last executing test programs:

2m39.538457292s ago: executing program 0 (id=1462):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e)
close(r0)

2m39.457281796s ago: executing program 0 (id=1463):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000280)=ANY=[], 0x0, 0x1b9, &(0x7f0000000080)="$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")

2m39.456995142s ago: executing program 0 (id=1465):
syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz80JwjAABeBntFLwoBdXcQB38OzdoxN0A+fQTZyqkvpTFxApfB/kQZKXhIS/miWn43z5mnXtuNPV2NQouZxXu6Z2h5GkX79rpfksDu7XeiBZfD8x3tlmv03/rKQcbr/6FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMySMAAP//JDwIpw==")

2m39.228995529s ago: executing program 0 (id=1467):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_emit_vhci(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000d00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f98a1, 0x0, 0x83, 0x0, &(0x7f0000000480))
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))

2m39.15994166s ago: executing program 0 (id=1468):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})

2m38.307622318s ago: executing program 0 (id=1473):
sync()
sync()
sync()
sync()
sync()
sync()
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m23.220588025s ago: executing program 32 (id=1473):
sync()
sync()
sync()
sync()
sync()
sync()
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m1.067073678s ago: executing program 2 (id=2798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000001700030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xa4}}, 0x0)

1m0.987925118s ago: executing program 2 (id=2801):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

1m0.98772054s ago: executing program 2 (id=2803):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x76d800, 0x3, 0x81, 0xffffffff, 0x5})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

1m0.92879742s ago: executing program 2 (id=2806):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

1m0.926669403s ago: executing program 2 (id=2809):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
syz_io_uring_complete(0x0, r0)
close_range(r1, 0xffffffffffffffff, 0x200000000000000)
r2 = socket(0x11, 0x3, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x3, 0x4}, 0x1c)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

1m0.627655447s ago: executing program 2 (id=2811):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="675bdee1c1767e7eb2060f796a611cd31897bd238874f0af484c8962e4125ba4949dcebde58b33eea0dced6e47dc841bbe12987cb53d7f37ec72436001"], 0x1, 0x5e7, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0)
read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020)
read$msr(r0, &(0x7f0000000080)=""/179, 0xb3)

1m0.591809069s ago: executing program 33 (id=2811):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="675bdee1c1767e7eb2060f796a611cd31897bd238874f0af484c8962e4125ba4949dcebde58b33eea0dced6e47dc841bbe12987cb53d7f37ec72436001"], 0x1, 0x5e7, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0)
read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020)
read$msr(r0, &(0x7f0000000080)=""/179, 0xb3)

14.436439734s ago: executing program 3 (id=3614):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010)

14.377847647s ago: executing program 3 (id=3617):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x194, 0x0, &(0x7f0000000880)="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", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2000)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

14.328113873s ago: executing program 3 (id=3619):
unshare(0x8040480)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$notify(r0, 0x402, 0x180000000)

14.267204744s ago: executing program 3 (id=3622):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

14.267145729s ago: executing program 3 (id=3623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2c06010000000000280012800b00010065727370616e00001800028008001500f3cd011e04001200050016"], 0x48}}, 0x0)

13.975629883s ago: executing program 3 (id=3631):
add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)
request_key(&(0x7f0000002a40)='asymmetric\x00', &(0x7f0000002a80)={'syz', 0x3}, 0x0, 0x0)

13.948254795s ago: executing program 34 (id=3631):
add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)
request_key(&(0x7f0000002a40)='asymmetric\x00', &(0x7f0000002a80)={'syz', 0x3}, 0x0, 0x0)

1.666593485s ago: executing program 1 (id=3898):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB='quota,iocharset=macgreek,discard,iocharset=iso8859-4,discard,integrity,quota,iocharset=default,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c001f1d02192b82c1d77d5275a9dd011c79b65ddfeffff26d30b4e45e4ff5d2a3c8f687494e2782c60db0fe3c08f1fd0244f2b3988f6a3c9f05e62bd27131d2e1354fc8865886482d784608f35db7a23eefc1665bb78934469d2a73d3fb7bf425ada37085aa46365837765a72f50552ce8f69886588138e3b027f009c59356fac135f289d895427a12d3f87b72351c22f0b418fba3067e7363e488de8e5c39f01bbb7e7b106977504e87fc87a886769f8eba6de3294c2076360fcb9ee4058f16c292335f4ea4af20729aff7de5cbcf16e575540ffb2ac590551ecdecf048219491837307887a332528baad28ae02a33b060"], 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

1.496850634s ago: executing program 5 (id=3902):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x4, 0x8, 0xf}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc)

1.436478389s ago: executing program 5 (id=3905):
syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0)

1.297264644s ago: executing program 1 (id=3907):
r0 = epoll_create(0x487)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000005})

1.21146334s ago: executing program 1 (id=3909):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x1234, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x48, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x1234, 0x1}}}}}, 0x0)

1.148091951s ago: executing program 1 (id=3911):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c56, &(0x7f0000000400)={[{@fat=@codepage={'codepage', 0x3d, '866'}}, {@rodir}, {@shortname_lower}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlate}, {@fat=@debug}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x3}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_win95}]}, 0x81, 0x29f, &(0x7f0000000640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

867.516892ms ago: executing program 1 (id=3912):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040))

458.170637ms ago: executing program 5 (id=3913):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)

387.020291ms ago: executing program 5 (id=3914):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0)

386.85144ms ago: executing program 5 (id=3915):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1)

326.120226ms ago: executing program 5 (id=3917):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file2\x00', 0x80, &(0x7f0000001940)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRES16, @ANYBLOB="0279d2e93a6aa58e817c47279715c654addaab1bd47e5db7fa14eabcda24b34b86381d6a6d30132f150c9107afb67c5bfedc5dc2f689b30441658dcfcb364ae14ca83aef00ca31430dd2b831e0955e07bc2736c337ce6a5c08a62a04813eb9c01e38715eb26d27b846447bb3d167b3f7f23907d07f695403f946f83eb570c547de936140e61ce959e804be5346bd98c2ac9a0b8af576739d17d19b0b6a7e4260505818fa68cb47038cf95da7d472b772c621d057d6706b0719d79289e3c79af226ed8cdb7091a2dc1f64ecd757ab4c77e790e8369d90febf767ec9c15d4cff7d08fe3f5b2325a7792916f672", @ANYRESDEC], 0xfe, 0x122a, &(0x7f00000005c0)="$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")
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x3, 0x9, 0x2, 0x4f5, 0x4, <r2=>r1})
sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, 0x0)
keyctl$session_to_parent(0x12)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
keyctl$session_to_parent(0x12)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0x6e)
r6 = syz_pidfd_open(0x0, 0x0)
r7 = pidfd_getfd(r6, r6, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x2400c800)
setns(r7, 0x66020000)
syz_clone(0xb0800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0)

274.936224ms ago: executing program 4 (id=3918):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0xf, 0xb2, &(0x7f0000000280)="$eJzs1zFKA1EUBdA7U+i0NiJYWE/jGnQpYqmNWCmCOxA34lZcwvQWFtOGkB/ITAgJ6QITCOcUH+6/PHjt+539XH+3SflMSnv18lc2Xt/enx6ehzdJ7sKpqZOcJ2mS3FwM+f9+6Kqx7/qPx67fM3z2NfW6AADAAercbudFGT/m4xW4CpfrvtmZrybYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCYlgEAAP//jI4oyQ==")
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0)

274.805148ms ago: executing program 4 (id=3919):
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0)
r1 = syz_io_uring_setup(0xf00, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xffffffffffffffff, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000540)="be0600000000", 0x0, 0x3, 0x11, 0x801, 0x0})

175.094969ms ago: executing program 4 (id=3920):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r2=>0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0xff7ffffffffffffa, 0x1000000000000000, 0x975a, 0x6, 0x402, 0xd, {0x4, 0x800000000000003, 0x4, 0x10fe2b25e, 0x1ffffffffffffffe, 0xa20, 0x20000006, 0x4, 0x3, 0x4000, 0x3, 0x0, 0x0, 0x8, 0x5417}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

106.973479ms ago: executing program 4 (id=3921):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000600)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@fat=@sys_immutable}, {@utf8no}, {@numtail}, {@utf8no}, {@rodir}, {@shortname_lower}, {@utf8no}]}, 0x2, 0x29f, &(0x7f0000000700)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0)

106.859541ms ago: executing program 4 (id=3922):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1e, 0xfffffffb, @mcast2}, 0x1c)

163.572µs ago: executing program 4 (id=3923):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/208, 0x3f}], 0x1000000000000108)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)

0s ago: executing program 1 (id=3924):
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0xf8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x1, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f516733"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79110b5d76304b938f"}], 0x1a0}, 0x4000c010)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)

kernel console output (not intermixed with test programs):

jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x69f0 instead
[  210.451755][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x39ea instead
[  210.455865][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  210.459230][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  210.462736][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x69f0 instead
[  210.466423][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x39ea instead
[  210.470137][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  210.473346][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  210.476637][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x69f0 instead
[  210.479949][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x39ea instead
[  210.479972][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  210.479984][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  210.479991][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x69f0 instead
[  210.494523][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x39ea instead
[  210.494551][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  210.494558][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  210.494565][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x69f0 instead
[  210.509369][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x39ea instead
[  210.512678][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  210.515927][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  210.519630][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x69f0 instead
[  210.522941][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x39ea instead
[  210.526219][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  210.529328][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  210.532988][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x69f0 instead
[  210.536253][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x39ea instead
[  210.539811][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  210.543001][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  210.546233][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x69f0 instead
[  210.549967][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x39ea instead
[  210.553243][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  210.556607][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  210.560289][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x69f0 instead
[  210.565039][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x39ea instead
[  210.569213][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  210.572817][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  210.576116][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x69f0 instead
[  210.580130][T10115] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x39ea instead
[  210.583411][T10115] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  210.586390][T10115] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  210.590859][   T33] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  210.689009][T10128] loop3: detected capacity change from 0 to 32768
[  210.718978][T10128] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  210.770738][T10128] XFS (loop3): Ending clean mount
[  210.777334][   T33] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  210.788759][T10128] XFS (loop3): Quotacheck needed: Please wait.
[  210.803766][   T33] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  210.819154][   T33] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  210.825657][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.829847][T10081] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  210.837672][   T33] usb 2-1: Product: syz
[  210.841165][   T33] usb 2-1: Manufacturer: syz
[  210.850676][   T33] usb 2-1: SerialNumber: syz
[  210.857247][T10081] XFS (loop3): Unmount and run xfs_repair
[  210.859922][T10107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  210.867672][T10107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  210.869415][T10081] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  210.872307][   T33] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  210.874132][T10081] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  210.882170][T10081] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  210.886450][T10081] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  210.890271][T10081] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  210.893509][T10081] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  210.903648][T10081] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.907703][T10081] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.911476][T10081] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.916339][T10081] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  210.920053][T10081] loop3: lost filesystem error report for type 5 error -117
[  210.932992][T10128] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  210.940623][T10128] loop3: lost filesystem error report for type 5 error -117
[  210.959255][T10128] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  210.965421][T10128] XFS (loop3): Unmount and run xfs_repair
[  210.967328][T10128] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  210.970248][T10128] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  210.973255][T10128] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  210.976936][T10128] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  210.980424][T10128] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  210.983859][T10128] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  210.987815][T10128] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.990644][T10128] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.993985][T10128] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  210.997356][T10128] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  211.014795][T10128] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  211.020862][T10128] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  211.055949][ T9615] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  211.268445][T10151] loop2: detected capacity change from 0 to 8192
[  211.273520][T10151] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  211.498576][ T5666] kernel write not supported for file /1369/gid_map (pid: 5666 comm: kworker/0:5)
[  211.772467][T10187] netlink: 'syz.3.1778': attribute type 7 has an invalid length.
[  212.084023][   T33] mos7840 2-1:1.0: probe with driver mos7840 failed with error -71
[  212.091328][   T33] usb 2-1: USB disconnect, device number 40
[  212.135101][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  212.306580][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  212.309953][    T9] usb 4-1: config 114 has an invalid interface number: 32 but max is 0
[  212.312594][    T9] usb 4-1: config 114 has no interface number 0
[  212.314652][    T9] usb 4-1: config 114 interface 32 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  212.318578][    T9] usb 4-1: config 114 interface 32 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[  212.322081][    T9] usb 4-1: config 114 interface 32 has no altsetting 0
[  212.327091][    T9] usb 4-1: string descriptor 0 read error: -22
[  212.329254][    T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=a4.60
[  212.332148][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.338028][T10196] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  212.548646][   T33] usb 4-1: USB disconnect, device number 7
[  212.657712][T10204] loop2: detected capacity change from 0 to 32768
[  212.775852][T10214] loop1: detected capacity change from 0 to 4096
[  212.779968][T10214] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  212.837696][T10216] loop1: detected capacity change from 0 to 512
[  212.851602][T10216] EXT4-fs (loop1): Test dummy encryption mode enabled
[  212.859016][T10216] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1793: corrupted in-inode xattr: invalid ea_ino
[  212.865212][T10216] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  212.865379][T10216] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1793: couldn't read orphan inode 15 (err -117)
[  212.871864][T10216] loop1: lost filesystem error report for type 5 error -117
[  212.872700][T10216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.899972][ T5596] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.139682][T10227] ptrace attach of "/syz-executor exec"[5596] was attempted by "/syz-executor exec"[10227]
[  213.375185][T10233] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  213.377304][T10233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  213.383216][T10233] vhci_hcd vhci_hcd.0: Device attached
[  213.408900][T10239] Invalid/unusable pipe
[  213.460618][T10243] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1801'.
[  213.464364][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1801'.
[  213.472263][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'.
[  213.644841][ T5666] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  213.650105][T10235] vhci_hcd: sendmsg failed!, ret=-107 for 48
[  213.653638][   T13] vhci_hcd vhci_hcd.0: stop threads
[  213.656205][   T13] vhci_hcd vhci_hcd.0: release socket
[  213.659029][   T13] vhci_hcd vhci_hcd.0: disconnect device
[  214.090169][T10259] loop3: detected capacity change from 0 to 4096
[  214.093630][T10259] EXT4-fs: Ignoring removed orlov option
[  214.119140][T10259] EXT4-fs (loop3): Test dummy encryption mode enabled
[  214.193734][T10259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.315462][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.405624][T10266] loop3: detected capacity change from 0 to 512
[  214.443098][T10266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.452895][T10266] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  214.462280][T10258] loop1: detected capacity change from 0 to 32768
[  214.476801][T10258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1808 (10258)
[  214.490718][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.493674][T10258] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.497839][T10258] BTRFS info (device loop1): using crc32c checksum algorithm
[  214.567020][T10258] BTRFS info (device loop1): enabling ssd optimizations
[  214.574192][T10258] BTRFS info (device loop1): turning on flush-on-commit
[  214.578826][T10292] loop3: detected capacity change from 0 to 64
[  214.581180][T10258] BTRFS info (device loop1): enabling free space tree
[  214.588227][T10258] BTRFS info (device loop1): enabling auto defrag
[  214.595797][T10258] BTRFS info (device loop1): use lzo compression, level 1
[  214.602581][T10292] MINIX-fs: deleted inode referenced: 6
[  214.603437][T10258] BTRFS info (device loop1): max_inline set to 4096
[  214.608451][T10292] MINIX-fs: deleted inode referenced: 6
[  214.643503][ T5596] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.691351][ T5673] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  214.853972][ T5673] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.864016][ T5673] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  214.869266][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.874854][ T5673] usb 3-1: Product: syz
[  214.877920][ T5673] usb 3-1: Manufacturer: syz
[  214.880336][T10303] loop1: detected capacity change from 0 to 512
[  214.881744][ T5673] usb 3-1: SerialNumber: syz
[  214.883936][T10303] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  214.895662][ T5673] usb 3-1: config 0 descriptor??
[  214.948937][ T5673] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device.
[  215.122787][   T33] usb 3-1: USB disconnect, device number 40
[  215.697226][   T34] audit: type=1326 audit(2000000041.840:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.710238][   T34] audit: type=1326 audit(2000000041.840:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.720948][   T34] audit: type=1326 audit(2000000041.850:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.730689][   T34] audit: type=1326 audit(2000000041.850:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.740211][   T34] audit: type=1326 audit(2000000041.850:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.749901][   T34] audit: type=1326 audit(2000000041.850:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.765283][   T34] audit: type=1326 audit(2000000041.850:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.776202][   T34] audit: type=1326 audit(2000000041.850:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.785540][   T34] audit: type=1326 audit(2000000041.850:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  215.794214][   T34] audit: type=1326 audit(2000000041.850:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.2.1833" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  216.174795][    T9] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  216.348200][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  216.352630][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.357293][    T9] usb 3-1: Product: syz
[  216.358650][    T9] usb 3-1: Manufacturer: syz
[  216.361740][    T9] usb 3-1: SerialNumber: syz
[  216.369526][    T9] usb 3-1: config 0 descriptor??
[  216.517352][T10363] loop3: detected capacity change from 0 to 40427
[  216.525735][T10363] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  216.530376][T10363] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  216.534544][T10363] F2FS-fs (loop3): invalid crc value
[  216.578553][T10363] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  216.586239][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  216.596906][T10363] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  216.599471][T10363] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  216.970911][T10407] loop3: detected capacity change from 0 to 7
[  216.973685][T10407] Dev loop3: unable to read RDB block 7
[  216.976563][T10407]  loop3: unable to read partition table
[  216.978821][T10407] loop3: partition table beyond EOD, truncated
[  216.980859][T10407] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[  217.590756][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  217.598983][    T9] usb 3-1: USB disconnect, device number 41
[  218.146211][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  218.306837][    T9] usb 4-1: config 220 has an invalid interface number: 142 but max is 0
[  218.313412][    T9] usb 4-1: config 220 has no interface number 0
[  218.316472][    T9] usb 4-1: config 220 interface 142 has no altsetting 0
[  218.321671][    T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e
[  218.326309][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.329781][    T9] usb 4-1: Product: syz
[  218.331574][    T9] usb 4-1: Manufacturer: syz
[  218.333411][    T9] usb 4-1: SerialNumber: syz
[  218.458504][T10438] loop2: detected capacity change from 0 to 32768
[  218.465741][T10438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1876 (10438)
[  218.507978][T10438] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  218.511915][T10438] BTRFS info (device loop2): using sha256 checksum algorithm
[  218.549478][    T9] ttusb_dec_send_command: command bulk message failed: error -22
[  218.562624][    T9] ttusb-dec 4-1:220.142: probe with driver ttusb-dec failed with error -22
[  218.575467][    T9] usb 4-1: USB disconnect, device number 8
[  218.628820][T10438] BTRFS info (device loop2): enabling ssd optimizations
[  218.634969][T10438] BTRFS info (device loop2): turning on async discard
[  218.639668][T10438] BTRFS info (device loop2): enabling free space tree
[  218.697536][ T5602] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  218.741528][ T5666] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  218.831897][T10468] fuse: Bad value for 'fd'
[  218.876526][T10472] loop2: detected capacity change from 0 to 256
[  218.885206][T10472] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  219.532737][T10488] loop3: detected capacity change from 0 to 32768
[  219.542795][T10488] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1892 (10488)
[  219.566599][T10488] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  219.570168][T10488] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  219.618025][T10488] BTRFS info (device loop3): enabling ssd optimizations
[  219.627146][T10488] BTRFS info (device loop3): turning on flush-on-commit
[  219.631656][T10488] BTRFS info (device loop3): turning on async discard
[  219.636987][T10488] BTRFS info (device loop3): enabling free space tree
[  219.640854][T10488] BTRFS info (device loop3): force zlib compression, level 3
[  219.644348][T10488] BTRFS info (device loop3): max_inline set to 4096
[  219.675614][ T9615] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  220.427772][T10543] overlayfs: missing 'lowerdir'
[  220.803580][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1913'.
[  220.965570][T10551] loop3: detected capacity change from 0 to 32768
[  220.968701][T10551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1912 (10551)
