064170f7f5b772ba3204c01e45ed8cc", @ANYRES16=r6, @ANYBLOB="0100000000000000000010000000300001801400030000000000000000000000ffffe0000001060002001600000006000100020000000600040000000000"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff)

17.634449865s ago: executing program 3 (id=1678):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_procfs(0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
capget(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000002100))
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_emit_ethernet(0x86, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socket(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000000000000072", 0x38}], 0x1)
socket$unix(0x1, 0x2, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)

16.876482316s ago: executing program 1 (id=1681):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0xc0844123, 0xffffffffffffffff)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={0x0, 0x5}, 0x8)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xc0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[<r8=>0x0], 0x40000000000000c8})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000300)=[r8], &(0x7f0000000340), 0xfffffffffffffffe, 0x0})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000040)=0x652381635c526e4e, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x10)
socket$nl_route(0x10, 0x3, 0x0)

15.3308823s ago: executing program 3 (id=1683):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpeername(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r6, 0x8979)
fdatasync(r6)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0, 0x9e81}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, 0x0, 0x29, 0x14, @void}, 0x10)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

15.056344135s ago: executing program 1 (id=1684):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
eventfd2(0xb0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})

13.323079132s ago: executing program 4 (id=1687):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
pipe(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000030c0)=""/4110, 0x100e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)

12.84593239s ago: executing program 4 (id=1688):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
eventfd2(0xb0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')

11.865771385s ago: executing program 3 (id=1691):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=0x2e3, 0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)}])
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x9f, "a691c371031da4e2c8026105985f1298416fdfee9f7351f7f09bd217dd6431f642521191c8cd20ffb174abd88d6bb30c411659ea155e542f40677eb49c97a50553a26a58cda8ba06f74977b17c5f2745ca0b2e78e2417051ff2439774f37285009c86340e20de6838d5a1acbfdc5d81d16f8ee43763532822b08c80537c5f914de074318dad47b082cc9386df8ebc2cdf9c627399acf664ad2fd527d92ce24"}, &(0x7f0000000300)=0xa7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl730\x00', [0x6a, 0x2165, 0x4, 0x100000, 0x88d7, 0x8f, 0x1, 0x3, 0x1002, 0xffffffff, 0x408, 0xfffffff7, 0x340, 0x1, 0x7, 0x2, 0x8, 0x3, 0xa, 0x1, 0x100, 0xffffffff, 0x7, 0xe, 0x4, 0x1, 0xb0c4, 0x7df, 0x7, 0x77, 0x8]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000099388bba8f91676e13ce9054350d10e819f38042e6cfd3818b0fde8cc8027c075909bbf573015890f8a933352d8cfc3636b991bc0187b3e3080064170f7f5b772ba3204c01e45ed8cc", @ANYRES16=r6, @ANYBLOB="0100000000000000000010000000300001801400030000000000000000000000ffffe0000001060002001600000006000100020000000600040000000000"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff)

11.798286986s ago: executing program 1 (id=1692):
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000000)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xfffffffffffffcc4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='cubic\x00', 0x6)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x20000045, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @local, 0xc}, 0x1c)
setgroups(0xefff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100feffffff00000000090000000c0003800800010000000000"], 0x20}}, 0x0)
r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000b0000000a00000009"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x8002, r6}, 0x38)
write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

9.443649542s ago: executing program 4 (id=1697):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0)

9.235100666s ago: executing program 1 (id=1698):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_procfs(0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
capget(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000002100))
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_emit_ethernet(0x86, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
socket(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000000000000072", 0x38}], 0x1)
socket$unix(0x1, 0x2, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)

8.590537486s ago: executing program 0 (id=1699):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5453, 0x0)
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563203a007e142d901405008f51686a1b04e58da1c2aa2dc7674423031ceeaadd809e2f197b5315feba4faea17a2cde2d8f4b4e86679be4feae2f90d85e4f868184ab71eb8b3b46e9eec8d1b4510514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa2838864c0e5cf4614347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf53ed800c8974eddb7c10bdbef19499e13f10dac7ed5b"], 0xb0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)

8.365498839s ago: executing program 4 (id=1700):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x1, 0x5541, &(0x7f000000b580)="$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")
socket$inet6(0xa, 0x3, 0xff)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000440))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

7.649564861s ago: executing program 0 (id=1701):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpeername(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r6, 0x8979)
fdatasync(r6)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0, 0x9e81}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, 0x0, 0x29, 0x14, @void}, 0x10)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

7.374071685s ago: executing program 3 (id=1702):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
eventfd2(0xb0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})

5.500656144s ago: executing program 0 (id=1705):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_procfs(0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
capget(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000002100))
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_emit_ethernet(0x86, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socket(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000000000000072", 0x38}], 0x1)
socket$unix(0x1, 0x2, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)

5.264671078s ago: executing program 0 (id=1706):
socket$igmp(0x2, 0x3, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
geteuid()
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r5, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r7, r6, 0x0, 0x6)
read$watch_queue(r7, &(0x7f0000000540)=""/4096, 0x1000)
fchown(r4, 0x0, 0x0)

5.087147771s ago: executing program 2 (id=1707):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0xc0844123, 0xffffffffffffffff)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={0x0, 0x5}, 0x8)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xc0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x40000000000000c8})
syz_mount_image$minix(&(0x7f0000000440), &(0x7f0000000280)='./control\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x5, 0x1d3, &(0x7f0000000d80)="$eJzs291u0mAcx/FfW2i3+f524pGJB3oiVUaiO3MX4A14tmx1WezUOE9GTJQT78PL8Mw78QYg0SuoaSmBAi2lDS2M7yfZ+vCkvz4PhH952oAAbK3b0X9DhppRKwiCb48kvX0jqZEZtSuZIICVCYxh0aex53fvZKcAbAbr7/x+J7XAf40aJmcBYJMNDq1oHfDbkP78+3rcj/+aOdcPg0NTsuIHE3lb2smV7xnR9mFD6k/kHSUPYHxPWb/8HOafKJnfzTv/ePy9qfzeomB4yRTqmdHm6eNk/pqk65JuSLop6VZ8rXVH0t05459Mjf8g5/yBMsJ3XyvRk6tsk/lWxg5Odj6snndnvvd8qVHHmnH+RcG8HefbJfP7BfNOnG8df/RPUvd6XfDoQDZzpv6Xs7D+U41vH87Wf/5bi42S9Q9ss4vL7vsj3/c+L98wC6VobEtjtJAMe8LT9OLUjyomZq3H67O7HtNIb9R8YgKwcu6X80/uxWX32dn50al36n1odw5edfbbnZcHbrQud8tcnQNYZ+MP/Xz7Z38lCAAAAAAAAAAAAAAA1OGepPt1TwIAAABAJar4OVHdzxEAAAAAAAAAAAAAAAAAAAC4Kv4HAAD///noO60=")
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x652381635c526e4e, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x10)
socket$nl_route(0x10, 0x3, 0x0)

5.045849611s ago: executing program 4 (id=1708):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
eventfd2(0xb0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')

4.123621856s ago: executing program 3 (id=1709):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802110000010802110000"], 0x36)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}, {0x0, 0x5}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x5}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in=@remote, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2b}, 0x0, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x1bc}}, 0x4894)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))

3.85926591s ago: executing program 2 (id=1710):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0)

2.898681125s ago: executing program 2 (id=1711):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5453, 0x0)
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563203a007e142d901405008f51686a1b04e58da1c2aa2dc7674423031ceeaadd809e2f197b5315feba4faea17a2cde2d8f4b4e86679be4feae2f90d85e4f868184ab71eb8b3b46e9eec8d1b4510514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa2838864c0e5cf4614347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf53ed800c8974eddb7c10bdbef19499e13f10dac7ed5b"], 0xb0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)

2.852279585s ago: executing program 3 (id=1712):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=0x2e3, 0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)}])
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xba, "a691c371031da4e2c8026105985f1298416fdfee9f7351f7f09bd217dd6431f642521191c8cd20ffb174abd88d6bb30c411659ea155e542f40677eb49c97a50553a26a58cda8ba06f74977b17c5f2745ca0b2e78e2417051ff2439774f37285009c86340e20de6838d5a1acbfdc5d81d16f8ee43763532822b08c80537c5f914de074318dad47b082cc9386df8ebc2cdf9c627399acf664ad2fd527d92ce24a62475172f0cedb81cadb043dc836ea56d2d60239aba4e1b5fc693"}, &(0x7f0000000300)=0xc2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl730\x00', [0x6a, 0x2165, 0x4, 0x100000, 0x88d7, 0x8f, 0x1, 0x3, 0x1002, 0xffffffff, 0x408, 0xfffffff7, 0x340, 0x1, 0x7, 0x2, 0x8, 0x3, 0xa, 0x1, 0x100, 0xffffffff, 0x7, 0xe, 0x4, 0x1, 0xb0c4, 0x7df, 0x7, 0x77, 0x8]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000099388bba8f91676e13ce9054350d10e819f38042e6cfd3818b0fde8cc8027c075909bbf573015890f8a933352d8cfc3636b991bc0187b3e3080064170f7f5b772ba3204c01e45ed8cc", @ANYRES16=r6, @ANYBLOB="0100000000000000000010000000300001801400030000000000000000000000ffffe0000001060002001600000006000100020000000600040000000000"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff)

1.791081832s ago: executing program 2 (id=1713):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pipe(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000030c0)=""/4110, 0x100e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)

1.508967187s ago: executing program 2 (id=1714):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802110000010802110000"], 0x36)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}, {0x0, 0x5}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x5}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2b}, 0x0, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x1bc}}, 0x4894)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))

1.159291392s ago: executing program 1 (id=1715):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpeername(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r5, 0x8979)
fdatasync(r5)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0, 0x9e81}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, 0x0, 0x29, 0x14, @void}, 0x10)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

738.542198ms ago: executing program 2 (id=1716):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), 0x4)
syz_open_dev$radio(0x0, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x1de, 0x6)
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0)

298.389706ms ago: executing program 0 (id=1717):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_procfs(0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
capget(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000002100))
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_emit_ethernet(0x86, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socket(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000000000000072", 0x38}], 0x1)
socket$unix(0x1, 0x2, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)

79.945669ms ago: executing program 0 (id=1718):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x1, 0x5541, &(0x7f000000b580)="$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")
socket$inet6(0xa, 0x3, 0xff)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000440))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

