last executing test programs:

2m53.662463426s ago: executing program 2 (id=533):
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0xfffe, 0x1000}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4, 0x4, 0x1800}], 0x2)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)

2m53.662307821s ago: executing program 2 (id=534):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r0, 0xffffd000)

2m53.611308187s ago: executing program 2 (id=535):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x0, @local, 0x10}], 0x1c)

2m53.610921634s ago: executing program 2 (id=536):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)

2m53.47544019s ago: executing program 2 (id=537):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x620a, &(0x7f000000b800)="$eJzs3c9vHGf9B/DP7C//yLep1UPVb4SQm5YfpTSJkxICBdoe4MClB5QjKJHrVhEpoCSgtLKIK184cOIvACFxRIgj4sAf0ANXbpw4EclGAvXEoLGfJ5nd7NZ2be+sPa+X5Mx85pm1n9n3zv7IzOwTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB89zvfWyki4sbP0oKliP+LbkQnYqGqlyNiYXkpr9+LiOdipzmejYj+XER1+51/no54NSI+Ohuxtb2+Wi2+vM9+fPsPf/vtD8689dff9y/+54/3uq9NWu/+/V/++08PDrfNAAAA0DZlWZZF+ph/Ln2+7zTdKQBgKvLrf5nk5ae+/tU/3vrzLPVHrVar1eop1HXleA/qRURs1G9TvWdwOB4ATpiN+LjpLtAg+bdaLyLONN0JYKYVTXeAY7G1vb5apHyL+uvB8m57PhdkKP+N4tH1HZOmexk9x2Raj6/N6MYzE/qzMKU+zJKcf2c0/xu77YO03nHnPy2T8h/sXvrUOjn/7mj+I05P/p2x+bdVzr93oPy78gcAAAAAgBmW//9/qeHjv3OH35R9+aTjv8tT6gMAAAAAAAAAHLXDjv/3iPH/AAAAYGZVn9Urvz77eNmk72Krll8vIp4aWR9omXSxzGLT/QAAAAAAAAAAAACANuntnsN7vYjoR8RTi4tlWVY/daP1QR329idd27cf2qEYu7TpJ3kAANj10dmRa/mLiPmIuJ6+66+/uLhYlvMLi+ViuTCX388O5ubLhdrn2jytls0N9vE2uTcoq182X7td3V6fl/dqH/191d8alN19dOyI9NO9OaG5obABINl9NdryinTKlOXTk958wBD7/ym0FEtNP66YfU0/TAEAAIDjV5ZlWaSv8z6Xjvl3mu4UADAV+fV/9LjAoerOhPaIo/n9arVarVarP1VdV473oF5ExEb9NtV7BsPxA8AJsxEfN90FGiT/VutFxHNNdwKYaUXTHeBYbG2vrxYp36L+epDGd8/nggzlv1Hs3C7fftx0L6PnmEzr8bUZ3XhmQn+enVIfZknOvzOa/43d9kFa77jzn5ZJ+Q92Lplrn5x/dzT/Eacn/87Y/Nsq5987UP5d+QMAAAAAwAzL//+/5Phv3mQAAAAAAAAAOHG2ttdX83Wv+fj/Z8as5/rP0ynnXxw0/4U0L/8TLeffGcn/iyPrdWvzD998vP//a3t99Xf3/vn/ebrf/OfyTJEeWUV6RBTpLxW9ND3M1j1ps98dVH+pX3S6vXTOT/moM5eG1u2k+6PsvxO34nasxcpQe9XT/lD75aH23hPtV4ba++l7B8qF3H4hVuPHcTve3mkfDN/tY83vcf+Ue7Tn/Lue/1sp59+r/VT5L6b2YmRaefhh54n9vj4d93feuPXZX1w6/s3Z02Z0H21bXbV95xvoz859cmYQP727dufC/Zv37t1ZiTQZWno50uSI5fz7Oz9zj5//X9htz09A9f314YeDA+c/KzajNzH/F2rz1fa+NOW+NSHnP0g/Of+3U/v4/f8k5z95/3+5gf4AAAAAAAAAAAAAAADAJynLcucS0Tci4mq6/qepazMBgOnKr/9lkperj7