last executing test programs:

3m13.76744579s ago: executing program 1 (id=440):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
close(r1)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'vxcan1\x00'}}, 0x1e)

3m13.701642682s ago: executing program 1 (id=441):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040))

3m13.633122154s ago: executing program 1 (id=443):
syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x1, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fc07876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

3m13.632636768s ago: executing program 1 (id=445):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000300)='./file2\x00', 0x0)

3m13.497399594s ago: executing program 1 (id=447):
kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0)

3m11.726671636s ago: executing program 1 (id=470):
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x24000420)
r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r0, 0x4, &(0x7f0000000080)=""/164, 0xa4, 0x14, 0x1})
io_uring_enter(r1, 0x48e9, 0x8daf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

3m11.583290216s ago: executing program 32 (id=470):
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x24000420)
r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r0, 0x4, &(0x7f0000000080)=""/164, 0xa4, 0x14, 0x1})
io_uring_enter(r1, 0x48e9, 0x8daf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

2m35.313544899s ago: executing program 2 (id=974):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

2m35.08770806s ago: executing program 2 (id=980):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

2m35.087499686s ago: executing program 2 (id=981):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}]}, 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

2m34.181492109s ago: executing program 2 (id=995):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

2m34.049044116s ago: executing program 2 (id=996):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38"], 0x3, 0x21f, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)

2m33.818957293s ago: executing program 2 (id=1000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
flistxattr(r0, 0x0, 0x0)

2m33.759099454s ago: executing program 33 (id=1000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
flistxattr(r0, 0x0, 0x0)

1m0.603391395s ago: executing program 4 (id=2274):
r0 = fsopen(&(0x7f0000000140)='ocfs2\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r0)

1m0.603269085s ago: executing program 4 (id=2275):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

1m0.529441745s ago: executing program 4 (id=2278):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)

1m0.529139327s ago: executing program 4 (id=2280):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1m0.346344543s ago: executing program 4 (id=2283):
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x18)

1m0.027094702s ago: executing program 4 (id=2287):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0)

59.96036559s ago: executing program 34 (id=2287):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0)

2.503107138s ago: executing program 5 (id=3042):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x80, 0x14, 0x0, 0xfd, 0x1, 0xfe, 0x4, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24040884)

2.499472611s ago: executing program 5 (id=3043):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2.438607794s ago: executing program 5 (id=3045):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f"], 0x0, 0x6e, 0x0, 0x1, 0x20}, 0x28)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa0800093f3f0c0000140001"], 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, '\x00', r2, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.373629349s ago: executing program 5 (id=3047):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
r0 = memfd_secret(0x80000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r2, 0x400448e6, 0x0)
ioctl$sock_bt_hci(r2, 0x400448e6, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0)
ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0)

2.254028261s ago: executing program 3 (id=3050):
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000480)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x1, 0x8})
io_uring_enter(r0, 0x7aaa, 0xfffffffd, 0x0, 0x0, 0x0)

1.974477569s ago: executing program 3 (id=3052):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000050a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140000000000000000028000000000a01040000000000000000030000020900010073797a3000000000080002"], 0xcc}}, 0x0)

1.764413233s ago: executing program 3 (id=3055):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)

1.577682941s ago: executing program 3 (id=3056):
r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x6, 0x8})
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r3, 0x1, 0x0, 0x3})
close_range(r0, 0xffffffffffffffff, 0x0)

1.387305215s ago: executing program 3 (id=3057):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000380)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x401}}, {}, {@fatal_errors_bug}, {@datacow}, {@ssd}, {@clear_cache}, {@nobarrier}, {@nodatacow}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@noflushoncommit}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0)

1.029081075s ago: executing program 5 (id=3062):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f00000014c0)=0x7fff, 0x467d)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

829.408641ms ago: executing program 0 (id=3064):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004140)={&(0x7f0000003f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x2, 0x80000000}, {0x10, 0x6}, {0xe, 0x4}, {0x4, 0x6}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x3}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @struct={0xb, 0x1, 0x0, 0x4, 0x0, 0xfffffff9, [{0x2, 0x5, 0x3}]}]}}, &(0x7f0000004080)=""/148, 0x7e, 0x94, 0x1, 0x5}, 0x28)

749.906327ms ago: executing program 0 (id=3065):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)

588.971432ms ago: executing program 0 (id=3066):
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)

482.82612ms ago: executing program 0 (id=3067):
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r0, 0x0, 0x0)

482.614429ms ago: executing program 0 (id=3068):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000002c0)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000280)=0x40)

423.613717ms ago: executing program 0 (id=3069):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000001840)={0x2020}, 0x45)

423.287951ms ago: executing program 3 (id=3070):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4400c800)
sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$eJzs3c1PHOcdAOB3BlyD6w9wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXtYLrG3ahbVgqXqwFHKzlFOkHKIcrETKjZPFIVfnT8glR+dsKTnkEimSFaLdnYWdYVds0C7EzvMcmJ33e/c3H+8chjdOVB4ureWW1nKFlVx54f7axdz/yqX15WKID0nL/o8dXv90phfHyVEfez9lt65c+8fdiyF8uvj5y+3t7e1Q1R9aGmv6/M3Xjxeatw1xpk613datdcu/Qwjn9oyrqi+E8K9PQohCCJeTtMlkOxhCOBXqeXcfv3Mv16XRPHtRvJR/Nfdka/zC7ObTrfbfPQrhg9Iv//hg+cvf9I1/8fsudQ8AAAAAAAAAAAAAAAAAwGtu+vatO38fHQvPo9C/Ge19X3c62bZ7P3a7a37d+y8LAAAAAAAAAAAAAAAAAAAAP1K77//norMt3v+fSrYTbepv/7VNxvHujpPemPnbramro2PJ+u/Rnvw/JUlfXe4Lwy3Wfc+u/345U7/1+u97+zmoxvga/Q6FKB7ZfmsnfyjE8chICB8lC7+fj07EpfJa5Q/3y+sri10bxmsrHf/66v2p6CQL+nca/8lM+71f//8Xe46m6v697h1ib7R0/Pvalvv47aij+F/J1DuM+HNw6fj319IGmwtM1C8A1fi/279//Kcy7fcq/qdDCLmoOtZc6gpQncNU09vNV0hLx/9YLS116Ux+yHbn/7eZ+F/NtN8u/me69g1aX/83sjciWkrH/2e1tIFUid3zfzje//y/lmn/KO7/1fFvuP93JB3/5KGtP1Wk9kt2ev2fzrTfq/jfiZNxno5SR8BmVE9v9//qSEvHf2BP/u7zX9zR/O96pv5hPf81+q09/zU9h/wuqj//0Vo6/oNty3V6/s9k6vX6+j9Rm/9xUOn4n6ilpefOQ7W/ncZ/NtN+r+Jfm5UMNOK/ez357ng9/UPzv46k4//zemLcXGKj9rc2/4v2n//fyLR/FPO/6vg34t72+qZIx/9k23LV+H/Wwf3/ZqZe7+Mfwqi5/oGl43+qbbna+T+wf/znMvV6Hf/f9rJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNfAZLIdClE8ktqP45GREK4k++fDiWi+sJifL5UX/rsWwlSSngtnowel8nyhlF9aKS8W84VSqbwQwtUk/1wYiNZK5Up+ufDo2k5bg9HDYmG1Ml8sVEII00n6r8KpRlvzS5XlwqMQwvWdvDNxefXRw8JKfnFp9S+jo6OjYWZnDMNR8f+V4kql3ns9N4TZnbpDUdPgatk3dsZyMvpPeX11pVCqpd9sqlMqLxRKTXXmkrz3wnBUWV1fWShUivlS+UGjv6M0kWynZm7/8/bNsT3596L6dvJwhwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD/R8/M/vhxD663txCGGi8SFqVf7Zi+Kl/Ku5J1vjF2Y3n269bFcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBLxygRA1EYgN+Mhdp5DKuQdLYJimhhRPAEegwPE4/iJbyDhYWthQhmBjTuQprd6vuaB/l5eT8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsc3k33t+2XUSKo6/DiJfH17ff+XWZ0zDPvNg/2FNPduPqZjy/aLvy3dO//Kw8eu/zT/r58fQQG2b1PPzdX/5Ps3rneGuvaVjXv/ard08i5SYi+pKfppybZt27AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhmBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//78SIGU=")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r2 = fanotify_init(0x81, 0x0)
fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[@ANYBLOB], 0x2, 0x0)

0s ago: executing program 5 (id=3071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x150, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x134, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x6}}, 0xffffffdfffffffff, @default, 0x1110, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x3, 0x1}, {0xf}]}, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xa, {0x5, 0x97, 0x5, "30f62135e24b89"}}, @val={0x25, 0x3, {0x0, 0xc, 0xa}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @void, [{0xdd, 0x6, "000000f30000"}, {0xdd, 0xd2, "50ededc2f49990dc771a1ce876eb684433b43cff5835f4f612d52d30c5979b12afff2306497eab7440588fd5efc9dc396cb150e91c639f66bce86d6dbf1b47e93c793c1c76b93eb84111e8c89c6bf6f375d4f6f890627e2e002c807133a86620a8b70d7f0bead0a99279398f84386fb6406d91fb34d5c6e6f71e4a0ecff3cab6f99b00cbd84cb46bceb8cf047f6ed440782d81b2cfc99ddf390764764249532db0925c8d7ed0fb1fed4786f3a30a2f6deef14b5510d8d174b087a17048be5f2f8438f31ed00128b7b3c6f8ace8f8a40b7180"}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