0s ago: executing program 4 (id=1719):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3}}, 0x1e)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$eJzs3U9vHGcdB/Df/vHacds0qlAVIg5uyp+W0vxPoPxryoEDHEBCPZPIdauUFFASEK0i4soHxAV4CXDphUPfAi+grwHxAoiU9NQDZdDYz+OMN+usTeKZXT+fj7SZ+c2z430m3x3PrGdmJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+NEPf3a2FxFXfpsmHIt4OgYR/Ygjdb0S9cjl/PxhRByPzeZ4PiIGixH1/Jv/PBtxISI+ORpx7/7t1XryuT324+KZWzc+//EP/vmHP28cf/etn3803v7TL5z/+I93Io795LWPP7/zZJYdAAAASlFVVdVLH/NPpM/3/a47BQC0Im//qyRPV6vVavUTrf/U38/zn36q6/6qD2ndVE12p1lExHpznnqfweF4AJgz6/FZ112gQ/Iv2jAinuq6E8BM63XdAQ7Evfu3V3sp315ze7Cy1Z7/Trkj//Xe9vUduw2nGT/HpK3310YM4rld+nOkpT7Mkpx/fzz/K1vto/S8g86/LbvlP9q69Kk4Of/BeP5jduT/l4iY2/z7E/MvVc5/uJ/81wdzvP7LHwAAAACAwy///f9Yx8d/Fx9/UfbkUcd/V1rqAwAAAAAAAAA8aY97/79t7v8HAAAAM6v+rF7769EH03b7LrZ6+pu9iGfGng8UZqXx5YAAAAAAAAAAAAAAQDuGEcvpvP6FiHhmebmqqvrRNF7v1+POP+9KX34oWde/5AEAYMsnR8eu5e9FLEXEm+m7/haWl5eraiEilqsji3l/drS4VB1pfK7Nw3ra4mgPO8TDUVX/sKXGfE3TPi9Pax//efVrjarBHjrWjg4DB4CI2Noa3bNFOmSq6tnoei+H+WD9P3ys/+xF1+9TAAAA4OBVVVX10td5n0jH/PtddwoAaEXe/o8fF1Cr1epi6k+3Js5Mf9TqA6ybqsnuNIuIWG/OU+8zuB0/AMyZ9fis6y7QIfkXbRgRx7vuBDDTel13gANx7/7t1V7Kt9fcHqxstedzQXbkv97bnC/PP2k4zfg5Jm29vzZiEM/t0p/nW+rDLMn598fzv7LVnm/xv53P0sHk35bd8q+X81gH/elazn8wnv+Yg17/27IR/Yn5lyrnP9xX/gP5AwAAAADADMt//z/m+G9eZAAAAAAAAACYO/fu317N173m4/9fmvC8XnPM9Z+HRs6/t+f8Xf97mOT8++P5j52QM2iM333jQf6f3r+9+tGtf38xD2c+/4XBqH7thV5/MEzn/FQLb8e1uB5rceah5w93tJ99qH1hR/u5Ke3nH2of1e1HcvupWI1fxfV4a7t9ccqJUUtT2qsp7Tn/gfW/SDn/YeNR57+c2ntjw9rdD/sPrffN4aTXufz3/3z14bWrDcMd1UYMtpet4Wj9z8nW+vTA5v/JU6P4zc21G6d+d/XWrRtnIw12TD0XafCE5fwX0iPn/9KLW+35935zfb374Wjf+c+KjRhOyn/z/f1iY7xe3pdb7lsXcv6j9Mj55y3Q5PV/nvOfuP5vLt8rHfQHAAAAAAAAAAAAAAAAHqWqqs1LRC9HxKV0/U9X12YCAO3K2/8qydPVarVarVYfvrqpmuz1ZhER/2jOU+8z/H7SDwMAZtl/I+JfXXeCzsi/YPn7/urhl7vuDNCqm+9/8Iur16+v3bjZdU8AAAAAAAAAgP9Xvv/nSuP+z5vnAY3dN3rH/V/fiJW5vf9nfzTYvNd5WqAX4tH3/z4Zj77/93DK6y1MaR9NaV+c0r40pX3ihR4NOf8XUsY5/xNpwUq6/+tLHfSnazn/k+lezzn/r409r5l/9bd5zr+/I//Tt9779emb73/w6rX3rr6z9s7aL8+euXTh/MUL5y9ePP32tetrZ7b+7bDHByvnn+997TzQsuT8c+byL0vO/yupln9ZUv7bu6HyL0te//P+nvzLkvPPn33kX5ac/8upln9Zcv5fT7X8y5LzfyXV8i9Lzv8bqZZ/WXL+r6Za/mXJ+Z9KtfzLkvM/nWr5lyXnn49wyb8sOf98ZoP8y5LzP5dq+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf9LqZZ/WXL+30y1/MuS8/9WquVflpz/a6mWf1ly/t9OtfzLkvP/TqrlX5ac/3dT/aj8322xX7Qj5/+9VFv/y5Lz/36q5V+WnP/rqZZ/WR58/7+RfY8sz0Y3jBh58iNd/2YCAAAAAAAAAAAAAMa1cTpx18sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17jZGrvO8HfvZmrw0B/8OdOGCbm4GF3fUNHGIwScifkl4oCWnTkhrHXhsnvtW7TgChsim0JQpSkdoX9EXTJEqiSG0FqiI1lWiE1Ejtm6p51QhVilopUl0JKgcllVIFtjpznufZmdnZmbW9a5855/OJ8M/eOWfmmTNnZve70XcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2cYPT/3RQJZl+X+NP9Zl2cX539dku/N/zu640CsEAAAAztU7jT//6tL0hd1L2Klpm3+87l++Mzc3N5d95u1T7/7J3Fy6YEOWDa3OssZl0T/9/GdzzdsEz2WjA4NN/x7scfNDPS4f7nH5SI/LV/W4fHWPy0d7XL7gACywpvh9TOPKbmz8dV1xSLPLs5HGZTd22Ou5gdWDg/F3OQ0DjX3mRg5kh7LD2VQ2sWCfgcb/suy1jfltPZjF2xpsuq31WZad/skz++IaBsIxvjFrubGG5sfurfuzDW//5Jl935p585pOs+dhWLDSLNu8KV/n81k2/+uqbCBbnY5JXOdg0zrXd1jnUMs6Bxr75X9vX+fpJa4z3u/RsM4fdFnn+vC1J2/Ismw2W3Sbds9lg9natltNx3u0OCPy68gfyvdmw2d0nmxcwnmS7/PjG1rPk/ZzMh7/jeGYDC+yhuaH460vrlpw3M/2PMnvdRnO1fy6H85vdHS0+VerLedqvs0zNy1+DnR87DqcA+lcbjoHNvU6BwZXDTXOgcH5NW9qOQcmF+wzmA00buvUTd3PgfGZI8fHp596+o5DR/YenDo4dXRyYse2rdu3bd2+ffzAocNTE8WfZ3ZI+8jabDCdg5vCa008B29p27b5lJz72vI9D0ZL8jzI7/snbs4XdPFgtsg5nm/z/OZzfx6k7/tNz4PhpudBx9fUDs+D4SU8D/JtTm9e2vfM4ab/Oq1hpV4L1zWdAxfy+2F+m4/duvhr4fqwrhduO9Pvh0MLzoF4twbCcy//Svp5b/TucFwWnhfX5hdctCo7OT114s4n987MnJjMwjgvLmt6rNrPl7VN9ylbcL4MnvH5svsvf3HztR2+vi4cq9Hb5x+rVR0eh3ybbWPdH6vGq3vn49ny1S1ZGMvsfB/PTt/N8uOZskSXcz/f5vk7zv1nwZRLml7/Rnq9/g2NDBevf0PpaIy0vP4tfGiGGivLstN3LO31byT8d75f/y4vyetffqweu7P7OZBv88L4mZ4Dw11f/24IcyCs59aQGEabcv+7jctni9O06bHsed4MD4+E82Y43mLrebN1wT75teW3vXni7M6bzTe0PlYtP7dU8LzJj9WfTnQ/b/JtXp8899eONfGvTa8dq3qdAyNDq/L1jqSToHi9m1sTz4E7s33Zsexwtj/tkz/K+W2NbVnaObAq/He+XzuuLsk5kB+rl7d0Pwfybb6/dXl/dtocvpK2afrZqf33C4tl/muH56+v/bAtd+bP1/mRbd1/N5Rv8+a2M80Z3Y/T7eErF3U4Tu3Pn8XO6f3Z+TlOV4d1Ht7e/XdT+TaX71ji+bQ7y7I3Jt9o/L4r/H73b07+63dafu/b6XfKb0y+8dD4Iz88k/UDAHD23m38Obuq+Fmz6f+xXsr//w8AAAD0hZj7B8NM5H8AAACojJj7h8JM5H8AAACojJj7h8NMapL/n7h75yvvPJuldwOcC+Ll8TA8fG+xXex4z4Z/b5ibl3/9Q98YeeVLzy7ttgezLPvFQ+/ruP0T98Z1FY7HdX6g9esLXH39km7/8Ufnt2t+/4TTO4vrj/dnqadB7Cq/Nr6lcb0bnppszNcfyhrzkdkXniuuv/h33P7U1mL7Pw9vWrL7wEDL/pvDem4Mc0N4T5mHd88fh3zG/V5Zf90/XPbJ+duL+w1suqRxN1/+veJ643tEvXRZsX2834ut/++//O1X8u2fvKnz+p8d7Lz+U+F6fxzmz3cV2zcf8y81rf8Pwvrj7cX97vz69zqu/9Wriu1fDefFV8NsX//9f/z+dzo9XvF2dt9T7Bdvf+J/tjX2i9cXr799/aPPTrYcj/brf/3t4np2ff6nQ83bx6/H24kev6f1/B4Ij29LjzzLsm//YdZynLMPFvv9Xdv64/Udv6fz+m9vW+fxgesb+8/fn3Ut9+sr39zS8f7G9ez+63Ut9+elB8Lxe3v8+/n1nnoknI/h8v/9QXF97e9l+uoDra83cfuvriuet/H6xtvW/1Lb+mevz49d7/U/+Hax/lfvW92y/t0fDefTg8Xstf6Df3Fpy/5f+1bxeJz4wtjRY9MnD+0Pd2Zd2/N49eiatRdd/J5LLg2vpe3/3nNs5ompExsmNkxk2YY+fMvAlV7/18P872LMLv8tFH740+K8e/FjxfetW35W/Pul8PXHw+MZvz9+5c9GWs7X9sd99r5inuv6bwvrWKqrvvwf13f48n8ueM/fU59+7eTf/v6b7T8XxPtz/IrRxv17eeOVjcsGXi8ub3+96uXfr2h9Xv9oeKIxvxuO61x4Z+ZNVxa313798b1JXvx48fyNP8nF/bO29xNZN9R6P851/T8KP8d87+rW1794fnz32bZ3c16XDeRLmA2vD9lscXncKh7vF09f2fH24vvwZLPXnMkyFzX91PT44UNHTz45PjM1PTM+/dTTe44cO3l0Zk/jvUv3fLbX/vPP77WN5/f+qR3bssaz/VgxVtiFXv/xR/ftv2vi5v1TB/aePDDz6PGpEwf3TU/vm9o/ffPeAwemvtBr/0P7d01u2bn1ri1jBw/t33X3zp1bd44dOnosX0axqB52THxu7OiJPY1dpndt2zm5ffu2ibEjx/ZP7bprYmLsZK/9G9+bxvK9Pz92Yurw3plDR6bGpg89PbVrcueOHVt6vvvjkeMHpjeMnzh5dPzk9NSJ8eK+bJhpfDn/3tdrf+ph+lh4vWszEH46/9TtO9L74+a+8cVFr6rYpPXH0+yt8F5Q8ftbr3/H3D8SZlKT/A8AAAB1EHN/eOP/+QvkfwAAAKiMmPtXh5nI/wAAAFAZMfePhpnUJP/r/+v/6//r/+v/n8f+f6b/v9z0/5el/7+Q/v+S6P/r/+v/6//TXdn6/zH3r8myWuZ/AAAAqIOY+9eGmcj/AAAAUBkx918UZiL/AwAAQGXE3H9xmEk98v9I+1/1//X/9f+b+/9xW/3/TP9f//8s6f/r/3ej/6//38/rL2H/f43+P2VTtv5/zP3vCTOpR/4HAACAWoi5/5IwE/kfAAAAKiPm/kvDTOR/AAAAqIyY+9eFmdQk//v8f/1//X+f/6//r/+/kvT/9f+70f/X/+/n9Zew/+/z/ymdsvX/Y+7/f2EmNcn/AAAAUAcx9783zET+BwAAgMqIuf+yMBP5HwAAACoj5v7Lw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+K8JMapL/AQAAoA5i7r8yzET+BwAAgMqIuf+qMBP5HwAAACoj5v6rw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+a8JMapL/AQAAoA5i7r82zET+BwAAgMqIuf99YSbyPwAAAFRGzP3rw0xqkv/1//X/S9//H9T/1/8v6P/r/3eyvP3/wUUv0f8v6P+30v/X/9f/1/+nu7L1/2Puf3+YSU3yPwAAANRBzP3XhZnI/wAAAFAZMfdfH2Yi/wMAAEBlxNy/IcykJvlf/1//v/T9f5//r/8fZu36/zMD+v9L4PP/9f8z/f+zdqH78/2+fv1//X96K1v/P+b+jWEmNcn/AAAAUAcx928KM5H/AQAAoDJi7r8hzET+BwAAgMqIuf/GMJOa5H/9/7Ps/69p/af+f+f16//r/+v/+/x//X/9/270//X/+3n9+v9L6/+v6nVFVFrZ+v8x998UZlKT/A8AAAB1EHP/zWEm8j8AAABURsz9t4SZyP8AAABQGTH3bw4zqUn+1//3+f/6//r/+v/6/ytJ/3/J/f81Z7Mu/f+C/v/ZudD9+X5ffz/1/0c77O/z/zkfytb/j7n/1jCTmuR/AAAAqIOY+28LM5H/AQAAoDJi7r89zET+BwAAgMqIuX8szKQm+V//X/9f/1//X/9f/38lVbX/n15Hff6//r/+v/7/Cvf/v7nI/v3y+f/UW9n6/zH33xFmUpP8DwAAAHUQc/+dYSbyPwAAAFRGzP3jYSbyPwAAAFRGzP0TYSY1yf/6//r/+v/6//r/+v8rqar9//bP/8+yTP9f/z/R/9f/L9vn/3ei/8/5ULb+f8z9k2EmNcn/AAAAUAcx928JM5H/AQAAoDJi7t8aZiL/AwAAQGXE3L8tzKQm+V//X/9f/1//X/9f/38l1aX/7/P/i8v1/wv6//r/+v/6/3U02OFrZev/x9y/PcykJvkfAAAA6iDm/h1hJvI/AAAAVEbM/XeFmcj/AAAAUBkx998dZlKT/K//r/+v/6//X97+f+vtr1z//7/0/1eQ/r/+fzf6//r//bx+/X/9f3pb3v7/pefc/4+5f2eYSU3yPwAAANRBzP0fCDOR/wEAAKAyYu6/J8xE/gcAAIC+0ulzCKOY+z8YZlKT/K//X/X+/9xq/X/9//7t/7ceT5//r//fSXj51P9fonr1/9csuD39/1YXuj/f7+vX/9f/p7fl7f8v+PH0jPv/MffvCjOpSf4HAACAOoi5/94wE/kfAAAAKiPm/vvCTOR/AAAAqIyY+3eHmdQk/+v/V73/X77P/x/I9P/1/wv6//r/y8Hn/+v/Zz7//6ydbX8+vu+G/n95+v/5OaT/TxmVrf8fc//9YSY1yf8AAABQBzH3fyjMRP4HAACAyoi5/8NhJvI/AAAAVEbM/R8JM6lJ/tf/1//3+f/6//r/+v8rSf9f/78b/f/+7P9H+v/l6f/7/H/Kqmz9/5j7HwgzqUn+BwAAgDqIuf+jYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/wTCTmuR//X/9f/1//X/9f/3/laT/r//fjf6//n8/r1//X/+f3srW/4+5/5fCTGqS/wEAAKAOYu5/KMxE/gcAAIDKiLn/Y2Em8j8AAABURsz9vxxmUpP8r/9/fvr/g+n69f/1//X/9f/1/5dTn/b/R/X/C/r/+v/9vH79f/1/eitb/z/m/l8JM6lJ/gcAAIA6iLn/V8NM5H8AAACojJj7fy3MRP4HAACAyoi5/+Ewk5rkf/1/n/+v/6//X9r+/3Dr8dT/1//vpE/7/z7/P9D/1//v5/Xr/+v/01vZ+v8x9/96mElN8j8AAADUQcz9j4SZyP8AAABQGTH3fzzMRP4HAACAyoi5/xNhJjXJ//r/+v/6//r/pe3/tx1P/f+y9v//reul+v/6/93o/+v/9/P69f/1/+mtbP3/mPsfDTOpSf4HAACAOoi5/5NhJvI/AAAAVEbM/b8RZiL/AwAAQGXE3P+bYSb9mf8Hz3QH/X/9f/1//X/9f/3/laT/v7D/n7+GXcj+/6qlbKj/vyT6//r/+v/6/3RXtv5/zP2fCjPpz/wPAAAAdBBz/2+Fmcj/AAAAUBkx9/92mIn8DwAAAJURc/9jYSY1yf/6//r/+v/6//r/+v8rSf/f5/93o/+v/9/P69f/1/+nt7L1/2Pu/3SYSU3yPwAAANRBzP2/E2Yi/wMAAEBlxNy/J8xE/gcAAIDKiLn/8TCTmuR//X/9f/1//f/l6f/P6f/r/3ek/6//343+v/5/P69f/1//n97K1v+PuX9vmElN8j8AAADUQcz9nwkzkf8BAACgMmLu3xdmIv8DAABAZcTcvz/MpCb5X/9f/1//X//f5//r/68k/X/9/270//X/+3n9+v/6//RWtv5/zP1TYSY1yf8AAABQBzH3Hwgzkf8BAACgMmLuPxhmIv8DAABAZcTc/0SYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/n9ev/6//T2/L1///52Xp/8fcfyjMpCb5HwAAAOog5v7PhpnI/wAAAFAZMfd/LsxE/gcAAIDKiLn/cJhJTfK//r/+v/5/Bfv/w/r/mf5/aej/6/93o/+v/9/P69f/1/+nt+Xr/2fL0v+Puf9ImElN8j8AAADUQcz9R8NM5H8AAACojJj7j4WZyP8AAABQGTH3Hw8zqUn+1//X/9f/r2D/3+f/N+j/l4P+v/5/N/r/+v/9vH79f/1/eitb/z/m/t8NM6lJ/gcAAIA6iLn/RJiJ/A8AAACVEXP/dJiJ/A8AAACVEXP/TJhJTfK//r/+v/6//r/+v/7/StL/1//vRv+/f/r/Ix321//X//8/9u6jyY676uP41WPLksr1FCv2vAV27OAd+DWwYUuxIOeMAZNzzjnnaHLOOZick0FkMFSZsu45x5Y16h6N5+p2/8/ns/DxyGOpramS61dT32r9P3OW1v/n7r9v3NJk/wMAAEAHufvvF7fY/wAAADCM3P33j1vsfwAAABhG7v4HxC1N9r/+X/+v/19M/7/t/PT/+n/9/yXR/+v/N/vu/8/EB4P3/wfR/+v/9f/MWVr/n7v/gXFLk/0PAAAAHeTuf1DcYv8DAADAMHL3Pzhusf8BAABgGLn7HxK3NNn/+n/9/7j9/6m19f/e/59f1xH7/xO3/rL6/+Ol/9f/b/bd/zd5//9B9P/6f/0/c5bW/+fuf2jc0mT/AwAAQAe5+x8Wt9j/AAAAMIzc/Q+PW+x/AAAAGEbu/kfELU32v/5f/z9u/7+69//r//PrOkT/f6Z+Hu//1//r/y9O/6//X/Pz6//1/8xbWv+fu/+RcUuT/Q8AAAAd5O5/VNxi/wMAAMAwcvc/Om6x/wEAAGAYufsfE7c02f/6f/2//l//r/+/DO//1//r//X/B9L/6//X/Pz6f/0/85bW/+fuf2zc0mT/AwAAQAe5+x8Xt9j/AAAAMIzc/Y+PW+x/AAAAGEbu/ifELU32v/5f/6//1//r//X/u6T/1/9P0f/r/9f8/Pp//T/zdt7/X3PtuXvY/j93/7VxS5P9DwAAAB3k7n9i3GL/AwAAwDBy9z8pbrH/AQAAYBi5+58ctzTZ/wf0/1ds9P9N+/+bT+j/9f/L7P9vij9l9P/6/wutu/8/rf/X/5/74eX1/4f7ndD/6//1/8zZef8/0/vf/uPc/dfFLU32PwAAAHSQu/8pcYv9DwAAAMPI3f/UuMX+BwAAgGHk7n9a3NJk/3v/v/7/ON//nz+v/n9L/+/9//p//b/3/0/bYf9/r/zN1P9f3L77+bU//1T/f/dDPL/+nw6W1v/n7n963NJk/wMAAEAHufufEbfY/wAAADCM3P3PjFvsfwAAABhG7v5nxS0N9v+V+v96jqT/9/7/Q/X/Z7b/vv7//OfR/+v/D6L/1/9P8f5//f+an9/7/+f7/6vnfhKGt7T+P3f/s+OWBvsfAAAAusjd/5y4xf4HAACAYeTuf27cYv8DAADAMHL3Py9uabL/9f/6f/2/9//fof7/Cv2//n+a/l//P0X/r/9f8/Pr/73/n3lL6/9z9z8/bqnhd+UR/isBAACAJcnd/4K4pcn3/wEAAKCD3P0vjFvsfwAAABhG7v4XxS1N9r/+X/+v/9f/e/+//n+X9P/D9f8n9P+30v/r//X/+n+mLa3/z93/4rilyf4HAACADnL3vyRusf8BAABgGLn7Xxq32P8AAAAwjNz9L4tbmux//b/+X/+v/9f/6/93Sf8/XP/v/f+3of/X/+v/9f9MW1r/n7v/5XFLk/0PAAAAHeTuf0XcYv8DAADAMHL3vzJusf8BAABgGLn7XxW3NNn/+n/9v/5f/6//1//v0vL7/5OH+iz9/5b+/3y76v9PX+TX0/8v6/mPp//Pr77+nzEtoP+/x20/zt3/6rilyf4HAACADnL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/i/X/Z6/e/vOZ/j9/w/T/cfX/+v+N/r/o//X/m1X0/4ej/9/S/5/P+//1/97/r/9n2gL6//M+zt3/+rilyf4HAACADnL3vyFusf8BAABgGLn73xi32P8AAAAwjNz9b4pbmux/7//X/+v/9f/6f/3/Lun/9f9TVtT/nzroB/X/+n/9v/6faUvr/3P3vzluabL/AQAAoIPc/W+JW+x/AAAAGEbu/rfGLfY/AAAADCN3/9vilib7X/+v/997//9/+v+k/4+vq/5f/38J9P/6/433/x/Zvvv5tT+//l//z7yl9f+5+98etzTZ/wAAANBB7v53xC32PwAAAAwjd/874xb7HwAAAIaRu/9dcUuT/a//1//vvf/3/v+i/4+vq/5f/38J9P/6/43+/8j23c+v/fn1//p/5i2t/8/d/+64pcn+BwAAgA5y978nbrH/AQAAYBi5+98bt9j/AAAAMIzc/e+LW5rsf/2//l//r//X/+v/d0n/r/+fcnn7/+vO6v/Pt+9+fu3Pr//X/zNvaf1/7v73xy1N9j8AAAB0kLv/A3GL/Q8AAADDyN3/wbjF/gcAAIBh5O7/UNzSZP/r/9fe/9/zxniCpfX/+Sn6f/2//l//r//X/1/Uct//f/s/KQ6m/9f/6//1/0y7bP3/va+5z91u+ZuZ/j93/4fjlib7HwAAADrI3X993GL/AwAAwDBy938kbrH/AQAAYBi5+z8atzTZ/z36/5MXfNo4/b/3/+v/F93/5x+q+n/9v/5f/3+g5fb/h6P/1//r//X/TFva+/9z938sbmmy/wEAAKCD3P0fj1vsfwAAABhG7v5PxC32PwAAAAwjd/8n45Ym+79H/38h/f/Wsff/N99J/6//L97/r//f6P/1/zP0//r/NT//0P3/iY3+n2OxtP4/d/+n4pYm+x8AAAA6yN3/6bjF/gcAAIBh5O7/TNxi/wMAAMAwcvd/Nm646//v75EuK/2//t/7//X/+n/9/y7p/4/Q/5+48tDPpf/f0v8fzb77+bU//9D9v/f/c0yW1v/n7v9c3OL7/wAAADCM3P2fj1vsfwAAABhG7v4vxC32PwAAAAxg27vn7v9i3NJk/+v/9f/6f/2//l//v0v6f+//n6L/1/+v+fn1//p/5i2t/8/d/6W4pcn+BwAAgA5y9385brH/AQAAYBi5+78St9j/AAAAMIzc/V+NW5rsf/2//l//r//X/+v/d0n/r/+fov/X/6/5+fX/+n/mLa3/z93/tbilyf4HAACADnL3fz1usf8BAABgGLn7vxG32P8AAAAwjNz934xbmux//b/+X/+v/9f/773/P7nR/x+Z/l//v9H/H9m++/m1P7/+X//PvKX1/7n7vxW3NNn/AAAA0EHu/m/HLfY/AAAADCN3/3fiFvsfAAAAhpG7/7txS5P9P3L/P/Vp+v8t/b/+f6P/X0L/7/3/d4D+X/+/0f8f2b77+bU/v/5f/8+8pfX/ufu/F7c02f8AAADQQe7+78ct9j8AAAAMI3f/DZvN9fY/AAAAjOmGc389vflB3NJk/4/c/0/R/2/p//X/G/2//n/H9P/6/yn6f/3/mp9f/6//Z97S+v/c/T+MW5rsfwAAAOggd/+P4hb7HwAAAIaRu//HcYv9DwAAAMPI3f+TuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9P41bmux/AAAA6CB3/8/iFvsfAAAAhpG7/+dxi/0PAAAAw8jd/4u4pcn+1//r//X/+n/9v/5/l/T/+v8p+n/9/5qfX/+v/2fe0vr/3P2/jFua7H8AAADoIHf/r+IW+x8AAACGkbv/13GL/Q8AAADDyN3/m7ilyf7X/+v/9f/6f/2//n+X2vb/t/xvVf8/S/+v/1/z8+v/9f/MW1r/n7v/t3FLk/0PAAAAHeTu/13cYv8DAADAMHL3/z5usf8BAABgGLn7/xC3NNn/+n/9v/5f/7+O/v8q/b/+/0CL7f+9//9Q9P/6/zU/v/5f/8+8pfX/uftvjFua7H8AAADoIHf/H+MW+x8AAACGkbv/T3GL/Q8AAADDyN1/Nm5psv/1//r/Ifv/U/r/8fp/7/9fZf9/F/2//n+a/l//v+bn1//r/5m3tP4/d/+f45Ym+x8AAAA6yN3/l7jF/gcAAIBh5O7/a9xi/wMAAMAwcvf/LW5psv/1//r/Ift/7//X/+v/F0P/r/+fov/X/6/5+fX/+n/mLa3/z93/97ilyf4HAACADnL3/yNusf8BAABgGLn7/xm32P8AAAAwjNz9/4pbmux//b/+X/+v/9f/6/93Sf+/3v7/qo3+f47+X/+v/9f/M21p/X/u/n/HLU32PwAAAHSQu/+muOXA/X/ny/RUAAAAwHHK3f+fuMX3/wEAAGAYufv/G7c02f/6f/2//l//r//X/++S/n+9/b/3/8/T/+v/9f/6f6Ytrf/P3f+/AAAA///XHBWv")
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a006)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r4, r5, 0x0, 0x20fffe82)
unlink(&(0x7f0000000180)='./file1\x00')