z+/pmIWeqPWq1Wq1tY15XjvV4vIuIv9dtU7xl+Pu6XAQCz7L8R8femO0Fj5N9i+fv+qumLTXcGmKq773/ww5u3b6/dudt0TwAAAAAAAACATyuP/7lcG//5xYhYGllvaPzXN2P5sON/9vLMowFGj3ig7wk2O4Nupzbc+POxMz73hd3xt58c//t8PDn+dx4Tt1vfjgn6e7QP9mif26N9fuzSx2mNvdCjJuf/fG288yr/cyPDr7dh/NfRMe/bIOd/vvZ4rvL/wsh69fzL38xc/hv7XXEzOkP5X7z33k8u3n3/g1duvXfz3bV31350ZWXl0pWrV69du3bxnVu31y7t/ns8vZ4BOf889rXzQNsl558zl3+75Pw/l2r5t0vO//Opln+75Pzz+z35t0vOP3/2kX+75PxfSrX82yXn/6VUy79dtrbX56r8X061/Nsl7/9fTrX82yXn/0qq5d8uOf8LqZZ/u+T8L6Z6H/n7evhTJOefj3DZ/9sl57+Savm3S87/cqrl3y45/yupln+75PxfTbX82yXn/5VUy79dcv5XUy3/dsn5fzXV8m+XnP+1VMu/XXL+X0u1/Nsl5//1VMu/XXL+r6Va/u2S8/9GquXfLjn/b6Za/u2S8/9WquXfLjn/11Mt/3Z5/P3/ZsyYMZNnmn5mAgAAAAAAAAAAAABGTeN04qa3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp79xoj11nfD/zM3rx2CDEQgpO/gY1jjHGW7PoSX/jXxYR7gFIgodALtutdmwXf8NolUCSbBkokjIoqqqYv2gJCbaSqwqp4QStK86Lq5VVpX9A3FVUlpEZVQAEVqa1otppznufxzOzszK53vD57zucj2b/dmXPmXOY5Z+a3u985AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAre594+znGlmWNf/l/23Oshc0v944sTm/7XW3eg0BAACA1frf/P/n7kg3HFnGTC3T/O0r/uEbCwsLC9kHhn9n9EsLC+mOiSwb3ZBl+X3RtX/7YKN1muDxbLwx1PL9UJ/FD/e5f6TP/aN97h/rc/+GPveP97l/0Q5YZGPx85j8wbbnX24udml2Zzaa37e9y1yPNzYMDcWf5eQa+TwLoyezuex0NptNt01fTNvIp//Wvc1lvS2LyxpqWdbW5gj50adOxHVohH28vW1Z1x8z+sEbsokf/+hTJ/7o4rN3d6t9d0Pb4xXruXNbcz0/E24p1rWRbUj7JK7nUMt6bu3ynAy3rWcjn6/5ded6PrfM9Ry+vpprqvM5H8+G8q+/k++nkdYf66X9tDXc9l/3ZVl25fpqd06zaFnZULap7Zah68/PeDEim4/RHEovzkZWNE7vXcY4bdaZ7e3jtPOYiM//vWG+kSXWofVp+sGnxxY97ysdp1Fzq5c6VjrH4KCPlbKMwTguvpNv9BNdx+D2sP2f2rH0GOw6drqMwbTdLWNwW78xODQ2nK9zehIa+TzXx+DutumH8yU18vrMjt5jcOrimfNT85/45Gvnzhw/NXtq9uze3bun9+7ff/DgwamTc6dnp4v/b3Bvl9+mbCgdA9vCvovHwKs7pm0dqgtfGdxxON7jONzcMe2gj8ORzo1rrM0BuXhMF8fGI82dPn51KFviGMufn12rPw7TdrcchyMtx2HX15Qux+HIMo7D5jTndy3vPctIy79u63CzXgs2t4zBzvcjnWNw0O9HyjIGx8O4+JddS78WbA3r+8TkSt+PDC8ag2lzw7mneUt6vz9+MC/dxuU9zTtuG8suzc9eeOCx4xcvXtidhbImXtIyVjrH66aWbcoWjdehFY/XI3OveOKeLrdvDvtq/LXN/8aXfK6a0+x7oPdzlb+6dd+fbbfuyUIZsLXen91ezZv7M/WSPfZnc5rPTK3+vXjqS1vOv6NLnH9j3/98sbz0UI8Pj44Ux+9w2jujbefj9qdqJD93NfJlPze1vPPxaPi31ufjO3ucj7d0TDvo8/Fo58bF83Gj3087Vqfz+RwP4+T0dO/zcXOaLXtWOiZHep6P7wu1Efb/a0KnkPqilrGz1LhNyxoZGQ3bNRKX0D5O97ZNPxp6s+ayntpzY+N0533FYw2nrbturcbpRMe0gx6n6Xy11Dht9Pvp243pfD7Hw7i4c2/vcdqc5ul9qz93boxftpw7x/qNwdHhseY6j6ZBWJzvFzbGMfhAdiI7l53OZvJ7x/Lx1MiXNfng8sbgWPi31ufKLT3G4M6OaQc9BtPr2FJjrzGyeOMHoPP5HA/j4skHe4/B5jRvOjDY9647wy1pmpb3rp0/X1vqZ173dOymm/kzr+Z6/vWB3j+bbU5z+uBK+8ze