pe 10 has an invalid length.
[  151.324784][ T9180] netlink: 'syz.0.1239': attribute type 11 has an invalid length.
[  151.530081][ T9193] loop4: detected capacity change from 0 to 2048
[  151.540715][ T9193] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0)
[  151.950652][ T9196] loop4: detected capacity change from 0 to 128
[  151.972438][ T9196] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  151.984509][ T9196] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  152.054317][ T8460] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.064929][ T9204] tmpfs: Bad value for 'mpol'
[  152.125420][ T9210] program syz.3.1252 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.168624][ T9212] loop4: detected capacity change from 0 to 128
[  152.179684][ T9212] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.190394][ T9212] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  152.207545][ T9212] EXT4-fs warning (device loop4): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled.
[  152.235775][ T8460] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.518420][ T9234] vivid-000: =================  START STATUS  =================
[  152.525484][ T9234] vivid-000: Test Pattern: 75% Colorbar
[  152.533711][ T9234] vivid-000: Fill Percentage of Frame: 100
[  152.542207][ T9234] vivid-000: Horizontal Movement: No Movement
[  152.549322][ T9234] vivid-000: Vertical Movement: No Movement
[  152.555211][ T9234] vivid-000: OSD Text Mode: All
[  152.561829][ T9234] vivid-000: Show Border: false
[  152.567562][ T9234] vivid-000: Show Square: false
[  152.574487][ T9234] vivid-000: Sensor Flipped Horizontally: false
[  152.584127][ T9234] vivid-000: Sensor Flipped Vertically: false
[  152.589812][ T9234] vivid-000: Insert SAV Code in Image: false
[  152.596119][ T9234] vivid-000: Insert EAV Code in Image: false
[  152.602748][ T9234] vivid-000: Insert Video Guard Band: false
[  152.608148][ T9234] vivid-000: Reduced Framerate: false
[  152.631881][ T9234] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  152.637929][ T9234] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  152.643037][ T9234] vivid-000: Enable Capture Cropping: true
[  152.647262][ T9234] vivid-000: Enable Capture Composing: true
[  152.653258][ T9234] vivid-000: Enable Capture Scaler: true
[  152.658989][ T9234] vivid-000: Timestamp Source: End of Frame
[  152.664245][ T9234] vivid-000: Colorspace: sRGB
[  152.668687][ T9234] vivid-000: Transfer Function: Default
[  152.671113][ T9234] vivid-000: Y'CbCr Encoding: Default
[  152.699689][ T9234] vivid-000: HSV Encoding: Hue 0-179
[  152.702471][ T9234] vivid-000: Quantization: Default
[  152.704580][ T9234] vivid-000: Apply Alpha To Red Only: false
[  152.706777][ T9234] vivid-000: Standard Aspect Ratio: 4x3
[  152.706825][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'.
[  152.708672][ T9234] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  152.715115][ T9234] vivid-000: DV Timings: 640x480p59 inactive
[  152.718701][ T9234] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  152.721754][ T9234] vivid-000: Maximum EDID Blocks: 2
[  152.724011][ T9234] vivid-000: Limited RGB Range (16-235): false
[  152.726981][ T9234] vivid-000: Rx RGB Quantization Range: Automatic
[  152.732825][ T9234] vivid-000: Power Present: 0x00000001
[  152.735199][ T9234] tpg source WxH: 320x240 (Y'CbCr)
[  152.737399][ T9234] tpg field: 1
[  152.738904][ T9234] tpg crop: (0,0)/320x240
[  152.763119][ T9234] tpg compose: (0,0)/320x240
[  152.766142][ T9234] tpg colorspace: 8
[  152.769687][ T9234] tpg transfer function: 0/0
[  152.771363][ T9234] tpg Y'CbCr encoding: 0/0
[  152.782634][ T9234] tpg quantization: 0/0
[  152.785207][ T9234] tpg RGB range: 0/2
[  152.786935][ T9234] vivid-000: ==================  END STATUS  ==================
[  153.610835][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1278'.
[  154.122040][ T9306] loop4: detected capacity change from 0 to 64
[  154.416894][ T9310] loop4: detected capacity change from 0 to 32768
[  154.434959][ T9310] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  154.449034][ T9310] (syz.4.1296,9310,1):ocfs2_mknod:505 ERROR: status = -31
[  154.453775][ T9310] (syz.4.1296,9310,1):ocfs2_mkdir:661 ERROR: status = -31
[  154.484164][ T8460] ocfs2: Unmounting device (7,4) on (node local)
[  155.263840][ T9330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1304'.
[  155.596674][ T9350] netlink: 'syz.4.1314': attribute type 7 has an invalid length.
[  155.704481][ T9360] ipvlan2: entered promiscuous mode
[  155.710973][ T9360] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  155.716848][ T9360] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  155.739535][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  155.910001][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  155.914201][   T24] usb 4-1: config 5 has an invalid interface number: 58 but max is 0
[  155.919968][   T24] usb 4-1: config 5 has no interface number 0
[  155.922335][   T24] usb 4-1: config 5 interface 58 has no altsetting 0
[  155.928993][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= a.af
[  155.934542][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.938848][   T24] usb 4-1: Product: syz
[  155.940603][   T24] usb 4-1: Manufacturer: syz
[  155.942615][   T24] usb 4-1: SerialNumber: syz
[  156.065096][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  156.183671][   T24] usb 4-1: USB disconnect, device number 8
[  156.246500][    T9] usb 5-1: Using ep0 maxpacket: 16
[  156.250647][    T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  156.254262][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.259089][    T9] usb 5-1: config 0 has no interface number 0
[  156.262177][    T9] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  156.271826][    T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  156.275667][    T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  156.286166][    T9] usb 5-1: Product: syz
[  156.288537][    T9] usb 5-1: SerialNumber: syz
[  156.299209][    T9] usb 5-1: config 0 descriptor??
[  156.305153][    T9] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  156.527449][    T9] usb 5-1: USB disconnect, device number 3
[  157.743274][ T5939] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  157.827219][ T9421] loop3: detected capacity change from 0 to 8
[  157.851024][ T9421] SQUASHFS error: xz decompression failed, data probably corrupt
[  157.854388][ T9421] SQUASHFS error: Failed to read block 0x108: -5
[  157.857204][ T9421] SQUASHFS error: Unable to read metadata cache entry [106]
[  157.874724][ T9421] SQUASHFS error: Unable to read inode 0x11f
[  157.946367][ T5939] usb 5-1: Using ep0 maxpacket: 16
[  157.950448][ T5939] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  157.954005][ T5939] usb 5-1: config 1 has no interface number 0
[  157.956877][ T5939] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  157.961086][ T5939] usb 5-1: config 1 interface 105 has no altsetting 0
[  157.968907][ T5939] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  157.971903][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.974547][ T5939] usb 5-1: Product: syz
[  157.975956][ T5939] usb 5-1: Manufacturer: syz
[  157.983031][ T5939] usb 5-1: SerialNumber: syz
[  157.990188][ T9409] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  158.218271][ T5939] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22
[  158.267243][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  158.381045][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'.
[  158.385786][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'.
[  158.429141][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  158.432675][    T9] usb 4-1: config 4 has an invalid interface number: 214 but max is 0
[  158.435398][    T9] usb 4-1: config 4 has no interface number 0
[  158.437466][    T9] usb 4-1: config 4 interface 214 has no altsetting 0
[  158.443212][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=87.6e
[  158.445095][ T5939] usb 5-1: USB disconnect, device number 4
[  158.446995][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.459244][    T9] usb 4-1: Product: syz
[  158.462961][    T9] usb 4-1: Manufacturer: syz
[  158.464881][    T9] usb 4-1: SerialNumber: syz
[  158.533999][ T9441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  158.696998][    T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.214/input/input5
[  158.704846][ T5281] bcm5974 4-1:4.214: could not read from device
[  158.713052][ T5281] bcm5974 4-1:4.214: could not read from device
[  158.714835][    T9] usb 4-1: USB disconnect, device number 9
[  158.733747][ T5852] udevd[5852]: setting mode of /dev/bus/usb/004/009 to 020664 failed: No such file or directory
[  158.740684][ T5852] udevd[5852]: setting owner of /dev/bus/usb/004/009 to uid=0, gid=0 failed: No such file or directory
[  159.278877][ T9458] ip6erspan0: entered promiscuous mode
[  159.328158][ T9460] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1363'.
[  159.456268][ T9464] loop3: detected capacity change from 0 to 8192
[  159.477363][ T5939] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  159.590130][ T9468] loop3: detected capacity change from 0 to 4096
[  159.597172][ T9468] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  159.624174][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'.
[  159.635790][ T5939] usb 5-1: Using ep0 maxpacket: 32
[  159.639205][ T5939] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  159.642262][ T5939] usb 5-1: config 0 has no interface number 0
[  159.647728][ T5939] usb 5-1: config 0 interface 184 has no altsetting 0
[  159.652179][ T5939] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  159.660229][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.663442][ T5939] usb 5-1: Product: syz
[  159.665965][ T5939] usb 5-1: Manufacturer: syz
[  159.668248][ T5939] usb 5-1: SerialNumber: syz
[  159.674082][ T5939] usb 5-1: config 0 descriptor??
[  159.680981][ T5939] smsc75xx v1.0.0
[  159.687510][ T9472] netlink: 'syz.3.1369': attribute type 2 has an invalid length.
[  159.690347][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  159.906184][ T9478] io-wq is not configured for unbound workers
[  160.266229][ T1286] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  160.328043][ T5939] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  160.331855][ T5939] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  160.438437][ T1286] usb 4-1: Using ep0 maxpacket: 16
[  160.442916][ T1286] usb 4-1: config 0 has an invalid interface number: 79 but max is 0
[  160.446382][ T1286] usb 4-1: config 0 has no interface number 0
[  160.451907][ T1286] usb 4-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=c3.6f
[  160.455691][ T1286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.458850][ T1286] usb 4-1: Product: syz
[  160.460717][ T1286] usb 4-1: Manufacturer: syz
[  160.462757][ T1286] usb 4-1: SerialNumber: syz
[  160.467904][ T1286] usb 4-1: config 0 descriptor??
[  160.688001][ T1286] cdc_subset 4-1:0.79: probe with driver cdc_subset failed with error -71
[  160.694953][ T1286] usb 4-1: USB disconnect, device number 10
[  161.267076][ T9503] loop3: detected capacity change from 0 to 512
[  161.272510][ T9503] EXT4-fs: Ignoring removed mblk_io_submit option
[  161.287317][ T9503] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  161.290227][ T9503] EXT4-fs (loop3): orphan cleanup on readonly fs
[  161.293661][ T9503] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  161.299068][ T9503] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  161.307733][ T9503] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  161.313199][ T9503] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1382: bg 0: block 40: padding at end of block bitmap is not set
[  161.324300][ T9503] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  161.328763][ T9503] EXT4-fs (loop3): 1 truncate cleaned up
[  161.331479][ T9503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.338420][ T9503] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1382: bad symlink.
[  161.352730][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.682556][ T9531] netlink: 'syz.0.1394': attribute type 1 has an invalid length.
[  161.685259][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1394'.
[  161.710802][ T9533] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1395'.
[  161.865861][ T9541] overlayfs: failed to clone upperpath
[  162.057452][ T5939] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71
[  162.062790][ T5939] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71
[  162.068754][ T5939] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  162.073071][ T5939] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  162.077702][ T5939] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  162.088219][ T5939] usb 5-1: USB disconnect, device number 5
[  162.455250][ T9580] loop3: detected capacity change from 0 to 4096
[  162.474649][ T9584] vlan3: entered allmulticast mode
[  162.476746][ T9584] macvlan0: entered allmulticast mode
[  162.529087][ T9586] netlink: 'syz.3.1421': attribute type 2 has an invalid length.
[  162.533732][ T9586] netlink: 'syz.3.1421': attribute type 1 has an invalid length.
[  162.584762][ T9592] [U] 1WT`8H$09\
[  162.587076][ T9592] [U] ;2}UGVĥ#O9ե>-ߴSݢP
[  162.589922][ T9591] [U] 4XZ^Y)MC.OȞPOW
[  162.622382][ T2327] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  162.624951][ T2327] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  162.627423][ T2327] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  162.645784][ T2327] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  162.896124][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  162.960224][ T2327] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  163.067256][   T24] usb 5-1: Using ep0 maxpacket: 8
[  163.071530][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  163.075208][   T24] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8
[  163.078785][   T24] usb 5-1: config 8 interface 0 has no altsetting 0
[  163.084182][   T24] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  163.088188][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.092391][   T24] usb 5-1: Product: syz
[  163.094159][   T24] usb 5-1: Manufacturer: syz
[  163.096046][   T24] usb 5-1: SerialNumber: syz
[  163.101153][ T9597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  163.120593][ T2327] usb 4-1: Using ep0 maxpacket: 8
[  163.124334][ T2327] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  163.127979][ T2327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.135440][ T2327] usb 4-1: config 0 descriptor??
[  163.333188][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  163.337912][   T24] usb 5-1: selecting invalid altsetting 0
[  163.364343][   T24] usb 5-1: USB disconnect, device number 6
[  163.392695][ T5852] udevd[5852]: setting mode of /dev/bus/usb/005/006 to 020664 failed: No such file or directory
[  163.397222][ T5852] udevd[5852]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory
[  163.412356][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.814167][ T2327] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  163.826310][ T2327] asix 4-1:0.0: probe with driver asix failed with error -32
[  163.986083][   T24] usb 4-1: USB disconnect, device number 11
[  165.262171][   T33] audit: type=1800 audit(1755338595.437:17): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1464" name="/" dev="9p" ino=2 res=0 errno=0
[  165.465918][ T9690] loop4: detected capacity change from 0 to 2048
[  165.482469][ T9690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.512215][ T9690] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  165.593637][ T8460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.695715][   T33] audit: type=1326 audit(1755338595.849:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.0.1474" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f040458ebe9 code=0x0
[  166.006024][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'.
[  166.703169][ T5939] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  166.878164][ T5939] usb 4-1: config 1 interface 0 has no altsetting 0
[  166.885973][ T5939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  166.889064][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.891547][ T5939] usb 4-1: Product: syz
[  166.892946][ T5939] usb 4-1: Manufacturer: syz
[  166.894711][ T5939] usb 4-1: SerialNumber: syz
[  167.136706][ T5939] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  167.146449][ T5939] usb 4-1: USB disconnect, device number 12
[  167.155603][ T5939] usblp0: removed
[  167.232532][ T9791] overlayfs: failed to clone upperpath
[  168.198280][ T9819] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1523'.
[  168.327467][ T9823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.533645][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1531'.
[  168.684592][ T9840] overlayfs: failed to clone upperpath
[  169.107678][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'.
[  169.111315][ T9846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.335684][ T9848] loop3: detected capacity change from 0 to 32768
[  169.349644][ T9848] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1534 (9848)
[  169.382283][ T9848] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  169.396673][ T9848] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  169.465447][ T9848] BTRFS info (device loop3): rebuilding free space tree
[  169.485245][ T9848] BTRFS info (device loop3): disabling free space tree
[  169.487899][ T9848] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.491819][ T9848] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  170.696750][ T7049] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  171.848208][   T33] audit: type=1326 audit(1755338601.602:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.0.1550" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x0
[  173.091478][ T9926] loop3: detected capacity change from 0 to 32768
[  173.108013][ T9926] XFS (loop3): alignment check failed: sunit/swidth vs. blocksize(4096)
[  175.197358][ T9960] loop4: detected capacity change from 0 to 1024
[  175.296496][ T3641] hfsplus: b-tree write err: -5, ino 3
[  175.311299][ T8460] hfsplus: node 4:3 still has 3 user(s)!
[  175.330785][ T9966] loop4: detected capacity change from 0 to 64
[  175.365182][ T9966] minix_free_block (loop4:21): bit already cleared
[  175.420409][ T9969] loop4: detected capacity change from 0 to 512
[  175.424266][ T9969] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  175.435229][ T9969] EXT4-fs (loop4): 1 truncate cleaned up
[  175.442252][ T9969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.477821][ T8460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.542752][ T9973] loop4: detected capacity change from 0 to 4096
[  175.670797][ T9977] netlink: 'syz.4.1577': attribute type 3 has an invalid length.
[  176.460003][ T9993] loop3: detected capacity change from 0 to 32768
[  176.466931][ T9993] XFS: ikeep mount option is deprecated.
[  176.469286][ T9993] XFS: ikeep mount option is deprecated.
[  176.505172][ T9993] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  176.508406][ T9993] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.546255][ T9993] XFS (loop3): Ending clean mount