kernel console output (not intermixed with test programs):

pacity change from 0 to 32768
[  359.672601][ T4431] sony 0003:054C:05C4.0006: global environment stack underflow
[  360.208617][ T4431] sony 0003:054C:05C4.0006: item 0 4 1 11 parsing failed
[  360.216630][ T4431] sony 0003:054C:05C4.0006: parse failed
[  360.223048][ T4431] sony: probe of 0003:054C:05C4.0006 failed with error -22
[  360.248119][ T4431] usb 5-1: USB disconnect, device number 10
[  362.253617][ T7392] loop4: detected capacity change from 0 to 32768
[  362.297045][ T7392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.872 (7392)
[  362.325457][ T7392] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  362.359453][ T7392] BTRFS info (device loop4): force clearing of disk cache
[  362.383863][ T7392] BTRFS info (device loop4): enabling auto defrag
[  362.401394][ T7392] BTRFS info (device loop4): max_inline at 0
[  362.415104][ T7392] BTRFS info (device loop4): enabling disk space caching
[  362.430907][ T7392] BTRFS info (device loop4): disk space caching is enabled
[  362.443136][ T7392] BTRFS info (device loop4): has skinny extents
[  363.344238][ T7392] BTRFS info (device loop4): enabling ssd optimizations
[  363.444795][ T7392] BTRFS info (device loop4): clearing free space tree
[  363.483609][ T7392] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  363.509457][ T7392] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  363.546625][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'.
[  363.616583][ T7434] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  363.625912][ T7434] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  363.634717][ T7434] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  363.643478][ T7434] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  363.755365][ T7434] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.764371][ T7434] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.773430][ T7434] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.782480][ T7434] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  364.412887][ T7434] syz.1.877 (7434) used greatest stack depth: 21152 bytes left
[  365.149732][ T7450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.426724][ T7456] loop3: detected capacity change from 0 to 2048
[  365.512197][ T7456] NILFS (loop3): unrecognized mount option "¹gdiscard"
[  366.655554][ T7464] loop0: detected capacity change from 0 to 4096
[  366.667734][ T7464] ntfs3: Unknown parameter 'windows_names'
[  366.897785][ T7468] x_tables: duplicate underflow at hook 1
[  367.684115][ T7471] netlink: 68 bytes leftover after parsing attributes in process `syz.4.887'.
[  367.990782][ T4250] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  368.270690][ T4250] usb 1-1: Using ep0 maxpacket: 8
[  368.413676][ T4250] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  368.438079][ T4250] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  368.469563][ T4250] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  368.495271][ T4250] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  368.558231][ T7482] loop1: detected capacity change from 0 to 512
[  368.564677][ T4250] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  368.595029][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.620878][ T7482] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  368.701924][ T7482] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  368.721264][ T7482] EXT4-fs (loop1): 1 truncate cleaned up
[  368.732003][ T7482] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[  368.790301][ T7483] wg1 speed is unknown, defaulting to 1000
[  368.890783][ T4250] usb 1-1: GET_CAPABILITIES returned 0
[  368.896455][ T4250] usbtmc 1-1:16.0: can't read capabilities
[  368.912886][ T7483] wg1 speed is unknown, defaulting to 1000
[  368.922215][ T7483] wg1 speed is unknown, defaulting to 1000
[  370.137230][ T7492] loop3: detected capacity change from 0 to 32768
[  371.457796][   T21] usb 1-1: USB disconnect, device number 6
[  372.147200][ T7498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  372.364793][ T4431] wg1 speed is unknown, defaulting to 1000
[  372.398253][ T7483] infiniband syz0: set active
[  372.453503][ T7483] infiniband syz0: added wg1
[  373.379302][ T7483] infiniband syz0: Couldn't open port 1
[  374.028074][ T7483] RDS/IB: syz0: added
[  374.042616][ T7512] loop0: detected capacity change from 0 to 4096
[  374.072468][ T7483] smc: adding ib device syz0 with port count 1
[  374.078871][ T7483] smc:    ib device syz0 port 1 has pnetid 
[  374.089216][ T7512] ntfs3: Unknown parameter 'windows_names'
[  374.115390][ T4184] wg1 speed is unknown, defaulting to 1000
[  374.132705][ T7483] wg1 speed is unknown, defaulting to 1000
[  374.197522][ T7515] x_tables: duplicate underflow at hook 1
[  375.983275][ T7483] wg1 speed is unknown, defaulting to 1000
[  376.053177][ T7520] loop1: detected capacity change from 0 to 1024
[  376.239962][ T7448] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  376.981757][ T7527] loop1: detected capacity change from 0 to 2048
[  377.015919][ T7483] wg1 speed is unknown, defaulting to 1000
[  377.029433][ T7527] NILFS (loop1): unrecognized mount option "¹gdiscard"
[  377.193886][ T7448] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  377.202806][ T7448] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.237152][ T7448] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  377.279601][ T7448] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.345623][ T7448] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.594502][ T7535] xt_TCPMSS: Only works on TCP SYN packets
[  377.607281][ T7535] netlink: 5 bytes leftover after parsing attributes in process `syz.3.904'.
[  378.412725][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.419034][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  379.002915][ T7448] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  379.020518][ T7448] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  379.026066][ T7483] wg1 speed is unknown, defaulting to 1000
[  379.080641][ T7448] usb 5-1: can't set config #1, error -71
[  379.098094][ T7448] usb 5-1: USB disconnect, device number 11
[  379.422764][ T7483] wg1 speed is unknown, defaulting to 1000
[  379.500659][ T7448] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  379.780504][ T7448] usb 5-1: Using ep0 maxpacket: 8
[  379.912356][ T7448] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  379.935043][ T7448] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  379.970837][ T7448] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  379.990481][ T7448] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  380.016232][ T7448] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  380.041234][ T7448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.580565][ T7448] usb 5-1: usb_control_msg returned -71
[  380.588953][ T7448] usbtmc 5-1:16.0: can't read capabilities
[  380.647699][ T7448] usb 5-1: USB disconnect, device number 12
[  380.753782][ T7548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.972020][ T7559] loop2: detected capacity change from 0 to 1024
[  382.940498][ T4228] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  383.263986][ T7570] xt_TCPMSS: Only works on TCP SYN packets
[  385.350549][ T4228] usb 2-1: device not accepting address 7, error -71
[  385.952182][ T7593] loop2: detected capacity change from 0 to 2048
[  385.987471][ T7589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.064932][ T7593] NILFS (loop2): unrecognized mount option "¹gdiscard"
[  386.265913][ T7595] loop1: detected capacity change from 0 to 1024
[  387.217923][ T7603] loop0: detected capacity change from 0 to 4096
[  387.362008][ T7603] ntfs3: Unknown parameter 'windows_names'
[  387.370911][ T7587] loop3: detected capacity change from 0 to 32768
[  388.255245][ T7616] xt_TCPMSS: Only works on TCP SYN packets
[  388.262171][ T7616] netlink: 5 bytes leftover after parsing attributes in process `syz.1.928'.
[  389.235991][ T7617] x_tables: duplicate underflow at hook 1
[  389.970505][ T4431] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  390.250661][ T4431] usb 5-1: Using ep0 maxpacket: 32
[  391.270760][ T4431] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  392.273865][ T4431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.292395][ T4431] usb 5-1: Product: syz
[  392.296590][ T4431] usb 5-1: Manufacturer: syz
[  392.311023][ T4431] usb 5-1: SerialNumber: syz
[  392.368745][ T4431] usb 5-1: config 0 descriptor??
[  392.390630][ T4431] usb 5-1: can't set config #0, error -71
[  392.401506][ T4431] usb 5-1: USB disconnect, device number 13
[  392.449097][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.473057][ T7652] loop2: detected capacity change from 0 to 1024
[  393.820893][ T7671] xt_TCPMSS: Only works on TCP SYN packets
[  393.834238][ T7671] netlink: 5 bytes leftover after parsing attributes in process `syz.2.943'.
[  396.059060][ T7675] loop2: detected capacity change from 0 to 4096
[  396.076734][ T7679] loop0: detected capacity change from 0 to 1024
[  396.151175][ T7675] ntfs3: Unknown parameter 'windows_names'
[  396.362963][ T7683] x_tables: duplicate underflow at hook 1
[  396.404457][ T7667] loop4: detected capacity change from 0 to 32768
[  396.541371][ T7679] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[  396.591057][ T7679] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.663091][ T7679] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 3: comm syz.0.946: lblock 3 mapped to illegal pblock 3 (length 13)
[  396.940038][ T7679] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  396.955515][ T7690] loop4: detected capacity change from 0 to 2048
[  396.961187][ T7679] EXT4-fs (loop0): This should not happen!! Data will be lost
[  396.961187][ T7679] 
[  397.003729][ T7688] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 3: comm syz.0.946: lblock 3 mapped to illegal pblock 3 (length 1)
[  397.104368][ T7690] NILFS (loop4): unrecognized mount option "¹gdiscard"
[  397.988819][ T7704] loop3: detected capacity change from 0 to 1024
[  398.829144][ T4436] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  399.080676][ T4436] usb 1-1: Using ep0 maxpacket: 32
[  399.800647][ T4436] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  399.810477][ T4436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.818479][ T4436] usb 1-1: Product: syz
[  399.854327][ T4436] usb 1-1: Manufacturer: syz
[  399.858954][ T4436] usb 1-1: SerialNumber: syz
[  399.908918][ T4436] usb 1-1: config 0 descriptor??
[  400.218678][ T7701] loop0: detected capacity change from 0 to 512
[  400.395505][ T7701] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1)
[  401.611464][ T7734] loop2: detected capacity change from 0 to 4096
[  401.622577][ T7729] loop4: detected capacity change from 0 to 32768
[  401.628495][ T7734] ntfs3: Unknown parameter 'windows_names'
[  401.904045][   T26] audit: type=1800 audit(1753271898.408:9): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.959" name="file1" dev="loop4" ino=4 res=0 errno=0
[  402.020892][ T4436] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  403.242072][ T7735] x_tables: duplicate underflow at hook 1
[  403.311234][ T4436] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -110
[  403.672986][ T4436] usb 1-1: USB disconnect, device number 7
[  404.175763][ T7748] xt_TCPMSS: Only works on TCP SYN packets
[  404.193616][ T7748] netlink: 5 bytes leftover after parsing attributes in process `syz.2.963'.
[  406.561331][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.095731][ T7760] loop0: detected capacity change from 0 to 32768
[  407.852877][ T7768] loop1: detected capacity change from 0 to 2048
[  407.868634][ T7769] loop4: detected capacity change from 0 to 1024
[  407.893811][ T7768] NILFS (loop1): unrecognized mount option "¹gdiscard"
[  408.087677][ T7774] ksmbd: Unknown IPC event: 6, ignore.
[  408.140618][ T4250] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  408.405277][ T4250] usb 4-1: Using ep0 maxpacket: 8
[  408.733656][ T4250] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  408.755814][ T4250] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  408.790250][ T4250] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  408.819914][ T4250] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  408.886901][ T4250] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  408.900786][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.170639][ T4250] usb 4-1: GET_CAPABILITIES returned 0
[  409.176151][ T4250] usbtmc 4-1:16.0: can't read capabilities
[  410.497671][ T7788] loop1: detected capacity change from 0 to 4096
[  410.551738][ T7788] ntfs3: Unknown parameter 'windows_names'
[  410.967532][ T7795] x_tables: duplicate underflow at hook 1
[  411.313737][ T4228] usb 4-1: USB disconnect, device number 6
[  411.620340][ T7804] xt_TCPMSS: Only works on TCP SYN packets
[  411.704295][ T7807] netlink: 5 bytes leftover after parsing attributes in process `syz.3.978'.
[  413.372805][ T7806] loop1: detected capacity change from 0 to 40427
[  413.462549][ T7806] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  413.469108][ T7806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  413.482581][ T7806] F2FS-fs (loop1): invalid crc value
[  413.843299][ T7806] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  413.873228][ T7806] F2FS-fs (loop1): Failed to read root inode
[  414.051844][ T7810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.872143][ T7822] loop1: detected capacity change from 0 to 1024
[  415.812894][ T7829] loop1: detected capacity change from 0 to 2048
[  415.862646][ T7829] NILFS (loop1): unrecognized mount option "¹gdiscard"
[  416.969502][ T7844] ksmbd: Unknown IPC event: 6, ignore.
[  417.219402][ T7846] loop2: detected capacity change from 0 to 4096
[  417.248142][ T7846] ntfs3: Unknown parameter 'windows_names'
[  417.454105][ T7847] x_tables: duplicate underflow at hook 1
[  418.467817][ T7851] loop2: detected capacity change from 0 to 32768
[  419.629160][ T7863] loop0: detected capacity change from 0 to 40427
[  419.666953][ T7866] loop1: detected capacity change from 0 to 1024
[  419.683875][ T7863] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  419.690214][ T7863] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  419.700126][ T7863] F2FS-fs (loop0): invalid crc value
[  419.754550][ T7863] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  419.783933][ T7863] F2FS-fs (loop0): Failed to read root inode
[  421.349855][ T7884] loop4: detected capacity change from 0 to 2048
[  421.377154][ T7884] NILFS (loop4): unrecognized mount option "¹gdiscard"
[  421.600502][ T4228] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  421.940860][ T4228] usb 2-1: Using ep0 maxpacket: 8
[  422.100910][ T4228] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  422.118201][ T4228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  422.140513][ T4228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  422.155751][ T4228] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  422.170607][ T4228] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  422.179855][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.217551][ T7891] loop0: detected capacity change from 0 to 4096
[  422.281608][ T7891] ntfs3: Unknown parameter 'windows_names'
[  422.440690][ T4228] usb 2-1: GET_CAPABILITIES returned 0
[  422.461855][ T4228] usbtmc 2-1:16.0: can't read capabilities
[  422.468961][ T7892] x_tables: duplicate underflow at hook 1
[  422.666129][ T7889] loop2: detected capacity change from 0 to 32768
[  423.490458][   T26] audit: type=1800 audit(1753271919.988:10): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1001" name="file1" dev="loop2" ino=4 res=0 errno=0
[  424.366261][ T7915] binder: 7911:7915 ioctl c0306201 0 returned -14
[  424.964239][ T4436] usb 2-1: USB disconnect, device number 9
[  425.079125][ T7918] loop1: detected capacity change from 0 to 1024
[  425.993678][ T7921] loop2: detected capacity change from 0 to 40427
[  426.195470][ T7921] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  426.201868][ T7921] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  426.216014][ T7921] F2FS-fs (loop2): invalid crc value
[  426.296150][ T7921] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  426.325608][ T7921] F2FS-fs (loop2): Failed to read root inode
[  427.366206][ T7941] loop1: detected capacity change from 0 to 2048
[  427.447413][ T7941] NILFS (loop1): unrecognized mount option "¹gdiscard"
[  430.814882][ T7959] loop3: detected capacity change from 0 to 32768
[  432.636496][   T26] audit: type=1800 audit(1753271929.138:11): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1019" name="file1" dev="loop3" ino=4 res=0 errno=0
[  433.441121][ T7975] loop4: detected capacity change from 0 to 32768
[  434.055697][ T7981] loop1: detected capacity change from 0 to 512
[  434.118090][ T7981] EXT4-fs (loop1): Ignoring removed bh option
[  434.186048][ T7981] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  434.260751][ T7981] EXT4-fs (loop1): 1 truncate cleaned up
[  434.290182][ T7981] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  434.771143][ T7996] xt_TCPMSS: Only works on TCP SYN packets
[  434.779292][ T7996] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1027'.
[  439.058027][ T8017] loop3: detected capacity change from 0 to 32768
[  439.522810][   T26] audit: type=1800 audit(1753271935.818:12): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1035" name="file1" dev="loop3" ino=4 res=0 errno=0
[  439.646426][ T8028] loop4: detected capacity change from 0 to 2048
[  439.700654][ T8028] NILFS (loop4): unrecognized mount option "¹gdiscard"
[  439.853248][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  439.859607][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  440.244676][ T8032] loop1: detected capacity change from 0 to 40427
[  440.379459][ T8032] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  440.385867][ T8032] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  440.395919][ T8032] F2FS-fs (loop1): invalid crc value
[  440.490920][ T8032] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  440.531783][ T8032] F2FS-fs (loop1): Failed to read root inode
[  440.751207][ T8037] loop0: detected capacity change from 0 to 32768
[  442.940582][ T4184] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  442.995632][ T8057] xt_TCPMSS: Only works on TCP SYN packets
[  443.007161][ T8057] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1041'.
[  443.240741][ T4184] usb 3-1: Using ep0 maxpacket: 8
[  443.401601][ T4184] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  444.666393][ T4184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  444.676773][ T4184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  444.687519][ T4184] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  444.849419][ T4184] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  444.859007][ T4184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.901692][ T8059] loop0: detected capacity change from 0 to 32768
[  445.210793][ T4184] usb 3-1: GET_CAPABILITIES returned 0
[  445.235695][ T4184] usbtmc 3-1:16.0: can't read capabilities