[  220.992188][T10551] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  221.002681][T10551] BTRFS info (device loop3): using crc32c checksum algorithm
[  221.050112][T10551] BTRFS info (device loop3): enabling ssd optimizations
[  221.071332][T10551] BTRFS info (device loop3): turning on flush-on-commit
[  221.077331][T10551] BTRFS info (device loop3): enabling free space tree
[  221.088782][T10551] BTRFS info (device loop3): enabling auto defrag
[  221.099063][T10551] BTRFS info (device loop3): use lzo compression, level 1
[  221.105835][T10551] BTRFS info (device loop3): max_inline set to 4096
[  221.128574][   T34] kauditd_printk_skb: 9 callbacks suppressed
[  221.128583][   T34] audit: type=1800 audit(2000000047.270:163): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1912" name="file1" dev="loop3" ino=260 res=0 errno=0
[  221.167560][ T9615] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  221.634797][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  221.794957][    T9] usb 4-1: Using ep0 maxpacket: 8
[  221.800123][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  221.805726][    T9] usb 4-1: config 4 has an invalid interface number: 109 but max is 0
[  221.810864][    T9] usb 4-1: config 4 has no interface number 0
[  221.814412][    T9] usb 4-1: config 4 interface 109 has no altsetting 0
[  221.823279][    T9] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=d1.a4
[  221.833419][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.838104][    T9] usb 4-1: Product: syz
[  221.839600][    T9] usb 4-1: Manufacturer: syz
[  221.841659][    T9] usb 4-1: SerialNumber: syz
[  222.072595][    T9] usb_ehset_test 4-1:4.109: probe with driver usb_ehset_test failed with error -32
[  222.078768][    T9] usb 4-1: USB disconnect, device number 9
[  223.367696][T10661] loop2: detected capacity change from 0 to 512
[  223.375193][T10661] EXT4-fs: Ignoring removed orlov option
[  223.383727][T10661] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  223.416400][T10661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  223.423904][T10661] System zones: 1-12
[  223.430762][T10661] EXT4-fs (loop2): orphan cleanup on readonly fs
[  223.436011][T10661] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1954: invalid indirect mapped block 2 (level 2)
[  223.446396][T10661] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  223.452526][T10661] EXT4-fs (loop2): Remounting filesystem read-only
[  223.455436][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  223.455446][    C0] EXT4-fs (loop2): initial error at time 2000000049: ext4_free_branches:1023: inode 11
[  223.455458][    C0] EXT4-fs (loop2): last error at time 2000000049: ext4_free_branches:1023: inode 11
[  223.467087][T10661] EXT4-fs (loop2): 1 truncate cleaned up
[  223.469615][T10661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  223.679557][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  223.729263][T10672] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.768659][T10677] loop2: detected capacity change from 0 to 2048
[  223.890878][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'.
[  224.522347][T10728] loop3: detected capacity change from 0 to 256
[  224.526761][T10728] exfat: Deprecated parameter 'utf8'
[  224.536298][T10728] exfat: Deprecated parameter 'namecase'
[  224.541628][T10728] exfat: Deprecated parameter 'namecase'
[  224.553018][T10728] exfat: Deprecated parameter 'utf8'
[  224.570314][T10728] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  224.579596][T10728] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  224.622893][T10728] exFAT-fs (loop3): start_clu is invalid cluster(0x400)
[  224.884988][    T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  225.037183][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  225.042151][    T9] usb 3-1: language id specifier not provided by device, defaulting to English
[  225.053381][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[  225.058243][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.061431][    T9] usb 3-1: Product: 䚦>ഩ
[  225.063417][    T9] usb 3-1: SerialNumber: syz
[  225.325977][    T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  225.336488][    T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  225.361788][T10743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.408489][    T9] usb 3-1: USB disconnect, device number 42
[  225.445276][T10752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1994'.
[  225.488349][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.056960][ T5666] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  226.235465][ T5666] usb 4-1: Using ep0 maxpacket: 16
[  226.241778][ T5666] usb 4-1: config 4 has an invalid interface number: 9 but max is 0
[  226.246375][ T5666] usb 4-1: config 4 has no interface number 0
[  226.250465][ T5666] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  226.256908][ T5666] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  226.261172][ T5666] usb 4-1: config 4 interface 9 has no altsetting 0
[  226.271307][ T5666] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  226.277061][ T5666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.280449][ T5666] usb 4-1: Product: syz
[  226.282917][ T5666] usb 4-1: Manufacturer: syz
[  226.286038][ T5666] usb 4-1: SerialNumber: syz
[  226.294710][T10783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  226.298732][T10783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  226.338573][ T5666] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  226.512907][ T5673] usb 4-1: USB disconnect, device number 10
[  226.517669][   T13] usb 4-1: Failed to submit usb control message: -71
[  226.523845][   T13] usb 4-1: unable to send the bmi data to the device: -71
[  226.527360][   T13] usb 4-1: unable to get target info from device
[  226.531499][   T13] usb 4-1: could not get target info (-71)
[  226.534319][   T13] usb 4-1: could not probe fw (-71)
[  227.597218][T10869] loop2: detected capacity change from 0 to 512
[  227.601614][T10869] EXT4-fs: Ignoring removed nobh option
[  227.606780][T10869] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  227.612961][T10869] EXT4-fs (loop2): 1 truncate cleaned up
[  227.614287][T10871] loop3: detected capacity change from 0 to 1024
[  227.621427][T10869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.704285][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.763957][   T34] audit: type=1326 audit(2000000053.900:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.773161][   T34] audit: type=1326 audit(2000000053.910:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.780980][   T34] audit: type=1326 audit(2000000053.920:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.790701][T10881] loop3: detected capacity change from 0 to 1024
[  227.794798][   T34] audit: type=1326 audit(2000000053.920:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.814385][   T34] audit: type=1326 audit(2000000053.920:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.839213][   T34] audit: type=1326 audit(2000000053.930:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.850854][   T34] audit: type=1326 audit(2000000053.930:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.861142][   T34] audit: type=1326 audit(2000000053.930:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.869720][   T34] audit: type=1326 audit(2000000053.930:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  227.880242][   T34] audit: type=1326 audit(2000000053.930:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.2.2048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  228.092506][T10893] loop3: detected capacity change from 0 to 512
[  228.098896][T10893] EXT4-fs: Ignoring removed bh option
[  228.111692][T10893] EXT4-fs (loop3): 1 truncate cleaned up
[  228.114326][T10893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.227494][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.960077][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2085'.
[  228.992793][T10962] CacheFiles: Failed to register: -95
[  230.037307][T11016] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  230.514406][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'.
[  230.740378][   T11] block nbd0: Possible stuck request ffff88810a510000: control (read@0,1024B). Runtime 60 seconds
[  230.743627][   T11] block nbd0: Possible stuck request ffff88810a510200: control (read@1024,1024B). Runtime 60 seconds
[  230.747653][   T11] block nbd0: Possible stuck request ffff88810a510400: control (read@2048,1024B). Runtime 60 seconds
[  230.752008][   T11] block nbd0: Possible stuck request ffff88810a510600: control (read@3072,1024B). Runtime 60 seconds
[  230.956618][T11092] loop2: detected capacity change from 0 to 32768
[  230.995222][T11092] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.036571][T11092] XFS (loop2): Ending clean mount
[  231.054564][T11092] XFS (loop2): Quotacheck needed: Please wait.
[  231.108622][T11092] XFS (loop2): Quotacheck: Done.
[  231.145250][ T5666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  231.202773][ T5602] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.366687][  T190] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  231.518073][  T190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.522242][  T190] usb 4-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00
[  231.525994][  T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.535216][  T190] cdc_phonet 4-1:1.0: probe with driver cdc_phonet failed with error -22
[  231.742520][ T7553] usb 4-1: USB disconnect, device number 11
[  231.855021][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  232.175180][  T190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  232.309424][T11127] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2156'.
[  232.317425][T11127] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  232.366988][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2158'.
[  232.423978][T11135] loop3: detected capacity change from 0 to 512
[  232.492401][T11139] loop3: detected capacity change from 0 to 8
[  232.803333][T11148] evm: overlay not supported
[  232.905128][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  232.918905][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  233.005008][ T5673] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  233.044927][T11162] loop2: detected capacity change from 0 to 32768
[  233.352039][T11181] loop2: detected capacity change from 0 to 4096
[  233.357090][T11181] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  233.822888][T11168] Bluetooth: hci0: Opcode 0x080f failed: -4
[  234.333240][T11203] loop2: detected capacity change from 0 to 256
[  234.338652][T11203] exfat: Deprecated parameter 'namecase'
[  234.348275][T11203] exfat: Deprecated parameter 'namecase'
[  234.351484][T11203] exfat: Deprecated parameter 'namecase'
[  234.353987][T11203] exfat: Bad value for 'namecase'
[  234.390645][T11205] loop2: detected capacity change from 0 to 256
[  234.401283][T11205] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d)
[  234.445005][  T190] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  234.595087][  T190] usb 4-1: Using ep0 maxpacket: 32
[  234.599700][  T190] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  234.602506][  T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.608985][  T190] usb 4-1: config 0 descriptor??
[  234.631798][T11221] loop2: detected capacity change from 0 to 512
[  234.640124][T11221] EXT4-fs: Ignoring removed nobh option
[  234.680700][T11221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.685780][T11221] ext4 filesystem being mounted at /752/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.746117][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.819390][  T190] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  234.835554][  T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  234.840041][  T190] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  234.843050][  T190] usb 4-1: media controller created
[  234.860753][  T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  234.974932][ T4986] Bluetooth: hci0: command 0x0406 tx timeout
[  235.025494][  T190] az6027: usb out operation failed. (-71)
[  235.029439][  T190] az6027: usb out operation failed. (-71)
[  235.032867][  T190] stb0899_attach: Driver disabled by Kconfig
[  235.034825][  T190] az6027: no front-end attached
[  235.034825][  T190] 
[  235.037437][  T190] az6027: usb out operation failed. (-71)
[  235.039434][  T190] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  235.042567][  T190] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20
[  235.052794][  T190] dvb-usb: schedule remote query interval to 400 msecs.
[  235.055234][  T190] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  235.059954][  T190] usb 4-1: USB disconnect, device number 12
[  235.080444][  T190] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  235.567033][T11242] loop3: detected capacity change from 0 to 16
[  235.570338][T11242] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  235.669577][T11246] loop3: detected capacity change from 0 to 1024
[  235.707813][T11246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.743116][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.587458][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2218'.
[  236.595776][T11270] netlink: 83 bytes leftover after parsing attributes in process `syz.1.2218'.
[  236.985579][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  237.224918][   T55] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  238.316784][T11306] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  238.333765][T11306] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  238.455797][T11318] loop2: detected capacity change from 0 to 256
[  238.486550][   T34] kauditd_printk_skb: 32 callbacks suppressed
[  238.486559][   T34] audit: type=1800 audit(2000000064.630:206): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2239" name="file1" dev="loop2" ino=1048665 res=0 errno=0
[  238.490837][T11324] netlink: 358 bytes leftover after parsing attributes in process `syz.1.2242'.
[  238.712330][   T34] audit: type=1326 audit(2000000064.850:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.2252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  238.728642][   T34] audit: type=1326 audit(2000000064.850:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.2252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  238.738918][   T34] audit: type=1326 audit(2000000064.870:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.2252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  238.748518][   T34] audit: type=1326 audit(2000000064.870:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.2252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  238.756729][   T34] audit: type=1326 audit(2000000064.870:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.2252" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  238.763542][   T34] audit: type=1326 audit(2000000064.870:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.2252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  238.773038][   T34] audit: type=1326 audit(2000000064.870:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.2252" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  238.780338][   T34] audit: type=1326 audit(2000000064.870:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.2252" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f63d0d9e0d9 code=0x7ffc0000
[  238.930543][T11348] loop2: detected capacity change from 0 to 32768
[  238.943084][T11348] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2254 (11348)
[  238.952580][T11348] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  238.965430][T11348] BTRFS info (device loop2): using blake2b checksum algorithm
[  238.976363][T11361] loop3: detected capacity change from 0 to 1024
[  238.979232][T11361] EXT4-fs (loop3): stripe (31) is not aligned with cluster size (16), stripe is disabled
[  239.002753][T11361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.042082][T11348] BTRFS info (device loop2): enabling ssd optimizations
[  239.052342][T11348] BTRFS info (device loop2): turning on async discard
[  239.060997][T11348] BTRFS info (device loop2): enabling free space tree
[  239.067845][T11348] BTRFS info (device loop2): use zstd compression, level 3
[  239.070584][T11361] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2260: bg 0: block 153: padding at end of block bitmap is not set
[  239.118333][   T34] audit: type=1800 audit(2000000065.260:215): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2254" name="bus" dev="loop2" ino=263 res=0 errno=0
[  239.118441][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.462542][T11392] overlayfs: failed to clone upperpath
[  239.518731][ T5602] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  239.892644][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2278'.
[  240.244112][T11430] loop3: detected capacity change from 0 to 1024