[  176.556221][ T9993] XFS (loop3): Quotacheck needed: Please wait.
[  176.583469][ T9993] XFS (loop3): Quotacheck: Done.
[  176.621616][ T7049] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  177.167812][T10015] loop4: detected capacity change from 0 to 1024
[  177.191166][T10015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.197681][T10021] loop3: detected capacity change from 0 to 2
[  177.210568][T10015] EXT4-fs error (device loop4): ext4_get_first_dir_block:3556: inode #11: comm syz.4.1592: directory missing '..'
[  177.212081][T10021] jffs2: Bad value for 'rp_size'
[  177.217646][T10015] EXT4-fs (loop4): Remounting filesystem read-only
[  177.242738][ T8460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.294210][T10025] netdevsim netdevsim4: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component
[  177.558928][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'.
[  177.561724][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'.
[  177.567181][T10052] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1608'.
[  177.633592][T10056] loop4: detected capacity change from 0 to 512
[  177.640423][T10056] EXT4-fs: Ignoring removed i_version option
[  177.648321][T10056] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  177.660636][T10056] EXT4-fs (loop4): 1 truncate cleaned up
[  177.663264][T10056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.424733][   T33] audit: type=1804 audit(1755338607.654:20): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1610" name="/newroot/150/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  179.238478][T10088] kAFS: No cell specified
[  179.315571][T10092] sctp: [Deprecated]: syz.0.1625 (pid 10092) Use of int in maxseg socket option.
[  179.315571][T10092] Use struct sctp_assoc_value instead
[  179.757264][T10123] loop3: detected capacity change from 0 to 16
[  179.761098][T10123] erofs (device loop3): mounted with root inode @ nid 36.
[  179.770423][T10123] erofs (device loop3): bogus dirent @ nid 36
[  180.907545][ T8460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.995942][T10141] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1647'.
[  181.094337][T10145] loop4: detected capacity change from 0 to 4096
[  181.110972][T10148] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.132697][   T33] audit: type=1800 audit(1755338610.282:21): pid=10145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1649" name="file1" dev="loop4" ino=15 res=0 errno=0
[  181.371174][T10147] loop3: detected capacity change from 0 to 32768
[  181.385600][T10147] find_entry called with index = 0
[  181.556453][T10166] loop3: detected capacity change from 0 to 16
[  181.560584][T10166] erofs (device loop3): mounted with root inode @ nid 36.
[  181.571955][   T33] audit: type=1800 audit(1755338610.694:22): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1658" name="file1" dev="loop3" ino=86 res=0 errno=0
[  181.722347][ T2327] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  181.882730][ T2327] usb 5-1: Using ep0 maxpacket: 32
[  181.888774][ T2327] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  181.902233][ T2327] usb 5-1: config 0 has no interface number 0
[  181.905275][ T2327] usb 5-1: config 0 interface 31 has no altsetting 0
[  181.910413][ T2327] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=34.16
[  181.914235][ T2327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.917754][ T2327] usb 5-1: Product: syz
[  181.919890][ T2327] usb 5-1: Manufacturer: syz
[  181.922095][ T2327] usb 5-1: SerialNumber: syz
[  181.931874][ T2327] usb 5-1: config 0 descriptor??
[  181.940034][ T2327] port100 5-1:0.31: NFC: Could not find bulk-in or bulk-out endpoint
[  182.158045][ T2327] usb 5-1: USB disconnect, device number 7
[  182.897822][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  182.983481][T10205] loop4: detected capacity change from 0 to 512
[  183.007199][T10205] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.057383][T10205] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  183.894405][ T5939] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  184.063660][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  184.088654][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  184.093187][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.097724][ T5939] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  184.106560][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.256184][ T5939] usb 5-1: config 0 descriptor??
[  184.677501][T10243] netlink: 'syz.0.1693': attribute type 1 has an invalid length.
[  184.680167][T10243] netlink: 'syz.0.1693': attribute type 2 has an invalid length.
[  184.684469][T10243] netlink: 'syz.0.1693': attribute type 1 has an invalid length.
[  184.687665][T10243] netlink: 'syz.0.1693': attribute type 2 has an invalid length.
[  184.714540][T10245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1694'.
[  184.841607][ T5939] samsung 0003:0419:0001.0003: item 0 2 0 8 parsing failed
[  184.845967][ T5939] samsung 0003:0419:0001.0003: parse failed
[  184.848288][ T5939] samsung 0003:0419:0001.0003: probe with driver samsung failed with error -22
[  185.067563][ T2327] usb 5-1: USB disconnect, device number 8
[  185.613610][ T5939] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  185.780091][ T5939] usb 4-1: config 0 has an invalid interface number: 182 but max is 1
[  185.789326][ T5939] usb 4-1: config 0 has no interface number 1
[  185.796656][ T5939] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  185.802764][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.837290][ T5939] usb 4-1: config 0 descriptor??
[  186.087882][ T5939] usb 4-1: USB disconnect, device number 13
[  186.287307][ T5847] Bluetooth: hci0: command 0x0406 tx timeout
[  186.399067][T10291] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1714'.
[  186.402248][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1714'.
[  186.406186][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'.
[  186.442125][T10293] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1715'.
[  186.619327][T10306] loop4: detected capacity change from 0 to 256
[  186.637496][T10306] FAT-fs (loop4): Directory bread(block 64) failed
[  186.643477][T10306] FAT-fs (loop4): Directory bread(block 65) failed
[  186.646406][T10306] FAT-fs (loop4): Directory bread(block 66) failed
[  186.649133][T10306] FAT-fs (loop4): Directory bread(block 67) failed
[  186.652351][T10306] FAT-fs (loop4): Directory bread(block 68) failed
[  186.655114][T10306] FAT-fs (loop4): Directory bread(block 69) failed
[  186.657885][T10306] FAT-fs (loop4): Directory bread(block 70) failed
[  186.660522][T10306] FAT-fs (loop4): Directory bread(block 71) failed
[  186.665633][T10306] FAT-fs (loop4): Directory bread(block 72) failed
[  186.668463][T10306] FAT-fs (loop4): Directory bread(block 73) failed
[  186.867201][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'.
[  186.871642][T10320] veth0_to_bond: entered allmulticast mode
[  187.411240][T10331] loop3: detected capacity change from 0 to 4096
[  187.436466][T10331] EXT4-fs: Ignoring removed mblk_io_submit option
[  187.471191][T10331] EXT4-fs (loop3): Test dummy encryption mode enabled
[  187.504290][T10331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.533599][T10331] futex_wake_op: syz.3.1731 tries to shift op by -1; fix this program
[  187.946679][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  188.106398][   T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  188.112025][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.120840][   T24] usb 5-1: config 0 descriptor??
[  188.127570][   T24] cp210x 5-1:0.0: cp210x converter detected
[  188.175578][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.418060][T10374] loop3: detected capacity change from 0 to 4096
[  188.447466][T10374] ntfs3(loop3): MFT: r=19, expect seq=1 instead of a48d!
[  188.450586][T10374] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  188.584054][T10380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.638758][T10382] bridge_slave_1: left allmulticast mode
[  188.641469][T10382] bridge_slave_1: left promiscuous mode
[  188.644121][T10382] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.649760][T10382] bridge_slave_0: left allmulticast mode
[  188.652162][T10382] bridge_slave_0: left promiscuous mode
[  188.654762][T10382] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.776485][   T24] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  188.780417][   T24] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  188.787329][   T24] usb 5-1: cp210x converter now attached to ttyUSB0
[  188.794979][   T24] usb 5-1: USB disconnect, device number 9
[  188.821346][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  188.826697][   T24] cp210x 5-1:0.0: device disconnected
[  189.078263][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'.
[  189.681856][ T5847] Bluetooth: hci0: unexpected event for opcode 0x0c1c
[  190.317683][   T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  190.492719][   T10] usb 5-1: config 0 has an invalid interface number: 175 but max is 0
[  190.497037][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.504638][   T10] usb 5-1: config 0 has no interface number 0
[  190.507434][   T10] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  190.513940][   T10] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  190.518603][   T10] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  190.523623][   T10] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  190.532266][   T10] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  190.536342][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.539798][   T10] usb 5-1: Product: syz
[  190.541766][   T10] usb 5-1: Manufacturer: syz
[  190.545647][   T10] usb 5-1: SerialNumber: syz
[  190.553041][   T10] usb 5-1: config 0 descriptor??
[  190.561019][   T10] symbolserial 5-1:0.175: symbol converter detected
[  190.568460][   T10] usb 5-1: symbol converter now attached to ttyUSB0
[  190.793037][   T10] usb 5-1: USB disconnect, device number 10
[  190.823813][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'.
[  190.834379][   T10] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  190.838166][   T10] symbolserial 5-1:0.175: device disconnected
[  191.592310][T10481] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1800'.
[  191.695520][T10486] tipc: Started in network mode
[  191.698361][T10486] tipc: Node identity 7, cluster identity 4711
[  191.701454][T10486] tipc: Node number set to 7
[  192.394562][T10520] macsec0: entered promiscuous mode
[  192.396921][T10520] macsec0: entered allmulticast mode
[  192.399326][T10520] veth1_macvtap: entered allmulticast mode
[  192.405220][T10520] batman_adv: batadv0: Adding interface: macsec0
[  192.408169][T10520] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.418710][T10520] batman_adv: batadv0: Interface activated: macsec0
[  192.464210][T10526] loop3: detected capacity change from 0 to 1024
[  192.467284][T10526] EXT4-fs: Ignoring removed oldalloc option
[  192.469216][T10526] EXT4-fs: Ignoring removed bh option
[  192.498931][T10526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.513557][T10526] EXT4-fs: Ignoring removed orlov option
[  192.517548][T10526] EXT4-fs (loop3): can't enable nombcache during remount
[  192.617646][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.629724][   T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  192.800909][   T24] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  192.811654][   T24] usb 5-1: config 0 has no interface number 0
[  192.818227][   T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  192.822316][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.827299][   T24] usb 5-1: Product: syz
[  192.829116][   T24] usb 5-1: Manufacturer: syz
[  192.831226][   T24] usb 5-1: SerialNumber: syz
[  192.847014][   T24] usb 5-1: config 0 descriptor??
[  193.284970][   T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  193.292529][   T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  193.298364][   T24] asix 5-1:0.251: probe with driver asix failed with error -5
[  193.306825][   T24] usb 5-1: USB disconnect, device number 11
[  194.094782][T10550] loop3: detected capacity change from 0 to 2048
[  194.305807][T10550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.315912][T10550] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.333294][   T33] audit: type=1804 audit(1755338623.634:23): pid=10550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1830" name="/newroot/363/file0/file1" dev="loop3" ino=15 res=1 errno=0
[  194.373636][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.489764][T10565] loop3: detected capacity change from 0 to 256
[  194.507551][T10565] FAT-fs (loop3): Directory bread(block 64) failed
[  194.510617][T10565] FAT-fs (loop3): Directory bread(block 65) failed
[  194.513183][T10565] FAT-fs (loop3): Directory bread(block 66) failed
[  194.515522][T10565] FAT-fs (loop3): Directory bread(block 67) failed
[  194.517890][T10565] FAT-fs (loop3): Directory bread(block 68) failed
[  194.520617][T10565] FAT-fs (loop3): Directory bread(block 69) failed
[  194.524529][T10565] FAT-fs (loop3): Directory bread(block 70) failed
[  194.527022][T10565] FAT-fs (loop3): Directory bread(block 71) failed
[  194.532222][T10565] FAT-fs (loop3): Directory bread(block 72) failed
[  194.534913][T10565] FAT-fs (loop3): Directory bread(block 73) failed
[  194.634767][T10574] loop4: detected capacity change from 0 to 128
[  194.723015][T10574] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  194.729659][T10574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.199982][   T33] audit: type=1326 audit(1755338624.448:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  195.220840][   T33] audit: type=1326 audit(1755338624.448:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  195.251682][   T33] audit: type=1326 audit(1755338624.457:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  195.280906][   T33] audit: type=1326 audit(1755338624.457:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f040458ec23 code=0x7ffc0000
[  195.316170][   T33] audit: type=1326 audit(1755338624.457:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f040458d69f code=0x7ffc0000
[  195.371022][   T33] audit: type=1326 audit(1755338624.467:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f040458ec77 code=0x7ffc0000
[  195.478535][   T33] audit: type=1326 audit(1755338624.467:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f040458d550 code=0x7ffc0000
[  195.564966][   T33] audit: type=1326 audit(1755338624.467:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f040458d84a code=0x7ffc0000
[  195.623005][   T33] audit: type=1326 audit(1755338624.467:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  195.649261][T10613] loop4: detected capacity change from 0 to 4096
[  195.660768][T10613] ntfs3(loop4): mft corrupted
[  195.662691][T10613] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  195.673013][T10613] ntfs3(loop4): ino=1a, mi_enum_attr
[  195.675635][T10613] ntfs3(loop4): ino=1a, mi_enum_attr
[  195.677663][T10613] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  195.720525][T10620] can: request_module (can-proto-0) failed.
[  196.159625][T10640] loop3: detected capacity change from 0 to 512
[  196.182451][T10640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.189771][T10640] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.231886][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.313641][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1869'.
[  197.111930][T10663] team_slave_1: entered promiscuous mode
[  197.114898][T10663] netlink: 'syz.0.1876': attribute type 10 has an invalid length.
[  197.127172][T10661] Falling back ldisc for ttyS3.
[  197.131830][T10663] team0: Port device team_slave_0 removed
[  197.168895][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'.
[  197.204557][T10669] random: crng reseeded on system resumption
[  197.916933][T10696] ieee802154 phy0 wpan0: encryption failed: -22
[  197.993683][T10699] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  198.123808][T10709] loop3: detected capacity change from 0 to 64
[  198.127990][T10709] MINIX-fs: mounting file system with errors, running fsck is recommended
[  198.523485][T10713] loop3: detected capacity change from 0 to 512
[  198.785351][T10727] loop3: detected capacity change from 0 to 32768
[  198.795742][T10727] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1906 (10727)
[  198.805316][T10727] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  198.809792][T10727] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  198.813408][T10727] BTRFS info (device loop3): using free-space-tree
[  198.908334][T10750] loop4: detected capacity change from 0 to 8
[  199.033008][T10750] SQUASHFS error: xz decompression failed, data probably corrupt
[  199.062516][T10750] SQUASHFS error: Failed to read block 0xa8: -5
[  199.069851][T10750] SQUASHFS error: xz decompression failed, data probably corrupt
[  199.073318][T10750] SQUASHFS error: Failed to read block 0xa8: -5
[  199.501343][T10756] netlink: 'syz.0.1912': attribute type 12 has an invalid length.
[  199.558388][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  199.560591][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  199.684966][ T7049] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  200.733119][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  200.733132][   T33] audit: type=1326 audit(1755338629.621:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1918" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  200.761560][   T33] audit: type=1326 audit(1755338629.621:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1918" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  200.788722][   T33] audit: type=1326 audit(1755338629.621:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1918" exe="/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  200.811190][   T33] audit: type=1326 audit(1755338629.621:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1918" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  200.825905][   T33] audit: type=1326 audit(1755338629.621:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1918" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  200.843866][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'.
[  200.860999][T10779] delete_channel: no stack
[  201.236037][T10807] netlink: 'syz.4.1933': attribute type 1 has an invalid length.
[  201.239339][T10807] netlink: 'syz.4.1933': attribute type 4 has an invalid length.
[  201.242612][T10807] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1933'.
[  201.257232][T10807] netlink: 'syz.4.1933': attribute type 1 has an invalid length.
[  201.266606][T10807] netlink: 'syz.4.1933': attribute type 4 has an invalid length.
[  201.270578][T10807] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1933'.
[  201.362659][T10815] openvswitch: netlink: Actions may not be safe on all matching packets
[  201.559868][T10830] loop3: detected capacity change from 0 to 1024
[  201.578587][T10830] ext4: Unknown parameter 'uid<00000000000000000000'