[  446.360663][   T26] audit: type=1800 audit(1753271942.858:13): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1044" name="file1" dev="loop0" ino=4 res=0 errno=0
[  447.448770][ T7448] usb 3-1: USB disconnect, device number 7
[  448.145756][ T8083] loop3: detected capacity change from 0 to 512
[  448.210659][ T8083] EXT4-fs (loop3): Ignoring removed bh option
[  448.216796][ T8083] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  448.322648][ T8083] EXT4-fs (loop3): 1 truncate cleaned up
[  448.328363][ T8083] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  448.718217][ T8081] loop0: detected capacity change from 0 to 32768
[  448.751961][ T8078] loop2: detected capacity change from 0 to 32768
[  448.947979][   T26] audit: type=1800 audit(1753271945.448:14): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1049" name="file1" dev="loop2" ino=4 res=0 errno=0
[  449.580729][ T8097] ksmbd: Unknown IPC event: 6, ignore.
[  451.178290][   T26] audit: type=1800 audit(1753271945.568:15): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1050" name="file1" dev="loop0" ino=4 res=0 errno=0
[  453.799928][ T8116] loop4: detected capacity change from 0 to 2048
[  453.879326][ T8116] NILFS (loop4): unrecognized mount option "¹gdiscard"
[  454.653219][   T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  454.910500][   T21] usb 4-1: Using ep0 maxpacket: 8
[  455.031112][   T21] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  455.119285][   T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  455.287610][   T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  455.448717][   T21] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  455.617081][   T21] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  455.640687][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.656289][ T8132] loop2: detected capacity change from 0 to 512
[  455.676880][ T8132] EXT4-fs (loop2): Ignoring removed bh option
[  455.703435][ T8132] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  455.746601][ T8132] EXT4-fs (loop2): 1 truncate cleaned up
[  455.805622][ T8132] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  455.900691][   T21] usb 4-1: GET_CAPABILITIES returned 0
[  455.906204][   T21] usbtmc 4-1:16.0: can't read capabilities
[  455.969114][ T8124] loop0: detected capacity change from 0 to 32768
[  456.111342][   T26] audit: type=1800 audit(1753271952.618:16): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1062" name="file1" dev="loop0" ino=4 res=0 errno=0
[  458.698255][ T4228] usb 4-1: USB disconnect, device number 7
[  458.893517][ T8143] loop2: detected capacity change from 0 to 32768
[  459.364024][ T8157] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1069'.
[  460.980801][ T8168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.665031][ T8177] loop4: detected capacity change from 0 to 512
[  461.789538][ T8177] EXT4-fs (loop4): Ignoring removed bh option
[  461.851220][ T8177] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  461.906283][ T8177] EXT4-fs (loop4): 1 truncate cleaned up
[  461.927229][ T8177] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  462.814764][ T8193] loop3: detected capacity change from 0 to 4096
[  462.831725][ T8186] loop0: detected capacity change from 0 to 32768
[  462.881104][ T8193] ntfs3: Unknown parameter 'windows_names'
[  462.911414][   T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  462.993284][   T26] audit: type=1800 audit(1753271959.498:17): pid=8195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1078" name="file1" dev="loop0" ino=4 res=0 errno=0
[  463.248977][ T8193] x_tables: duplicate underflow at hook 1
[  463.374167][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.529137][   T21] usb 2-1: Using ep0 maxpacket: 32
[  463.810716][   T21] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  463.840434][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.870490][   T21] usb 2-1: Product: syz
[  463.878006][   T21] usb 2-1: Manufacturer: syz
[  463.895245][   T21] usb 2-1: SerialNumber: syz
[  463.907914][   T21] usb 2-1: config 0 descriptor??
[  464.056887][ T8202] loop2: detected capacity change from 0 to 32768
[  464.180294][ T8190] loop1: detected capacity change from 0 to 512
[  464.906839][   T26] audit: type=1800 audit(1753271961.408:18): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1084" name="file1" dev="loop2" ino=4 res=0 errno=0
[  465.288209][ T8190] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1)
[  465.695895][ T8217] binder: 8212:8217 ioctl c0306201 0 returned -14
[  466.391516][   T21] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  466.400089][   T21] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -110
[  466.437288][ T8206] loop3: detected capacity change from 0 to 32768
[  466.489478][ T8222] loop4: detected capacity change from 0 to 512
[  467.041678][ T8222] EXT4-fs (loop4): Ignoring removed bh option
[  467.047909][ T8222] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  467.191340][ T8222] EXT4-fs (loop4): 1 truncate cleaned up
[  467.211400][ T8222] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  468.113864][ T4228] usb 2-1: USB disconnect, device number 10
[  468.737604][ T8247] loop2: detected capacity change from 0 to 4096
[  468.781186][ T8247] ntfs3: Unknown parameter 'windows_names'
[  468.828346][ T8247] x_tables: duplicate underflow at hook 1
[  468.876840][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  470.151581][ T8264] loop0: detected capacity change from 0 to 512
[  470.398313][ T8264] EXT4-fs (loop0): Ignoring removed bh option
[  470.528270][ T8264] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  470.675678][ T8267] loop2: detected capacity change from 0 to 2048
[  470.709560][ T8264] EXT4-fs (loop0): 1 truncate cleaned up
[  470.715716][ T8264] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  470.801782][ T8267] NILFS (loop2): unrecognized mount option "¹gdiscard"
[  471.021985][ T8274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.037620][ T8258] loop1: detected capacity change from 0 to 32768
[  471.141044][   T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  471.228537][   T26] audit: type=1800 audit(1753271967.728:19): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1098" name="file1" dev="loop1" ino=4 res=0 errno=0
[  471.390490][   T21] usb 4-1: Using ep0 maxpacket: 32
[  471.670574][   T21] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  472.200471][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.218764][   T21] usb 4-1: Product: syz
[  472.223076][   T21] usb 4-1: Manufacturer: syz
[  472.227739][   T21] usb 4-1: SerialNumber: syz
[  472.253695][   T21] usb 4-1: config 0 descriptor??
[  472.395628][ T8294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.513523][ T8273] loop3: detected capacity change from 0 to 512
[  472.569451][ T8273] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1)
[  473.025751][ T8300] loop1: detected capacity change from 0 to 4096
[  473.201140][ T8300] ntfs3: Unknown parameter 'windows_names'
[  474.271181][ T8300] x_tables: duplicate underflow at hook 1
[  474.322005][ T8315] loop0: detected capacity change from 0 to 512
[  474.342983][   T21] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate
[  474.357412][   T21] RobotFuzz Open Source InterFace, OSIF: probe of 4-1:0.0 failed with error -110
[  474.360752][ T8315] EXT4-fs (loop0): Ignoring removed bh option
[  474.397400][ T8315] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  474.438774][ T8315] EXT4-fs (loop0): 1 truncate cleaned up
[  474.460502][ T8315] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  474.869653][ T8324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.014536][   T21] usb 4-1: USB disconnect, device number 8
[  475.443666][ T8321] loop1: detected capacity change from 0 to 32768
[  475.611877][   T26] audit: type=1800 audit(1753271972.118:20): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1116" name="file1" dev="loop1" ino=4 res=0 errno=0
[  475.632145][    C1] vkms_vblank_simulate: vblank timer overrun
[  475.908437][ T8338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  476.242923][ T8343] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1123'.
[  478.996809][ T8358] loop3: detected capacity change from 0 to 4096
[  479.076540][ T8358] ntfs3: Unknown parameter 'windows_names'
[  479.182859][ T8358] x_tables: duplicate underflow at hook 1
[  479.530141][ T8349] loop2: detected capacity change from 0 to 32768
[  480.191987][ T7448] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  480.398911][ T8374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  481.200505][ T7448] usb 1-1: Using ep0 maxpacket: 32
[  482.260913][ T7448] usb 1-1: string descriptor 0 read error: -71
[  482.269803][ T7448] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  482.319070][ T7448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.375641][ T7448] usb 1-1: config 0 descriptor??
[  482.430650][ T7448] usb 1-1: can't set config #0, error -71
[  482.451968][ T7448] usb 1-1: USB disconnect, device number 8
[  483.038292][ T8393] loop0: detected capacity change from 0 to 32768
[  483.106183][   T26] audit: type=1800 audit(1753271979.608:21): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1139" name="file1" dev="loop0" ino=4 res=0 errno=0
[  483.135533][ T8388] loop2: detected capacity change from 0 to 32768
[  484.232290][   T26] audit: type=1800 audit(1753271979.778:22): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1136" name="file1" dev="loop2" ino=4 res=0 errno=0
[  485.729214][   T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  486.321014][   T23] usb 4-1: Using ep0 maxpacket: 8
[  486.441196][   T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  486.550478][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  486.560239][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  486.573776][   T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  486.588549][   T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  486.599261][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.640273][ T8413] loop0: detected capacity change from 0 to 4096
[  486.783242][ T8420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  486.785858][ T8413] ntfs3: Unknown parameter 'windows_names'
[  486.871081][   T23] usb 4-1: GET_CAPABILITIES returned 0
[  486.876626][   T23] usbtmc 4-1:16.0: can't read capabilities
[  486.935598][ T8413] x_tables: duplicate underflow at hook 1
[  487.008750][ T8419] loop2: detected capacity change from 0 to 32768
[  487.813564][ T7448] usb 4-1: USB disconnect, device number 9
[  488.345760][   T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  488.366756][ T8441] loop1: detected capacity change from 0 to 512
[  488.466969][ T8441] EXT4-fs (loop1): Ignoring removed bh option
[  488.487570][ T8441] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  488.685644][   T21] usb 1-1: Using ep0 maxpacket: 32
[  489.028950][ T8441] EXT4-fs (loop1): 1 truncate cleaned up
[  489.040570][ T8441] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  489.420944][   T21] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  489.422044][ T8437] loop4: detected capacity change from 0 to 32768
[  489.435913][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.457865][   T21] usb 1-1: Product: syz
[  489.470847][   T21] usb 1-1: Manufacturer: syz
[  489.492802][   T21] usb 1-1: SerialNumber: syz
[  489.535480][   T21] usb 1-1: config 0 descriptor??
[  489.700906][   T26] audit: type=1800 audit(1753271986.208:23): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1151" name="file1" dev="loop4" ino=4 res=0 errno=0
[  490.051484][ T8433] loop0: detected capacity change from 0 to 512
[  490.270006][ T8433] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1)
[  491.120609][   T21] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  491.139272][   T21] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71
[  491.313238][   T21] usb 1-1: USB disconnect, device number 9
[  491.480806][ T4436] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  491.800574][ T4436] usb 4-1: Using ep0 maxpacket: 8
[  492.063122][ T4436] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  492.073171][ T4436] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  492.083467][ T4436] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  492.093998][ T4436] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  492.111428][ T4436] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  492.120928][ T4436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.145601][ T8461] loop2: detected capacity change from 0 to 32768
[  492.281706][   T26] audit: type=1800 audit(1753271988.788:24): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1156" name="file1" dev="loop2" ino=4 res=0 errno=0
[  492.390936][ T4436] usb 4-1: GET_CAPABILITIES returned 0
[  492.396888][ T4436] usbtmc 4-1:16.0: can't read capabilities
[  494.993754][ T8495] loop1: detected capacity change from 0 to 32768
[  495.128551][ T8501] xt_TCPMSS: Only works on TCP SYN packets
[  495.140652][ T8501] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1167'.
[  495.161444][ T8495] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1165 (8495)
[  495.811891][ T8495] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  495.867847][ T8505] loop4: detected capacity change from 0 to 512
[  496.027870][ T8495] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  496.335698][ T8495] BTRFS info (device loop1): use lzo compression, level 0
[  496.350588][ T7448] usb 4-1: USB disconnect, device number 10
[  496.770421][ T8495] BTRFS info (device loop1): turning on async discard
[  496.777219][ T8495] BTRFS info (device loop1): using free space tree
[  496.783784][ T8495] BTRFS info (device loop1): has skinny extents
[  497.412776][ T8505] EXT4-fs (loop4): Ignoring removed bh option
[  497.421297][ T8505] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  497.445522][ T8503] loop2: detected capacity change from 0 to 32768
[  497.511491][ T8495] BTRFS info (device loop1): enabling ssd optimizations
[  497.512201][ T8512] loop3: detected capacity change from 0 to 32768
[  497.535750][ T8505] EXT4-fs (loop4): 1 truncate cleaned up
[  497.542309][ T8505] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  497.661423][ T8512] XFS: ikeep mount option is deprecated.
[  497.686479][ T8512] xfs: Unknown parameter 'context'
[  498.349809][   T26] audit: type=1800 audit(1753271994.848:25): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1168" name="file1" dev="loop2" ino=4 res=0 errno=0
[  498.801388][ T8546] loop3: detected capacity change from 0 to 256
[  498.819215][ T8546] exfat: Unknown parameter ''
[  498.891015][   T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  499.200620][   T23] usb 1-1: Using ep0 maxpacket: 32
[  499.473877][ T8553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  499.500755][   T23] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  499.525319][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.562618][   T23] usb 1-1: Product: syz
[  499.582452][   T23] usb 1-1: Manufacturer: syz
[  499.587082][   T23] usb 1-1: SerialNumber: syz
[  499.629556][   T23] usb 1-1: config 0 descriptor??
[  499.730475][ T4318] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  499.784778][ T8545] loop4: detected capacity change from 0 to 32768
[  500.000215][ T4318] usb 4-1: Using ep0 maxpacket: 8
[  500.029455][ T8541] loop0: detected capacity change from 0 to 512
[  500.813080][ T4318] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  501.003285][ T4318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  501.022773][ T8541] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1)
[  501.050530][ T4318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  501.061774][ T4318] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  501.076566][ T4318] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  501.086359][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.293739][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.301229][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  501.360612][ T4318] usb 4-1: GET_CAPABILITIES returned 0
[  501.372825][ T4318] usbtmc 4-1:16.0: can't read capabilities
[  501.710779][   T23] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  502.297611][   T23] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -110
[  502.489815][ T4318] usb 1-1: USB disconnect, device number 10
[  502.827753][ T8578] loop0: detected capacity change from 0 to 40427
[  502.873011][ T8578] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  502.879776][ T8578] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  502.891158][ T8578] F2FS-fs (loop0): invalid crc value
[  502.932691][ T8578] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  502.963119][ T8578] F2FS-fs (loop0): Failed to read root inode
[  503.379749][   T23] usb 4-1: USB disconnect, device number 11
[  503.582300][ T8587] loop1: detected capacity change from 0 to 4096
[  503.622689][ T8587] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  504.921561][   T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  504.950514][ T8593] loop3: detected capacity change from 0 to 32768
[  504.962133][ T8593] XFS: ikeep mount option is deprecated.
[  504.968456][ T8593] xfs: Unknown parameter 'context'
[  505.170453][   T23] usb 3-1: Using ep0 maxpacket: 8
[  505.591201][   T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  505.624824][   T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  505.801603][ T8614] loop4: detected capacity change from 0 to 40427
[  505.823984][   T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  505.835142][   T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  505.849651][   T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  505.859702][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.868746][ T8614] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  505.875571][ T8614] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  505.888993][ T8614] F2FS-fs (loop4): invalid crc value
[  505.931157][ T8614] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  505.965563][ T8614] F2FS-fs (loop4): Failed to read root inode
[  506.070508][   T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  506.170559][   T23] usb 3-1: GET_CAPABILITIES returned 0
[  506.176151][   T23] usbtmc 3-1:16.0: can't read capabilities
[  506.330573][   T21] usb 2-1: Using ep0 maxpacket: 32
[  506.654704][ T4431] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  506.662493][   T21] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  506.682089][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.693648][   T21] usb 2-1: Product: syz
[  506.698839][   T21] usb 2-1: Manufacturer: syz
[  506.930545][ T4431] usb 5-1: Using ep0 maxpacket: 8
[  506.979489][   T21] usb 2-1: SerialNumber: syz
[  507.054433][ T4431] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  507.584700][   T21] usb 2-1: config 0 descriptor??
[  507.590698][ T4431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  507.613341][ T4431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  507.623949][ T4431] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  507.637483][ T4431] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  507.651609][ T4431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.792877][   T23] usb 3-1: USB disconnect, device number 8
[  507.895151][ T8608] loop1: detected capacity change from 0 to 512
[  508.560609][ T4431] usb 5-1: GET_CAPABILITIES returned 0
[  508.566650][ T4431] usbtmc 5-1:16.0: can't read capabilities
[  508.567753][ T8608] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1)
[  509.700618][   T21] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  509.714585][   T21] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -110
[  509.879395][ T4318] usb 2-1: USB disconnect, device number 11
[  510.126508][   T21] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  510.250750][ T8629] loop2: detected capacity change from 0 to 32768
[  510.410532][   T21] usb 4-1: Using ep0 maxpacket: 32
[  510.507101][   T26] audit: type=1800 audit(1753272007.008:26): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1202" name="file1" dev="loop2" ino=4 res=0 errno=0
[  510.527482][    C0] vkms_vblank_simulate: vblank timer overrun
[  510.647129][ T4318] usb 5-1: USB disconnect, device number 14
[  510.910675][   T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.922298][   T21] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  510.956660][ T8648] loop0: detected capacity change from 0 to 1024
[  510.976325][ T8641] loop1: detected capacity change from 0 to 32768
[  510.988852][ T8641] XFS: ikeep mount option is deprecated.
[  510.994723][ T8641] xfs: Unknown parameter 'context'
[  511.146218][ T8648] hfsplus: unable to parse mount options
[  511.151628][   T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  512.008261][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.061163][   T21] usb 4-1: Product: syz
[  512.078811][   T21] usb 4-1: Manufacturer: syz
[  512.084419][ T8655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.099365][   T21] usb 4-1: SerialNumber: syz
[  512.361523][ T8658] loop0: detected capacity change from 0 to 40427
[  512.376060][ T8638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  512.396815][ T8658] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  512.403677][ T8658] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  512.435263][ T8658] F2FS-fs (loop0): invalid crc value
[  512.458771][ T8658] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  512.493277][ T8658] F2FS-fs (loop0): Failed to read root inode
[  512.853019][    T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  513.300968][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.400917][    T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  513.550947][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.641859][    T7] usb 3-1: config 0 descriptor??
[  513.651215][ T8638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  513.710494][ T4431] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  513.930548][   T21] cdc_ncm 4-1:1.0: failed to get mac address
[  513.950473][ T4431] usb 1-1: Using ep0 maxpacket: 8
[  513.960737][   T21] cdc_ncm 4-1:1.0: bind() failure
[  514.070873][ T4431] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  514.140639][ T8677] loop4: detected capacity change from 0 to 40427
[  514.154931][ T4431] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  514.165272][ T4431] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  514.171814][    T7] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  514.184194][   T21] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  514.192995][ T4431] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  514.193983][    T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input9
[  514.221204][   T21] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  514.228769][ T8677] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  514.236571][ T8677] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  514.253023][ T8677] F2FS-fs (loop4): invalid crc value
[  514.272081][ T8677] F2FS-fs (loop4): Found nat_bits in checkpoint
[  514.297204][   T21] usbtest: probe of 4-1:1.1 failed with error -71
[  514.312654][ T8677] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  514.319771][ T8677] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  514.363705][   T21] usb 4-1: USB disconnect, device number 12
[  514.371254][ T4431] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  514.397581][    T7] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  514.510221][ T4431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.573998][ T8682] attempt to access beyond end of device
[  514.573998][ T8682] loop4: rw=10241, want=45104, limit=40427
[  514.586720][ T8682] attempt to access beyond end of device
[  514.586720][ T8682] loop4: rw=2049, want=45104, limit=40427
[  514.604205][ T8682] syz.4.1215 (8682) used greatest stack depth: 20672 bytes left
[  514.870548][ T4431] usb 1-1: GET_CAPABILITIES returned 0
[  514.885244][ T4431] usbtmc 1-1:16.0: can't read capabilities
[  515.606434][    T7] usb 3-1: USB disconnect, device number 9
[  515.719215][ T8692] loop2: detected capacity change from 0 to 4096
[  515.741769][ T8693] ksmbd: Unknown IPC event: 6, ignore.
[  515.836000][ T8692] NILFS (loop2): invalid segment: Checksum error in segment payload
[  515.874526][ T8692] NILFS (loop2): trying rollback from an earlier position
[  516.020170][ T8692] NILFS (loop2): recovery complete
[  516.055285][ T8694] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  516.348358][ T4318] usb 1-1: USB disconnect, device number 11
[  516.496665][ T8698] can: request_module (can-proto-5) failed.
[  516.660553][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  516.965241][ T8697] loop0: detected capacity change from 0 to 32768
[  517.008391][ T8697] XFS: ikeep mount option is deprecated.
[  517.026928][ T8697] xfs: Unknown parameter 'context'
[  517.032488][    T7] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  517.054647][    T7] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  517.090523][ T4431] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  517.099403][    T7] usb 3-1: config 2 interface 0 has no altsetting 0
[  517.300646][    T7] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  517.460821][ T4431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.481539][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.489807][    T7] usb 3-1: Product: syz
[  517.494777][    T7] usb 3-1: Manufacturer: syz
[  517.499467][    T7] usb 3-1: SerialNumber: syz
[  517.504118][ T4431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.504158][ T4431] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  517.504181][ T4431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.569036][ T4431] usb 2-1: config 0 descriptor??
[  517.708791][ T8709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  517.861500][    T7] ims_pcu: probe of 3-1:2.0 failed with error -22
[  517.901499][    T7] usb 3-1: USB disconnect, device number 10
[  518.422952][ T4431] hid-generic 0003:1038:12B6.0008: unknown main item tag 0x0
[  518.441727][ T4431] hid-generic 0003:1038:12B6.0008: unknown main item tag 0x0
[  518.449780][ T4431] hid-generic 0003:1038:12B6.0008: unknown main item tag 0x0
[  518.509846][ T4431] hid-generic 0003:1038:12B6.0008: unknown main item tag 0x0
[  518.530838][ T4431] hid-generic 0003:1038:12B6.0008: unknown main item tag 0x0
[  518.539103][ T4431] hid-generic 0003:1038:12B6.0008: unknown main item tag 0x0
[  518.547799][ T8712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1224'.
[  518.557392][ T4431] hid-generic 0003:1038:12B6.0008: unknown main item tag 0x0
[  518.583232][ T4431] hid-generic 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0
[  518.583888][ T8719] loop0: detected capacity change from 0 to 1024
[  518.624577][ T8717] loop3: detected capacity change from 0 to 4096
[  518.627426][    T7] usb 2-1: USB disconnect, device number 12
[  518.671239][ T8717] ntfs3: Unknown parameter 'windows_names'
[  518.714602][ T8722] loop2: detected capacity change from 0 to 512
[  518.722220][ T8717] x_tables: duplicate underflow at hook 1
[  518.768456][ T8720] fido_id[8720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  518.885470][ T8722] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  519.008358][ T8728] netlink: 'syz.4.1228': attribute type 10 has an invalid length.
[  519.302661][ T8722] EXT4-fs (loop2): 1 truncate cleaned up
[  519.311202][ T7293] hfsplus: b-tree write err: -5, ino 4
[  519.339631][ T8722] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[  519.537509][ T8728] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  520.925378][ T8746] loop2: detected capacity change from 0 to 512
[  520.934543][ T4431] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  520.973104][ T8746] EXT4-fs (loop2): Ignoring removed bh option
[  520.989561][ T8746] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  521.036185][ T8746] EXT4-fs (loop2): 1 truncate cleaned up
[  521.049739][ T8746] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  521.088069][ T8754] ksmbd: Unknown IPC event: 6, ignore.
[  521.197273][ T4431] usb 5-1: Using ep0 maxpacket: 8
[  521.248690][ T8758] loop2: detected capacity change from 0 to 64
[  521.320847][ T4431] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  521.348025][ T4431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  521.410554][ T4431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  521.430784][ T4431] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  521.454802][ T4431] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  521.517003][ T4431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.400688][ T4431] usb 5-1: GET_CAPABILITIES returned 0
[  522.408795][ T4431] usbtmc 5-1:16.0: can't read capabilities
[  522.581190][ T8767] loop0: detected capacity change from 0 to 4096
[  522.721103][ T8767] ntfs3: Unknown parameter 'windows_names'
[  522.735848][ T8767] x_tables: duplicate underflow at hook 1
[  523.816786][ T8778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  523.830624][   T21] usb 5-1: USB disconnect, device number 15
[  523.891768][ T8783] loop3: detected capacity change from 0 to 512
[  524.045236][ T8783] EXT4-fs (loop3): Ignoring removed bh option
[  524.062038][ T8783] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  524.125494][ T8783] EXT4-fs (loop3): 1 truncate cleaned up
[  524.146918][ T8783] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  525.044483][ T8787] loop0: detected capacity change from 0 to 40427
[  525.077953][ T8787] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x1ffff
[  525.580856][ T4431] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  525.901992][ T8792] loop1: detected capacity change from 0 to 32768
[  526.000473][ T4431] usb 1-1: Using ep0 maxpacket: 8
[  526.030855][ T8792] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1249 (8792)
[  526.060768][ T8792] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  526.118104][ T8792] BTRFS info (device loop1): using free space tree
[  526.120688][ T4431] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  526.160755][ T4431] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  526.170951][ T8792] BTRFS info (device loop1): has skinny extents
[  526.194688][ T4431] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  526.236530][ T4431] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  526.306437][ T4431] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  526.390086][ T4431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.399365][ T8792] BTRFS info (device loop1): enabling ssd optimizations
[  526.421464][ T8830] ksmbd: Unknown IPC event: 6, ignore.
[  526.721601][ T8836] sp0: Synchronizing with TNC
[  527.027367][ T4431] usb 1-1: GET_CAPABILITIES returned 0
[  527.038493][ T4431] usbtmc 1-1:16.0: can't read capabilities
[  527.094788][ T8840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  527.560720][ T8843] loop3: detected capacity change from 0 to 32768
[  527.749852][ T8853] loop1: detected capacity change from 0 to 8
[  528.632766][   T26] audit: type=1800 audit(1753272025.138:27): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1258" name="file1" dev="loop1" ino=5 res=0 errno=0
[  528.744753][ T8848] usb 1-1: USB disconnect, device number 12
[  530.119314][ T8879] ceph: No mds server is up or the cluster is laggy
[  530.693059][ T8865] loop0: detected capacity change from 0 to 32768
[  530.817722][   T26] audit: type=1800 audit(1753272027.318:28): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1263" name="file1" dev="loop0" ino=4 res=0 errno=0
[  531.119767][ T8894] ksmbd: Unknown IPC event: 6, ignore.
[  531.244574][ T8883] loop4: detected capacity change from 0 to 32768
[  531.304489][ T8883] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1269 (8883)
[  531.421554][ T8883] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  531.549437][ T8883] BTRFS info (device loop4): setting nodatacow, compression disabled
[  531.631955][ T8883] BTRFS info (device loop4): unrecognized rescue option 'imetacsums'
[  531.677178][ T8883] BTRFS error (device loop4): unrecognized rescue value imetacsums
[  531.718622][ T8883] BTRFS error (device loop4): open_ctree failed: -22
[  532.165414][ T8893] loop0: detected capacity change from 0 to 32768
[  532.279938][ T8893] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1271 (8893)
[  532.326496][ T8893] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  532.337909][ T4719] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  532.359041][ T8893] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  532.444546][ T8893] BTRFS info (device loop0): use lzo compression, level 0
[  532.479139][ T8893] BTRFS info (device loop0): turning on async discard
[  532.515221][ T8893] BTRFS info (device loop0): using free space tree
[  532.550471][ T8893] BTRFS info (device loop0): has skinny extents
[  532.590456][ T4719] usb 5-1: Using ep0 maxpacket: 8
[  532.710765][ T4719] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  532.736927][ T4719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  532.777235][ T4719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  532.820755][ T4719] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  532.834465][ T4719] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  532.844040][ T4719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.914946][ T8893] BTRFS info (device loop0): enabling ssd optimizations
[  532.930773][ T8903] loop3: detected capacity change from 0 to 32768
[  533.159176][   T26] audit: type=1800 audit(1753272029.658:29): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1274" name="file1" dev="loop3" ino=4 res=0 errno=0
[  533.334859][ T4719] usb 5-1: GET_CAPABILITIES returned 0
[  533.455930][ T4719] usbtmc 5-1:16.0: can't read capabilities
[  534.380701][ T8947] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1280'.
[  535.729901][ T4304] usb 5-1: USB disconnect, device number 16
[  535.837537][   T26] audit: type=1326 audit(1753272032.338:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20baa829a9 code=0x7ffc0000
[  535.911679][   T26] audit: type=1326 audit(1753272032.378:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f20baa829a9 code=0x7ffc0000
[  535.939571][   T26] audit: type=1326 audit(1753272032.378:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20baa829a9 code=0x7ffc0000
[  535.968585][   T26] audit: type=1326 audit(1753272032.398:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20baa81310 code=0x7ffc0000
[  535.997631][   T26] audit: type=1326 audit(1753272032.398:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20baa825ab code=0x7ffc0000
[  536.049976][   T26] audit: type=1326 audit(1753272032.398:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20baa825ab code=0x7ffc0000
[  536.263616][   T26] audit: type=1326 audit(1753272032.398:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20baa825ab code=0x7ffc0000
[  536.357048][   T26] audit: type=1326 audit(1753272032.398:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20baa825ab code=0x7ffc0000
[  536.511617][ T8847] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  536.540737][   T26] audit: type=1326 audit(1753272033.048:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20baa825ab code=0x7ffc0000
[  536.770637][ T8847] usb 3-1: Using ep0 maxpacket: 32
[  537.361219][   T26] audit: type=1326 audit(1753272033.068:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20baa825ab code=0x7ffc0000
[  537.413463][ T8951] loop0: detected capacity change from 0 to 32768
[  537.516924][ T8847] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 16
[  537.727232][ T8847] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  537.833802][ T8847] usb 3-1: config 1 interface 0 has no altsetting 0
[  537.933541][ T8969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.090915][ T8847] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  538.100192][ T8847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.108776][ T8847] usb 3-1: Product: syz
[  538.207154][ T8847] usb 3-1: Manufacturer: syz
[  538.214347][ T8847] usb 3-1: SerialNumber: syz
[  538.251188][ T8955] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  538.580960][ T8847] usb 3-1: USB disconnect, device number 11
[  538.906343][ T8975] loop0: detected capacity change from 0 to 32768
[  539.080527][ T8849] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  539.646843][ T8982] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1291'.
[  541.239361][ T8999] ksmbd: Unknown IPC event: 6, ignore.
[  541.300857][ T8849] usb 5-1: Using ep0 maxpacket: 32
[  542.318064][ T9009] loop2: detected capacity change from 0 to 64
[  542.405701][ T8849] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  542.423288][ T8849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.446340][ T8849] usb 5-1: Product: syz
[  542.477699][ T9009] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  542.806254][ T9009] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2
[  543.217272][ T8849] usb 5-1: config 0 descriptor??
[  543.490643][ T8849] usb 5-1: can't set config #0, error -71
[  543.536597][ T8849] usb 5-1: USB disconnect, device number 17
[  543.698301][ T9005] loop4: detected capacity change from 0 to 32768
[  543.919806][   T26] kauditd_printk_skb: 27 callbacks suppressed
[  543.919820][   T26] audit: type=1800 audit(1753272040.418:67): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1297" name="file1" dev="loop4" ino=4 res=0 errno=0
[  544.077358][ T9023] loop1: detected capacity change from 0 to 2048
[  545.179627][ T9023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  545.277221][ T9023] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  545.415325][ T9037] loop2: detected capacity change from 0 to 1024
[  545.469316][ T9037] EXT4-fs (loop2): filesystem is read-only
[  545.479642][ T9037] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  545.490603][ T9037] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869)
[  545.501312][ T9037] EXT4-fs error (device loop2): ext4_get_journal_inode:5158: comm syz.2.1306: inode #1: comm syz.2.1306: iget: illegal inode #
[  545.519048][ T9037] EXT4-fs (loop2): no journal found
[  545.524395][ T9037] EXT4-fs (loop2): can't get journal size
[  545.583794][ T9037] EXT4-fs error (device loop2): ext4_fill_super:4839: inode #2: comm syz.2.1306: iget: special inode unallocated
[  545.596867][ T9037] EXT4-fs (loop2): get root inode failed