[  240.273614][T11430] hfsplus: invalid length 1280 has been corrected to 255
[  240.490694][T11440] loop3: detected capacity change from 0 to 16
[  240.523759][T11440] erofs (device loop3): mounted with root inode @ nid 36.
[  240.573354][T11444] loop3: detected capacity change from 0 to 1024
[  240.820122][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'.
[  241.281055][T11484] netlink: 'syz.1.2307': attribute type 1 has an invalid length.
[  241.574836][T11484] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.599753][T11487] veth3: entered allmulticast mode
[  241.621771][T11487] bond1: (slave veth3): Enslaving as an active interface with a down link
[  241.633636][T11484] bond1: entered promiscuous mode
[  241.637547][T11484] bond1: entered allmulticast mode
[  241.656381][T11484] macvlan0: entered promiscuous mode
[  241.660121][T11484] macvlan0: entered allmulticast mode
[  241.672755][T11484] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  241.937717][T11497] loop2: detected capacity change from 0 to 2048
[  241.949306][T11497] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  241.963100][T11497] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  241.976873][T11497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.054581][T11501] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2315'.
[  242.209469][ T7553] Process accounting resumed
[  242.450379][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  242.462413][T11526] loop2: detected capacity change from 0 to 32768
[  242.477142][T11526] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  242.509054][T11526] XFS (loop2): Ending clean mount
[  243.024820][ T7553] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  243.121538][T11542] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2329'.
[  243.666154][ T7553] usb 3-1: unable to get BOS descriptor or descriptor too short
[  243.672136][ T7553] usb 3-1: no configurations
[  243.674246][ T7553] usb 3-1: can't read configurations, error -22
[  244.203839][ T5602] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.737914][T11588] gretap1: entered promiscuous mode
[  244.824888][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  245.042695][T11608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2357'.
[  245.123623][T11614] vlan3: entered promiscuous mode
[  245.129591][T11614] bridge0: entered promiscuous mode
[  245.455261][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  245.560476][T11651] dummy0: entered promiscuous mode
[  245.566681][T11651] dummy0: entered allmulticast mode
[  245.621502][T11651] kAFS: Invalid Command on /proc/fs/afs/cells file
[  246.302091][T11670] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  247.031129][  T190] IPVS: starting estimator thread 0...
[  247.124999][T11730] IPVS: using max 84 ests per chain, 201600 per kthread
[  247.886215][T11762] loop2: detected capacity change from 0 to 32768
[  247.901861][T11762] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  247.910544][T11762] JBD2: Ignoring recovery information on journal
[  247.944022][T11769] mmap: syz.3.2429 (11769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  247.962533][T11762] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  248.044898][ T5602] ocfs2: Unmounting device (7,2) on (node local)
[  248.814666][T11808] overlayfs: failed to clone lowerpath
[  248.839870][T11807] loop2: detected capacity change from 0 to 1024
[  248.850295][T11808] overlayfs: failed to clone lowerpath
[  248.855768][T11807] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  248.973353][T11784] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  249.142736][T11815] netlink: 'syz.3.2448': attribute type 6 has an invalid length.
[  249.177854][T11817] loop3: detected capacity change from 0 to 512
[  249.187957][T11817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.192183][T11817] ext4 filesystem being mounted at /279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  249.211461][T11817] EXT4-fs error (device loop3): ext4_get_first_dir_block:3537: inode #12: comm syz.3.2449: Attempting to read directory block (0) that is past i_size (3)
[  249.226095][T11817] EXT4-fs (loop3): Remounting filesystem read-only
[  249.242576][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.344869][  T190] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  249.497088][  T190] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  249.500009][  T190] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  249.502784][  T190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.506125][  T190] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  249.508899][  T190] usb 3-1: config 1 has no interface number 1
[  249.510859][  T190] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  249.515350][  T190] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE
[  249.519687][  T190] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 16428, setting to 1024
[  249.523444][  T190] usb 3-1: config 1 interface 2 altsetting 1 bulk endpoint 0xE has invalid maxpacket 1024
[  249.529180][  T190] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.532517][  T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.535773][  T190] usb 3-1: Product: syz
[  249.537473][  T190] usb 3-1: Manufacturer: syz
[  249.539848][  T190] usb 3-1: SerialNumber: syz
[  249.644258][T11831] gadgetfs: bound to dummy_udc driver
[  249.966508][T11813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  250.041058][  T190] usb 3-1: No MIDI endpoints found
[  250.043533][  T190] usb 3-1: Failed to parse MIDI 2.0 interface
[  250.045556][  T190] usb 3-1: 0:2: cannot create sequencer device
[  250.322352][   T32] usb 3-1: USB disconnect, device number 45
[  250.335177][ T4986] Bluetooth: hci0: command 0x0406 tx timeout
[  251.375786][   T32] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  251.526861][   T32] usb 4-1: Using ep0 maxpacket: 32
[  251.533285][   T32] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.545560][   T32] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.551009][   T32] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  251.553768][   T32] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  251.559553][   T32] usb 4-1: Product: syz
[  251.561197][   T32] usb 4-1: Manufacturer: syz
[  251.573550][   T32] hub 4-1:4.0: USB hub found
[  251.774041][   T32] hub 4-1:4.0: config failed, hub has too many ports! (err -19)
[  251.884153][T11951] loop2: detected capacity change from 0 to 4096
[  251.965565][T11955] syz.2.2508 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  251.999162][T11957] loop2: detected capacity change from 0 to 256
[  252.084954][   T32] usb 4-1: USB disconnect, device number 13
[  252.424806][  T190] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  252.529082][T11939] 9pnet_fd: p9_fd_create_tcp (11939): problem connecting socket to 127.0.0.1
[  252.576567][  T190] usb 3-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  252.583346][  T190] usb 3-1: config 0 interface 0 has no altsetting 0
[  252.587127][  T190] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  252.592884][  T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.608092][  T190] usb 3-1: config 0 descriptor??
[  252.668965][T11969] loop3: detected capacity change from 0 to 256
[  252.675198][T11969] exfat: Deprecated parameter 'namecase'
[  252.687403][T11969] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  252.794842][   T34] kauditd_printk_skb: 11 callbacks suppressed
[  252.794855][   T34] audit: type=1326 audit(2000000078.930:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  252.816478][   T34] audit: type=1326 audit(2000000078.940:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  252.832067][   T34] audit: type=1326 audit(2000000078.940:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2516" exe="/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  252.845832][   T34] audit: type=1326 audit(2000000078.940:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  252.857562][   T34] audit: type=1326 audit(2000000078.940:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.3.2516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  253.022350][  T190] zeroplus 0003:0C12:0005.0012: hidraw0: USB HID v10.01 Device [HID 0c12:0005] on usb-dummy_hcd.2-1/input0
[  253.026823][  T190] zeroplus 0003:0C12:0005.0012: no inputs found
[  253.218161][ T5666] usb 3-1: USB disconnect, device number 46
[  254.475628][T12032] fuse: Bad value for 'fd'
[  254.558114][T12031] loop3: detected capacity change from 0 to 512
[  254.643070][T12031] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent
[  254.916507][T12034] loop2: detected capacity change from 0 to 8192
[  254.928039][T12034] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 1fc00000005
[  255.154308][T12042] loop2: detected capacity change from 0 to 256
[  255.615042][   T33] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  255.697737][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  255.700629][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  255.765512][   T33] usb 3-1: Using ep0 maxpacket: 32
[  255.770098][   T33] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  255.773633][   T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.777870][   T33] usb 3-1: config 0 has no interface number 0
[  255.783337][   T33] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  255.788201][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.792090][   T33] usb 3-1: Product: syz
[  255.792590][T12053] loop3: detected capacity change from 0 to 4096
[  255.793924][   T33] usb 3-1: Manufacturer: syz
[  255.800704][   T33] usb 3-1: SerialNumber: syz
[  255.801286][T12053] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  255.809787][   T33] usb 3-1: config 0 descriptor??
[  255.817325][   T33] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  255.821969][   T33] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  256.040136][ T5666] usb 3-1: USB disconnect, device number 47
[  256.694835][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'.
[  257.928584][T12164] sctp: [Deprecated]: syz.1.2596 (pid 12164) Use of struct sctp_assoc_value in delayed_ack socket option.
[  257.928584][T12164] Use struct sctp_sack_info instead
[  259.051899][T12203] overlayfs: failed to clone upperpath
[  259.106356][T12208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2613'.
[  259.519116][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'.
[  260.601967][T12317] xt_hashlimit: size too large, truncated to 1048576
[  260.674389][T12324] program syz.2.2642 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  260.815906][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.830230][   T11] block nbd0: Possible stuck request ffff88810a510000: control (read@0,1024B). Runtime 90 seconds
[  260.834333][   T11] block nbd0: Possible stuck request ffff88810a510200: control (read@1024,1024B). Runtime 90 seconds
[  260.840233][   T11] block nbd0: Possible stuck request ffff88810a510400: control (read@2048,1024B). Runtime 90 seconds
[  260.844526][   T11] block nbd0: Possible stuck request ffff88810a510600: control (read@3072,1024B). Runtime 90 seconds
[  261.271142][T12345] loop3: detected capacity change from 0 to 1024
[  261.276828][T12345] EXT4-fs: Ignoring removed orlov option
[  261.301637][T12345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.338889][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.020851][T12372] loop2: detected capacity change from 0 to 32768
[  262.024529][T12372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2652 (12372)
[  262.033730][T12372] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  262.037858][T12372] BTRFS info (device loop2): using sha256 checksum algorithm
[  262.057862][   T34] audit: type=1326 audit(2000000087.196:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.1.2655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  262.080278][   T34] audit: type=1326 audit(2000000087.196:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.1.2655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  262.090701][   T34] audit: type=1326 audit(2000000087.196:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.1.2655" exe="/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  262.107515][   T34] audit: type=1326 audit(2000000087.196:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.1.2655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  262.121420][T12372] BTRFS info (device loop2): enabling ssd optimizations
[  262.124301][T12372] BTRFS info (device loop2): turning on sync discard
[  262.127759][T12372] BTRFS info (device loop2): enabling free space tree
[  262.130478][T12372] BTRFS info (device loop2): use zlib compression, level 3
[  262.136159][   T34] audit: type=1326 audit(2000000087.196:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.1.2655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  262.903457][ T5602] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.351769][T12414] loop3: detected capacity change from 0 to 2048
[  263.371791][T12414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  263.570841][T12434] Cannot find set identified by id 0 to match
[  264.414382][T12449] loop3: detected capacity change from 0 to 4096
[  264.513765][T12451] loop2: detected capacity change from 0 to 8
[  264.518766][T12451] SQUASHFS error: lzo decompression failed, data probably corrupt
[  264.522465][T12451] SQUASHFS error: Failed to read block 0x91: -5
[  264.524447][T12451] SQUASHFS error: Unable to read metadata cache entry [8f]
[  264.527001][T12451] SQUASHFS error: Unable to read inode 0x11f
[  265.098832][T12449] ntfs3(loop3): Failed to load $Extend (-22).
[  265.107009][T12449] ntfs3(loop3): Failed to initialize $Extend.
[  265.671040][T12470] loop3: detected capacity change from 0 to 7
[  265.679122][T12470] Dev loop3: unable to read RDB block 7
[  265.683644][T12470]  loop3: AHDI p1 p2
[  265.690851][T12470] loop3: partition table partially beyond EOD, truncated
[  265.700298][T12470] loop3: p1 start 1702000233 is beyond EOD, truncated
[  267.229727][   T34] audit: type=1326 audit(2000000092.366:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  267.259713][   T34] audit: type=1326 audit(2000000092.366:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  267.291890][   T34] audit: type=1326 audit(2000000092.396:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  267.321199][   T34] audit: type=1326 audit(2000000092.396:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  267.351621][   T34] audit: type=1326 audit(2000000092.396:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  267.376406][   T34] audit: type=1326 audit(2000000092.396:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  267.402722][   T34] audit: type=1326 audit(2000000092.396:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  267.440576][   T34] audit: type=1326 audit(2000000092.396:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  267.460230][   T34] audit: type=1326 audit(2000000092.396:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12485 comm="syz.1.2692" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  268.733259][   T34] audit: type=1326 audit(2000000093.866:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12517 comm="syz.3.2705" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  268.784149][T12520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2706'.
[  268.851929][T12522] loop3: detected capacity change from 0 to 8
[  268.874596][T12522] SQUASHFS error: zlib decompression failed, data probably corrupt
[  268.877924][T12522] SQUASHFS error: Failed to read block 0x9b: -5
[  268.880415][T12522] SQUASHFS error: Unable to read metadata cache entry [99]
[  268.883251][T12522] SQUASHFS error: Unable to read inode 0x127
[  269.180941][T12534] trusted_key: encrypted_key: insufficient parameters specified
[  269.241007][T12536] netlink: 'syz.3.2714': attribute type 1 has an invalid length.
[  269.243601][T12536] netlink: 'syz.3.2714': attribute type 2 has an invalid length.
[  269.247951][T12536] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2714'.
[  269.251362][T12536] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.178640][T12581] loop3: detected capacity change from 0 to 512
[  270.194000][T12581] EXT4-fs (loop3): Test dummy encryption mode enabled
[  270.209640][T12581] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.227615][T12581] EXT4-fs (loop3): shut down requested (2)
[  270.243891][ T9615] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  270.841531][T12615] 8021q: adding VLAN 0 to HW filter on device bond1
[  271.130145][T12624] loop2: detected capacity change from 0 to 512
[  271.144231][T12624] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  271.150359][T12624] EXT4-fs (loop2): orphan cleanup on readonly fs
[  271.153686][T12624] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  271.163209][T12624] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  271.166612][T12624] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.2754: casefold flag without casefold feature