[  201.589842][   T33] audit: type=1326 audit(1755338630.416:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.3.1943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0a58ebe9 code=0x7ffc0000
[  201.607434][   T33] audit: type=1326 audit(1755338630.425:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.3.1943" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2a0a58ebe9 code=0x7ffc0000
[  201.627512][   T33] audit: type=1326 audit(1755338630.435:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10835 comm="syz.3.1943" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a0a5c14a5 code=0x7ffc0000
[  201.638364][   T33] audit: type=1326 audit(1755338630.435:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.3.1943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0a58ebe9 code=0x7ffc0000
[  201.657381][   T33] audit: type=1326 audit(1755338630.435:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.3.1943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0a58ebe9 code=0x7ffc0000
[  201.672053][T10838] sctp: [Deprecated]: syz.0.1945 (pid 10838) Use of struct sctp_assoc_value in delayed_ack socket option.
[  201.672053][T10838] Use struct sctp_sack_info instead
[  201.815816][T10843] loop3: detected capacity change from 0 to 64
[  202.084372][T10853] loop3: detected capacity change from 0 to 2048
[  202.102132][T10853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.491812][T10882] loop4: detected capacity change from 0 to 512
[  202.544799][T10882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.550815][T10882] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.615970][T10882] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  202.670743][ T8460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.778421][T10904] loop4: detected capacity change from 0 to 128
[  203.021994][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1980'.
[  203.025368][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1980'.
[  203.167788][ T8564] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  203.330417][ T8564] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  203.337421][ T8564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.347001][ T8564] usb 4-1: config 0 descriptor??
[  203.369780][ T8564] cp210x 4-1:0.0: cp210x converter detected
[  203.663182][ T8564] usb 4-1: cp210x converter now attached to ttyUSB0
[  203.894554][   T10] usb 4-1: USB disconnect, device number 14
[  203.939108][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  203.953581][   T10] cp210x 4-1:0.0: device disconnected
[  204.238392][T10942] loop4: detected capacity change from 0 to 256
[  204.245635][T10942] exfat: Deprecated parameter 'utf8'
[  204.249865][T10942] exfat: Deprecated parameter 'utf8'
[  204.251967][T10942] exfat: Deprecated parameter 'utf8'
[  204.261877][T10942] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  204.922404][T11000] wg2: entered promiscuous mode
[  204.924182][T11000] wg2: entered allmulticast mode
[  205.134701][ T5939] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  205.318181][ T5939] usb 5-1: config 0 has an invalid interface number: 112 but max is 0
[  205.321817][ T5939] usb 5-1: config 0 has no interface number 0
[  205.324558][ T5939] usb 5-1: config 0 interface 112 has no altsetting 0
[  205.330124][ T5939] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d2.9e
[  205.334474][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.338388][ T5939] usb 5-1: Product: syz
[  205.340121][ T5939] usb 5-1: Manufacturer: syz
[  205.342061][ T5939] usb 5-1: SerialNumber: syz
[  205.350109][ T5939] usb 5-1: config 0 descriptor??
[  205.354663][ T5939] kl5kusb105 5-1:0.112: KL5KUSB105D / PalmConnect converter detected
[  205.361129][ T5939] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  205.571040][   T10] usb 5-1: USB disconnect, device number 12
[  205.579208][   T10] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  205.584809][   T10] kl5kusb105 5-1:0.112: device disconnected
[  205.643714][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2025'.
[  206.243317][T11033] loop4: detected capacity change from 0 to 256
[  206.255383][T11033] FAT-fs (loop4): Directory bread(block 64) failed
[  206.258074][T11033] FAT-fs (loop4): Directory bread(block 65) failed
[  206.260717][T11033] FAT-fs (loop4): Directory bread(block 66) failed
[  206.263120][T11033] FAT-fs (loop4): Directory bread(block 67) failed
[  206.265578][T11033] FAT-fs (loop4): Directory bread(block 68) failed
[  206.271696][T11033] FAT-fs (loop4): Directory bread(block 69) failed
[  206.274197][T11033] FAT-fs (loop4): Directory bread(block 70) failed
[  206.276572][T11033] FAT-fs (loop4): Directory bread(block 71) failed
[  206.279496][T11033] FAT-fs (loop4): Directory bread(block 72) failed
[  206.282107][T11033] FAT-fs (loop4): Directory bread(block 73) failed
[  206.820414][T11041] loop4: detected capacity change from 0 to 32768
[  206.933607][T11041] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  207.128729][ T8460] ocfs2: Unmounting device (7,4) on (node local)
[  207.374313][T11064] nfs: Deprecated parameter 'nointr'
[  207.733686][   T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  207.909600][   T24] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  207.919876][   T24] usb 5-1: config 0 has no interface number 0
[  207.921979][   T24] usb 5-1: config 0 interface 29 has no altsetting 0
[  207.929122][   T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  207.932705][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.941463][   T24] usb 5-1: Product: syz
[  207.943496][   T24] usb 5-1: Manufacturer: syz
[  207.945047][   T24] usb 5-1: SerialNumber: syz
[  207.953227][   T24] usb 5-1: config 0 descriptor??
[  208.179754][   T24] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  208.384649][ T5939] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  208.392791][   T24] peak_usb 5-1:0.29 can0: sending command failure: -22
[  208.395966][   T24] peak_usb 5-1:0.29 can0: sending command failure: -22
[  208.399095][   T24] peak_usb 5-1:0.29 can0: sending command failure: -22
[  208.461021][   T24] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22
[  208.547693][ T5939] usb 4-1: config 0 has an invalid interface number: 194 but max is 0
[  208.551245][ T5939] usb 4-1: config 0 has no interface number 0
[  208.556856][ T5939] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2
[  208.560645][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.565509][ T5939] usb 4-1: Product: syz
[  208.567570][ T5939] usb 4-1: Manufacturer: syz
[  208.569848][ T5939] usb 4-1: SerialNumber: syz
[  208.574005][ T5939] usb 4-1: config 0 descriptor??
[  208.618597][   T24] usb 5-1: USB disconnect, device number 13
[  208.800598][ T5939] f81534a_ctrl 4-1:0.194: failed to set register 0x116: -5
[  208.804349][ T5939] f81534a_ctrl 4-1:0.194: failed to enable ports: -5
[  208.807270][ T5939] f81534a_ctrl 4-1:0.194: probe with driver f81534a_ctrl failed with error -5
[  208.828753][ T5939] usb 4-1: USB disconnect, device number 15
[  209.290532][T11147] loop4: detected capacity change from 0 to 512
[  209.298609][T11147] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  209.310079][T11147] EXT4-fs (loop4): 1 truncate cleaned up
[  209.313693][T11147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.328496][   T33] kauditd_printk_skb: 26 callbacks suppressed
[  209.328505][   T33] audit: type=1800 audit(1755338637.665:72): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2089" name="file2" dev="loop4" ino=16 res=0 errno=0
[  209.461988][ T8460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.537505][T11165] sock: sock_set_timeout: `syz.4.2096' (pid 11165) tries to set negative timeout
[  209.589420][T11171] loop4: detected capacity change from 0 to 1024
[  209.595542][T11171] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  209.610588][T11171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.644591][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2100'.
[  209.663959][ T8460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.790475][   T55] block nbd3: Receive control failed (result -32)
[  209.889428][T11181] block nbd3: shutting down sockets
[  209.951833][T11192] loop3: detected capacity change from 0 to 128
[  209.955694][T11192] FAT-fs (loop3): bogus sectors per cluster 0
[  209.960037][T11192] FAT-fs (loop3): Can't find a valid FAT filesystem
[  210.148678][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  210.322360][   T24] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  210.326495][   T24] usb 5-1: config 16 interface 0 has no altsetting 0
[  210.329214][   T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  210.335801][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.342538][T11227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2125'.
[  210.428768][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'.
[  210.522990][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  210.564337][   T24] usb 5-1: string descriptor 0 read error: -71
[  210.568985][   T24] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  210.574138][   T24] imon 5-1:16.0: unable to initialize intf0, err -19
[  210.579593][   T24] imon:imon_probe: failed to initialize context!
[  210.582197][   T24] imon 5-1:16.0: unable to register, err -19
[  210.591113][   T24] usb 5-1: USB disconnect, device number 14
[  210.693262][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  210.697210][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.700017][   T10] usb 4-1: Product: syz
[  210.701471][   T10] usb 4-1: Manufacturer: syz
[  210.703113][   T10] usb 4-1: SerialNumber: syz
[  210.708914][T11249] libceph: resolve '4..' (ret=-3): failed
[  210.712549][   T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  210.735006][ T2327] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  211.169253][   T24] usb 4-1: USB disconnect, device number 16
[  211.807936][T11271] __vm_enough_memory: pid: 11271, comm: syz.0.2145, bytes: 4503599627366400 not enough memory for the allocation
[  211.859756][ T2327] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  211.863362][ T2327] ath9k_htc: Failed to initialize the device
[  211.867569][   T24] usb 4-1: ath9k_htc: USB layer deinitialized
[  213.536953][T11305] netlink: 'syz.3.2159': attribute type 21 has an invalid length.
[  213.541862][T11305] netlink: 'syz.3.2159': attribute type 6 has an invalid length.
[  213.545727][T11305] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2159'.
[  213.546536][T11306] loop4: detected capacity change from 0 to 256
[  213.563414][T11306] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  213.712513][T11314] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma?
[  213.884381][T11320] loop3: detected capacity change from 0 to 512
[  213.896864][T11320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.915774][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  214.084540][   T24] usb 5-1: Using ep0 maxpacket: 16
[  214.091384][   T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  214.096590][   T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  214.100672][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  214.110086][   T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  214.113847][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.118411][   T24] usb 5-1: Product: syz
[  214.120243][   T24] usb 5-1: Manufacturer: syz
[  214.122297][   T24] usb 5-1: SerialNumber: syz
[  214.137258][   T24] usb 5-1: config 0 descriptor??
[  214.631313][ T2327] usb 5-1: USB disconnect, device number 15
[  215.164050][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.321306][T11335] overlayfs: bad index found (index=index/00fb210001b02bb11071a244f8994960b6b38ad0693c4a6dedc409000000000000, ftype=2000, origin ftype=a000).
[  215.379538][T11342] loop3: detected capacity change from 0 to 512
[  215.384111][T11342] EXT4-fs: Ignoring removed nobh option
[  215.404515][T11342] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  215.407773][T11342] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  215.420828][T11342] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.2176: casefold flag without casefold feature
[  215.431272][T11342] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2176: couldn't read orphan inode 13 (err -117)
[  215.439087][T11342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.470477][T11342] EXT4-fs: group quota file already specified
[  215.470930][T11348] loop4: detected capacity change from 0 to 1024
[  215.535020][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.860256][T11359] loop3: detected capacity change from 0 to 512
[  216.910340][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'.
[  216.913506][T11381] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[  217.567207][   T33] audit: type=1326 audit(1755338645.364:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.3.2206" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a0a58ebe9 code=0x0
[  218.419829][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2209'.
[  218.432808][T11419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2210'.
[  218.436516][T11419] 8021q: VLANs not supported on sit0
[  218.504670][T11425] openvswitch: netlink: Message has 4 unknown bytes.
[  218.612158][T11421] loop4: detected capacity change from 0 to 32768
[  218.648467][T11421] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  218.705545][T11435] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253
[  218.709094][T11435] PKCS7: Only support pkcs7_signedData type
[  218.803707][ T8460] ocfs2: Unmounting device (7,4) on (node local)
[  219.078278][T11464] netlink: 'syz.3.2231': attribute type 1 has an invalid length.
[  219.081477][T11464] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2231'.
[  219.116852][T11469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2233'.
[  219.173846][T11475] loop4: detected capacity change from 0 to 128
[  219.181108][T11475] ufs: Bad value for 'onerror'
[  219.212641][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2238'.
[  219.346733][T11484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2241'.
[  219.496078][T11490] No source specified
[  219.675677][T11504] loop3: detected capacity change from 0 to 22
[  219.678798][T11504] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  219.682473][T11504] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  219.813871][T11512] bond0: entered promiscuous mode
[  219.816559][T11512] bond_slave_0: entered promiscuous mode
[  219.819946][T11512] bond_slave_1: entered promiscuous mode
[  219.845231][ T1286] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  219.914822][T11520] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2258'.
[  220.005453][ T1286] usb 5-1: Using ep0 maxpacket: 16
[  220.014451][ T1286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.026804][ T1286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.030783][ T1286] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  220.034617][ T1286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.054210][ T1286] usb 5-1: config 0 descriptor??
[  220.270809][T11534] 8021q: VLANs not supported on vcan0
[  220.390198][ T5939] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  220.564270][ T5939] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  220.567682][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.572281][ T5939] usb 4-1: config 0 has no interface number 0
[  220.574774][ T5939] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  220.579483][ T5939] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  220.583847][ T5939] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.589123][ T5939] usb 4-1: config 0 interface 52 has no altsetting 0
[  220.594503][ T5939] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  220.598463][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  220.602028][ T5939] usb 4-1: SerialNumber: syz
[  220.608522][ T5939] usb 4-1: config 0 descriptor??
[  220.831701][ T5939] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  220.835095][ T5939] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5
[  220.953044][ T1286] usb 5-1: Max retries (5) exceeded reading string descriptor 200
[  220.956473][ T1286] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71
[  220.964117][ T1286] usb 5-1: USB disconnect, device number 16
[  221.051649][   T24] usb 4-1: USB disconnect, device number 17
[  221.241475][T11541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.628557][T11566] loop4: detected capacity change from 0 to 1024
[  221.674625][T11566] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  221.677558][T11566] hfsplus: xattr searching failed
[  221.737444][T11566] loop4: detected capacity change from 1024 to 64
[  221.748247][  T987] kworker/u9:3: attempt to access beyond end of device
[  221.748247][  T987] loop4: rw=1, sector=206, nr_sectors = 8 limit=64
[  221.754188][  T987] hfsplus: b-tree write err: -5, ino 4
[  221.756167][  T987] kworker/u9:3: attempt to access beyond end of device
[  221.756167][  T987] loop4: rw=1, sector=206, nr_sectors = 8 limit=64
[  221.773587][ T8460] hfsplus: bad catalog entry type
[  221.808850][  T987] kworker/u9:3: attempt to access beyond end of device
[  221.808850][  T987] loop4: rw=1, sector=206, nr_sectors = 8 limit=64
[  221.815645][  T987] hfsplus: b-tree write err: -5, ino 4
[  221.883872][T11575] sctp: [Deprecated]: syz.3.2285 (pid 11575) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.883872][T11575] Use struct sctp_sack_info instead
[  222.078648][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.150493][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.210840][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.284871][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.390171][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  222.401105][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  222.405433][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  222.409162][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  222.415378][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  222.434570][   T12] bridge_slave_1: left allmulticast mode
[  222.440102][   T12] bridge_slave_1: left promiscuous mode
[  222.442462][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.452047][   T12] bridge_slave_0: left allmulticast mode
[  222.455175][   T12] bridge_slave_0: left promiscuous mode
[  222.457736][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.719122][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.724780][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.728893][   T12] bond0 (unregistering): Released all slaves
[  223.143355][   T12] hsr_slave_0: left promiscuous mode
[  223.145760][   T12] hsr_slave_1: left promiscuous mode
[  223.147814][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.153267][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.156508][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.158900][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.176228][   T12] veth1_macvtap: left promiscuous mode
[  223.178704][   T12] veth0_macvtap: left promiscuous mode
[  223.181790][   T12] veth1_vlan: left promiscuous mode
[  223.183518][   T12] veth0_vlan: left promiscuous mode