++n+cMttxU1jrfup8/hd6piaydZmP20J6/nswaX3U3N9mtN86dAyx9ORLMsuf+yh/Oe94fcrf3bpu99o+71Lt9/pXP7YQz+8/eTfrGT9AVj/ni/KpuK1ruU3U8v5/T8AAACwLsS+fyjURP8PAAAAlRH7/vhX4Yn+HwAAACoj9v0joSY16f+3vOnZuecvZymZvxDE+9NueLiYLmZcp8P3EwvXNW9/6GuzP/mLy8tb9lCWZT99+Ne7Tr/l4bhehYmwntfe3H774hkvL2v5xx69Pl1rfv3L4fHj9ix3GHSL4E5nWfatO76QL2fig1fz+vTDx/L63itPPN6c5rlDxfdx/mdeUkz/+yH8e+Tk8bb5nwn74fuhTr+j+/6I83396mu2Hnj/9eXF+RrbXphv9pMfKh43fk7OFx8vpo/7ean1/8vPP/X15vSPvar7+l8e6r7+T4XH/Vqo//3yYvrW56D5fZzvs2H94/LifA989dtd1//a54rpz7+lmO5YqHH5O8P329/y7Fzr/nqscbxtu7K3FtPF5U9/97fy++PjxcfvXP/xo1fb9kfn+Hj6n4rHmeqYPt4elxP9ecfym4/TOj7j8p/6zWNt+7nf8q+995mXNx+3c/n3d0w33DF/5yc2/cFnv9B1eXF9jvzp+bbtOfKecByH5T/5oTAew/3/c+0LbcuNjr2n/fwTp//y5stt2xO97cfF8q+9/lRe/33iJ7932wtuf+GVVzb3XZZ9533F4/Vb/qk/PNe2/l+5a1f+fMT7Y0a/c/lLicu/8PHJs+fmL83NtOzV/LNz3lmsz4bxjZua63tHOLd2fn/03MUPz16YmJ6YzrKJ6n6E3g37aqg/LMqVlc6/69HwfN7zu9/atOMfPx9v/+dHituvvqN43Xp1mO6L4fbNxfO30Fjl8p+89678+G48XXzflmMfgK3b/+PgsiYM29/5viCO9/Mv/XC+H5r35a8b8bhe5fp/b6Z4nG+G/boQPpl5213Xl9c6ffxshKvvK473Ve+/cJqLz+sfh+f7Xd8vHj+uV9ze74X3Md/e0n6+i+Pjm5eHOh8//xSPK+F8kl0p7o9Txf199bm7uq5e/ByS7Mrd+fe/nR7n7hVt5lLmPzE/dXru7KXHpi7Ozl+cmv/EJ4+eOXfp7MWj+Wd5Hv1Iv/mvn5825eenmdn9+7LpjVmWncum1+CENfD1Tx8ItLz1P//oiZkD0ztmZk8ev3Ty4qPnZy+cOjE/f2J2Zn7H8ZMnZz/eb/65mcO79xzae2DP5Km5mcMHDx3ae2hy7uy55m4sVqqP/dMfnTx74Wg+y/zhfYd2P/jgvunJM+dmZg8fmJ6evNRv/vy1abI5969NXpg9ffzi3JnZyfm5T84e3n1o//49fT8N8Mz5k/MTUxcunZ26ND97YarYlomL+c3N175+81NN8/9avJ/t1Cg+iC979/370+ezNn3t00s+VDFJxweIPhs+i+bvX3T+4HK+j33/aKhJTfp/AAAAqIPY94+Fmuj/AQAAoDJi378h1ET/DwAAAJUR+/7xUJOa9P/y//L/y8v/F/fL/9cr/3/+Y0WudL3n/2N+Xv6/Hm5x/n/Vy5f/l/+vXv6/+dU6zf+vcP3l/+X/Waxs+f/Y92/Mslr2/wAAAFAHse/fFGqi/wcAAIDKiH3/baEm+n8AAACojNj3vyDUpCb9v/z/svL/e/oFrqqf/3f9f/n/bH3m/+OTI/9fGyvO37//kbZv5f8D+X/5f/l/+X/5f1ZtdMl7blX+P/b9t4ea1KT/BwAAgDqIff8LQ030/wAAAFAZse+/I9RE/w8AAACVEfv+zaEmNen/5f9d/1/+X/6/0vn/1V7/v2Vl5P/XB9f/723F+f8N8v/Ly/+Py/+vx/z/6GDXv9z5/76rL//PTVG26//Hvv9FoSY16f8BAACgDmLf/+JQE/0/AAAAVEbs+18SaqL/BwAAgMqIff+doSY16f/l/+X/65z/f6r4AFD5f/n/rsvvf/3/4iv5/3KR/+/N9f/7cP3/euX/B7z+5c7/D/r6/6Nv7pxf/p9uypb/j33/S0NNatL/AwAAQB3Evv+uUBP9PwAAAFRG7PtfFmqi/wcAAIDKiH3/llCTmvT/8v/y/3XO/0fy//L/3ZbfP/9fkP8vF/n/3uT/+5D/l/+X/19e/r/Lm1/5f7opW/4/9v13h5rUpP8HAACAOoh9/z2hJvp/AAAAqIzY9/+/UBP9PwAAAFRG7Pu3hprUpP+X/5f/l/+vV/7//jH5f/n/aqtm/n9wb0rk//uQ/5f/L2v+f+H59oOxi7W9/v9iK8n/b+j3YFRG2fL/se9/eaiFLSN16f8BAACgDmLf/4pQE/0/AAAAVEbs+18ZaqL/BwAAgMqIff9EqElN+