[  271.172372][T12624] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  271.172686][T12624] EXT4-fs (loop2): Remounting filesystem read-only
[  271.176260][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  271.176271][    C0] EXT4-fs (loop2): initial error at time 2000000096: ext4_orphan_get:1399: inode 16
[  271.176286][    C0] EXT4-fs (loop2): last error at time 2000000096: ext4_orphan_get:1399: inode 16
[  271.189794][T12624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  271.212108][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.284913][ T5673] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  271.440063][ T5673] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  271.445925][ T5673] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  271.455275][ T5673] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  271.465218][ T5673] usb 4-1: config 220 has no interface number 2
[  271.468092][ T5673] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  271.477348][ T5673] usb 4-1: config 220 interface 0 has no altsetting 0
[  271.481716][ T5673] usb 4-1: config 220 interface 76 has no altsetting 0
[  271.485333][ T5673] usb 4-1: config 220 interface 1 has no altsetting 0
[  271.491430][ T5673] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  271.504019][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.507685][ T5673] usb 4-1: Product: syz
[  271.509325][ T5673] usb 4-1: Manufacturer: syz
[  271.511165][ T5673] usb 4-1: SerialNumber: syz
[  271.644768][ T5666] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  271.727620][ T5673] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  271.732726][ T5673] uvcvideo 4-1:220.0: No valid video chain found.
[  271.737973][ T5673] usb 4-1: selecting invalid altsetting 0
[  271.747639][ T5673] usb 4-1: selecting invalid altsetting 0
[  271.754523][ T5673] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  271.764314][ T5673] usb 4-1: USB disconnect, device number 14
[  271.796560][ T5666] usb 3-1: unable to get BOS descriptor or descriptor too short
[  271.800611][ T5666] usb 3-1: not running at top speed; connect to a high speed hub
[  271.805601][ T5666] usb 3-1: config 0 has an invalid interface number: 175 but max is 0
[  271.809240][ T5666] usb 3-1: config 0 has no interface number 0
[  271.812879][ T5666] usb 3-1: config 0 interface 175 has no altsetting 0
[  271.818510][ T5666] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.02
[  271.823931][ T5666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=26
[  271.829342][ T5666] usb 3-1: SerialNumber: syz
[  271.833877][ T5666] usb 3-1: config 0 descriptor??
[  272.046315][ T5666] usb-storage 3-1:0.175: USB Mass Storage device detected
[  272.106312][ T5666] usb 3-1: USB disconnect, device number 48
[  272.252629][T12658] Cannot find add_set index 4 as target
[  273.989940][T12673] loop2: detected capacity change from 0 to 4096
[  274.552951][T12719] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2795'.
[  274.628523][T12729] netlink: Conntrack attr has 8 unknown bytes
[  274.633763][T12729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.001895][T12076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.006748][T12076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.085363][T12076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.088650][T12076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.125964][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.134072][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.139052][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.148619][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.153608][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.205208][T12076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.208447][T12076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.269799][T12076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.273273][T12076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.444946][T12076] bridge_slave_1: left promiscuous mode
[  275.449298][T12076] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.457364][T12076] bridge_slave_0: left allmulticast mode
[  275.459411][T12076] bridge_slave_0: left promiscuous mode
[  275.461373][T12076] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.637217][T12076] team0: Port device vxlan0 removed
[  275.662702][T12076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.669139][T12076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.672873][T12771] loop3: detected capacity change from 0 to 4096
[  275.677406][T12771] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  275.679596][T12076] bond0 (unregistering): Released all slaves
[  275.689338][T12076] bond1 (unregistering): Released all slaves
[  275.692065][T12771] ntfs3(loop3): ino=19, mi_enum_attr
[  275.693813][T12771] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  275.696813][T12771] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  275.714263][ T5342] 8021q: adding VLAN 0 to HW filter on device eth1
[  275.831557][T12076] : left promiscuous mode
[  276.001782][T12076] tipc: Left network mode
[  276.023295][T12749] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.025969][T12749] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.029497][T12749] bridge_slave_0: entered allmulticast mode
[  276.035878][T12749] bridge_slave_0: entered promiscuous mode
[  276.107508][T12802] loop3: detected capacity change from 0 to 2048
[  276.114897][T12749] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.117398][T12749] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.120512][T12749] bridge_slave_1: entered allmulticast mode
[  276.124498][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2826'.
[  276.125954][T12749] bridge_slave_1: entered promiscuous mode
[  276.144559][T12802]  loop3: p1 p2 p3
[  276.144559][T12802]  p1: <netbsd: >
[  276.147000][T12802] loop3: p1 size 16779263 extends beyond EOD, truncated
[  276.154828][T12802] loop3: p2 size 458752 extends beyond EOD, truncated
[  276.164157][T12802] loop3: p3 start 3036676096 is beyond EOD, truncated
[  276.179764][T12749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.203384][T12749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.217822][ T5342] 8021q: adding VLAN 0 to HW filter on device eth2
[  276.299284][T12749] team0: Port device team_slave_0 added
[  276.307557][T12813] loop3: detected capacity change from 0 to 1024
[  276.322437][T12749] team0: Port device team_slave_1 added
[  276.358330][T12749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.361081][T12749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.369244][T12813] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  276.387203][T12749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.398467][T12749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.404531][T12749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.421070][   T34] kauditd_printk_skb: 9 callbacks suppressed
[  276.421078][   T34] audit: type=1326 audit(2000000101.556:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.1.2832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  276.446765][T12749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.459368][   T34] audit: type=1326 audit(2000000101.556:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.1.2832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  276.486195][   T34] audit: type=1326 audit(2000000101.556:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.1.2832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  276.499379][   T34] audit: type=1326 audit(2000000101.556:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.1.2832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  276.511964][T12076] hsr_slave_0: left promiscuous mode
[  276.517290][   T34] audit: type=1326 audit(2000000101.556:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.1.2832" exe="/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  276.521019][T12076] hsr_slave_1: left promiscuous mode
[  276.536007][   T34] audit: type=1326 audit(2000000101.556:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.1.2832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  276.540206][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.556046][   T34] audit: type=1326 audit(2000000101.556:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.1.2832" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  276.556201][T12076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.562950][   T34] audit: type=1326 audit(2000000101.556:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.1.2832" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  276.584366][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.588211][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.598930][T12076] veth1_vlan: left promiscuous mode
[  276.607875][T12833] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  276.868040][T12076] team0 (unregistering): Port device team_slave_1 removed
[  276.887193][T12076] team0 (unregistering): Port device team_slave_0 removed
[  277.244815][ T4986] Bluetooth: hci1: command tx timeout
[  277.655996][ T5342] 8021q: adding VLAN 0 to HW filter on device eth3
[  277.686076][T12749] hsr_slave_0: entered promiscuous mode
[  277.689813][T12749] hsr_slave_1: entered promiscuous mode
[  277.692543][T12749] debugfs: 'hsr0' already exists in 'hsr'
[  277.695190][T12749] Cannot create hsr debugfs directory
[  278.082599][T12076] IPVS: stop unused estimator thread 0...
[  278.141518][T12862] loop3: detected capacity change from 0 to 32768
[  278.159843][T12862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2845 (12862)
[  278.192479][T12862] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.203466][T12862] BTRFS info (device loop3): using sha256 checksum algorithm
[  278.342470][ T5342] 8021q: adding VLAN 0 to HW filter on device eth4
[  278.351174][T12862] BTRFS info (device loop3): enabling ssd optimizations
[  278.355927][T12862] BTRFS info (device loop3): turning on sync discard
[  278.363063][T12862] BTRFS info (device loop3): enabling free space tree
[  278.369489][T12862] BTRFS info (device loop3): use zlib compression, level 3
[  278.395263][T12749] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  278.421531][T12749] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  278.429418][T12749] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  278.441505][T12749] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  278.450077][T12749] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  278.470141][T12749] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  278.478027][T12749] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  278.490138][T12749] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  278.538639][ T9615] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.681981][T12749] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.753654][T12749] 8021q: adding VLAN 0 to HW filter on device team0
[  278.774409][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.777511][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.810994][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.814053][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.856523][T12903] program syz.3.2850 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  279.246596][T12749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.305619][ T4986] Bluetooth: hci1: command tx timeout
[  279.715581][   T34] audit: type=1326 audit(2000000104.856:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.3.2865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  279.736004][   T34] audit: type=1326 audit(2000000104.866:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.3.2865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  279.746255][T12749] veth0_vlan: entered promiscuous mode
[  279.756498][T12749] veth1_vlan: entered promiscuous mode
[  279.775262][T12956] trusted_key: syz.3.2866 sent an empty control message without MSG_MORE.
[  279.783528][T12749] veth0_macvtap: entered promiscuous mode
[  279.790056][T12749] veth1_macvtap: entered promiscuous mode
[  279.803384][T12749] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.813885][T12749] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.824585][T12078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.839215][T12078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.848549][T12078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.862933][T12078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.939115][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.953831][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.020772][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.024395][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.317116][T12973] loop4: detected capacity change from 0 to 128
[  280.352496][T12977] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2874'.
[  280.377544][T12977] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.385979][T12977] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.375428][ T4986] Bluetooth: hci1: command tx timeout
[  281.754549][   T34] kauditd_printk_skb: 8 callbacks suppressed
[  281.754564][   T34] audit: type=1326 audit(2000000106.886:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.782225][   T34] audit: type=1326 audit(2000000106.886:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.800538][   T34] audit: type=1326 audit(2000000106.886:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.821690][   T34] audit: type=1326 audit(2000000106.886:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.835356][   T34] audit: type=1326 audit(2000000106.906:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.844034][   T34] audit: type=1326 audit(2000000106.906:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.860768][   T34] audit: type=1326 audit(2000000106.906:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.869733][   T34] audit: type=1326 audit(2000000106.906:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.878494][   T34] audit: type=1326 audit(2000000106.906:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.3.2892" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f292a99e0d9 code=0x7ffc0000
[  281.896653][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2896'.
[  281.903791][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2896'.
[  281.970020][T13029] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  282.345692][T13059] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  282.364849][ T5673] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  282.516682][ T5673] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  282.524155][ T5673] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.531797][ T5673] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  282.538501][ T5673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.551576][ T5673] hub 5-1:4.0: USB hub found
[  282.754159][ T5673] hub 5-1:4.0: 2 ports detected
[  282.757594][ T5673] usb 5-1: selecting invalid altsetting 1
[  282.761346][ T5673] hub 5-1:4.0: Using single TT (err -22)
[  282.960940][ T5673] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  282.973036][ T5673] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  283.029028][ T5673] usb 5-1: USB disconnect, device number 2
[  283.474820][ T4986] Bluetooth: hci1: command tx timeout
[  283.876838][T13093] dlm: non-version read from control device 4096
[  284.948529][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'.
[  284.966189][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2942'.
[  285.316288][T13151] 9p: Could not find request transport: J!*!j!!Z!:!z!!nF!n&!nf!n!nV!n6!nv!n!N!.!n!!^!>!~!!A!!!a!!Q!1!q!!!!!!BBCBCLBLCBC
[  285.328710][T13152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2952'.
[  285.330343][T13140] loop3: detected capacity change from 0 to 32768
[  285.364034][T13158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2954'.
[  285.382340][T13140] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  285.404345][T13140] XFS (loop3): Ending clean mount
[  285.415273][T13140] XFS (loop3): Quotacheck needed: Please wait.
[  285.447584][T13140] XFS (loop3): Quotacheck: Done.
[  285.907851][ T9615] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  286.905573][T13201] loop4: detected capacity change from 0 to 256
[  286.916791][T13201] exfat: Deprecated parameter 'utf8'
[  286.921031][T13201] exfat: Deprecated parameter 'utf8'
[  286.925084][T13201] exfat: Deprecated parameter 'utf8'
[  286.941486][T13201] exfat: Deprecated parameter 'namecase'
[  286.960985][T13201] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  287.008001][T13207] overlayfs: failed to clone upperpath
[  287.039776][T13207] overlayfs: failed to clone lowerpath
[  287.134453][T13219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2980'.
[  287.138977][T13219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2980'.