[  223.664483][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  223.670115][   T12] team0 (unregistering): Port device team_slave_1 removed
[  223.698993][   T12] team0 (unregistering): Port device team_slave_0 removed
[  224.126231][T11591] chnl_net:caif_netlink_parms(): no params data found
[  224.330951][T11591] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.334124][T11591] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.338847][T11591] bridge_slave_0: entered allmulticast mode
[  224.348803][T11591] bridge_slave_0: entered promiscuous mode
[  224.357810][T11591] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.368598][T11591] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.380243][T11591] bridge_slave_1: entered allmulticast mode
[  224.384544][T11591] bridge_slave_1: entered promiscuous mode
[  224.460363][T11591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.476448][T11591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.586529][T11591] team0: Port device team_slave_0 added
[  224.600165][T11591] team0: Port device team_slave_1 added
[  224.605174][ T5236] Bluetooth: hci2: command tx timeout
[  224.699553][T11591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.702370][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.717753][T11591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.727449][T11591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.730308][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.741115][T11591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.781120][T11591] hsr_slave_0: entered promiscuous mode
[  224.784898][T11591] hsr_slave_1: entered promiscuous mode
[  224.787618][T11591] debugfs: 'hsr0' already exists in 'hsr'
[  224.789978][T11591] Cannot create hsr debugfs directory
[  224.943352][T11591] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  224.951062][T11591] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  224.957686][T11591] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  224.964000][T11591] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  224.994432][T11591] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.997377][T11591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.000557][T11591] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.003680][T11591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.058145][T11591] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.072380][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.077862][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.092277][T11591] 8021q: adding VLAN 0 to HW filter on device team0
[  225.104151][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.107249][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.115756][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.118767][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.238574][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.340159][T11688] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  225.422645][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2309'.
[  225.444217][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2309'.
[  225.444357][ T5872] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.452507][ T5872] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.462321][ T5872] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.466216][ T5872] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  225.495713][T11591] veth0_vlan: entered promiscuous mode
[  225.507436][T11591] veth1_vlan: entered promiscuous mode
[  225.566553][T11591] veth0_macvtap: entered promiscuous mode
[  225.584552][T11591] veth1_macvtap: entered promiscuous mode
[  225.607734][T11591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.615150][T11591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.658130][ T5741] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.667559][ T5741] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.681112][ T5741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.707562][ T5741] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.787757][  T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.791179][  T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.819175][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.824278][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.958012][T11720] team0: No ports can be present during mode change
[  226.770703][T11747] loop3: detected capacity change from 0 to 256
[  226.826049][ T5236] Bluetooth: hci2: command tx timeout
[  226.841719][   T33] audit: type=1326 audit(1755338654.044:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  226.872569][   T33] audit: type=1326 audit(1755338654.044:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  226.922154][   T33] audit: type=1326 audit(1755338654.054:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  226.964774][   T33] audit: type=1326 audit(1755338654.054:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  226.973164][   T33] audit: type=1326 audit(1755338654.054:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  226.981513][   T33] audit: type=1326 audit(1755338654.054:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  226.990622][   T33] audit: type=1326 audit(1755338654.054:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  227.000556][   T33] audit: type=1326 audit(1755338654.054:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  227.012044][   T33] audit: type=1326 audit(1755338654.054:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  227.021842][   T33] audit: type=1326 audit(1755338654.054:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.5.2325" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d7b8ebe9 code=0x7ffc0000
[  227.071036][T11765] loop5: detected capacity change from 0 to 256
[  227.316467][T11777] overlay: ./file0 is not a directory
[  227.907312][T11786] 9pnet_fd: Insufficient options for proto=fd
[  228.033273][T11788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2337'.
[  228.037795][T11788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2337'.
[  228.647973][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'.
[  228.651450][T11806] netlink: 'syz.3.2346': attribute type 30 has an invalid length.
[  228.735818][T11815] loop5: detected capacity change from 0 to 2048
[  228.773827][T11815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.822773][T11591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.947984][T11830] binder: BINDER_SET_CONTEXT_MGR already set
[  228.953002][T11830] binder: 11829:11830 ioctl 4018620d 200000000040 returned -16
[  228.957826][T11830] binder: 11829:11830 ioctl c0306201 2000000001c0 returned -22
[  229.054527][ T5236] Bluetooth: hci2: command tx timeout
[  229.104744][T11844] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  229.285497][T11855] netlink: 'syz.0.2366': attribute type 1 has an invalid length.
[  229.292250][T11855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.349557][   T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  229.472976][T11866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2370'.
[  229.477059][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2370'.
[  229.484769][T11866] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2370'.
[  229.510508][   T24] usb 6-1: not running at top speed; connect to a high speed hub
[  229.530864][   T24] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  229.541457][   T24] usb 6-1: config 1 interface 0 has no altsetting 0
[  229.548975][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  229.557564][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.561271][   T24] usb 6-1: Product: syz
[  229.567505][   T24] usb 6-1: Manufacturer: syz
[  229.569555][   T24] usb 6-1: SerialNumber: syz
[  229.650136][T11870] loop3: detected capacity change from 0 to 2048
[  229.685267][T11870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.690250][T11870] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.811171][   T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input8
[  229.817302][ T5281] bcm5974 6-1:1.0: could not read from device
[  229.841447][ T5281] bcm5974 6-1:1.0: could not read from device
[  229.848489][   T24] usb 6-1: USB disconnect, device number 2
[  230.679063][T11870] fs-verity (loop3, inode 13): Error -4 building Merkle tree
[  230.892065][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.091580][T11886] 9pnet_fd: p9_fd_create_tcp (11886): problem connecting socket to 127.0.0.1
[  231.276275][ T5236] Bluetooth: hci2: command tx timeout
[  231.467238][T11900] loop5: detected capacity change from 0 to 128
[  231.474084][T11900] FAT-fs (loop5): Directory bread(block 414) failed
[  231.476716][T11900] FAT-fs (loop5): Directory bread(block 415) failed
[  231.479019][T11900] FAT-fs (loop5): Directory bread(block 416) failed
[  231.481390][T11900] FAT-fs (loop5): Directory bread(block 417) failed
[  231.483787][T11900] FAT-fs (loop5): Directory bread(block 418) failed
[  231.486036][T11900] FAT-fs (loop5): Directory bread(block 419) failed
[  231.489118][T11900] FAT-fs (loop5): Directory bread(block 420) failed
[  231.491729][T11900] FAT-fs (loop5): Directory bread(block 421) failed
[  231.504864][T11900] FAT-fs (loop5): Directory bread(block 414) failed
[  231.508145][T11900] FAT-fs (loop5): Directory bread(block 415) failed
[  231.515862][T11900] syz.5.2384: attempt to access beyond end of device
[  231.515862][T11900] loop5: rw=3, sector=478, nr_sectors = 2 limit=128
[  231.522395][T11900] syz.5.2384: attempt to access beyond end of device
[  231.522395][T11900] loop5: rw=2051, sector=480, nr_sectors = 6 limit=128
[  232.324257][T11907] geneve3: entered promiscuous mode
[  232.326525][T11907] geneve3: entered allmulticast mode
[  233.022617][T11910] loop3: detected capacity change from 0 to 65536
[  233.087134][T11928] loop5: detected capacity change from 0 to 512
[  233.096722][T11910] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  233.102348][T11928] EXT4-fs (loop5): required journal recovery suppressed and not mounted read-only
[  233.133089][T11910] XFS (loop3): Ending clean mount
[  233.139459][T11910] XFS (loop3): Quotacheck needed: Please wait.
[  233.155914][ T1088] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  233.167659][ T1088] XFS (loop3): Unmount and run xfs_repair
[  233.170168][ T1088] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  233.173081][ T1088] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  233.176048][ T1088] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  233.185406][ T1088] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  233.188555][ T1088] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  233.191506][ T1088] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  233.194479][ T1088] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  233.197431][ T1088] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  233.200761][ T1088] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  233.204509][ T1088] XFS (loop3): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  233.221200][T11910] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  233.254348][T11942] loop5: detected capacity change from 0 to 1024
[  233.260568][ T7049] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  233.274490][ T7049] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  233.292233][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  233.292242][   T33] audit: type=1800 audit(1755338660.078:89): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2398" name="file1" dev="loop5" ino=20 res=0 errno=0
[  233.320732][   T33] audit: type=1800 audit(1755338660.078:90): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2398" name="file1" dev="loop5" ino=20 res=0 errno=0
[  233.560550][T11951] bridge_slave_1: entered promiscuous mode
[  233.565132][T11951] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  233.652021][T11961] netlink: 'syz.0.2406': attribute type 1 has an invalid length.
[  233.654714][T11961] netlink: 'syz.0.2406': attribute type 1 has an invalid length.
[  233.679151][T11962] loop5: detected capacity change from 0 to 256
[  234.916030][T11989] vlan2: entered allmulticast mode
[  234.920224][T11989] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  235.099694][T11996] netlink: 'syz.5.2417': attribute type 40 has an invalid length.
[  235.265169][T12010] loop3: detected capacity change from 0 to 16
[  235.282946][T12010] erofs (device loop3): mounted with root inode @ nid 36.
[  235.713968][T12034] loop3: detected capacity change from 0 to 4096
[  235.722862][T12034] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  235.816727][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  235.868323][T12040] loop3: detected capacity change from 0 to 256
[  235.874825][T12040] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  235.886688][   T33] audit: type=1800 audit(1755338662.500:91): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2438" name="file2" dev="loop3" ino=1048694 res=0 errno=0
[  235.979025][   T10] usb 6-1: Using ep0 maxpacket: 16
[  235.985056][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  235.990892][   T10] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  235.994043][   T10] usb 6-1: Product: syz
[  235.995783][   T10] usb 6-1: SerialNumber: syz
[  236.006957][   T10] usb 6-1: config 0 descriptor??
[  236.013393][   T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  236.019310][   T10] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  236.025801][   T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  236.028477][   T10] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  236.230525][   T10] usb 6-1: USB disconnect, device number 3
[  236.841708][T12058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2446'.
[  237.093466][T12056] loop3: detected capacity change from 0 to 40427
[  237.130753][T12056] F2FS-fs (loop3): invalid crc value
[  237.221464][T12056] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  237.237315][T12056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  238.269416][T12102] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  238.587497][   T52] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  238.769227][   T52] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  238.773274][   T52] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  238.779894][   T52] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  238.783833][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.787408][   T52] usb 6-1: Product: syz
[  238.790283][   T52] usb 6-1: Manufacturer: syz
[  238.792427][   T52] usb 6-1: SerialNumber: syz
[  238.797396][   T52] usb 6-1: config 0 descriptor??
[  238.800815][T12115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  238.804148][T12115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  238.887489][T12140] loop3: detected capacity change from 0 to 1024
[  238.898943][T12140] EXT4-fs: Ignoring removed orlov option
[  238.906794][T12140] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  238.925226][T12140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.965323][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.036507][T12115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  239.039901][T12115] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  239.462291][ T8564] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  239.481924][   T52] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  239.622874][ T8564] usb 4-1: Using ep0 maxpacket: 32
[  239.633377][ T8564] usb 4-1: unable to get BOS descriptor or descriptor too short
[  239.637903][ T8564] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  239.641606][ T8564] usb 4-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config
[  239.646232][ T8564] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  239.649816][ T8564] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  239.656078][ T8564] usb 4-1: string descriptor 0 read error: -22
[  239.658868][ T8564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  239.662616][ T8564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.675119][ T8564] cdc_ncm 4-1:1.0: skipping garbage
[  239.678290][ T8564] cdc_ncm 4-1:1.0: skipping garbage
[  239.680594][ T8564] cdc_ncm 4-1:1.0: invalid descriptor buffer length
[  239.683758][ T8564] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  239.687226][ T8564] cdc_ncm 4-1:1.0: bind() failure
[  239.898611][ T8564] usb 4-1: USB disconnect, device number 18
[  239.919411][   T52] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  239.928008][   T52] usb 6-1: USB disconnect, device number 4
[  241.535249][T12240] loop3: detected capacity change from 0 to 512
[  241.567836][T12240] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  241.578766][T12240] EXT4-fs (loop3): orphan cleanup on readonly fs
[  241.584960][T12240] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  241.592164][T12240] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  241.598719][T12240] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  241.603136][T12240] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2503: bg 0: block 40: padding at end of block bitmap is not set
[  241.609338][T12240] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  241.616185][T12240] EXT4-fs (loop3): 1 truncate cleaned up
[  241.620413][T12240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  241.662632][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.883602][T12261] loop5: detected capacity change from 0 to 128
[  242.039736][ T8564] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  242.046227][T12270] loop5: detected capacity change from 0 to 1024
[  242.070848][   T33] audit: type=1800 audit(1755338668.281:92): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2515" name="bus" dev="loop5" ino=25 res=0 errno=0
[  242.209840][ T8564] usb 4-1: Using ep0 maxpacket: 32
[  242.216904][ T8564] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  242.220822][ T8564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.224997][ T8564] usb 4-1: Product: syz
[  242.226697][ T8564] usb 4-1: Manufacturer: syz
[  242.228971][ T8564] usb 4-1: SerialNumber: syz
[  242.233482][ T8564] usb 4-1: config 0 descriptor??
[  242.249703][ T8564] hdpvr 4-1:0.0: Could not find bulk-in endpoint
[  242.252904][ T8564] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  242.344397][T12284] loop5: detected capacity change from 0 to 16
[  242.350444][T12284] erofs (device loop5): mounted with root inode @ nid 36.
[  242.474211][ T5939] usb 4-1: USB disconnect, device number 19
[  243.060088][T12304] loop3: detected capacity change from 0 to 4096
[  243.071671][T12305] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.685254][ T5939] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  243.847989][ T5939] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.852512][ T5939] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.859758][ T5939] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  243.866969][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  243.870404][ T5939] usb 6-1: SerialNumber: syz
[  244.097527][ T5939] usb 6-1: 0:2 : does not exist
[  244.115053][ T5939] usb 6-1: unit 9 not found!
[  244.151902][ T5939] usb 6-1: USB disconnect, device number 5
[  244.204299][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.885555][T12342] loop5: detected capacity change from 0 to 512