[  545.602744][ T9037] EXT4-fs (loop2): mount failed
[  546.090502][ T8847] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  546.164445][ T9040] loop4: detected capacity change from 0 to 512
[  546.202865][ T9040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  546.398045][ T9040] EXT4-fs (loop4): 1 truncate cleaned up
[  546.437569][ T9040] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[  546.480651][ T8847] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  547.381262][ T8847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.408604][ T8847] usb 4-1: config 0 descriptor??
[  547.607532][ T8847] cp210x 4-1:0.0: cp210x converter detected
[  548.014018][ T9052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  548.140648][ T8847] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  548.148243][ T8847] cp210x 4-1:0.0: querying part number failed
[  548.201945][ T8847] usb 4-1: cp210x converter now attached to ttyUSB0
[  548.241509][ T8847] usb 4-1: USB disconnect, device number 13
[  548.256764][ T8847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  548.281990][ T8847] cp210x 4-1:0.0: device disconnected
[  548.705043][ T9066] xt_TCPMSS: Only works on TCP SYN packets
[  548.718442][ T9066] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1314'.
[  549.815373][ T9071] loop2: detected capacity change from 0 to 2048
[  549.822237][ T4228] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  549.894803][ T9071] NILFS (loop2): invalid segment: Magic number mismatch
[  549.901926][ T9071] NILFS (loop2): trying rollback from an earlier position
[  549.955428][ T9071] NILFS (loop2): recovery complete
[  549.968591][ T9072] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  549.995246][ T9062] loop0: detected capacity change from 0 to 32768
[  550.070619][ T4228] usb 2-1: Using ep0 maxpacket: 8
[  550.321297][ T4228] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  550.343794][ T4228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  550.651098][ T4228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  550.655784][   T26] audit: type=1800 audit(1753272046.938:68): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1315" name="file1" dev="loop0" ino=4 res=0 errno=0
[  550.655815][ T4228] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  550.699649][ T4228] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  550.708871][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.337968][ T4228] usb 2-1: GET_CAPABILITIES returned 0
[  551.378066][ T4228] usbtmc 2-1:16.0: can't read capabilities
[  553.170683][ T8848] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  553.469763][ T9103] ksmbd: Unknown IPC event: 6, ignore.
[  553.590713][ T8848] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  553.658736][ T8848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.677423][ T8847] usb 2-1: USB disconnect, device number 13
[  553.687522][ T8848] usb 1-1: config 0 descriptor??
[  553.799849][ T8848] cp210x 1-1:0.0: cp210x converter detected
[  553.813339][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  554.490739][ T8848] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  554.498453][ T8848] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  554.599432][ T8848] usb 1-1: cp210x converter now attached to ttyUSB0
[  556.477936][ T8848] usb 1-1: USB disconnect, device number 13
[  556.551276][ T8848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  556.596478][ T8848] cp210x 1-1:0.0: device disconnected
[  557.432631][ T9130] loop2: detected capacity change from 0 to 2048
[  557.598784][ T9130] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  557.663121][ T9130] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  557.879070][   T26] audit: type=1804 audit(1753272054.378:69): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1335" name="/newroot/265/file0/file0/file0" dev="loop2" ino=13 res=1 errno=0
[  558.213211][ T9143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.422198][ T8848] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  558.770532][ T8848] usb 3-1: Using ep0 maxpacket: 8
[  558.890593][ T8848] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  558.909144][ T8848] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  558.934911][ T8848] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  558.946240][ T9154] kvm [9153]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff
[  558.949105][ T8848] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  558.981950][ T8848] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  558.992111][ T8848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.307506][ T8848] usb 3-1: GET_CAPABILITIES returned 0
[  559.313697][ T8848] usbtmc 3-1:16.0: can't read capabilities
[  560.602086][ T8847] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  561.017897][ T9176] ksmbd: Unknown IPC event: 6, ignore.
[  561.494028][   T13] usb 3-1: USB disconnect, device number 12
[  561.945069][ T9161] loop0: detected capacity change from 0 to 32768
[  562.081030][ T8847] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  562.097474][   T26] audit: type=1800 audit(1753272058.598:70): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1344" name="file1" dev="loop0" ino=4 res=0 errno=0
[  562.384039][ T8847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.425484][ T8847] usb 2-1: Product: syz
[  562.432654][ T8847] usb 2-1: Manufacturer: syz
[  562.458253][ T8847] usb 2-1: SerialNumber: syz
[  562.561754][ T8847] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  562.598818][ T9184] loop3: detected capacity change from 0 to 32768
[  562.642596][ T9184] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1351 (9184)
[  562.733881][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  562.740278][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  562.790990][ T9184] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  562.807316][ T9184] BTRFS info (device loop3): using free space tree
[  562.830919][ T9184] BTRFS info (device loop3): has skinny extents
[  563.103904][ T9184] BTRFS info (device loop3): enabling ssd optimizations
[  563.270604][ T8848] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  563.289194][ T8848] usb 2-1: ath9k_htc: USB layer deinitialized
[  563.418763][ T9182] loop2: detected capacity change from 0 to 32768
[  563.638894][   T26] audit: type=1800 audit(1753272060.138:71): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1350" name="file1" dev="loop2" ino=4 res=0 errno=0
[  563.848068][ T4551] usb 2-1: USB disconnect, device number 14
[  565.012441][ T9190] loop0: detected capacity change from 0 to 32768
[  565.354127][ T9190] XFS (loop0): Mounting V5 Filesystem
[  565.462284][ T9190] XFS (loop0): Ending clean mount
[  565.641326][ T9190] XFS (loop0): Quotacheck needed: Please wait.
[  565.853947][ T9190] XFS (loop0): Quotacheck: Done.
[  566.061476][ T4190] XFS (loop0): Unmounting Filesystem
[  566.171115][ T9226] loop1: detected capacity change from 0 to 32768
[  566.329070][ T9226] XFS (loop1): Mounting V5 Filesystem
[  566.519073][ T9226] XFS (loop1): Ending clean mount
[  566.730666][ T9226] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x2443 dinode
[  566.783932][ T9226] XFS (loop1): Unmount and run xfs_repair
[  566.789790][ T9244] loop4: detected capacity change from 0 to 32768
[  566.805627][ T9226] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  566.814322][ T9226] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  566.823663][ T9226] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  566.832900][ T9226] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  566.843045][ T9226] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  566.854062][ T9226] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  566.863456][ T9226] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc  ............T.z.
[  566.874904][ T9226] 00000060: ff ff ff ff 4c 04 00 21 00 00 00 00 00 00 00 04  ....L..!........
[  566.899159][ T9226] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08  ................
[  566.963164][   T26] audit: type=1800 audit(1753272063.468:72): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1363" name="file1" dev="loop4" ino=4 res=0 errno=0
[  567.523136][ T9266] loop3: detected capacity change from 0 to 32768
[  567.561075][ T9266] XFS: ikeep mount option is deprecated.
[  567.664986][ T4182] XFS (loop1): Unmounting Filesystem
[  567.752679][ T9264] loop2: detected capacity change from 0 to 4096
[  567.789980][ T9266] XFS (loop3): Mounting V5 Filesystem
[  567.861136][ T9264] ntfs3: Unknown parameter 'windows_names'
[  567.869333][ T9271] loop4: detected capacity change from 0 to 32768
[  568.094062][ T9278] loop0: detected capacity change from 0 to 4096
[  568.583535][ T9278] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  569.668278][ T9266] XFS (loop3): Ending clean mount
[  569.676577][ T9266] XFS (loop3): Quotacheck needed: Please wait.
[  570.135785][ T9266] XFS (loop3): Quotacheck: Done.
[  570.830137][ T9287] loop4: detected capacity change from 0 to 32768
[  570.856473][   T26] audit: type=1800 audit(1753272067.358:73): pid=9287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1369" name="file1" dev="loop4" ino=4 res=0 errno=0
[  570.882076][ T4183] XFS (loop3): Unmounting Filesystem
[  571.248554][ T9300] ksmbd: Unknown IPC event: 6, ignore.
[  571.261201][ T9287] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  571.261201][ T9287] 
[  571.281491][ T9287] ERROR: (device loop4): remounting filesystem as read-only
[  574.763543][ T9320] loop0: detected capacity change from 0 to 32768
[  575.010660][ T9320] XFS: ikeep mount option is deprecated.
[  575.126309][ T9320] XFS (loop0): Mounting V5 Filesystem
[  575.242802][ T9320] XFS (loop0): Ending clean mount
[  575.412869][ T9320] XFS (loop0): Quotacheck needed: Please wait.
[  575.503275][ T9320] XFS (loop0): Quotacheck: Done.
[  575.660577][ T9320] loop_set_status: loop0 () has still dirty pages (nrpages=1)
[  575.940252][ T4190] XFS (loop0): Unmounting Filesystem
[  577.247120][ T9354] ksmbd: Unknown IPC event: 6, ignore.
[  577.645910][ T9363] sp0: Synchronizing with TNC
[  577.696338][ T9363] loop1: detected capacity change from 0 to 64
[  580.123523][ T9360] Trying to free block not in datazone
[  580.495802][ T4249] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  581.310490][ T4249] usb 5-1: device descriptor read/all, error -71
[  581.451943][ T9394] loop1: detected capacity change from 0 to 32768
[  582.226611][ T9402] loop2: detected capacity change from 0 to 2048
[  582.504542][ T9402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  582.550823][ T9402] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  582.570509][ T4249] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  582.820600][ T4249] usb 5-1: Using ep0 maxpacket: 8
[  583.263239][ T4249] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  583.300557][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.327220][ T4249] usb 5-1: Product: syz
[  583.334328][ T4249] usb 5-1: Manufacturer: syz
[  583.358852][ T4249] usb 5-1: SerialNumber: syz
[  583.394011][ T4249] usb 5-1: config 0 descriptor??
[  583.453024][ T4249] gspca_main: sq930x-2.14.0 probing 2770:930c
[  583.818593][ T9421] sp0: Synchronizing with TNC
[  583.842437][ T9421] loop3: detected capacity change from 0 to 64
[  584.065809][ T9421] Trying to free block not in datazone
[  584.802540][ T9427] loop3: detected capacity change from 0 to 64
[  584.850394][ T9427] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  585.060559][ T4249] gspca_sq930x: reg_w 0105 0c00 failed -71
[  585.630407][ T4249] gspca_sq930x: Sensor ov9630 not yet treated
[  585.636645][ T4249] sq930x: probe of 5-1:0.0 failed with error -22
[  585.653407][ T4249] usb 5-1: USB disconnect, device number 19
[  592.551490][ T9477] loop4: detected capacity change from 0 to 32768
[  592.731233][ T9477] XFS: ikeep mount option is deprecated.
[  592.820477][ T9477] xfs: Unknown parameter 'context'
[  595.576208][ T9513] loop0: detected capacity change from 0 to 32768
[  597.780184][ T9523] loop0: detected capacity change from 0 to 4096
[  597.987156][ T9523] ntfs3: Unknown parameter 'windows_names'
[  598.785261][ T9541] x_tables: duplicate underflow at hook 1
[  599.066882][ T9548] loop1: detected capacity change from 0 to 128
[  599.103886][ T9548] EXT4-fs (loop1): Test dummy encryption mode enabled
[  599.260702][ T9548] EXT4-fs (loop1): Test dummy encryption mode enabled
[  599.278309][ T9548] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  599.296943][ T9548] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  599.331612][ T8849] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  599.388349][ T9555] xt_TCPMSS: Only works on TCP SYN packets
[  599.401120][ T9555] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1443'.
[  599.429331][ T9548] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none.
[  599.449357][ T9548] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  599.781263][ T8849] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  599.877915][ T8849] usb 1-1: config 0 interface 0 has no altsetting 0
[  600.250808][ T8849] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  600.270811][ T8849] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  600.320136][ T8849] usb 1-1: Product: syz
[  600.350511][ T8849] usb 1-1: Manufacturer: syz
[  600.369596][ T8849] usb 1-1: SerialNumber: syz
[  600.409691][ T8849] usb 1-1: config 0 descriptor??
[  600.475998][ T8849] usb 1-1: selecting invalid altsetting 0
[  600.720111][ T8849] usb 1-1: USB disconnect, device number 14
[  601.061931][ T9566] loop3: detected capacity change from 0 to 32768
[  602.647735][ T9577] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1444'.
[  604.791276][ T9600] loop3: detected capacity change from 0 to 1024
[  604.836094][ T9595] loop1: detected capacity change from 0 to 4096
[  604.901739][ T9595] ntfs3: Unknown parameter 'windows_names'
[  604.926845][ T9600] EXT4-fs (loop3): filesystem is read-only
[  604.934350][ T9600] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  604.999882][ T9600] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869)
[  605.102685][ T9601] x_tables: duplicate underflow at hook 1
[  605.469180][ T9600] EXT4-fs error (device loop3): ext4_get_journal_inode:5158: comm syz.3.1452: inode #1: comm syz.3.1452: iget: illegal inode #
[  605.500487][ T9600] EXT4-fs (loop3): no journal found
[  605.505727][ T9600] EXT4-fs (loop3): can't get journal size
[  605.585417][ T9600] EXT4-fs error (device loop3): ext4_fill_super:4839: inode #2: comm syz.3.1452: iget: special inode unallocated
[  605.630226][ T9600] EXT4-fs (loop3): get root inode failed
[  605.638299][ T9600] EXT4-fs (loop3): mount failed
[  605.759605][ T9599] loop4: detected capacity change from 0 to 32768
[  605.824860][   T26] audit: type=1800 audit(1753272102.328:74): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1454" name="file1" dev="loop4" ino=4 res=0 errno=0
[  605.881464][ T4249] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  606.270887][ T4249] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  606.296700][ T4249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  606.347139][ T4249] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  606.356810][ T4249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.383368][ T4249] usb 2-1: config 0 descriptor??
[  606.441701][ T4249] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  606.638108][ T9612] loop4: detected capacity change from 0 to 32768
[  606.663084][ T9610] loop3: detected capacity change from 0 to 32768
[  608.383699][ T9610] XFS: ikeep mount option is deprecated.
[  608.421583][ T9610] xfs: Unknown parameter 'context'
[  608.550389][ T4551] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  608.689474][ T4720] usb 2-1: USB disconnect, device number 15
[  608.698994][ T9620] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1460'.
[  608.800527][ T4551] usb 3-1: Using ep0 maxpacket: 8
[  608.825474][ T9622] loop1: detected capacity change from 0 to 512
[  608.920791][ T4551] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  608.935186][ T9622] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  608.982499][ T4551] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  609.117565][ T4551] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  609.136210][ T9622] EXT4-fs (loop1): 1 truncate cleaned up
[  609.158857][ T9622] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[  609.181247][ T4551] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  609.216479][ T4551] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  609.262717][ T4551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.045480][ T4551] usb 3-1: can't set config #16, error -71
[  610.058422][ T9636] loop4: detected capacity change from 0 to 256
[  610.102901][ T4551] usb 3-1: USB disconnect, device number 13
[  610.135397][ T9636] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  610.209692][ T9636] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  610.228492][ T9636] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  610.258118][   T26] audit: type=1800 audit(1753272106.758:75): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1465" name="file1" dev="loop4" ino=1048597 res=0 errno=0
[  610.630471][ T8849] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  611.190411][ T8849] usb 2-1: Using ep0 maxpacket: 32
[  612.105051][ T9657] ksmbd: Unknown IPC event: 6, ignore.
[  612.270631][ T8849] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  612.292109][ T8849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.340016][ T8849] usb 2-1: Product: syz
[  612.367979][ T8849] usb 2-1: Manufacturer: syz
[  612.391881][ T8849] usb 2-1: SerialNumber: syz
[  612.444848][ T8849] usb 2-1: config 0 descriptor??
[  613.794267][ T9662] loop2: detected capacity change from 0 to 32768
[  613.883356][ T9669] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1475'.
[  613.906348][   T26] audit: type=1800 audit(1753272110.408:76): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1473" name="file1" dev="loop2" ino=4 res=0 errno=0
[  614.578860][ T8849] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  614.612616][ T8849] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71
[  614.658918][ T8849] usb 2-1: USB disconnect, device number 16
[  614.704311][ T9675] loop4: detected capacity change from 0 to 512
[  614.773402][ T9664] loop0: detected capacity change from 0 to 32768
[  616.400755][ T9675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  616.480511][ T9675] EXT4-fs (loop4): 1 truncate cleaned up
[  616.510544][ T9675] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[  618.490674][ T8847] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  619.287023][ T8847] usb 1-1: Using ep0 maxpacket: 32
[  619.483939][ T9724] ksmbd: Unknown IPC event: 6, ignore.
[  619.539328][ T9723] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1490'.
[  619.710831][ T8847] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  619.789304][ T8847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.825098][ T8847] usb 1-1: Product: syz
[  619.830800][ T8847] usb 1-1: Manufacturer: syz
[  619.835635][ T8847] usb 1-1: SerialNumber: syz
[  619.847224][ T8847] usb 1-1: config 0 descriptor??