[  287.576599][T13229] loop4: detected capacity change from 0 to 32768
[  287.591536][T13229] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  287.650195][T12749] ocfs2: Unmounting device (7,4) on (node local)
[  288.657175][T13259] loop4: detected capacity change from 0 to 512
[  288.740629][T13259] EXT4-fs (loop4): 1 orphan inode deleted
[  288.744281][T13259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.750750][T13259] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.798767][   T69] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  288.802375][   T69] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u10:2: Failed to release dquot type 1
[  288.840868][T12749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.919197][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'.
[  288.942217][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2999'.
[  288.970435][T12078] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  288.977401][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'.
[  288.988420][T12078] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  288.993603][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2999'.
[  288.999759][T12078] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  289.007985][T12078] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  289.095037][T13293] netlink: 'syz.4.3008': attribute type 24 has an invalid length.
[  289.204891][T13302] loop4: detected capacity change from 0 to 512
[  289.215175][T13302] EXT4-fs (loop4): Test dummy encryption mode enabled
[  289.217675][T13302] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  289.222635][T13302] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3012: bad orphan inode 131083
[  289.227014][T13302] loop4: lost filesystem error report for type 5 error -117
[  289.227897][T13302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.995647][   T34] audit: type=1326 audit(2000000115.126:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.006142][   T34] audit: type=1326 audit(2000000115.136:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.016313][   T34] audit: type=1326 audit(2000000115.146:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.023956][   T34] audit: type=1326 audit(2000000115.146:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.037852][   T34] audit: type=1326 audit(2000000115.146:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.048239][   T34] audit: type=1326 audit(2000000115.146:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.059159][   T34] audit: type=1326 audit(2000000115.146:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.071946][   T34] audit: type=1326 audit(2000000115.156:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.082061][   T34] audit: type=1326 audit(2000000115.156:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.1.3019" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  290.491929][T12749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.649001][T13351] loop4: detected capacity change from 0 to 256
[  290.652220][T13351] exfat: Deprecated parameter 'namecase'
[  290.659483][T13351] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  290.833173][T13363] loop4: detected capacity change from 0 to 512
[  290.842637][T13363] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  290.865213][T13363] EXT4-fs (loop4): 1 truncate cleaned up
[  290.880739][T13363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.897084][   T11] block nbd0: Possible stuck request ffff88810a510000: control (read@0,1024B). Runtime 120 seconds
[  290.901346][   T11] block nbd0: Possible stuck request ffff88810a510200: control (read@1024,1024B). Runtime 120 seconds
[  290.905341][   T11] block nbd0: Possible stuck request ffff88810a510400: control (read@2048,1024B). Runtime 120 seconds
[  290.908827][   T11] block nbd0: Possible stuck request ffff88810a510600: control (read@3072,1024B). Runtime 120 seconds
[  290.919863][T12749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.968469][T13370] loop4: detected capacity change from 0 to 512
[  291.535139][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  292.301465][T13451] netlink: 'syz.3.3070': attribute type 13 has an invalid length.
[  292.668741][T13480] program syz.3.3084 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  292.833065][T13492] loop3: detected capacity change from 0 to 512
[  292.845753][T13492] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3090: inode has both inline data and extents flags
[  292.851980][T13492] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  292.852131][T13492] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3090: couldn't read orphan inode 15 (err -117)
[  292.855200][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  292.855211][    C0] EXT4-fs (loop3): initial error at time 2000000117: ext4_orphan_get:1399: inode 15
[  292.855223][    C0] EXT4-fs (loop3): last error at time 2000000117: ext4_orphan_get:1399: inode 15
[  292.876701][T13492] loop3: lost filesystem error report for type 5 error -117
[  292.877745][T13492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.931576][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.006670][T13503] loop3: detected capacity change from 0 to 1024
[  293.122955][T13507] loop3: detected capacity change from 0 to 2048
[  293.143660][T13507] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  293.208142][T13513] netlink: 'syz.1.3099': attribute type 3 has an invalid length.
[  293.337489][T13523] gadgetfs: bound to dummy_udc driver
[  293.374181][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3107'.
[  293.381327][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'.
[  293.400962][T13529] geneve2: entered promiscuous mode
[  293.407602][T13529] geneve2: entered allmulticast mode
[  293.410274][ T5629] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0
[  293.415380][ T5629] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0
[  293.418558][ T5629] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0
[  293.423223][ T5629] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0
[  293.594919][ T5414] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  293.598324][    C0] gadgetfs: connected
[  293.601407][ T5414] gadgetfs: disconnected
[  293.635218][ T5666] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  293.775333][    C0] gadgetfs: connected
[  293.779609][ T5414] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  293.787219][ T5414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.797035][ T5666] usb 5-1: no configurations
[  293.799847][    C0] gadgetfs: configuration #1
[  293.802479][ T5666] usb 5-1: can't read configurations, error -22
[  293.810610][ T5414] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input22
[  293.954804][ T5666] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  294.105423][ T5666] usb 5-1: no configurations
[  294.107347][ T5666] usb 5-1: can't read configurations, error -22
[  294.110275][ T5666] usb usb5-port1: attempt power cycle
[  294.444793][ T5666] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  294.467360][ T5666] usb 5-1: no configurations
[  294.469297][ T5666] usb 5-1: can't read configurations, error -22
[  294.606385][ T5666] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  294.631759][ T5666] usb 5-1: no configurations
[  294.633389][ T5666] usb 5-1: can't read configurations, error -22
[  294.635836][ T5666] usb usb5-port1: unable to enumerate USB device
[  294.854765][ T5673] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  295.004793][ T5673] usb 4-1: Using ep0 maxpacket: 32
[  295.008574][ T5673] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  295.011825][ T5673] usb 4-1: config 2 has no interface number 0
[  295.014462][ T5673] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  295.019610][ T5673] usb 4-1: config 2 interface 88 has no altsetting 0
[  295.024546][ T5673] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  295.029145][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  295.033156][ T5673] usb 4-1: Product: syz
[  295.034907][ T5673] usb 4-1: Manufacturer: syz
[  295.037063][ T5673] usb 4-1: SerialNumber: syz
[  295.041932][T13573] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  295.603161][T13580] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  295.973647][T13588] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3133'.
[  296.330041][T13523] gadgetfs: suspended from state 3
[  296.332719][T13523] gadgetfs: disconnected
[  296.334461][ T5651] usb 1-1: USB disconnect, device number 33
[  296.473961][T13624] loop4: detected capacity change from 0 to 256
[  297.641312][ T5673] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  297.646599][ T5673] asix 4-1:2.88: probe with driver asix failed with error -71
[  297.657990][ T5673] usb 4-1: USB disconnect, device number 15
[  298.585072][ T4986] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  298.594600][   T55] Bluetooth: hci4: command 0xfc11 tx timeout
[  299.343578][T13687] loop4: detected capacity change from 0 to 256
[  299.602618][T13699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3183'.
[  299.965085][T13724] loop4: detected capacity change from 0 to 512
[  299.968479][T13724] EXT4-fs: Ignoring removed orlov option
[  299.971876][T13724] EXT4-fs: old and new quota format mixing
[  300.092044][T13732] loop3: detected capacity change from 0 to 512
[  300.099433][T13732] EXT4-fs: Ignoring removed bh option
[  300.107358][T13732] EXT4-fs (loop3): Test dummy encryption mode enabled
[  300.188287][T13732] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3198: inode has both inline data and extents flags
[  300.199563][T13732] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  300.199926][T13732] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3198: couldn't read orphan inode 15 (err -117)
[  300.208156][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  300.210113][    C0] EXT4-fs (loop3): initial error at time 2000000125: ext4_orphan_get:1399: inode 15
[  300.210137][    C0] EXT4-fs (loop3): last error at time 2000000125: ext4_orphan_get:1399: inode 15
[  300.240917][T13732] loop3: lost filesystem error report for type 5 error -117
[  300.242527][T13732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.273691][T13732] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  300.309208][T13732] EXT4-fs (loop3): shut down requested (2)
[  300.508712][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.755889][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'.
[  301.916036][   T34] audit: type=1326 audit(2000000127.046:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  301.932177][   T34] audit: type=1326 audit(2000000127.046:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  301.999108][   T34] audit: type=1326 audit(2000000127.046:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  302.018463][   T34] audit: type=1326 audit(2000000127.046:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  302.034522][   T34] audit: type=1326 audit(2000000127.046:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  302.057633][   T34] audit: type=1326 audit(2000000127.046:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  302.074300][   T34] audit: type=1326 audit(2000000127.046:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  302.107290][   T34] audit: type=1326 audit(2000000127.046:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  302.129440][   T34] audit: type=1326 audit(2000000127.046:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  302.140071][   T34] audit: type=1326 audit(2000000127.046:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.1.3216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  302.670929][T13812] netlink: 'syz.4.3221': attribute type 3 has an invalid length.
[  302.743400][T13814] Console: switching to colour dummy device 80x25
[  302.842178][T13818] lo: entered allmulticast mode
[  302.872672][T13818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  302.889955][T13819] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  302.910608][T13816] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  302.941224][T13816] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  302.944639][T13816] pci 0000:00:01.0: BAR 2 [mem 0xfebf0000-0xfebf0fff]
[  302.948369][T13816] pci 0000:00:01.0: ROM [mem 0xfebe0000-0xfebeffff pref]
[  302.951876][T13816] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  303.007652][T13816] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  303.009836][T13816] pci 0000:00:01.0: vgaarb: bridge control possible
[  303.012389][T13816] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  303.022263][T13816] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  303.034490][T13816] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  303.085651][T13816] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  303.113729][T13816] [drm] Found bochs VGA, ID 0xb0c5.
[  303.115553][T13816] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  303.118986][T13825] loop3: detected capacity change from 0 to 2048
[  303.123320][T13825] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  303.179548][T13816] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  303.661024][T13816] Console: switching to colour frame buffer device 160x50
[  303.709274][T13832] loop3: detected capacity change from 0 to 32768
[  303.710686][T13832] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3228 (13832)
[  303.718254][T13832] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  303.718279][T13832] BTRFS info (device loop3): using crc32c checksum algorithm
[  303.746697][T13832] BTRFS info (device loop3): enabling ssd optimizations
[  303.746719][T13832] BTRFS info (device loop3): turning on async discard
[  303.746730][T13832] BTRFS info (device loop3): enabling free space tree
[  303.779878][T13816] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  303.887637][ T9615] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  304.508930][T13885] loop3: detected capacity change from 0 to 32768
[  304.511915][T13885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3245 (13885)
[  304.521461][T13885] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  304.524874][T13885] BTRFS info (device loop3): using sha256 checksum algorithm
[  304.822229][T13885] BTRFS info (device loop3): enabling ssd optimizations
[  304.825105][T13885] BTRFS info (device loop3): turning on sync discard
[  304.827763][T13885] BTRFS info (device loop3): enabling free space tree
[  305.378505][ T9615] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  305.681947][T13934] overlayfs: failed to clone upperpath
[  306.687734][T14008] fuse: fd is not a fuse device
[  306.996935][T14026] syz_tun: entered allmulticast mode
[  307.027181][T14025] syz_tun: left allmulticast mode
[  307.181660][T14033] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3308'.
[  307.834918][   T32] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  307.988623][   T32] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  307.992411][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.995986][   T32] usb 4-1: Product: syz
[  307.997380][   T32] usb 4-1: Manufacturer: syz
[  307.998947][   T32] usb 4-1: SerialNumber: syz
[  308.616759][   T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO
[  308.629439][   T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  308.635046][   T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  308.643005][   T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  308.651035][   T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  308.659944][   T32] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  308.673743][   T32] usb 4-1: USB disconnect, device number 16
[  309.311754][T14099] 0x000000000010-0x000000000020 : ""
[  309.352402][T14099] ftl_cs: FTL header corrupt!
[  309.677553][T14115] netlink: 'syz.1.3343': attribute type 6 has an invalid length.
[  309.742601][T14121] veth0: entered promiscuous mode
[  309.747446][T14119] veth0: left promiscuous mode
[  309.935879][T14127] CIFS: Attempting to mount //127.0.0.1/share
[  310.150858][T14139] tipc: Failed to remove unknown binding: 66,0,0/0:1499894376/1499894378
[  310.158033][T14139] tipc: Failed to remove unknown binding: 66,0,0/0:1499894376/1499894377
[  310.161329][T14139] tipc: Failed to remove unknown binding: 66,0,0/0:1499894376/1499894378
[  310.165772][T14139] tipc: Failed to remove unknown binding: 66,0,0/0:1499894376/1499894377
[  310.569602][T14154] overlayfs: failed to clone upperpath
[  310.594801][T14127] CIFS: VFS: Error connecting to socket. Aborting operation.
[  310.598022][T14127] CIFS: VFS: cifs_mount failed w/return code = -4
[  310.855465][T14167] xt_hashlimit: size too large, truncated to 1048576
[  311.446638][ T5414] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  311.567383][T14202] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3383'.
[  311.608698][ T5414] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  311.618138][ T5414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.626650][ T5414] usb 4-1: Product: syz