[  244.902530][T12342] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  244.912280][T12342] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  244.916984][T12342] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2545: Failed to acquire dquot type 1
[  244.926386][T12342] EXT4-fs (loop5): 1 truncate cleaned up
[  244.929946][T12342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.935241][T12342] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.001641][T11591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.117601][ T2327] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  245.173730][T12347] infiniband syz0: set down
[  245.175330][T12347] infiniband syz0: added ipvlan1
[  245.248371][T12347] RDS/IB: syz0: added
[  245.250715][T12347] smc: adding ib device syz0 with port count 1
[  245.253327][T12347] smc:    ib device syz0 port 1 has pnetid 
[  245.298075][ T2327] usb 4-1: config 201 has an invalid interface number: 249 but max is 0
[  245.301774][ T2327] usb 4-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  245.305995][ T2327] usb 4-1: config 201 has no interface number 0
[  245.308674][ T2327] usb 4-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  245.316120][ T2327] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  245.331564][ T2327] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  245.336224][ T2327] usb 4-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  245.341845][ T2327] usb 4-1: config 201 interface 249 has no altsetting 0
[  245.349509][ T2327] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  245.353892][ T2327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.357042][ T2327] usb 4-1: Product: syz
[  245.358937][ T2327] usb 4-1: Manufacturer: syz
[  245.361067][ T2327] usb 4-1: SerialNumber: syz
[  245.371825][T12340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  245.609429][ T2327] ath6kl: Failed to submit usb control message: -71
[  245.612837][ T2327] ath6kl: unable to send the bmi data to the device: -71
[  245.616738][ T2327] ath6kl: Unable to send get target info: -71
[  245.624186][ T2327] ath6kl: Failed to init ath6kl core: -71
[  245.628602][ T2327] ath6kl_usb 4-1:201.249: probe with driver ath6kl_usb failed with error -71
[  245.636331][ T2327] usb 4-1: USB disconnect, device number 20
[  246.073166][   T33] audit: type=1800 audit(1755338672.032:93): pid=12369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2556" name="/" dev="9p" ino=2 res=0 errno=0
[  246.271234][T12381] loop3: detected capacity change from 0 to 1024
[  246.308545][T12381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.312567][T12381] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.322193][   T33] audit: type=1800 audit(1755338672.266:94): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2562" name="file1" dev="loop3" ino=15 res=0 errno=0
[  246.328251][T12381] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.2562: lblock 1 mapped to illegal pblock 1 (length 3)
[  246.339526][T12381] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2562: lblock 3 mapped to illegal pblock 3 (length 1)
[  246.361284][T12381] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  246.376011][T12381] EXT4-fs (loop3): This should not happen!! Data will be lost
[  246.376011][T12381] 
[  246.401428][T12392] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2566'.
[  246.464786][T12394] deleting an unspecified loop device is not supported.
[  246.882009][   T26] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  246.904874][   T26] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28
[  246.910022][   T26] EXT4-fs (loop3): This should not happen!! Data will be lost
[  246.910022][   T26] 
[  246.913396][   T26] EXT4-fs (loop3): Total free blocks count 0
[  246.920726][   T26] EXT4-fs (loop3): Free/Dirty block details
[  246.922810][   T26] EXT4-fs (loop3): free_blocks=4293918720
[  246.926279][   T26] EXT4-fs (loop3): dirty_blocks=48
[  246.928092][   T26] EXT4-fs (loop3): Block reservation details
[  247.209148][T12412] loop5: detected capacity change from 0 to 40427
[  247.215205][T12412] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  247.217771][T12412] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  247.230901][T12412] F2FS-fs (loop5): invalid crc value
[  247.265325][T12412] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  247.271991][T12412] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  247.274805][T12412] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  247.662405][T12447] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  249.105301][T12491] sctp: [Deprecated]: syz.0.2606 (pid 12491) Use of int in max_burst socket option deprecated.
[  249.105301][T12491] Use struct sctp_assoc_value instead
[  249.276816][ T2327] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  249.311778][T12490] loop5: detected capacity change from 0 to 1024
[  249.327080][T12490] hfsplus: bad catalog entry type
[  249.344181][   T36] hfsplus: b-tree write err: -5, ino 4
[  249.485116][ T2327] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  249.488954][ T2327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.493579][ T2327] usb 4-1: Product: syz
[  249.496721][ T2327] usb 4-1: Manufacturer: syz
[  249.498594][ T2327] usb 4-1: SerialNumber: syz
[  249.505428][ T2327] usb 4-1: config 0 descriptor??
[  249.682682][ T8564] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  249.951383][ T8564] usb 6-1: config 0 has an invalid interface number: 156 but max is 0
[  249.954591][ T8564] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.958255][ T8564] usb 6-1: config 0 has no interface number 0
[  249.961175][ T8564] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  249.965697][ T8564] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  249.971475][ T8564] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.976673][ T8564] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  249.980289][ T8564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.987308][ T8564] usb 6-1: config 0 descriptor??
[  249.996082][ T8564] gspca_main: spca561-2.14.0 probing abcd:cdee
[  250.210424][ T8564] spca561 6-1:0.156: probe with driver spca561 failed with error -22
[  250.221181][ T8564] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  250.224308][ T8564] usb 6-1: MIDIStreaming interface descriptor not found
[  250.299877][ T8564] usb 6-1: USB disconnect, device number 6
[  250.371896][T12507] overlayfs: failed to clone upperpath
[  250.601653][ T2327] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  250.606260][ T2327] asix 4-1:0.0: probe with driver asix failed with error -71
[  250.613493][ T2327] usb 4-1: USB disconnect, device number 21
[  250.871474][T12517] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  251.033410][T12524] loop5: detected capacity change from 0 to 764
[  251.207602][T12529] netlink: 'syz.5.2626': attribute type 4 has an invalid length.
[  251.351852][T12539] loop3: detected capacity change from 0 to 128
[  251.357449][T12539] ext4: Unknown parameter 'fsname'
[  251.503451][T12539] Invalid option length (1047378) for dns_resolver key
[  252.071219][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'.
[  252.586698][T12595] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2652'.
[  252.703649][T12598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  252.706476][T12598] IPv6: NLM_F_CREATE should be set when creating new route
[  252.709174][T12598] IPv6: NLM_F_CREATE should be set when creating new route
[  252.712061][T12598] IPv6: NLM_F_CREATE should be set when creating new route
[  252.930563][T12586] loop3: detected capacity change from 0 to 32768
[  253.161859][T12586] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[  253.162496][T12586]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  253.175174][T12586] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  253.178969][T12586] bcachefs (loop3): recovering from clean shutdown, journal seq 9
[  253.182740][T12586] bcachefs (loop3): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  253.182740][T12586]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  253.268435][T12586] bcachefs (loop3): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  253.274174][T12586] bcachefs (loop3): check_topology... done
[  253.281810][T12586] bcachefs (loop3): accounting_read... done
[  253.289277][T12586] bcachefs (loop3): alloc_read... done
[  253.293723][T12586] bcachefs (loop3): snapshots_read... done
[  253.299863][T12586] bcachefs (loop3): check_allocations...
[  253.332158][T12586] bcachefs (loop3): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  253.345006][T12586] bcachefs (loop3): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  253.382090][T12586]  done
[  253.419035][T12586] bcachefs (loop3): going read-write
[  253.455543][T12586] bcachefs (loop3): journal_replay... done
[  253.663141][T12586] bcachefs (loop3): check_lrus... done
[  253.668369][T12586] bcachefs (loop3): check_backpointers_to_extents... done
[  253.676510][T12586] bcachefs (loop3): check_extents_to_backpointers... done
[  253.688408][T12586] bcachefs (loop3): check_inodes... done
[  253.695356][T12586] bcachefs (loop3): resume_logged_ops... done
[  253.698350][T12586] bcachefs (loop3): delete_dead_inodes... done
[  253.704947][T12586] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  253.707921][T12586] bcachefs (loop3): check_extents_to_backpointers...
[  253.709228][T12586] bcachefs (loop3): scanning for missing backpointers in 1/512 buckets
[  253.728713][T12586]  done
[  253.738921][T12586] bcachefs (loop3): check_inodes... done
[  253.747128][T12586] bcachefs (loop3): resume_logged_ops... done
[  253.752238][T12586] bcachefs (loop3): delete_dead_inodes... done
[  253.764159][T12586] bcachefs (loop3): done starting filesystem
[  253.799964][T12586] syz.3.2647 (12586) used greatest stack depth: 13456 bytes left
[  253.854365][ T7049] bcachefs (loop3): shutting down
[  253.856693][ T7049] bcachefs (loop3): going read-only
[  253.858565][ T7049] bcachefs (loop3): finished waiting for writes to stop
[  253.863496][ T7049] bcachefs (loop3): flushing journal and stopping allocators, journal seq 19
[  253.867888][ T7049] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 19
[  253.874171][ T7049] bcachefs (loop3): clean shutdown complete, journal seq 20
[  253.878394][ T7049] bcachefs (loop3): marking filesystem clean
[  253.943641][ T7049] bcachefs (loop3): shutdown complete
[  254.168250][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2659'.
[  254.172206][T12620] nbd: must specify an index to disconnect
[  254.275080][T12626] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2662'.
[  254.961050][T12639] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  254.971290][T12639] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  255.784565][   T33] audit: type=1326 audit(1755338681.115:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12665 comm="syz.5.2679" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2d7b8ebe9 code=0x0
[  256.476607][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'.
[  256.781931][ T5939] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  256.954244][ T5939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.958673][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.963757][ T5939] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  256.967599][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  256.971021][ T5939] usb 4-1: SerialNumber: syz
[  257.209427][ T5939] usb 4-1: 0:2 : does not exist
[  257.243093][ T5939] usb 4-1: USB disconnect, device number 22
[  257.292506][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  258.601711][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'.
[  258.694793][ T1286] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  258.975802][ T1286] usb 6-1: Using ep0 maxpacket: 16
[  258.980184][ T1286] usb 6-1: config 252 has an invalid interface number: 15 but max is 0
[  258.984532][ T1286] usb 6-1: config 252 has no interface number 0
[  258.987187][ T1286] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  258.995439][ T1286] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  258.998968][ T1286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.002063][ T1286] usb 6-1: Product: syz
[  259.003715][ T1286] usb 6-1: Manufacturer: syz
[  259.009119][ T1286] usb 6-1: SerialNumber: syz
[  259.028009][ T1286] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  259.143783][T12774] loop3: detected capacity change from 0 to 32768
[  259.148578][T12774] 
[  259.148578][T12774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.148578][T12774] 
[  259.170327][T12774] 
[  259.170327][T12774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.170327][T12774] 
[  259.175001][T12774] 
[  259.175001][T12774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.175001][T12774] 
[  259.180806][T12774] 
[  259.180806][T12774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.180806][T12774] 
[  259.185076][T12774] 
[  259.185076][T12774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.185076][T12774] 
[  259.189994][T12774] 
[  259.189994][T12774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.189994][T12774] 
[  259.195590][T12774] 
[  259.195590][T12774]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.195590][T12774] 
[  259.214652][  T114] 
[  259.214652][  T114]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.214652][  T114] 
[  259.241746][ T8564] usb 6-1: USB disconnect, device number 7
[  259.242396][ T5872] usb 6-1: Failed to submit usb control message: -71
[  259.252702][ T5872] usb 6-1: unable to send the bmi data to the device: -71
[  259.255804][ T5872] usb 6-1: unable to get target info from device
[  259.258778][ T5872] usb 6-1: could not get target info (-71)
[  259.259110][ T7049] 
[  259.259110][ T7049]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.259110][ T7049] 
[  259.266465][ T5872] usb 6-1: could not probe fw (-71)
[  259.275572][ T7049] 
[  259.275572][ T7049]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  259.275572][ T7049] 
[  259.439880][T12786] loop3: detected capacity change from 0 to 256
[  259.451514][T12786] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d)
[  259.548160][T12795] loop3: detected capacity change from 0 to 128
[  259.554129][T12795] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  259.559487][T12795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.608398][T12799] tmpfs: User quota inode hardlimit too large.
[  260.066440][T12815] loop5: detected capacity change from 0 to 32768
[  260.080041][T12815] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.125441][T12815] XFS (loop5): Ending clean mount
[  260.131441][T12815] XFS (loop5): Quotacheck needed: Please wait.
[  260.162133][T12815] XFS (loop5): Quotacheck: Done.
[  260.200286][T11591] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.426187][T12844] cgroup: name respecified
[  260.761102][ T1286] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  260.797503][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2765'.
[  260.801537][T12862] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2765'.
[  260.805215][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2765'.
[  260.936483][ T1286] usb 6-1: Using ep0 maxpacket: 16
[  260.941114][ T1286] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.761115][ T1286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  261.766229][ T1286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  261.770393][ T1286] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  261.776608][ T1286] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  261.783517][ T1286] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  261.787124][ T1286] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  261.790259][ T1286] usb 6-1: Manufacturer: syz
[  261.804977][ T1286] usb 6-1: config 0 descriptor??
[  262.137231][ T1286] rc_core: IR keymap rc-hauppauge not found
[  262.139797][ T1286] Registered IR keymap rc-empty
[  262.143749][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.158614][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.191808][ T1286] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  262.204200][ T1286] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9
[  262.227483][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.256584][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.279843][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.309331][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.342169][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.364866][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.380604][T12893] loop3: detected capacity change from 0 to 512
[  262.383707][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.415271][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.447550][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.468837][ T1286] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  262.492855][ T1286] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  262.500694][ T1286] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  262.551949][ T1286] usb 6-1: USB disconnect, device number 8
[  263.293512][T12925] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  263.296518][T12925] PKCS7: Only support pkcs7_signedData type
[  263.926403][T12927] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  264.062228][T12938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2793'.
[  264.068014][T12935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2793'.
[  264.075001][T12935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2793'.
[  264.082584][T12940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2795'.
[  264.091477][T12940] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  264.100474][T12935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2793'.
[  264.180933][T12942] loop5: detected capacity change from 0 to 8192
[  264.219120][T12942] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  264.224321][T12942] FAT-fs (loop5): Filesystem has been set read-only
[  264.659766][T12967] Bluetooth: Invalid esc byte 0x02
[  264.776585][T12975] overlayfs: failed to clone upperpath
[  265.232078][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  265.235090][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  265.954050][ T1286] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  265.982831][T13016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2829'.
[  266.125506][ T1286] usb 4-1: Using ep0 maxpacket: 16
[  266.132330][ T1286] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  266.138560][ T1286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.142061][ T1286] usb 4-1: Product: syz
[  266.143853][ T1286] usb 4-1: Manufacturer: syz
[  266.145797][ T1286] usb 4-1: SerialNumber: syz
[  266.153228][ T1286] usb 4-1: config 0 descriptor??
[  266.163132][ T1286] usb-storage 4-1:0.0: USB Mass Storage device detected
[  266.175705][ T1286] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1
[  266.179683][ T1286] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty)
[  266.179683][ T1286]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  266.388069][ T1286] usb 4-1: USB disconnect, device number 23