[  620.710496][ T8847] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  620.719077][ T8847] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71
[  621.714106][ T8847] usb 1-1: USB disconnect, device number 15
[  621.776965][ T9736] loop3: detected capacity change from 0 to 32768
[  621.885819][   T26] audit: type=1800 audit(1753272118.388:77): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1492" name="file1" dev="loop3" ino=4 res=0 errno=0
[  622.011173][ T9747] loop4: detected capacity change from 0 to 512
[  622.125733][ T9747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  623.022192][ T9747] EXT4-fs (loop4): 1 truncate cleaned up
[  623.028037][ T9747] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[  624.240799][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  624.247191][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  627.152757][ T9777] loop2: detected capacity change from 0 to 32768
[  629.660467][ T4249] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  630.610399][ T4249] usb 5-1: Using ep0 maxpacket: 32
[  630.972157][ T4249] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  631.023562][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.697320][ T4249] usb 5-1: Product: syz
[  631.701849][ T4249] usb 5-1: Manufacturer: syz
[  631.706454][ T4249] usb 5-1: SerialNumber: syz
[  631.722915][ T4249] usb 5-1: config 0 descriptor??
[  631.750501][ T4249] usb 5-1: can't set config #0, error -71
[  631.844550][ T4249] usb 5-1: USB disconnect, device number 20
[  632.092243][ T9812] xt_TCPMSS: Only works on TCP SYN packets
[  632.099209][ T9812] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1513'.
[  632.262732][ T9797] loop3: detected capacity change from 0 to 32768
[  632.335297][ T9813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  632.347742][   T26] audit: type=1800 audit(1753272128.848:78): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1509" name="file1" dev="loop3" ino=4 res=0 errno=0
[  632.502237][ T9801] loop1: detected capacity change from 0 to 32768
[  632.612677][   T26] audit: type=1800 audit(1753272129.118:79): pid=9801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1511" name="file1" dev="loop1" ino=4 res=0 errno=0
[  633.820212][ T9821] loop2: detected capacity change from 0 to 40427
[  633.836387][ T9821] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  633.842814][ T9821] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  633.856196][ T9821] F2FS-fs (loop2): invalid crc value
[  633.980199][ T9821] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  634.013037][ T9821] F2FS-fs (loop2): Failed to read root inode
[  635.077279][ T9837] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1519'.
[  635.770633][ T9843] ksmbd: Unknown IPC event: 6, ignore.
[  636.070564][ T4249] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  636.343055][ T4249] usb 4-1: Using ep0 maxpacket: 32
[  636.396433][ T9838] loop2: detected capacity change from 0 to 32768
[  636.478428][   T26] audit: type=1800 audit(1753272132.978:80): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1520" name="file1" dev="loop2" ino=4 res=0 errno=0
[  636.620574][ T4249] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  636.635891][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.660471][ T4249] usb 4-1: Product: syz
[  636.670744][ T4249] usb 4-1: Manufacturer: syz
[  636.687390][ T4249] usb 4-1: SerialNumber: syz
[  636.716722][ T4249] usb 4-1: config 0 descriptor??
[  636.986048][ T9846] loop3: detected capacity change from 0 to 512
[  637.033417][ T9846] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1)
[  638.064540][ T9858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  638.597735][ T9856] loop0: detected capacity change from 0 to 32768
[  638.820660][ T4249] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate
[  638.867938][ T4249] RobotFuzz Open Source InterFace, OSIF: probe of 4-1:0.0 failed with error -110
[  639.255225][   T26] audit: type=1800 audit(1753272135.758:81): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1526" name="file1" dev="loop0" ino=4 res=0 errno=0
[  639.333977][ T4249] usb 4-1: USB disconnect, device number 14
[  640.780650][ T9882] loop2: detected capacity change from 0 to 32768
[  642.076824][ T9870] loop3: detected capacity change from 0 to 32768
[  642.170252][   T26] audit: type=1800 audit(1753272138.668:82): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1530" name="file1" dev="loop3" ino=4 res=0 errno=0
[  642.618262][ T9893] loop1: detected capacity change from 0 to 32768
[  642.704730][ T9900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  642.820294][   T26] audit: type=1800 audit(1753272139.318:83): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1536" name="file1" dev="loop1" ino=4 res=0 errno=0
[  643.114271][ T9893] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  643.114271][ T9893] 
[  643.127876][ T9893] ERROR: (device loop1): remounting filesystem as read-only
[  643.227579][ T4249] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  643.480586][ T4249] usb 1-1: Using ep0 maxpacket: 32
[  643.780594][ T4249] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  643.793997][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.810587][ T4249] usb 1-1: Product: syz
[  643.820139][ T4249] usb 1-1: Manufacturer: syz
[  643.829169][ T4249] usb 1-1: SerialNumber: syz
[  643.853029][ T4249] usb 1-1: config 0 descriptor??
[  644.121954][ T9905] loop0: detected capacity change from 0 to 512
[  644.140451][ T9220] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  644.318440][ T9905] EXT4-fs (loop0): first meta block group too large: 4294967295 (group descriptor block count 1)
[  644.850468][ T9220] usb 2-1: Using ep0 maxpacket: 8
[  645.118075][ T9220] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  645.128162][ T9220] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  645.158758][ T9220] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  645.451798][ T9923] loop2: detected capacity change from 0 to 32768
[  645.621885][ T9220] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  645.635747][ T9220] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  645.645101][ T9220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.390484][ T4249] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  647.401531][ T4249] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -110
[  647.504290][ T9220] usb 2-1: can't set config #16, error -71
[  647.561500][ T9220] usb 2-1: USB disconnect, device number 17
[  647.569961][ T4249] usb 1-1: USB disconnect, device number 16
[  648.147961][ T9941] xt_TCPMSS: Only works on TCP SYN packets
[  648.162172][ T9941] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1550'.
[  650.427004][ T9947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  651.954832][ T9952] loop2: detected capacity change from 0 to 32768
[  652.218258][ T9966] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1557'.
[  653.064859][   T26] audit: type=1800 audit(1753272149.568:84): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1553" name="file1" dev="loop2" ino=4 res=0 errno=0
[  653.292395][ T9969] loop1: detected capacity change from 0 to 32768
[  653.831551][ T9220] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  653.920744][ T8847] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  654.103231][ T9220] usb 5-1: Using ep0 maxpacket: 8
[  654.280502][ T8847] usb 3-1: Using ep0 maxpacket: 8
[  654.320491][ T9220] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  654.330990][ T9220] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  654.340857][ T9220] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  654.410926][ T8847] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  654.475427][ T8847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  654.643824][ T8847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  654.800861][ T8847] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  654.960640][ T8847] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  654.970370][ T9220] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  654.997661][ T8847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.057259][ T9220] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  655.066511][ T9220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.095297][ T9994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  655.163407][ T9987] loop3: detected capacity change from 0 to 32768
[  655.257670][   T26] audit: type=1800 audit(1753272151.758:85): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1565" name="file1" dev="loop3" ino=4 res=0 errno=0
[  655.310588][ T8847] usb 3-1: GET_CAPABILITIES returned 0
[  655.316310][ T8847] usbtmc 3-1:16.0: can't read capabilities
[  655.350612][ T9220] usb 5-1: GET_CAPABILITIES returned 0
[  655.356103][ T9220] usbtmc 5-1:16.0: can't read capabilities
[  657.100702][ T4249] usb 5-1: USB disconnect, device number 21
[  657.338812][T10011] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1570'.
[  657.603830][T10016] loop1: detected capacity change from 0 to 32768
[  657.708813][T10000] loop0: detected capacity change from 0 to 32768
[  657.947831][   T26] audit: type=1800 audit(1753272154.448:86): pid=10000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1568" name="file1" dev="loop0" ino=4 res=0 errno=0
[  658.378259][T10013] loop4: detected capacity change from 0 to 32768
[  658.502381][   T26] audit: type=1800 audit(1753272155.008:87): pid=10024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1571" name="file1" dev="loop4" ino=4 res=0 errno=0
[  659.357695][ T4249] usb 3-1: USB disconnect, device number 14
[  659.562412][T10034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  659.888558][T10040] xt_TCPMSS: Only works on TCP SYN packets
[  659.895624][T10040] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1575'.
[  659.897764][T10033] loop3: detected capacity change from 0 to 32768
[  659.962287][   T26] audit: type=1800 audit(1753272156.468:88): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1577" name="file1" dev="loop3" ino=4 res=0 errno=0
[  659.984277][ T4249] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  660.943393][ T4249] usb 3-1: Using ep0 maxpacket: 32
[  660.950114][T10049] ksmbd: Unknown IPC event: 6, ignore.
[  662.059857][ T4249] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  662.077459][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.095879][ T4249] usb 3-1: Product: syz
[  662.141128][ T4249] usb 3-1: Manufacturer: syz
[  662.145765][ T4249] usb 3-1: SerialNumber: syz
[  662.161740][ T4249] usb 3-1: config 0 descriptor??
[  662.331266][ T7446] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  663.040512][ T4249] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate
[  663.076642][ T4249] RobotFuzz Open Source InterFace, OSIF: probe of 3-1:0.0 failed with error -71
[  663.112125][ T4249] usb 3-1: USB disconnect, device number 15
[  663.120389][ T7446] usb 4-1: Using ep0 maxpacket: 8
[  663.250643][ T7446] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  663.264872][ T7446] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  663.294882][ T7446] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  663.310474][ T7446] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  663.323916][ T7446] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  663.327948][T10058] loop0: detected capacity change from 0 to 32768
[  663.333146][ T7446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.511528][   T26] audit: type=1800 audit(1753272160.018:89): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1586" name="file1" dev="loop0" ino=4 res=0 errno=0
[  663.730794][ T7446] usb 4-1: GET_CAPABILITIES returned 0
[  663.736766][ T7446] usbtmc 4-1:16.0: can't read capabilities
[  665.499989][T10084] loop1: detected capacity change from 0 to 32768
[  665.516049][T10084] XFS: ikeep mount option is deprecated.
[  665.521827][T10084] xfs: Unknown parameter 'context'
[  665.530489][ T4249] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  665.631768][ T7446] usb 4-1: USB disconnect, device number 15
[  665.854621][ T4249] usb 1-1: Using ep0 maxpacket: 8
[  665.862982][T10093] xt_TCPMSS: Only works on TCP SYN packets
[  665.870384][T10093] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1594'.
[  665.941354][T10086] loop4: detected capacity change from 0 to 32768
[  666.040575][ T4249] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  666.054111][ T4249] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  666.066299][ T4249] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  666.197914][ T4249] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  666.197963][ T4249] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  666.197985][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.043045][   T26] audit: type=1800 audit(1753272162.818:90): pid=10098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1592" name="file1" dev="loop4" ino=4 res=0 errno=0
[  667.044142][ T4249] usb 1-1: GET_CAPABILITIES returned 0
[  667.044372][ T4249] usbtmc 1-1:16.0: can't read capabilities
[  669.000389][ T4436] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  669.251194][ T4436] usb 3-1: Using ep0 maxpacket: 32
[  669.600668][ T4436] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  669.652283][ T4436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.660866][ T4436] usb 3-1: Product: syz
[  669.665057][ T4436] usb 3-1: Manufacturer: syz
[  669.669658][ T4436] usb 3-1: SerialNumber: syz
[  669.676555][ T4436] usb 3-1: config 0 descriptor??
[  670.578265][T10124] ksmbd: Unknown IPC event: 6, ignore.
[  670.598853][T10109] loop2: detected capacity change from 0 to 512
[  670.678076][T10109] EXT4-fs (loop2): first meta block group too large: 4294967295 (group descriptor block count 1)
[  671.809697][ T8847] usb 1-1: USB disconnect, device number 17
[  671.940542][ T4436] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate
[  671.953895][ T4436] RobotFuzz Open Source InterFace, OSIF: probe of 3-1:0.0 failed with error -110
[  672.620734][ T4436] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  672.704640][ T8847] usb 3-1: USB disconnect, device number 16
[  672.930416][ T4436] usb 1-1: Using ep0 maxpacket: 8
[  673.090658][ T4436] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  673.117221][ T4436] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  673.170418][ T4436] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  673.184276][ T4436] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  673.347185][ T4436] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  673.357901][ T4436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.525258][T10146] loop4: detected capacity change from 0 to 40427
[  674.100497][ T4436] usb 1-1: GET_CAPABILITIES returned 0
[  674.106014][ T4436] usbtmc 1-1:16.0: can't read capabilities
[  674.123695][T10146] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  674.130048][T10146] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  674.140117][T10146] F2FS-fs (loop4): invalid crc value
[  674.202017][T10146] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  674.232186][T10146] F2FS-fs (loop4): Failed to read root inode
[  674.467783][ T4436] usb 1-1: USB disconnect, device number 18
[  675.550555][ T7446] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  675.605749][T10141] loop2: detected capacity change from 0 to 32768
[  675.680998][T10141] XFS: ikeep mount option is deprecated.
[  675.690505][T10141] xfs: Unknown parameter 'context'
[  675.830458][ T7446] usb 4-1: Using ep0 maxpacket: 32
[  676.247879][T10162] loop0: detected capacity change from 0 to 32768
[  676.348366][   T26] audit: type=1800 audit(1753272172.848:91): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1614" name="file1" dev="loop0" ino=4 res=0 errno=0
[  676.480894][ T7446] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  676.558856][ T7446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.658585][T10168] loop4: detected capacity change from 0 to 32768
[  676.783139][ T7446] usb 4-1: Product: syz
[  676.787661][ T7446] usb 4-1: Manufacturer: syz
[  676.792330][ T7446] usb 4-1: SerialNumber: syz
[  676.815370][ T7446] usb 4-1: config 0 descriptor??
[  677.476170][   T26] audit: type=1800 audit(1753272173.978:92): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1616" name="file1" dev="loop4" ino=4 res=0 errno=0
[  677.747083][T10164] loop3: detected capacity change from 0 to 512
[  677.775661][T10164] EXT4-fs (loop3): first meta block group too large: 4294967295 (group descriptor block count 1)
[  679.570693][ T7446] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate
[  679.717371][ T7446] RobotFuzz Open Source InterFace, OSIF: probe of 4-1:0.0 failed with error -110
[  679.835565][ T7446] usb 4-1: USB disconnect, device number 16
[  681.085316][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  681.110496][ T7446] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  681.390408][ T7446] usb 4-1: Using ep0 maxpacket: 8
[  681.458059][T10215] loop1: detected capacity change from 0 to 32768
[  681.501445][T10215] XFS: ikeep mount option is deprecated.
[  681.510587][ T7446] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  681.555976][ T7446] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  681.568119][T10215] xfs: Unknown parameter 'context'
[  681.590166][ T7446] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  682.116818][ T7446] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  682.130337][ T7446] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  682.140971][ T7446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.621485][T10225] loop1: detected capacity change from 0 to 40427
[  682.628298][ T7446] usb 4-1: GET_CAPABILITIES returned 0
[  682.643940][ T7446] usbtmc 4-1:16.0: can't read capabilities
[  682.728327][T10225] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  682.734853][T10225] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  682.750501][T10225] F2FS-fs (loop1): invalid crc value
[  682.818723][T10225] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  682.936222][ T8847] usb 4-1: USB disconnect, device number 17
[  682.955641][T10225] F2FS-fs (loop1): Failed to read root inode
[  683.413051][ T7446] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  683.840744][ T7446] usb 2-1: Using ep0 maxpacket: 32
[  684.841051][ T7446] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  684.863427][ T7446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.953943][ T7446] usb 2-1: Product: syz
[  684.958127][ T7446] usb 2-1: Manufacturer: syz
[  685.143292][ T7446] usb 2-1: SerialNumber: syz
[  685.179518][ T7446] usb 2-1: config 0 descriptor??
[  685.185637][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  685.469857][T10234] loop1: detected capacity change from 0 to 512
[  685.722086][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  685.730785][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  686.031986][T10234] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1)
[  687.330904][ T7446] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  687.341047][ T7446] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -110
[  688.346025][ T7446] usb 2-1: USB disconnect, device number 18