n/5/2rl///kr558ZSb/L//fZ/kVzf/HYSD/X3PVzP8Pjvx/H/L/8v9lzf+X7fr/Xbj+P92ULf8f+/57Q01q0v8DAABAHcS+f1uoif4fAAAAKiP2/feFmuj/AQAAoDJi37891KQm/b/8f7Xy/5H8v/x/r+VXNP+fyP/Xm/x/Fy0Hqfx/H/L/8v+1z//Hd7/y/wxG2fL/se9/VahJTfp/AAAAqIPY9+8INdH/AwAAQGXEvv/VoSb6fwAAAKiM2PfvDDWpSf8v/y//L/8v/y//33358v/rk/x/byvN/4/J/8v/y//XLP/v+v8MVtny/7Hvf02oSU36fwAAAKiD2PfvCjXR/wMAAEBlxL/fLP7uVf8PAAAAVRT7/slQk5r0//L/8v91yv835P/l/+X/K0/+vzfX/+9D/l/+X/5/cf5/Q99Nz8n/003Z8v+x739tqElN+n8AAACog9j3PxBqov8HAACAyoh9/1Soif4fAAAAKiP2/dOhJjXp/+X/5f/rlP8v//X/23Oi8v8F+X/5/5WQ/+9N/r8P+X/5/6rl/7PM9f+5pcqW/499/+5Qk5r0/wAAAFAHse/fE2qi/wcAAIDKiH3/3lAT/T8AAABURuz794Wa1KT/l/+vav5/IZP/X4/5f9f/l/+X/18t+f/e5P/7kP+X/69a/n8Q1/+X/2cVypb/j33/g6EmNen/AQAAoA5i378/1ET/DwAAAJUR+/4DoSah/+/2d90AAADA+hL7/oOhJjX5/b/8f0Xy/7/xd23Ldv1/+f9eyx9M/n+j/H+o8v/lUtH8f+dhccPk//uQ/5f/l/+X/2egypb/j33/oVCTmvT/AAAAUAex739dqIn+HwAAACoj9v3/P9RE/w8AAACVEfv+nwk1qUn/L/9fkfx/B/l/+f9ey3f9f/n/Kqto/n9gKpX/H5L/l/8v1/rL/8v/s9jNz//Hr5aX/499/+FQk5r0/wAAAFAHse//2VAT/T8AAABURuz7Xx9qov8HAACAyoh9/5FQk5r0//L/8v/y//L/Nyf///qsUxnz/83BI/9fLfL/vVUq/+/6//L/JVt/+X/5fxYr2/X/Y9//hlCTmvT/AAAAUAex738o1ET/DwAAAJUR+/43hpro/wEAAKAyYt//plCTmvT/8v/y//L/8v+u/999+fL/65P8f2/y/33I/8v/y//L/zNQZcv/x77/zaEmNen/AQAAoA5i3/+WUBP9PwAAAFRG7PvfGmqi/wcAAIDKiH3/20JNatL/y//L/8v/y//L/3dfvvz/+iT/35v8fx/y//L/8v/y/wxU2fL/se9/e6hJTfp/AAAAqIPY9z8caqL/BwAAgMqIff87Qk30/wAAAFAZse9/Z6hJTfp/+X/5f/l/+X/5/+7Ll/9fn+T/e5P/70P+X/5f/l/+n4EqW/4/9v3vCjWpSf8PAAAAdRD7/p8LNdH/AwAAQGXEvv/doSb6fwAAAKiM2Pf/fKhJTfp/+X/5/3Ll/xcut84n/y//nw0q/9+caXn5/7H4OPL/65P8f2/y/310yf9vkP+X/5f/l//nhpUt/x/7/veEmtSk/wcAAIA6iH3/e0NN9P8AAABQGbHvf1+oif4fAAAAKiP2/Y+EmtSk/5f/r2X+P21y+fL/rv8v/+/6//L/qyP/35v8fx+u/y//L/8v/89AlS3/H/v+R0MNfjzgl1sAAADgFop9//tDTWry+38AAACog9j3/0Koif4fAAAAKiP2/R8INalJ/39D+f8YepX/T9ZZ/r/E1/+vWv5/pG181Cn/P97yfKZxKf8v/78G5P97k//vQ/5f/r/M+f8wmjcuMb/8P2VUtvx/7Ps/GGpSk/4fAAAA6iD2/b8YaqL/BwAAgPVgfjkTxb7/l0JN9P8AAABQGbHv/+VQk5r0/67/L/8v/9+a/3+76/+7/r/8/zon/9+b/H8f8v/y/2XO//ch/08ZlS3/H/v+Xwk1WbLx++F/LmMzAQAAgBKJff+HQk1q8vt/AAAAqIPY9x8NNdH/AwAAQGXEvv9YqElN+n/5/878f7yiqvx/PfP/g77+f/v4kP+X/5f/v/kGl/9/2e1ZJv8v/y//L/+/lvn/Ifl/Kqds+f/Y9x8PNalJ/w8AAAB1EPv+Xw010f8DAABAZcS+/0Soif4fAAAAKiP2/TOhJlXs/ztDtbc2/z9azvy/6//faP7/p/L/Vcv/X87k/+X/1yHX/+9N/r8P+X/5f9f/X3X+vzlO5f+Jypb/j33/bKhJFft/AAAAqJf04+DY958MNdH/AwAAQGXEvv9UqIn+HwAAACoj9v0fDjWpSf/v+v/y/67/fyvy/yNt05c0/1/m6//ns8j/y/93I//fm/x/H/L/8v/y/67/z0CVLf8f+/65UJOa9P8AAABQB7Hv/0ioif4fAAAAKiP2/R8NNdH/AwAAQGXEvv90qElN+n/5f/n/uuf/G1l2xfX/113+Pyf/L//fjfx/b/L/fcj/y//L/8v/83/s3UePnfd1x/ErRWIBAiQvIeusskxWykvIJovsAmStVKXbluTebbnK3ZZ7773Jvffe5d6rXGUDNEiec8iZuXwuybkz93n+5/PZnJAQPTPSUMHPxNf/rZpb/5+7/8a4pcn+BwAAgA5y9/9z3GL/AwAAwDBy9/9L3GL/AwAAwDBy9/9r3NJk/+v/9f/d+//VTt7/3/vX6//P0//r/7fhQH9/3fq/7lJR+CX7/7/665v+Uf+v/9f/T9L/6//1/+w3t/4/d/+/xS1N9j8AAAB0kLv/3+MW+x8AAACGkbv/P+IW+x8AAACGkbv/prilyf7X/+v/9f/6/z39/536f/3/snn/f5r+fwP9v/5f/6//Z6vm1v/n7v/PuKXJ/gcAAIAOcvf/V9xi/wMAAMAwcvf/d9xi/wMAAMAwcvf/T9zSZP/r//X/+v+l9P8nvP+/7+vR/+v/19H/T9P/b6D/1//r//X/bNXc+v/c/f8btzTZ/wAAANBB7v7/i1vsfwAAABhG7v7/j1vsfwAAABhG7v57xS1N9r/+X/+v/19K/39M7//r//X/C3fH6sK/E467/z+xhf/9Af3/vPv/1Ur/P+Wy+/n1X95yPv9L0P/r/zlobv1/7v57xy1/u1qduNovEgAAAJiV3P33iVua/Pk/AAAAdJC7/+a4xf4HAACAYeTuvyVuabL/9f/6/6vr/89/v+j/9f/6f/3/3Hj/f9rh+/+//PMb/6lv/+/9/2ne/992/3/2O0P/z7LNrf/P3X9r3NJk/wMAAEAHufvvG7fY/wAAADCM3P33i1vsfwAAABhG7v77xy1N9r/+f7T+/0/2/LqL+v9ztYv3//X/+n/9/+j0/9O8/7/BuX/Nna4f6v/1/97/1/9zOHPr/3P3PyBuabL/AQAAoIPc/Q+MW+x/AAAAGEbu/gfFLfY/AAAADCN3/4Pjlib7X/8/Wv+/99cd3fv/+n/9v/5f/z9P+v9p+v8NRnn//yq/a3bdzx/Wrj9//b/+n4Pm1v/n7n9I3NJk/wMAAEAHufsfGrfY/wAAADCM3P0Pi1vsfwAAABhG7v6Hxy1N9r/+X/+/jP4/P4L+X/9/9P1/0v8vk/5/mv5/g1H6/6u0635+6Z+//l//z0Fz6/9z9z8ibmmy/wEAAKCD3P2PjFvsfwAAABhG7v5HxS32PwAAAAwjd/+j45Ym+1//r/9fRv/v/X/9v/f/9f+XR/8/Tf+/gf5f/6//1/+zVXPr/3P33xa3NNn/AAAA0EHu/sfELfY/AAAADCN3/2PjFvsfAAAAhpG7/3FxS5P9r//X/+v/9f/6//UfX/+/TPr/afr/DfT/+n/9v/6frZpR/3/Rrzq1enzc0mT/AwAAQAe5+58Qt9j/AAAAMIzc/U+MW+x/AAAAGEbu/tvjlib7X/8/m/7/XM43Vv9/erVa6f9XTfv/0xf986zvS/2//v8Y6P+n6f83OPsb8sw1+n/9v/5f/8+WHG//f/bf+dP/ewC5+58UtzTZ/wAAANBB7v4nxy32PwAAAAwjd/9T4hb7HwAAAIaRu/+pcUuT/a//n03/f85Y/b/3//d/f3Tq/73/f5D+/3jo/6fp/zfw/v+h+/lrV/p//b/+nwuOt//f/OPc/U+Lm05cf9VfIgAAADAzufufHrc0+fN/AAAA6CB3/zPiFvsfAAAAFuq2Az+Tu/+ZcUuT/a//327/f+Kin9P/6//3f3/o//X/+v+jp/+fpv/fQP/v/X/9v/6frZpb/5+7/1lxS5P9DwAAAB3k7r8jbrH/AQAAYBi5+58dt9j/AAAAMIzc/c+JW5rsf/2/9//1//p//f/6j6//Xyb9/zT9/wb6f/3/bvv/kxf+z6Pt/0+v+fX6f47CFfT/Z86cufnI+//c/c+NW5rsfwAAAOggd//z4hb7HwAAAIaRu//5cYv9DwAAAMPI3f+CuKXJ/tf/N+3/81t9Wf3/LauV/l//r//X/0/T/0/T/2+g/9f/e/9f/89Wze39/9z9L4xbmux/AAAA6CB3/4viFvsfAAAAhpG7/8Vxi/0PAAAAw8jd/5K4pcn+1/837f+9/6//1/8fd/9/z0r/fywW0f+ve3g7zL3/v1X/r/+f0K7//7u/2fND/b/+n4Pm1v/n7n9p3NJk/wMAAEAHuftfFrfY/wAAADCM3P0vj1vsfwAAABhG7v5XxE3XNdn/+n/9v/5f/6//X//xj/n9/xOr1Ur/vwWL6P8nzL3/3877//t/l1+g/9f/L/nz1//r/zlobv1/7v5Xxi1N9j8AAAB0kLv/VXGL/Q8AAADDyN3/6rjF/gcAAIBh5O5/TdzSZP/r//X/+n/9//D9/62L6P+9/78l+v9p8+j/L03/r/9f8uev/9f/c/l21f/n7n9t3NJk/wMAAEAHuftfF7fY/wAAADCM3P2vj1vsfwAAABhG7v43xC1N9r/+X/9/Jf1/fp76/7H6/5Oz6/9P7fnPa/L+v/5/S/T/0/T/G+j/9f/6/9v0/2zT3N7/z93/xrilyf4HAACADnL3vylu/Ve39j8AAAAMI3f/m+MW+x8AAACGkbv/LXFLk/2v/9f/e/9f/z/8+//6/1b0/9P0/xvo//X/+n/v/7NVc+v/c/e/NW5psv8BAACgg9z9b4tb7H8AAAAYRu7+t8ct9j8AAAAMI3f/nXFLk/2v/9f/6//1//r/8/8M9f9j0P9PO57+/7T+X/9f/fw18btA/6//3/TrGdPc+v/c/e+IW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAIt03Zqfy93/7rilyf7X/+v/9f/6f/3/+o+v/1+mnfT/+U2h//f+f+jT///Fnh8t7f3//f//S/+v/2f75tb/5+5/T9zSZP8DAABAB7n73xu32P8AAAAwjNz974tb7H8AAAAYRu7+98ctTfa//l//r//X/0/0/6vV7dfo/4P+fxm8/z9N/7+B/n+n7+cv/fPX/+v/OWhu/X/u/g/ELU32PwAAAHSQu/+DcYv9DwAAAMPI3f+huMX+BwAAgGGc2/0ZlzXc//p//b/+X//v/f/1H1//v0z6/2n6/w30//p//b/+n62aW///4XO/6tTqI3FLk/0PAAAAHeTu/2jcYv8DAADAMHL3fyxusf8BAABgGLn7Px63NNn/+n/9/zL6/zNnztys/9f/7/16LvT/d+n/Kfr/afr/DfT/+n/9v/6frZpb/5+7/xNxS5P9DwAAAB3k7v9k3GL/AwAAwDBy938qbrH/AQAAYBi5+z8dtzTZ//r/GfT/p/T/3v/X/6+8/6//3xL9/zT9/wYj9v+nLv/L33U/f1i7/vz1//p/Dppb/5+7/zNxS5P9DwAAAB3k7v9s3GL/AwAAwDBy938ubrH/AQAAYBi5+z8ftzTZ//r/4+v/z/696/L+/+nV+s9f/6//1//r/4+a/n+a/n+DEfv/K7Drfn7pn7/+X//PQXPr/3P3fyFu2Tv8rr+yrxIAAACYk9z9X4xbmvz5PwAAAHSQu/9LcYv9DwAAAMPI3f/luKXJ/tf/z+D9/wH7f+//r//+0P/Puv+/Vv8/Bv3/NP3/Bvp//b/+f0v9f3436/+7m1v/n7v/K3FLk/0PAAAAHeTu/2rcYv8DAADAMHL3fy1usf8BAABgGLn774pbLtr/69ruUej/9f/6f/2//n/9x9f/L5P+f9rl9v8nV4fr/5P+X/+v/+/a/3v/n/Pm1v/n7v963OLP/wEAAGBxrr/Ez+fu/0bcYv8DAADAMHL3fzNusf8BAABgGLn7vxW33H3trj6lY6X/1//r//X/+v/1H1//v0z6/2ne/99A/7+Nfv4G/f8Y/f9qpf/n8ObW/+fu/3bc4s//AQAAYBi5+78Tt9j/AAAAMIzc/d+NW+x/AAAAGEbu/u/FLU32v/5f/3/I/v9cmqn/P2/c/j//E/T/2+z///Siv6v6/+3R/0/T/2+g//f+v/7f+/9s1dz6/9z9349bmux/AAAA6CB3/w/iFvsfAAAAhpG7/4dxi/0PAAAAw8jd/6O4pcn+31n/H3+r9f+L7/+9/3/k/f/Zr27X/X/S/3v/f/70/9P0/xvo//X/jfr/v9/3Y/0/R2Fu/X/u/h/HLU32PwAAAHSQu/8ncYv9DwAAAMPI3f/TuMX+BwAAgGHk7v9Z3NJk/3v/X/+v/597/z+H9//T1vv/1Ur/r//fMv3/NP3/evUPSv+v/2/U/++n/+cozK3/z93/87ilyf4HAACADnL3/yJusf8BAABgGLn7745b7H8AAAAYRu7+X8YtTfa//l//r//X/3v/f/3H1/8vk/5/2i77/3/4s80f1vv/O+//81PQ/+v/9f9sxdz6/9z9v4pbmux/AAAA6CB3/6/jFvsfAAAAhpG7/zdxi/0PAAAAw8jd/9u4pcn+39D/n6y/UP8/Sf+/9/PX/6///tD/6//1/0dP/z9tuv+/6Hdzs/f/i/7f+//6f/0/WzW3/j93/+/ilib7HwAAADrI3X9P3GL/AwAAwDBy9/8+brH/AQAAYBi5+/8QtzTZ/97/X1L/f4P+X/+v/9f/6/830P9P2+X7/5dD/6//X/Lnr//X/3PQ3Pr/3P1/DAAA//9PIEvU")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./bus\x00')