[  266.750018][T13053] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  266.956664][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2854'.
[  266.982798][T13069] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2856'.
[  267.310497][T13097] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2867'.
[  267.319063][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2867'.
[  267.418398][   T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  267.583242][   T10] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  267.587175][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.593024][   T10] usb 4-1: Product: syz
[  267.594858][   T10] usb 4-1: Manufacturer: syz
[  267.596879][   T10] usb 4-1: SerialNumber: syz
[  267.604912][   T10] usb 4-1: config 0 descriptor??
[  267.613325][   T10] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 024
[  268.045953][   T10]  (null): failure reading functionality
[  268.052563][   T10] i2c i2c-2: failure reading functionality
[  268.059411][   T10] i2c i2c-2: connected i2c-tiny-usb device
[  268.070005][   T10] usb 4-1: USB disconnect, device number 24
[  268.590535][T13146] syz.0.2892 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  269.146888][T13171] loop5: detected capacity change from 0 to 256
[  269.376106][T13179] loop5: detected capacity change from 0 to 512
[  269.380487][T13179] EXT4-fs: Ignoring removed oldalloc option
[  269.382597][T13179] EXT4-fs: Ignoring removed mblk_io_submit option
[  269.386487][T13179] ext4: Unknown parameter 'smackfsdef'
[  269.462329][T13184] __nla_validate_parse: 3 callbacks suppressed
[  269.462440][T13184] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2909'.
[  269.468857][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2909'.
[  269.662061][T13192] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 1, id = 0
[  270.261517][T13203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2917'.
[  270.363009][ T5236] Bluetooth: hci2: command tx timeout
[  270.409468][T13205] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2919'.
[  271.831157][T13224] loop3: detected capacity change from 0 to 32768
[  271.865067][T13224] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  271.920508][T13224] XFS (loop3): Ending clean mount
[  271.998414][ T7049] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.045901][T13253] loop5: detected capacity change from 0 to 4096
[  272.083726][T13253] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  272.103570][T13253] ntfs3(loop5): Failed to load $Extend (-22).
[  272.106171][T13253] ntfs3(loop5): Failed to initialize $Extend.
[  272.788217][T13268] loop3: detected capacity change from 0 to 32768
[  272.807288][T13268] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2943 (13268)
[  272.820983][T13268] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  272.827911][T13268] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  272.831993][T13268] BTRFS info (device loop3): using free-space-tree
[  272.926208][T13268] BTRFS info (device loop3): rebuilding free space tree
[  273.004910][T13268] BTRFS info (device loop3): balance: start -susage=34359738372,drange=7..526332,limit=4294967292..6
[  273.026000][T13268] BTRFS info (device loop3): balance: ended with status: 0
[  273.071725][ T7049] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  273.821381][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2956'.
[  273.827189][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2956'.
[  273.831230][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2956'.
[  273.836199][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2956'.
[  274.346618][T13329] loop5: detected capacity change from 0 to 512
[  274.394074][T13329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  274.466409][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'.
[  274.477201][T11591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.548958][ T5236] Bluetooth: hci2: command tx timeout
[  274.913501][T13358] macvlan0: entered promiscuous mode
[  274.936526][T13358] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  274.961778][T13358] hsr1: entered allmulticast mode
[  274.963792][T13358] macvlan0: entered allmulticast mode
[  274.969781][T13358] veth1_vlan: entered allmulticast mode
[  274.997444][T13358] bond0: entered allmulticast mode
[  275.004662][T13358] bond_slave_0: entered allmulticast mode
[  275.014390][T13358] bond_slave_1: entered allmulticast mode
[  275.016309][T13358] bridge_slave_1: entered allmulticast mode
[  275.902970][T13387] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  276.549980][T13427] loop5: detected capacity change from 0 to 40427
[  276.607958][T13427] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  276.611814][T13427] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  276.634668][T11591] syz-executor: attempt to access beyond end of device
[  276.634668][T11591] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.639937][T11591] CPU: 1 UID: 0 PID: 11591 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  276.639950][T11591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.639954][T11591] Call Trace:
[  276.639957][T11591]  <TASK>
[  276.639960][T11591]  dump_stack_lvl+0x189/0x250
[  276.639975][T11591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.639983][T11591]  ? __pfx_queue_work_on+0x10/0x10
[  276.639990][T11591]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  276.640006][T11591]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  276.640035][T11591]  f2fs_handle_critical_error+0x37c/0x540
[  276.640051][T11591]  f2fs_write_end_io+0x886/0xb60
[  276.640066][T11591]  __submit_merged_bio+0x27a/0x6a0
[  276.640078][T11591]  __submit_merged_write_cond+0x255/0x530
[  276.640091][T11591]  f2fs_write_data_pages+0x261d/0x3000
[  276.640116][T11591]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.640151][T11591]  ? folios_put_refs+0x559/0x640
[  276.640165][T11591]  ? __lock_acquire+0xab9/0xd20
[  276.640179][T11591]  ? do_raw_spin_lock+0x121/0x290
[  276.640193][T11591]  ? do_raw_spin_unlock+0x4d/0x240
[  276.640201][T11591]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.640211][T11591]  do_writepages+0x32e/0x550
[  276.640225][T11591]  ? do_raw_spin_unlock+0x4d/0x240
[  276.640235][T11591]  filemap_fdatawrite+0x199/0x240
[  276.640245][T11591]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  276.640301][T11591]  ? do_raw_spin_unlock+0x4d/0x240
[  276.640311][T11591]  f2fs_sync_dirty_inodes+0x31f/0x830
[  276.640325][T11591]  f2fs_write_checkpoint+0x95a/0x1df0
[  276.640344][T11591]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  276.640372][T11591]  ? kill_f2fs_super+0x298/0x6c0
[  276.640382][T11591]  kill_f2fs_super+0x2c3/0x6c0
[  276.640391][T11591]  ? __pfx_kill_f2fs_super+0x10/0x10
[  276.640397][T11591]  ? radix_tree_delete_item+0x2b6/0x400
[  276.640410][T11591]  ? shrinker_free+0x2ce/0x3e0
[  276.640419][T11591]  deactivate_locked_super+0xbc/0x130
[  276.640429][T11591]  cleanup_mnt+0x425/0x4c0
[  276.640437][T11591]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.640447][T11591]  task_work_run+0x1d4/0x260
[  276.640458][T11591]  ? __pfx_task_work_run+0x10/0x10
[  276.640465][T11591]  ? __x64_sys_umount+0x122/0x160
[  276.640476][T11591]  ? exit_to_user_mode_loop+0x40/0x110
[  276.640488][T11591]  exit_to_user_mode_loop+0xec/0x110
[  276.640497][T11591]  do_syscall_64+0x2bd/0x3b0
[  276.640506][T11591]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.640519][T11591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.640529][T11591]  ? exc_page_fault+0x9f/0xf0
[  276.640543][T11591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.640552][T11591] RIP: 0033:0x7fd2d7b8ff17
[  276.640564][T11591] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  276.640573][T11591] RSP: 002b:00007ffca4697078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  276.640583][T11591] RAX: 0000000000000000 RBX: 00007fd2d7c11c05 RCX: 00007fd2d7b8ff17
[  276.640588][T11591] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca4697130
[  276.640592][T11591] RBP: 00007ffca4697130 R08: 0000000000000000 R09: 0000000000000000
[  276.640596][T11591] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca46981c0
[  276.640601][T11591] R13: 00007fd2d7c11c05 R14: 0000000000040ebf R15: 00007ffca4698200
[  276.640614][T11591]  </TASK>
[  276.641968][T11591] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  276.700452][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  276.780014][ T5236] Bluetooth: hci2: Injecting HCI hardware error event
[  276.783332][ T5236] Bluetooth: hci2: hardware error 0x00
[  278.617996][   T33] audit: type=1326 audit(1755338702.479:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  278.649507][   T33] audit: type=1326 audit(1755338702.479:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  278.672723][   T33] audit: type=1326 audit(1755338702.489:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  278.706769][   T33] audit: type=1326 audit(1755338702.489:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  278.726998][   T33] audit: type=1326 audit(1755338702.489:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.0.3024" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040458ebe9 code=0x7ffc0000
[  278.742411][T13504] sp0: Synchronizing with TNC
[  278.768286][T13507] [U] 
[  278.887279][T13518] loop5: detected capacity change from 0 to 128
[  278.893466][T13515] loop3: detected capacity change from 0 to 512
[  278.914553][T13518] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  278.922054][T13515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.933031][T13518] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.998305][T11591] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  279.007118][ T5236] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  279.268480][T13536] overlayfs: missing 'lowerdir'
[  279.867476][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.186336][T13574] loop3: detected capacity change from 0 to 32768
[  281.194869][T13574] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3057 (13574)
[  281.281347][T13574] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  281.298416][T13574] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  281.301970][T13574] BTRFS info (device loop3): using free-space-tree
[  281.595425][T13574] BTRFS info (device loop3): rebuilding free space tree
[  281.673732][ T7049] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  282.087443][T13620] loop3: detected capacity change from 0 to 32768
[  282.109601][T13620] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  282.137020][   T33] audit: type=1800 audit(1755338705.762:101): pid=13620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3070" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  282.141595][T13620] 
[  282.146334][T13620] ======================================================
[  282.148557][T13620] WARNING: possible circular locking dependency detected
[  282.151138][T13620] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  282.154929][T13620] ------------------------------------------------------
[  282.154982][T13626] netlink: 'syz.5.3072': attribute type 2 has an invalid length.
[  282.158042][T13620] syz.3.3070/13620 is trying to acquire lock:
[  282.158055][T13620] ffff8881037db540 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_xattr_set+0xadd/0x11f0
[  282.158096][T13620] 
[  282.158096][T13620] but task is already holding lock:
[  282.158100][T13620] ffff8881037dec78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  282.158131][T13620] 
[  282.158131][T13620] which lock already depends on the new lock.
[  282.158131][T13620] 
[  282.158136][T13620] 
[  282.158136][T13620] the existing dependency chain (in reverse order) is:
[  282.158141][T13620] 
[  282.158141][T13620] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}:
[  282.158160][T13620]        lock_acquire+0x120/0x360
[  282.158176][T13620]        down_read+0x46/0x2e0
[  282.158191][T13620]        ocfs2_init_acl+0x2f9/0x720
[  282.158202][T13620]        ocfs2_mknod+0x1321/0x2050
[  282.158214][T13620]        ocfs2_create+0x1a5/0x440
[  282.158224][T13620]        path_openat+0x14f4/0x3830
[  282.158261][T13620]        do_filp_open+0x1fa/0x410
[  282.158275][T13620]        do_sys_openat2+0x121/0x1c0
[  282.158288][T13620]        __x64_sys_openat+0x138/0x170
[  282.158299][T13620]        do_syscall_64+0xfa/0x3b0
[  282.158315][T13620]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.158326][T13620] 
[  282.158326][T13620] -> #1 (jbd2_handle){++++}-{0:0}:
[  282.158343][T13620]        lock_acquire+0x120/0x360
[  282.158357][T13620]        jbd2_journal_lock_updates+0xaa/0x360
[  282.158373][T13620]        __ocfs2_flush_truncate_log+0x2ba/0x10e0
[  282.158386][T13620]        ocfs2_flush_truncate_log+0x4f/0x70
[  282.158398][T13620]        ocfs2_sync_fs+0x116/0x310
[  282.158413][T13620]        sync_filesystem+0x1cf/0x230
[  282.158423][T13620]        generic_shutdown_super+0x6f/0x2c0
[  282.158435][T13620]        kill_block_super+0x44/0x90
[  282.158449][T13620]        deactivate_locked_super+0xbc/0x130
[  282.158461][T13620]        cleanup_mnt+0x425/0x4c0
[  282.164473][T13626] : entered promiscuous mode
[  282.169118][T13620]        task_work_run+0x1d4/0x260
[  282.169141][T13620]        exit_to_user_mode_loop+0xec/0x110
[  282.169159][T13620]        do_syscall_64+0x2bd/0x3b0
[  282.169176][T13620]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.248022][T13620] 
[  282.248022][T13620] -> #0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}:
[  282.251513][T13620]        validate_chain+0xb9b/0x2140
[  282.253300][T13620]        __lock_acquire+0xab9/0xd20
[  282.255055][T13620]        lock_acquire+0x120/0x360
[  282.256768][T13620]        down_write+0x96/0x1f0
[  282.258398][T13620]        ocfs2_xattr_set+0xadd/0x11f0
[  282.260199][T13620]        __vfs_setxattr+0x43c/0x480
[  282.261998][T13620]        __vfs_setxattr_noperm+0x12d/0x660
[  282.263860][T13620]        vfs_setxattr+0x16b/0x2f0
[  282.265773][T13620]        filename_setxattr+0x274/0x600
[  282.267925][T13620]        path_setxattrat+0x364/0x3a0
[  282.270124][T13620]        __x64_sys_lsetxattr+0xbf/0xe0
[  282.272443][T13620]        do_syscall_64+0xfa/0x3b0
[  282.274572][T13620]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.277323][T13620] 
[  282.277323][T13620] other info that might help us debug this:
[  282.277323][T13620] 
[  282.281639][T13620] Chain exists of:
[  282.281639][T13620]   &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  282.281639][T13620] 
[  282.288347][T13620]  Possible unsafe locking scenario:
[  282.288347][T13620] 
[  282.291350][T13620]        CPU0                    CPU1
[  282.293674][T13620]        ----                    ----
[  282.295931][T13620]   lock(&oi->ip_xattr_sem);
[  282.297967][T13620]                                lock(jbd2_handle);
[  282.300629][T13620]                                lock(&oi->ip_xattr_sem);
[  282.303646][T13620]   lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]);
[  282.306705][T13620] 
[  282.306705][T13620]  *** DEADLOCK ***
[  282.306705][T13620] 
[  282.309996][T13620] 3 locks held by syz.3.3070/13620:
[  282.312259][T13620]  #0: ffff88801afe4428 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  282.315960][T13620]  #1: ffff8881037def40 (&sb->s_type->i_mutex_key#35){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  282.320377][T13620]  #2: ffff8881037dec78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  282.324417][T13620] 
[  282.324417][T13620] stack backtrace:
[  282.326822][T13620] CPU: 0 UID: 0 PID: 13620 Comm: syz.3.3070 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  282.326839][T13620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.326846][T13620] Call Trace:
[  282.326852][T13620]  <TASK>
[  282.326858][T13620]  dump_stack_lvl+0x189/0x250
[  282.326876][T13620]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.326889][T13620]  ? __pfx__printk+0x10/0x10
[  282.326906][T13620]  ? print_lock_name+0xde/0x100
[  282.326922][T13620]  print_circular_bug+0x2ee/0x310
[  282.326937][T13620]  check_noncircular+0x134/0x160
[  282.326950][T13620]  validate_chain+0xb9b/0x2140
[  282.326965][T13620]  ? look_up_lock_class+0x74/0x170
[  282.326980][T13620]  ? register_lock_class+0x51/0x320
[  282.326998][T13620]  __lock_acquire+0xab9/0xd20
[  282.327016][T13620]  ? ocfs2_xattr_set+0xadd/0x11f0
[  282.327029][T13620]  lock_acquire+0x120/0x360
[  282.327044][T13620]  ? ocfs2_xattr_set+0xadd/0x11f0
[  282.327059][T13620]  ? ocfs2_xattr_block_find+0x153/0x4c0
[  282.327074][T13620]  down_write+0x96/0x1f0
[  282.327085][T13620]  ? ocfs2_xattr_set+0xadd/0x11f0
[  282.327098][T13620]  ? __pfx_down_write+0x10/0x10
[  282.327114][T13620]  ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[  282.327129][T13620]  ? ocfs2_xattr_set+0x334/0x11f0
[  282.327144][T13620]  ocfs2_xattr_set+0xadd/0x11f0
[  282.327161][T13620]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  282.327175][T13620]  ? dput+0x37/0x2b0
[  282.327185][T13620]  ? dput+0x37/0x2b0
[  282.327192][T13620]  ? step_into+0x435/0xf30
[  282.327202][T13620]  ? step_into+0x435/0xf30
[  282.327214][T13620]  ? evm_protected_xattr_common+0x170/0x190
[  282.327230][T13620]  ? evm_protect_xattr+0x71d/0xa90
[  282.327269][T13620]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  282.327281][T13620]  ? __pfx_evm_protect_xattr+0x10/0x10
[  282.327293][T13620]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  282.327308][T13620]  __vfs_setxattr+0x43c/0x480
[  282.327325][T13620]  __vfs_setxattr_noperm+0x12d/0x660
[  282.327342][T13620]  vfs_setxattr+0x16b/0x2f0
[  282.327358][T13620]  ? __pfx_vfs_setxattr+0x10/0x10
[  282.327371][T13620]  ? mnt_get_write_access+0x223/0x2a0
[  282.327386][T13620]  filename_setxattr+0x274/0x600
[  282.327403][T13620]  ? __pfx_filename_setxattr+0x10/0x10
[  282.327420][T13620]  ? getname_flags+0x1e5/0x540
[  282.327430][T13620]  path_setxattrat+0x364/0x3a0
[  282.327444][T13620]  ? __pfx_path_setxattrat+0x10/0x10
[  282.327456][T13620]  ? do_futex+0x395/0x420
[  282.327476][T13620]  ? rcu_is_watching+0x15/0xb0
[  282.327488][T13620]  __x64_sys_lsetxattr+0xbf/0xe0
[  282.327500][T13620]  do_syscall_64+0xfa/0x3b0
[  282.327516][T13620]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.327530][T13620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.327541][T13620]  ? exc_page_fault+0x9f/0xf0
[  282.327553][T13620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.327564][T13620] RIP: 0033:0x7f2a0a58ebe9
[  282.327576][T13620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.327584][T13620] RSP: 002b:00007f2a0b425038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  282.327597][T13620] RAX: ffffffffffffffda RBX: 00007f2a0a7b5fa0 RCX: 00007f2a0a58ebe9
[  282.327605][T13620] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000080
[  282.327613][T13620] RBP: 00007f2a0a611e19 R08: 0000000000000000 R09: 0000000000000000
[  282.327620][T13620] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  282.327627][T13620] R13: 00007f2a0a7b6038 R14: 00007f2a0a7b5fa0 R15: 00007ffc117b2048
[  282.327640][T13620]  </TASK>
[  283.043115][ T7049] ocfs2: Unmounting device (7,3) on (node local)