[  311.630008][ T5414] usb 4-1: Manufacturer: syz
[  311.631833][ T5414] usb 4-1: SerialNumber: syz
[  311.841749][ T5414] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  311.845559][ T5414] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  311.875504][ T5414] usb 4-1: USB disconnect, device number 17
[  311.904884][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.489803][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3419'.
[  314.007057][   T33] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  314.224066][   T33] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  314.240123][   T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  314.263631][   T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64
[  314.291735][   T33] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  314.305955][   T33] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  314.314240][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  314.319948][   T33] usb 4-1: SerialNumber: syz
[  314.326814][T14293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  314.547411][   T33] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  314.553477][   T33] usb 4-1: USB disconnect, device number 18
[  314.782463][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3443'.
[  315.034184][T14362] 9p: Bad value for 'rfdno'
[  315.082690][T14364] fuse: fd is not a fuse device
[  315.341133][T14389] overlayfs: missing 'lowerdir'
[  315.420143][T14396] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  315.490211][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'.
[  315.493462][T14402] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3475'.
[  315.585232][   T33] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  315.736592][   T33] usb 4-1: unable to get BOS descriptor or descriptor too short
[  315.740805][   T33] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[  315.750914][   T33] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  315.754033][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.760330][   T33] usb 4-1: Product: syz
[  315.763179][   T33] usb 4-1: Manufacturer: syz
[  315.767058][   T33] usb 4-1: SerialNumber: syz
[  315.775574][T14390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  316.003134][   T33] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  316.121746][   T33] usb 4-1: USB disconnect, device number 19
[  316.295198][T14422] fuse: fd is not a fuse device
[  316.363334][T14426] netlink: 'syz.1.3486': attribute type 1 has an invalid length.
[  316.538823][T14438] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  316.586860][T14446] loop3: detected capacity change from 0 to 128
[  316.667335][T14446] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  316.675609][T14446] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.718689][ T9615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  317.146986][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  317.152316][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  318.024997][T14500] block nbd1: server does not support multiple connections per device.
[  318.034404][T14500] block nbd1: shutting down sockets
[  319.214836][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  319.500470][T14594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3562'.
[  320.059896][T14613] loop3: detected capacity change from 0 to 1764
[  320.203594][T14619] loop3: detected capacity change from 0 to 128
[  320.212232][T14619] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  320.377533][T14631] 9p: Bad value for 'rfdno'
[  320.542448][T14650] bond2: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms
[  320.552471][T14650] 8021q: adding VLAN 0 to HW filter on device bond2
[  320.584909][T14657] loop3: detected capacity change from 0 to 164
[  320.806999][T14675] loop3: detected capacity change from 0 to 512
[  320.817085][T14675] EXT4-fs (loop3): Test dummy encryption mode enabled
[  320.824210][T14675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  320.831163][T14675] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3599: bad orphan inode 131083
[  320.835564][T14675] loop3: lost filesystem error report for type 5 error -117
[  320.837188][T14675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.951349][ T9615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.982313][   T11] block nbd0: Possible stuck request ffff88810a510000: control (read@0,1024B). Runtime 150 seconds
[  320.987290][   T11] block nbd0: Possible stuck request ffff88810a510200: control (read@1024,1024B). Runtime 150 seconds
[  320.991924][   T11] block nbd0: Possible stuck request ffff88810a510400: control (read@2048,1024B). Runtime 150 seconds
[  320.996716][   T11] block nbd0: Possible stuck request ffff88810a510600: control (read@3072,1024B). Runtime 150 seconds
[  321.231185][T14711] fuse: fd is not a fuse device
[  321.246348][T14715] program syz.3.3617 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  321.725370][T14745] unsupported nla_type 2061
[  321.853715][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.869475][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.874361][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.877855][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.882493][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  322.621561][T14748] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.626235][T14748] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.632835][T14748] bridge_slave_0: entered allmulticast mode
[  322.645197][T14748] bridge_slave_0: entered promiscuous mode
[  322.653659][T14748] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.657172][T14748] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.660131][T14748] bridge_slave_1: entered allmulticast mode
[  322.663845][T14748] bridge_slave_1: entered promiscuous mode
[  322.712749][T14748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.724214][T14797] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.752241][T14797] bridge_slave_1 (unregistering): left allmulticast mode
[  322.755187][T14797] bridge_slave_1 (unregistering): left promiscuous mode
[  322.757575][T14797] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.775242][T14748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.810247][T14748] team0: Port device team_slave_0 added
[  322.815684][T14748] team0: Port device team_slave_1 added
[  322.863694][T14748] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.866776][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  322.877151][T14748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  322.882824][T14748] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.886129][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  322.902841][T14748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.953507][T14748] hsr_slave_0: entered promiscuous mode
[  322.957853][T14748] hsr_slave_1: entered promiscuous mode
[  322.960711][T14748] debugfs: 'hsr0' already exists in 'hsr'
[  322.962687][T14748] Cannot create hsr debugfs directory
[  323.042489][T14820] overlayfs: failed to clone upperpath
[  323.062919][T14817] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3660'.
[  323.067197][T14817] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3660'.
[  323.070859][T14817] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3660'.
[  323.211413][T14748] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  323.217684][T14748] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  323.220906][T14748] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  323.230681][T14748] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  323.235838][   T34] kauditd_printk_skb: 10 callbacks suppressed
[  323.235847][   T34] audit: type=1326 audit(2000000148.366:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.246214][T14748] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  323.253655][   T34] audit: type=1326 audit(2000000148.366:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.264509][T14748] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  323.270623][T14748] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  323.273424][   T34] audit: type=1326 audit(2000000148.386:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.282096][   T34] audit: type=1326 audit(2000000148.386:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.294129][   T34] audit: type=1326 audit(2000000148.386:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.303554][T14748] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  323.312862][   T34] audit: type=1326 audit(2000000148.386:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.324361][   T34] audit: type=1326 audit(2000000148.386:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.325097][T14837] netlink: 592 bytes leftover after parsing attributes in process `syz.4.3668'.
[  323.334673][   T34] audit: type=1326 audit(2000000148.406:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.348951][   T34] audit: type=1326 audit(2000000148.406:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.360311][   T34] audit: type=1326 audit(2000000148.406:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.3666" exe="/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f49afb9e0d9 code=0x7ffc0000
[  323.446242][T14748] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.474451][T14748] 8021q: adding VLAN 0 to HW filter on device team0
[  323.484254][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.486873][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.501442][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.503692][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.754601][T14748] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.935090][ T4986] Bluetooth: hci3: command tx timeout
[  324.174622][T14748] veth0_vlan: entered promiscuous mode
[  324.180156][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'.
[  324.186287][T14748] veth1_vlan: entered promiscuous mode
[  324.208722][T14748] veth0_macvtap: entered promiscuous mode
[  324.214602][T14748] veth1_macvtap: entered promiscuous mode
[  324.226299][T14748] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.232137][T14748] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.239094][T12076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.242479][T12076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.250766][T12076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.254464][T12076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.403153][T10080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.418066][T10080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.558708][ T7721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.562412][ T7721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.083899][T14956] netlink: 'syz.1.3713': attribute type 7 has an invalid length.
[  325.096742][T14956] netlink: 'syz.1.3713': attribute type 8 has an invalid length.
[  325.250631][T14972] tmpfs: Bad value for 'mpol'
[  325.407167][T14986] loop5: detected capacity change from 0 to 2048
[  325.675424][T14986] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  325.680479][ T5600] udevd[5600]: incorrect nilfs2 checksum on /dev/loop5
[  325.683466][T14986] NILFS (loop5): too large filesystem blocksize: 2 ^ 347668480 KiB
[  325.691921][ T5600] udevd[5600]: incorrect nilfs2 checksum on /dev/loop5
[  326.015038][ T4986] Bluetooth: hci3: command tx timeout
[  326.015884][T15014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  326.021679][T15014] IPv6: NLM_F_CREATE should be set when creating new route
[  326.030818][T15014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  326.822128][T15045] SET target dimension over the limit!
[  327.044250][T15059] 9p: Bad value for 'rfdno'
[  327.078642][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3764'.
[  327.102476][T15066] fuse: fd is not a fuse device
[  328.094845][ T4986] Bluetooth: hci3: command tx timeout
[  328.197647][T15127] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  328.598051][T15121] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  328.900375][T15161] program syz.5.3805 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  329.784921][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3824'.
[  330.018169][ T4986] Bluetooth: hci0: command 0x0406 tx timeout
[  330.188015][ T4986] Bluetooth: hci3: command tx timeout
[  330.318703][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3841'.
[  330.321971][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3841'.
[  330.331375][T15240] geneve2: entered promiscuous mode
[  330.333199][T15240] geneve2: entered allmulticast mode
[  330.338737][T12076] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0
[  330.351232][T12076] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0
[  330.357983][T12076] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0
[  330.367088][T12076] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0
[  330.415292][ T5046] udevd[5046]: worker [5979] /devices/virtual/block/nbd0 is taking a long time
[  330.568084][T15245] loop5: detected capacity change from 0 to 2048
[  330.571800][T15245] NILFS (loop5): couldn't find nilfs on the device
[  331.152373][T15262] netlink: 'syz.1.3845': attribute type 32 has an invalid length.
[  331.970807][T15289] netlink: 'syz.4.3860': attribute type 1 has an invalid length.
[  331.976453][T15289] netlink: 'syz.4.3860': attribute type 2 has an invalid length.
[  332.375081][   T34] kauditd_printk_skb: 32 callbacks suppressed
[  332.375091][   T34] audit: type=1326 audit(2000000157.506:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15306 comm="syz.1.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  332.388521][   T34] audit: type=1326 audit(2000000157.506:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15306 comm="syz.1.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  332.407306][   T34] audit: type=1326 audit(2000000157.526:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15306 comm="syz.1.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  332.424808][   T34] audit: type=1326 audit(2000000157.526:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15306 comm="syz.1.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  332.431457][   T34] audit: type=1326 audit(2000000157.526:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15306 comm="syz.1.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  332.440357][   T34] audit: type=1326 audit(2000000157.536:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15306 comm="syz.1.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  332.447588][   T34] audit: type=1326 audit(2000000157.536:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15306 comm="syz.1.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  332.455672][   T34] audit: type=1326 audit(2000000157.536:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15306 comm="syz.1.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x7ffc0000
[  332.463089][   T34] audit: type=1326 audit(2000000157.576:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.1.3869" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fd2f9e0d9 code=0x0
[  333.039435][T15340] loop5: detected capacity change from 0 to 256
[  333.050835][T15340] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  333.135837][   T34] audit: type=1326 audit(2000000158.256:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15343 comm="syz.5.3885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349cb9e0d9 code=0x7ffc0000
[  335.355455][T15419] loop5: detected capacity change from 0 to 8192
[  335.738332][   T35] INFO: task syz.0.1473:9349 blocked for more than 143 seconds.
[  335.765928][   T35]       Tainted: G             L      syzkaller #0
[  335.794583][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  335.818576][   T35] task:syz.0.1473      state:D stack:28808 pid:9349  tgid:9348  ppid:7499   task_flags:0x400040 flags:0x00080002
[  335.852178][   T35] Call Trace:
[  335.863261][   T35]  <TASK>
[  335.878297][   T35]  __schedule+0x17d9/0x56c0
[  335.880351][   T35]  ? __lock_acquire+0x6df/0x2e50
[  335.882397][   T35]  ? __pfx___schedule+0x10/0x10
[  335.884375][   T35]  ? schedule+0x90/0x2b0
[  335.886290][   T35]  schedule+0x164/0x2b0
[  335.887987][   T35]  schedule_preempt_disabled+0x13/0x30
[  335.890230][   T35]  __mutex_lock+0x7bf/0x1550
[  335.892174][   T35]  ? __mutex_lock+0x5d4/0x1550
[  335.894117][   T35]  ? sync_bdevs+0x276/0x470
[  335.896175][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  335.898272][   T35]  ? iput+0x456/0xf00
[  335.900146][   T35]  sync_bdevs+0x276/0x470
[  335.902038][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.904487][   T35]  __ia32_sys_sync+0xc5/0x120
[  335.908987][   T35]  ? __pfx___ia32_sys_sync+0x10/0x10
[  335.912487][   T35]  ? do_syscall_64+0x9d/0x580
[  335.914567][   T35]  do_syscall_64+0x174/0x580
[  335.916700][   T35]  ? trace_irq_disable+0x3b/0x140