2m52.411430997s ago: executing program 2 (id=545):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x54, 0x4, 0x20, 0x403, 0x8348, 0x139c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x0, 0x9, 0xff, 0xd1, 0xff}}]}}]}}, 0x0)

2m52.291736576s ago: executing program 32 (id=545):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x54, 0x4, 0x20, 0x403, 0x8348, 0x139c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x0, 0x9, 0xff, 0xd1, 0xff}}]}}]}}, 0x0)

2m11.825548155s ago: executing program 3 (id=1118):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

2m11.750889658s ago: executing program 3 (id=1120):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000380), 0x26)

2m11.750549356s ago: executing program 3 (id=1122):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x30}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0)

2m11.6797949s ago: executing program 3 (id=1123):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

2m11.647388716s ago: executing program 3 (id=1124):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x60601, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x5207, 0x0)

2m11.39281276s ago: executing program 3 (id=1131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r0}, 0x18)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)

2m11.063631473s ago: executing program 33 (id=1131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r0}, 0x18)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)

1m45.227217641s ago: executing program 0 (id=1466):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

1m45.110449282s ago: executing program 0 (id=1468):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x20004, 0x0, 0x10}, 0x10}, 0x94)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})

1m45.110268751s ago: executing program 0 (id=1469):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}}, 0x0)

1m45.059551934s ago: executing program 0 (id=1471):
r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02)
ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000300))
r1 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x800)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r3 = epoll_create1(0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x8, 0x2, {r4, r5/1000+10000}, {0x4, 0xc, 0x5, 0x1, 0x6, 0xff, "0be8c911"}, 0x90e5344, 0x4, {<r6=>0xffffffffffffffff}, 0xe, 0x0, r1})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000040))
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x8000203d})
pipe2$9p(&(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace(0x19, r10)
r11 = dup(r9)
read$FUSE(r11, &(0x7f0000004c00)={0x2020, 0x0, <r12=>0x0, 0x0, 0x0, <r13=>0x0}, 0x2020)
write$FUSE_BMAP(r11, &(0x7f0000000000)={0x18, 0x0, r12, {0xfffffffffffffffc}}, 0x18)
write$FUSE_DIRENTPLUS(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',directio,access=user,cache=mmap,vession=9p2000,cache=none,version=9p2000.u,obj_type=trans=fd,,\x00'])
newfstatat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', &(0x7f0000000f00), 0x800)
r14 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200, 0x20, 0xa}, 0x18)
kcmp(r13, r10, 0x0, r9, r14)

1m44.908836272s ago: executing program 0 (id=1477):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f00000000c0)=""/85, 0x55)
getdents(r2, 0xfffffffffffffffd, 0x58)

1m44.499758244s ago: executing program 0 (id=1484):
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

1m44.270359614s ago: executing program 34 (id=1484):
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

1.851454199s ago: executing program 1 (id=2996):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x48}}, 0x0)

1.779978231s ago: executing program 1 (id=2998):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0)

1.64080161s ago: executing program 1 (id=2999):
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, 0x0, 0x0)

1.498143599s ago: executing program 4 (id=3001):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d406099dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0xffffffffffffff91}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff})
close_range(r5, 0xffffffffffffffff, 0x2)
gettid()
recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0)

1.296474307s ago: executing program 1 (id=3002):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x3, {0xa, 0x4e20, 0xfd1, @remote, 0x200}}}, 0x3a)

239.471332ms ago: executing program 5 (id=3003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x70bd2e, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886)

239.21513ms ago: executing program 1 (id=3004):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0)

159.369962ms ago: executing program 4 (id=3005):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="8a00000000020000", 0x8)

159.149707ms ago: executing program 4 (id=3006):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0)

158.892442ms ago: executing program 5 (id=3007):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a9b2f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38e3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c505000000fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29888acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee6797463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb0000458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c995c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bba88148e2d62df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

110.338829ms ago: executing program 1 (id=3008):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904"], 0x0)

110.14371ms ago: executing program 5 (id=3009):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r1})

58.646723ms ago: executing program 4 (id=3010):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'macvtap0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @local, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006"], 0x0, 0x52, 0x0, 0x8, 0x2}, 0x28)

58.42454ms ago: executing program 5 (id=3011):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x33, 0x0, &(0x7f0000000080))

57.95801ms ago: executing program 4 (id=3012):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x20, 0x6a, 0x509, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

329.556µs ago: executing program 4 (id=3013):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1}, &(0x7f0000000340)=0x8)

80.45µs ago: executing program 5 (id=3014):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000780)={0x0, 0xa}, &(0x7f00000007c0)=0x8)

0s ago: executing program 5 (id=3015):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000004ac0))

kernel console output (not intermixed with test programs):