VM DIAGNOSIS:
10:05:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000002a799 RDI=000000000002a79a RBP=00000000000003f8 RSP=ffffc900017eec10
R8 =ffff888021140237 R9 =1ffff11004228046 R10=dffffc0000000000 R11=ffffffff854effb0
R12=dffffc0000000000 R13=ffffffff99af9905 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f002c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2a0b4256c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34f14ff8 CR3=0000000122440000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=75663d79636e6572 65686f632c6c6c75
XMM04=652c736b636f6c66 6c61636f6c2c6c6c XMM05=0000000000000000 00007f2a0b4246e0
XMM06=00007f2a0b4246e0 00007f2a0b424560 XMM07=00007f2a0b4245a0 00007f2a0b424580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f2a0a612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a023e5 RBX=ffffffff81a023a4 RCX=0000000000080000 RDX=ffffc90009fca000
RSI=0000000000003d97 RDI=0000000000003d98 RBP=ffffc90002a3eff0 RSP=ffffc90002a3eee0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c19
R12=dffffc0000000000 R13=1ffff92000547de0 R14=0000000000000200 R15=000000000000003e
RIP=ffffffff81a023d3 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd2d89dd6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=0000000030b06000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000000000ce da9ec1884d00978b
XMM02=134d00204e000401 0000000000000000 XMM03=000000000002ff02 0000002100000000
XMM04=00007f04052ed100 00007f0404787460 XMM05=00007f0404787478 00007f04047874c0
XMM06=00007f04047874b8 00007f04047874b0 XMM07=00007f04047874a8 00007f04047874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0404612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