[  689.134521][ T7446] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  689.319968][T10289] loop3: detected capacity change from 0 to 32768
[  689.417336][ T7446] usb 2-1: Using ep0 maxpacket: 8
[  689.454489][   T26] audit: type=1800 audit(1753272185.958:93): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1648" name="file1" dev="loop3" ino=4 res=0 errno=0
[  689.860486][ T7446] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  689.931056][ T7446] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  690.090402][ T7446] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  690.206804][T10300] sp0: Synchronizing with TNC
[  690.567832][T10300] loop3: detected capacity change from 0 to 64
[  690.688855][ T7446] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  690.792866][ T7446] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  690.810737][ T7446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.888763][T10302] loop4: detected capacity change from 0 to 512
[  690.986439][T10302] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  691.003008][T10293] loop2: detected capacity change from 0 to 32768
[  691.044582][T10302] EXT4-fs (loop4): 1 truncate cleaned up
[  691.055683][T10302] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[  691.110532][ T7446] usb 2-1: GET_CAPABILITIES returned 0
[  691.116091][ T7446] usbtmc 2-1:16.0: can't read capabilities
[  691.181586][   T26] audit: type=1800 audit(1753272187.688:94): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1649" name="file1" dev="loop2" ino=4 res=0 errno=0
[  691.527184][ T7446] usb 2-1: USB disconnect, device number 19
[  691.545287][T10306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.620230][T10322] loop2: detected capacity change from 0 to 32768
[  693.246107][ T8847] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  694.232042][ T8847] usb 5-1: Using ep0 maxpacket: 32
[  694.585560][ T8847] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  694.596230][ T8847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.711322][ T8847] usb 5-1: Product: syz
[  694.715516][ T8847] usb 5-1: Manufacturer: syz
[  694.720855][ T8847] usb 5-1: SerialNumber: syz
[  694.740877][ T8847] usb 5-1: config 0 descriptor??
[  695.455499][T10320] loop4: detected capacity change from 0 to 512
[  695.540851][T10320] EXT4-fs (loop4): first meta block group too large: 4294967295 (group descriptor block count 1)
[  695.935826][T10333] loop3: detected capacity change from 0 to 32768
[  695.961100][T10333] XFS: ikeep mount option is deprecated.
[  696.180943][T10333] xfs: Unknown parameter 'context'
[  696.749116][T10343] loop0: detected capacity change from 0 to 32768
[  696.859333][ T8847] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate
[  696.967979][T10353] xt_TCPMSS: Only works on TCP SYN packets
[  696.975204][T10353] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1665'.
[  697.928686][   T26] audit: type=1800 audit(1753272194.428:95): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1664" name="file1" dev="loop0" ino=4 res=0 errno=0
[  699.233774][ T8847] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -110
[  699.245072][ T8847] usb 5-1: USB disconnect, device number 22
[  699.446500][T10361] loop1: detected capacity change from 0 to 40427
[  699.462584][T10361] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  699.469023][T10361] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  699.478756][T10361] F2FS-fs (loop1): invalid crc value
[  699.501547][T10361] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  699.520844][ T8848] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  699.596590][T10354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  699.609180][T10361] F2FS-fs (loop1): Failed to read root inode
[  699.760721][ T8848] usb 4-1: Using ep0 maxpacket: 8
[  699.932063][ T8848] usb 4-1: unable to read config index 0 descriptor/all
[  699.939184][ T8848] usb 4-1: can't read configurations, error -71
[  701.750365][ T8848] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  701.994801][ T8848] usb 3-1: Using ep0 maxpacket: 8
[  702.050485][T10378] loop3: detected capacity change from 0 to 32768
[  702.121925][ T8848] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  702.197247][   T26] audit: type=1800 audit(1753272198.698:96): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1675" name="file1" dev="loop3" ino=4 res=0 errno=0
[  702.480499][ T8848] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  702.530545][ T8848] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  702.590448][ T8848] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  702.659160][ T8848] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  702.674462][ T8848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.711806][T10390] loop0: detected capacity change from 0 to 32768
[  702.734206][T10390] XFS: ikeep mount option is deprecated.
[  702.762832][T10390] xfs: Unknown parameter 'context'
[  703.010533][ T8848] usb 3-1: GET_CAPABILITIES returned 0
[  703.016288][ T8848] usbtmc 3-1:16.0: can't read capabilities
[  703.468326][T10404] xt_TCPMSS: Only works on TCP SYN packets
[  703.475313][T10404] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1678'.
[  704.390939][T10412] sp0: Synchronizing with TNC
[  705.675395][ T4436] usb 3-1: USB disconnect, device number 17
[  705.681451][ T8848] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  705.949167][T10415] loop0: detected capacity change from 0 to 40427
[  705.973092][T10415] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  705.979690][T10415] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  705.980421][ T8848] usb 4-1: Using ep0 maxpacket: 8
[  706.113309][T10415] F2FS-fs (loop0): invalid crc value
[  706.780655][ T8848] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  706.796481][T10415] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  706.808750][ T8848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  706.881145][ T8848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  706.908041][ T8848] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  706.921480][ T8848] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  706.930748][ T8848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.973523][T10415] F2FS-fs (loop0): Failed to read root inode
[  707.558158][ T8848] usb 4-1: GET_CAPABILITIES returned 0
[  707.558181][ T8848] usbtmc 4-1:16.0: can't read capabilities
[  707.878483][ T4436] usb 4-1: USB disconnect, device number 20
[  708.605752][T10439] loop2: detected capacity change from 0 to 32768
[  708.959287][   T26] audit: type=1800 audit(1753272205.458:97): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1689" name="file1" dev="loop2" ino=4 res=0 errno=0
[  710.369980][T10461] xt_TCPMSS: Only works on TCP SYN packets
[  710.376970][T10461] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1694'.
[  710.617466][T10465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  712.960444][ T4249] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  712.984365][T10464] loop2: detected capacity change from 0 to 32768
[  713.229359][   T26] audit: type=1800 audit(1753272209.728:98): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1695" name="file1" dev="loop2" ino=4 res=0 errno=0
[  713.249774][    C0] vkms_vblank_simulate: vblank timer overrun
[  713.320505][ T4249] usb 1-1: Using ep0 maxpacket: 8
[  713.442660][ T4249] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  713.494734][ T4249] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  713.510001][ T4249] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  713.520881][ T4249] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  713.535180][ T4249] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  713.544506][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.711947][T10489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  713.840541][ T4249] usb 1-1: GET_CAPABILITIES returned 0
[  713.846097][ T4249] usbtmc 1-1:16.0: can't read capabilities
[  713.928665][T10478] loop4: detected capacity change from 0 to 40427
[  713.976626][T10478] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  714.011446][T10478] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  714.267826][ T8849] usb 1-1: USB disconnect, device number 19
[  714.276594][T10478] F2FS-fs (loop4): invalid crc value
[  714.307077][T10478] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  714.383651][T10478] F2FS-fs (loop4): Failed to read root inode
[  714.950676][T10500] xt_TCPMSS: Only works on TCP SYN packets
[  714.957664][T10500] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1705'.
[  715.533066][T10507] sp0: Synchronizing with TNC
[  715.550331][T10507] loop2: detected capacity change from 0 to 64
[  716.128113][T10506] Trying to free block not in datazone
[  716.299641][T10508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  718.968958][T10530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  719.430466][ T7446] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  719.646892][T10535] loop2: detected capacity change from 0 to 512
[  719.700456][ T7446] usb 2-1: Using ep0 maxpacket: 8
[  719.706786][T10535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  719.805642][T10535] EXT4-fs (loop2): 1 truncate cleaned up
[  719.811806][T10535] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none.
[  719.820665][ T7446] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  719.880559][ T7446] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  719.917267][ T7446] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  719.930239][ T7446] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  719.945721][ T7446] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  719.955952][ T7446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.123441][T10539] xt_TCPMSS: Only works on TCP SYN packets
[  720.130480][T10539] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1717'.
[  720.300585][ T7446] usb 2-1: GET_CAPABILITIES returned 0
[  720.310496][ T7446] usbtmc 2-1:16.0: can't read capabilities
[  720.399852][T10544] 
[  720.402207][T10544] ======================================================
[  720.409330][T10544] WARNING: possible circular locking dependency detected
[  720.416358][T10544] 5.15.189-syzkaller #0 Not tainted
[  720.421546][T10544] ------------------------------------------------------
[  720.428555][T10544] syz.2.1716/10544 is trying to acquire lock:
[  720.434622][T10544] ffff88802a4b21d8 (&sb->s_type->i_mutex_key#9/1){+.+.}-{3:3}, at: ext4_xattr_set_entry+0x34fb/0x3d30
[  720.445619][T10544] 
[  720.445619][T10544] but task is already holding lock:
[  720.452983][T10544] ffff88801caa9668 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x133d/0x19e0
[  720.462763][T10544] 
[  720.462763][T10544] which lock already depends on the new lock.
[  720.462763][T10544] 
[  720.473169][T10544] 
[  720.473169][T10544] the existing dependency chain (in reverse order) is:
[  720.482188][T10544] 
[  720.482188][T10544] -> #1 (&ei->i_data_sem/3){++++}-{3:3}:
[  720.490018][T10544]        down_write+0x38/0x60
[  720.494695][T10544]        ext4_xattr_set_entry+0x32c3/0x3d30
[  720.500586][T10544]        ext4_xattr_ibody_set+0x112/0x330
[  720.506301][T10544]        ext4_xattr_set_handle+0xa7c/0x12b0
[  720.512361][T10544]        ext4_xattr_set+0x22a/0x320
[  720.517553][T10544]        __vfs_setxattr+0x3e0/0x420
[  720.522745][T10544]        __vfs_setxattr_noperm+0x129/0x5e0
[  720.528546][T10544]        vfs_setxattr+0x168/0x2f0
[  720.533565][T10544]        setxattr+0x2da/0x300
[  720.538229][T10544]        path_setxattr+0x142/0x280
[  720.543329][T10544]        __x64_sys_setxattr+0xb7/0xd0
[  720.548704][T10544]        do_syscall_64+0x4c/0xa0
[  720.553650][T10544]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  720.560058][T10544] 
[  720.560058][T10544] -> #0 (&sb->s_type->i_mutex_key#9/1){+.+.}-{3:3}:
[  720.569189][T10544]        __lock_acquire+0x2c33/0x7c60
[  720.574555][T10544]        lock_acquire+0x197/0x3f0
[  720.579568][T10544]        down_write+0x38/0x60
[  720.584226][T10544]        ext4_xattr_set_entry+0x34fb/0x3d30
[  720.590104][T10544]        ext4_xattr_block_set+0x4f7/0x2d30
[  720.595889][T10544]        ext4_expand_extra_isize_ea+0xf4b/0x19a0
[  720.602198][T10544]        __ext4_expand_extra_isize+0x301/0x3e0
[  720.608335][T10544]        __ext4_mark_inode_dirty+0x469/0x700
[  720.614294][T10544]        ext4_setattr+0x13b7/0x19e0
[  720.619665][T10544]        notify_change+0xbcd/0xee0
[  720.624760][T10544]        do_truncate+0x197/0x220
[  720.629674][T10544]        path_openat+0x28af/0x2f30
[  720.634761][T10544]        do_filp_open+0x1b3/0x3e0
[  720.639788][T10544]        do_sys_openat2+0x142/0x4a0
[  720.644963][T10544]        __x64_sys_openat+0x135/0x160
[  720.650321][T10544]        do_syscall_64+0x4c/0xa0
[  720.655252][T10544]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  720.661649][T10544] 
[  720.661649][T10544] other info that might help us debug this:
[  720.661649][T10544] 
[  720.671854][T10544]  Possible unsafe locking scenario:
[  720.671854][T10544] 
[  720.679281][T10544]        CPU0                    CPU1
[  720.684626][T10544]        ----                    ----
[  720.689968][T10544]   lock(&ei->i_data_sem/3);
[  720.694555][T10544]                                lock(&sb->s_type->i_mutex_key#9/1);
[  720.702603][T10544]                                lock(&ei->i_data_sem/3);
[  720.709691][T10544]   lock(&sb->s_type->i_mutex_key#9/1);
[  720.715215][T10544] 
[  720.715215][T10544]  *** DEADLOCK ***
[  720.715215][T10544] 
[  720.723332][T10544] 5 locks held by syz.2.1716/10544:
[  720.728499][T10544]  #0: ffff88805e764460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  720.737604][T10544]  #1: ffff88801caa97e0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x183/0x220
[  720.747924][T10544]  #2: ffff88801caa9980 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xdb6/0x19e0
[  720.758068][T10544]  #3: ffff88801caa9668 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x133d/0x19e0
[  720.767778][T10544]  #4: ffff88801caa94b8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700
[  720.778008][T10544] 
[  720.778008][T10544] stack backtrace:
[  720.783886][T10544] CPU: 1 PID: 10544 Comm: syz.2.1716 Not tainted 5.15.189-syzkaller #0
[  720.792102][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  720.802146][T10544] Call Trace:
[  720.805409][T10544]  <TASK>
[  720.808321][T10544]  dump_stack_lvl+0x168/0x230
[  720.812977][T10544]  ? load_image+0x3b0/0x3b0
[  720.817456][T10544]  ? show_regs_print_info+0x20/0x20
[  720.822631][T10544]  ? print_circular_bug+0x12b/0x1a0
[  720.827803][T10544]  check_noncircular+0x274/0x310
[  720.832716][T10544]  ? add_chain_block+0x940/0x940
[  720.837634][T10544]  ? lockdep_lock+0xdc/0x1e0
[  720.842207][T10544]  ? verify_lock_unused+0x140/0x140
[  720.847396][T10544]  ? mark_lock+0x94/0x320
[  720.851715][T10544]  __lock_acquire+0x2c33/0x7c60
[  720.856550][T10544]  ? __might_sleep+0xf0/0xf0
[  720.861120][T10544]  ? verify_lock_unused+0x140/0x140
[  720.866296][T10544]  ? mark_buffer_dirty+0x2aa/0x490
[  720.871390][T10544]  lock_acquire+0x197/0x3f0
[  720.875869][T10544]  ? ext4_xattr_set_entry+0x34fb/0x3d30
[  720.881395][T10544]  ? dquot_free_inode+0x819/0x9b0
[  720.886396][T10544]  ? __might_sleep+0xf0/0xf0
[  720.890967][T10544]  ? read_lock_is_recursive+0x10/0x10
[  720.896317][T10544]  ? __ext4_mark_inode_dirty+0x4d5/0x700
[  720.901928][T10544]  down_write+0x38/0x60
[  720.906062][T10544]  ? ext4_xattr_set_entry+0x34fb/0x3d30
[  720.911592][T10544]  ext4_xattr_set_entry+0x34fb/0x3d30
[  720.916944][T10544]  ? ext4_xattr_ibody_set+0x330/0x330
[  720.922293][T10544]  ? errseq_check+0x3c/0x70
[  720.926774][T10544]  ? __ext4_journal_get_write_access+0x2f7/0x6d0
[  720.933205][T10544]  ? __might_sleep+0xf0/0xf0
[  720.937792][T10544]  ? ext4_get_group_desc+0x433/0x4d0
[  720.943064][T10544]  ext4_xattr_block_set+0x4f7/0x2d30
[  720.948332][T10544]  ? ext4_get_inode_loc+0x120/0x120
[  720.953509][T10544]  ? __ext4_xattr_check_block+0x25a/0x8d0
[  720.959297][T10544]  ? ext4_xattr_block_find+0x500/0x500
[  720.964760][T10544]  ? ext4_xattr_block_find+0x449/0x500
[  720.970205][T10544]  ext4_expand_extra_isize_ea+0xf4b/0x19a0
[  720.975999][T10544]  __ext4_expand_extra_isize+0x301/0x3e0
[  720.981613][T10544]  __ext4_mark_inode_dirty+0x469/0x700
[  720.987054][T10544]  ext4_setattr+0x13b7/0x19e0
[  720.991800][T10544]  ? ext4_write_inode+0x5f0/0x5f0
[  720.996804][T10544]  notify_change+0xbcd/0xee0
[  721.002157][T10544]  do_truncate+0x197/0x220
[  721.006554][T10544]  ? aa_get_task_label+0x21c/0x2c0
[  721.011659][T10544]  ? rcu_lock_release+0x20/0x20
[  721.016512][T10544]  ? ima_bprm_check+0x1f0/0x1f0
[  721.021429][T10544]  ? bpf_lsm_path_truncate+0x5/0x10
[  721.026605][T10544]  path_openat+0x28af/0x2f30
[  721.031177][T10544]  ? __kasan_slab_alloc+0xb3/0xd0
[  721.036176][T10544]  ? __kasan_slab_alloc+0x9c/0xd0
[  721.041176][T10544]  ? verify_lock_unused+0x140/0x140
[  721.046353][T10544]  ? do_filp_open+0x3e0/0x3e0
[  721.051007][T10544]  do_filp_open+0x1b3/0x3e0
[  721.055485][T10544]  ? vfs_tmpfile+0x300/0x300
[  721.060168][T10544]  ? _raw_spin_unlock+0x24/0x40
[  721.065013][T10544]  ? alloc_fd+0x598/0x630
[  721.069340][T10544]  do_sys_openat2+0x142/0x4a0
[  721.074011][T10544]  ? __lock_acquire+0x7c60/0x7c60
[  721.079019][T10544]  ? do_sys_open+0xe0/0xe0
[  721.083414][T10544]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  721.089375][T10544]  ? lock_chain_count+0x20/0x20
[  721.094205][T10544]  ? vtime_user_exit+0x2dc/0x400
[  721.099121][T10544]  __x64_sys_openat+0x135/0x160
[  721.103949][T10544]  do_syscall_64+0x4c/0xa0
[  721.108346][T10544]  ? clear_bhb_loop+0x30/0x80
[  721.112997][T10544]  ? clear_bhb_loop+0x30/0x80
[  721.117647][T10544]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  721.123528][T10544] RIP: 0033:0x7f20baa829a9
[  721.127922][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  721.147509][T10544] RSP: 002b:00007f20b88a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  721.155913][T10544] RAX: ffffffffffffffda RBX: 00007f20bacaa160 RCX: 00007f20baa829a9
[  721.163874][T10544] RDX: 0000000000000242 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  721.171834][T10544] RBP: 00007f20bab04d69 R08: 0000000000000000 R09: 0000000000000000
[  721.179804][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  721.187885][T10544] R13: 0000000000000000 R14: 00007f20bacaa160 R15: 00007ffc3f5c4e08
[  721.195886][T10544]  </TASK>
[  721.752741][T10543] loop0: detected capacity change from 0 to 40427
[  721.777787][T10543] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  721.789818][T10546] loop4: detected capacity change from 0 to 32768
[  721.796657][T10543] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  721.818995][T10543] F2FS-fs (loop0): invalid crc value
[  721.905991][   T26] audit: type=1800 audit(1753272218.408:99): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1719" name="file1" dev="loop4" ino=4 res=0 errno=0
[  722.250090][T10543] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  722.328454][T10543] F2FS-fs (loop0): Failed to read root inode
[  722.594716][ T7446] usb 2-1: USB disconnect, device number 20