[  335.918743][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.921070][   T35] RIP: 0033:0x7fecd799e0d9
[  335.922906][   T35] RSP: 002b:00007fecd8860028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  335.926387][   T35] RAX: ffffffffffffffda RBX: 00007fecd7c25fa0 RCX: 00007fecd799e0d9
[  335.929514][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  335.932601][   T35] RBP: 00007fecd7c25fa0 R08: 0000000000000000 R09: 0000000000000000
[  335.937553][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.940793][   T35] R13: 00007fecd7c26038 R14: 00007fecd7c25fa0 R15: 00007ffdb778aa38
[  335.943967][   T35]  </TASK>
[  335.950765][   T35] INFO: task syz.0.1473:9350 blocked for more than 143 seconds.
[  335.953932][   T35]       Tainted: G             L      syzkaller #0
[  335.956767][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  335.960153][   T35] task:syz.0.1473      state:D stack:28552 pid:9350  tgid:9348  ppid:7499   task_flags:0x400040 flags:0x00080002
[  335.965139][   T35] Call Trace:
[  335.967026][   T35]  <TASK>
[  335.968685][   T35]  __schedule+0x17d9/0x56c0
[  335.970656][   T35]  ? __lock_acquire+0x6df/0x2e50
[  335.974224][   T35]  ? __lock_acquire+0x6df/0x2e50
[  335.978149][   T35]  ? __pfx___schedule+0x10/0x10
[  335.982494][   T35]  ? schedule+0x90/0x2b0
[  335.984291][   T35]  schedule+0x164/0x2b0
[  335.986229][   T35]  schedule_preempt_disabled+0x13/0x30
[  335.988433][   T35]  __mutex_lock+0x7bf/0x1550
[  335.990286][   T35]  ? __mutex_lock+0x5d4/0x1550
[  335.992156][   T35]  ? sync_bdevs+0x276/0x470
[  335.993952][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  335.996087][   T35]  ? iput+0x456/0xf00
[  335.997722][   T35]  sync_bdevs+0x276/0x470
[  335.999560][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.002054][   T35]  __ia32_sys_sync+0xc5/0x120
[  336.004010][   T35]  ? __pfx___ia32_sys_sync+0x10/0x10
[  336.006326][   T35]  ? do_syscall_64+0x9d/0x580
[  336.008196][   T35]  do_syscall_64+0x174/0x580
[  336.010093][   T35]  ? trace_irq_disable+0x3b/0x140
[  336.012180][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.014588][   T35] RIP: 0033:0x7fecd799e0d9
[  336.016781][   T35] RSP: 002b:00007fecd883f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  336.020186][   T35] RAX: ffffffffffffffda RBX: 00007fecd7c26090 RCX: 00007fecd799e0d9
[  336.023410][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  336.026649][   T35] RBP: 00007fecd7c26090 R08: 0000000000000000 R09: 0000000000000000
[  336.029860][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.033034][   T35] R13: 00007fecd7c26128 R14: 00007fecd7c26090 R15: 00007ffdb778aa38
[  336.036495][   T35]  </TASK>
[  336.037802][   T35] INFO: task syz.0.1473:9355 blocked for more than 143 seconds.
[  336.040825][   T35]       Tainted: G             L      syzkaller #0
[  336.043319][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  336.046954][   T35] task:syz.0.1473      state:D stack:27744 pid:9355  tgid:9348  ppid:7499   task_flags:0x400040 flags:0x00080002
[  336.051638][   T35] Call Trace:
[  336.052972][   T35]  <TASK>
[  336.054187][   T35]  __schedule+0x17d9/0x56c0
[  336.056157][   T35]  ? __lock_acquire+0x6df/0x2e50
[  336.058180][   T35]  ? do_writepages+0x4c1/0x560
[  336.060072][   T35]  ? __pfx___schedule+0x10/0x10
[  336.062093][   T35]  ? schedule+0x90/0x2b0
[  336.063855][   T35]  schedule+0x164/0x2b0
[  336.065780][   T35]  schedule_preempt_disabled+0x13/0x30
[  336.067927][   T35]  __mutex_lock+0x7bf/0x1550
[  336.069828][   T35]  ? __mutex_lock+0x5d4/0x1550
[  336.071803][   T35]  ? sync_bdevs+0x276/0x470
[  336.073685][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  336.076006][   T35]  ? iput+0x456/0xf00
[  336.077627][   T35]  sync_bdevs+0x276/0x470
[  336.080412][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.082979][   T35]  __ia32_sys_sync+0xc5/0x120
[  336.085146][   T35]  ? __pfx___ia32_sys_sync+0x10/0x10
[  336.087353][   T35]  ? do_syscall_64+0x9d/0x580
[  336.089290][   T35]  do_syscall_64+0x174/0x580
[  336.091118][   T35]  ? trace_irq_disable+0x3b/0x140
[  336.093117][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.095900][   T35] RIP: 0033:0x7fecd799e0d9
[  336.097688][   T35] RSP: 002b:00007fecd881e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  336.100499][   T35] RAX: ffffffffffffffda RBX: 00007fecd7c26180 RCX: 00007fecd799e0d9
[  336.102961][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  336.105784][   T35] RBP: 00007fecd7c26180 R08: 0000000000000000 R09: 0000000000000000
[  336.108416][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.111344][   T35] R13: 00007fecd7c26218 R14: 00007fecd7c26180 R15: 00007ffdb778aa38
[  336.113967][   T35]  </TASK>
[  336.115268][   T35] INFO: task syz.0.1473:9356 blocked for more than 143 seconds.
[  336.117996][   T35]       Tainted: G             L      syzkaller #0
[  336.120180][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  336.123079][   T35] task:syz.0.1473      state:D stack:27744 pid:9356  tgid:9348  ppid:7499   task_flags:0x400040 flags:0x00080002
[  336.127492][   T35] Call Trace:
[  336.128822][   T35]  <TASK>
[  336.130018][   T35]  __schedule+0x17d9/0x56c0
[  336.131784][   T35]  ? __lock_acquire+0x6df/0x2e50
[  336.133718][   T35]  ? do_writepages+0x4c1/0x560
[  336.135833][   T35]  ? __pfx___schedule+0x10/0x10
[  336.137729][   T35]  ? schedule+0x90/0x2b0
[  336.139366][   T35]  schedule+0x164/0x2b0
[  336.141026][   T35]  schedule_preempt_disabled+0x13/0x30
[  336.188022][   T35]  __mutex_lock+0x7bf/0x1550
[  336.189957][   T35]  ? __mutex_lock+0x5d4/0x1550
[  336.191765][   T35]  ? sync_bdevs+0x276/0x470
[  336.193366][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  336.195591][   T35]  ? iput+0x456/0xf00
[  336.197028][   T35]  sync_bdevs+0x276/0x470
[  336.198447][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.200426][   T35]  __ia32_sys_sync+0xc5/0x120
[  336.201985][   T35]  ? __pfx___ia32_sys_sync+0x10/0x10
[  336.204295][   T35]  ? do_syscall_64+0x9d/0x580
[  336.206183][   T35]  do_syscall_64+0x174/0x580
[  336.208042][   T35]  ? trace_irq_disable+0x3b/0x140
[  336.209987][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.212060][   T35] RIP: 0033:0x7fecd799e0d9
[  336.213600][   T35] RSP: 002b:00007fecd87fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  336.216598][   T35] RAX: ffffffffffffffda RBX: 00007fecd7c26270 RCX: 00007fecd799e0d9
[  336.219668][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  336.222336][   T35] RBP: 00007fecd7c26270 R08: 0000000000000000 R09: 0000000000000000
[  336.225137][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.227981][   T35] R13: 00007fecd7c26308 R14: 00007fecd7c26270 R15: 00007ffdb778aa38
[  336.230468][   T35]  </TASK>
[  336.231600][   T35] INFO: task syz.0.1473:9361 blocked for more than 143 seconds.
[  336.234288][   T35]       Tainted: G             L      syzkaller #0
[  336.238449][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  336.241284][   T35] task:syz.0.1473      state:D stack:27744 pid:9361  tgid:9348  ppid:7499   task_flags:0x400040 flags:0x00080002
[  336.245442][   T35] Call Trace:
[  336.246600][   T35]  <TASK>
[  336.247572][   T35]  __schedule+0x17d9/0x56c0
[  336.249063][   T35]  ? __lock_acquire+0x6df/0x2e50
[  336.251216][   T35]  ? do_writepages+0x4c1/0x560
[  336.252792][   T35]  ? __pfx___schedule+0x10/0x10
[  336.254354][   T35]  ? schedule+0x90/0x2b0
[  336.256562][   T35]  schedule+0x164/0x2b0
[  336.258320][   T35]  schedule_preempt_disabled+0x13/0x30
[  336.260396][   T35]  __mutex_lock+0x7bf/0x1550
[  336.262022][   T35]  ? __mutex_lock+0x5d4/0x1550
[  336.263972][   T35]  ? sync_bdevs+0x276/0x470
[  336.266401][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  336.268329][   T35]  ? iput+0x456/0xf00
[  336.269783][   T35]  sync_bdevs+0x276/0x470
[  336.271215][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.273534][   T35]  __ia32_sys_sync+0xc5/0x120
[  336.275420][   T35]  ? __pfx___ia32_sys_sync+0x10/0x10
[  336.277433][   T35]  ? do_syscall_64+0x9d/0x580
[  336.279256][   T35]  do_syscall_64+0x174/0x580
[  336.281551][   T35]  ? trace_irq_disable+0x3b/0x140
[  336.283447][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.287192][   T35] RIP: 0033:0x7fecd799e0d9
[  336.289001][   T35] RSP: 002b:00007fecd87dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  336.292164][   T35] RAX: ffffffffffffffda RBX: 00007fecd7c26360 RCX: 00007fecd799e0d9
[  336.295729][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  336.299459][   T35] RBP: 00007fecd7c26360 R08: 0000000000000000 R09: 0000000000000000
[  336.302056][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.305096][   T35] R13: 00007fecd7c263f8 R14: 00007fecd7c26360 R15: 00007ffdb778aa38
[  336.308147][   T35]  </TASK>
[  336.309356][   T35] INFO: task syz.0.1473:9366 blocked for more than 143 seconds.
[  336.312904][   T35]       Tainted: G             L      syzkaller #0
[  336.315516][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  336.318787][   T35] task:syz.0.1473      state:D stack:27744 pid:9366  tgid:9348  ppid:7499   task_flags:0x400040 flags:0x00080002
[  336.323349][   T35] Call Trace:
[  336.324659][   T35]  <TASK>
[  336.325983][   T35]  __schedule+0x17d9/0x56c0
[  336.328434][   T35]  ? __lock_acquire+0x6df/0x2e50
[  336.330330][   T35]  ? do_writepages+0x4c1/0x560
[  336.332135][   T35]  ? __pfx___schedule+0x10/0x10
[  336.333635][   T35]  ? schedule+0x90/0x2b0
[  336.337811][   T35]  schedule+0x164/0x2b0
[  336.339191][   T35]  schedule_preempt_disabled+0x13/0x30
[  336.340928][   T35]  __mutex_lock+0x7bf/0x1550
[  336.342355][   T35]  ? __mutex_lock+0x5d4/0x1550
[  336.344342][   T35]  ? sync_bdevs+0x276/0x470
[  336.345940][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  336.347955][   T35]  ? iput+0x456/0xf00
[  336.349509][   T35]  sync_bdevs+0x276/0x470
[  336.351051][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.352917][   T35]  __ia32_sys_sync+0xc5/0x120
[  336.354351][   T35]  ? __pfx___ia32_sys_sync+0x10/0x10
[  336.356731][   T35]  ? do_syscall_64+0x9d/0x580
[  336.358625][   T35]  do_syscall_64+0x174/0x580
[  336.360956][   T35]  ? trace_irq_disable+0x3b/0x140
[  336.362912][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.365741][   T35] RIP: 0033:0x7fecd799e0d9
[  336.367531][   T35] RSP: 002b:00007fecd87bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  336.370744][   T35] RAX: ffffffffffffffda RBX: 00007fecd7c26450 RCX: 00007fecd799e0d9
[  336.373787][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  336.377321][   T35] RBP: 00007fecd7c26450 R08: 0000000000000000 R09: 0000000000000000
[  336.380170][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.382655][   T35] R13: 00007fecd7c264e8 R14: 00007fecd7c26450 R15: 00007ffdb778aa38
[  336.385195][   T35]  </TASK>
[  336.386214][   T35] 
[  336.386214][   T35] Showing all locks held in the system:
[  336.389021][   T35] 1 lock held by khungtaskd/35:
[  336.393204][   T35]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  336.406982][   T35] 2 locks held by getty/5424:
[  336.408528][   T35]  #0: ffff88817299d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  336.411534][   T35]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  336.415760][   T35] 1 lock held by udevd/5979:
[  336.417596][   T35]  #0: ffff888169e17350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  336.420740][   T35] 1 lock held by syz.0.1473/9349:
[  336.423113][   T35]  #0: ffff888169e17350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  336.427373][   T35] 1 lock held by syz.0.1473/9350:
[  336.429365][   T35]  #0: ffff888169e17350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  336.432931][   T35] 1 lock held by syz.0.1473/9355:
[  336.435088][   T35]  #0: ffff888169e17350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  336.438459][   T35] 1 lock held by syz.0.1473/9356:
[  336.439993][   T35]  #0: ffff888169e17350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  336.443225][   T35] 1 lock held by syz.0.1473/9361:
[  336.446059][   T35]  #0: ffff888169e17350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  336.449322][   T35] 1 lock held by syz.0.1473/9366:
[  336.451168][   T35]  #0: ffff888169e17350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  336.455515][   T35] 1 lock held by kworker/u8:6/12076:
[  336.457324][   T35]  #0: ffff88812103b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  336.460979][   T35] 
[  336.461736][   T35] =============================================
[  336.461736][   T35] 
[  336.464434][   T35] NMI backtrace for cpu 1
[  336.464443][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  336.464453][   T35] Tainted: [L]=SOFTLOCKUP
[  336.464455][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.464460][   T35] Call Trace:
[  336.464464][   T35]  <TASK>
[  336.464469][   T35]  dump_stack_lvl+0xe8/0x150
[  336.464482][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  336.464493][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  336.464503][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  336.464514][   T35]  sys_info+0x135/0x170
[  336.464524][   T35]  watchdog+0xfd7/0x1030
[  336.464534][   T35]  ? watchdog+0x1c7/0x1030
[  336.464543][   T35]  kthread+0x388/0x470
[  336.464553][   T35]  ? __pfx_watchdog+0x10/0x10
[  336.464559][   T35]  ? __pfx_kthread+0x10/0x10
[  336.464568][   T35]  ret_from_fork+0x514/0xb70
[  336.464579][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  336.464588][   T35]  ? __switch_to+0xc89/0x1420
[  336.464597][   T35]  ? __pfx_kthread+0x10/0x10
[  336.464606][   T35]  ret_from_fork_asm+0x1a/0x30
[  336.464619][   T35]  </TASK>
[  336.464622][   T35] Sending NMI from CPU 1 to CPUs 0:
[  336.509580][    C0] NMI backtrace for cpu 0
[  336.509593][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  336.509603][    C0] Tainted: [L]=SOFTLOCKUP
[  336.509606][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.509610][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  336.509622][    C0] Code: bc 7f 02 e9 93 02 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 dd 19 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  336.509628][    C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000202
[  336.509635][    C0] RAX: 00000000003d1483 RBX: ffffffff819b2d00 RCX: 0000000080000001
[  336.509640][    C0] RDX: 0000000000000001 RSI: ffffffff8e226de2 RDI: ffffffff8c4bc680
[  336.509645][    C0] RBP: ffffffff8e807eb8 R08: ffff8881210338db R09: 1ffff1102420671b
[  336.509649][    C0] R10: dffffc0000000000 R11: ffffed102420671c R12: 0000000000000000
[  336.509654][    C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000
[  336.509658][    C0] FS:  0000000000000000(0000) GS:ffff88818d95c000(0000) knlGS:0000000000000000
[  336.509663][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  336.509668][    C0] CR2: 00007f349cdef2f8 CR3: 000000010a154000 CR4: 00000000000006f0
[  336.509696][    C0] Call Trace:
[  336.509701][    C0]  <TASK>
[  336.509705][    C0]  default_idle+0x9/0x20
[  336.509713][    C0]  default_idle_call+0x72/0xb0
[  336.509722][    C0]  do_idle+0x2e0/0x540
[  336.509731][    C0]  ? __pfx_do_idle+0x10/0x10
[  336.509739][    C0]  ? do_idle+0x5/0x540
[  336.509746][    C0]  cpu_startup_entry+0x43/0x60
[  336.509752][    C0]  rest_init+0x2de/0x300
[  336.509760][    C0]  start_kernel+0x392/0x3e0
[  336.509842][    C0]  x86_64_start_reservations+0x24/0x30
[  336.509851][    C0]  x86_64_start_kernel+0x137/0x1b0
[  336.509860][    C0]  common_startup_64+0x13e/0x157
[  336.509889][    C0]  </TASK>
[  336.575932][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  336.578208][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  336.581931][   T35] Tainted: [L]=SOFTLOCKUP
[  336.583371][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.587277][   T35] Call Trace:
[  336.588499][   T35]  <TASK>
[  336.589456][   T35]  vpanic+0x56c/0xa60
[  336.590720][   T35]  ? __pfx___schedule+0x10/0x10
[  336.592273][   T35]  ? __pfx_vpanic+0x10/0x10
[  336.593951][   T35]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  336.596333][   T35]  panic+0xc5/0xd0
[  336.597793][   T35]  ? __pfx_panic+0x10/0x10
[  336.599553][   T35]  ? preempt_schedule_common+0x82/0xd0
[  336.601664][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  336.603600][   T35]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  336.605975][   T35]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  336.608346][   T35]  watchdog+0x1030/0x1030
[  336.610037][   T35]  ? watchdog+0x1c7/0x1030
[  336.611752][   T35]  kthread+0x388/0x470
[  336.613345][   T35]  ? __pfx_watchdog+0x10/0x10
[  336.615142][   T35]  ? __pfx_kthread+0x10/0x10
[  336.616892][   T35]  ret_from_fork+0x514/0xb70
[  336.618649][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  336.620558][   T35]  ? __switch_to+0xc89/0x1420
[  336.622327][   T35]  ? __pfx_kthread+0x10/0x10
[  336.623979][   T35]  ret_from_fork_asm+0x1a/0x30
[  336.625547][   T35]  </TASK>
[  336.627308][   T35] Kernel Offset: disabled
[  336.628712][   T35] Rebooting in 86400 seconds..