158.198841][ T9128] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  158.278945][ T8680] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.355037][ T9137] can0: slcan on ttyS3.
[  158.453263][ T9137] can0 (unregistered): slcan off ttyS3.
[  158.456943][ T9137] Falling back ldisc for ttyS3.
[  158.581812][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  158.925582][ T9178] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1342'.
[  158.957640][ T9166] loop4: detected capacity change from 0 to 40427
[  158.968923][ T9166] F2FS-fs (loop4): invalid crc value
[  158.997505][ T9183] loop0: detected capacity change from 0 to 1024
[  159.009025][ T9166] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  159.012486][ T9166] F2FS-fs (loop4): Start checkpoint disabled!
[  159.015787][ T9166] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  159.040536][  T158] kworker/u9:3: attempt to access beyond end of device
[  159.040536][  T158] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  159.047193][  T158] CPU: 0 UID: 0 PID: 158 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  159.047208][  T158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.047213][  T158] Workqueue: writeback wb_workfn (flush-7:4)
[  159.047230][  T158] Call Trace:
[  159.047233][  T158]  <TASK>
[  159.047237][  T158]  dump_stack_lvl+0x189/0x250
[  159.047252][  T158]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.047260][  T158]  ? __pfx_queue_work_on+0x10/0x10
[  159.047269][  T158]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  159.047278][  T158]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  159.047291][  T158]  f2fs_handle_critical_error+0x37c/0x540
[  159.047304][  T158]  f2fs_write_end_io+0x886/0xb60
[  159.047321][  T158]  __submit_merged_bio+0x27a/0x6a0
[  159.047333][  T158]  __submit_merged_write_cond+0x255/0x530
[  159.047344][  T158]  f2fs_write_data_pages+0x261d/0x3000
[  159.047367][  T158]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.047382][  T158]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  159.047405][  T158]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  159.047414][  T158]  ? look_up_lock_class+0x74/0x170
[  159.047430][  T158]  ? trace_f2fs_writepages+0x7f/0x200
[  159.047438][  T158]  ? f2fs_write_node_pages+0x478/0x6e0
[  159.047449][  T158]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  159.047484][  T158]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.047495][  T158]  do_writepages+0x32e/0x550
[  159.047508][  T158]  ? reacquire_held_locks+0x127/0x1d0
[  159.047515][  T158]  ? writeback_sb_inodes+0x384/0x1010
[  159.047528][  T158]  __writeback_single_inode+0x145/0xff0
[  159.047537][  T158]  ? do_raw_spin_unlock+0x4d/0x240
[  159.047548][  T158]  writeback_sb_inodes+0x6c7/0x1010
[  159.047567][  T158]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  159.047592][  T158]  ? rcu_is_watching+0x15/0xb0
[  159.047604][  T158]  wb_writeback+0x43b/0xaf0
[  159.047616][  T158]  ? queue_io+0x391/0x590
[  159.047626][  T158]  ? __pfx_wb_writeback+0x10/0x10
[  159.047638][  T158]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.047648][  T158]  wb_workfn+0x409/0xef0
[  159.047661][  T158]  ? __pfx_wb_workfn+0x10/0x10
[  159.047670][  T158]  ? __lock_acquire+0xab9/0xd20
[  159.047685][  T158]  ? process_scheduled_works+0x9ef/0x17b0
[  159.047694][  T158]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.047701][  T158]  ? process_scheduled_works+0x9ef/0x17b0
[  159.047707][  T158]  ? process_scheduled_works+0x9ef/0x17b0
[  159.047715][  T158]  process_scheduled_works+0xae1/0x17b0
[  159.047733][  T158]  ? __pfx_process_scheduled_works+0x10/0x10
[  159.047752][  T158]  worker_thread+0x8a0/0xda0
[  159.047769][  T158]  kthread+0x711/0x8a0
[  159.047780][  T158]  ? __pfx_worker_thread+0x10/0x10
[  159.047787][  T158]  ? __pfx_kthread+0x10/0x10
[  159.047796][  T158]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.047803][  T158]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.047810][  T158]  ? __pfx_kthread+0x10/0x10
[  159.047819][  T158]  ret_from_fork+0x3fc/0x770
[  159.047829][  T158]  ? __pfx_ret_from_fork+0x10/0x10
[  159.047839][  T158]  ? __switch_to_asm+0x39/0x70
[  159.047847][  T158]  ? __switch_to_asm+0x33/0x70
[  159.047855][  T158]  ? __pfx_kthread+0x10/0x10
[  159.047864][  T158]  ret_from_fork_asm+0x1a/0x30
[  159.047880][  T158]  </TASK>
[  159.047883][  T158] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  159.621705][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  159.638351][ T9192] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1348'.
[  159.793267][ T9200] loop0: detected capacity change from 0 to 512
[  159.800106][ T9200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.840966][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.104385][ T6036] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  160.252345][ T6036] usb 5-1: Using ep0 maxpacket: 16
[  160.256603][ T6036] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  160.259990][ T6036] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.267592][ T6036] usb 5-1: config 0 has no interface number 0
[  160.272964][ T6036] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  160.277789][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.281151][ T6036] usb 5-1: Product: syz
[  160.285152][ T6036] usb 5-1: Manufacturer: syz
[  160.287312][ T6036] usb 5-1: SerialNumber: syz
[  160.294036][ T6036] usb 5-1: config 0 descriptor??
[  160.324254][ T6036] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22
[  160.524592][  T794] usb 5-1: USB disconnect, device number 4
[  160.661682][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  161.394925][ T6036] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  161.553430][ T6036] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  161.557284][ T6036] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  161.560203][ T9241] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1368'.
[  161.560554][ T6036] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  161.568668][ T6036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.576560][ T9237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  161.580770][ T6036] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  161.711703][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  161.818952][ T5905] usb 5-1: USB disconnect, device number 5
[  161.881734][ T6036] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  161.921976][ T9251] macsec0: entered promiscuous mode
[  161.924603][ T9251] macsec0: entered allmulticast mode
[  161.926910][ T9251] veth1_macvtap: entered allmulticast mode
[  162.007002][ T9255] 9pnet_fd: Insufficient options for proto=fd
[  162.045148][ T6036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  162.049553][ T6036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  162.061964][ T9257] Driver unsupported XDP return value 0 on prog  (id 106) dev N/A, expect packet loss!
[  162.067126][ T6036] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  162.070612][ T6036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.077913][ T6036] usb 1-1: Product: syz
[  162.081657][ T6036] usb 1-1: Manufacturer: syz
[  162.091717][ T6036] usb 1-1: SerialNumber: syz
[  162.095914][ T6036] usb 1-1: config 0 descriptor??
[  162.101129][ T6036] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  162.620721][ T6036] usb 1-1: USB disconnect, device number 23
[  162.741751][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  163.155286][ T9271] loop4: detected capacity change from 0 to 40427
[  163.158316][ T9271] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  163.160860][ T9271] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  163.206053][ T9271] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.213508][ T9271] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  163.216242][ T9271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  163.756848][ T9271] syz.4.1382 (9271): drop_caches: 2
[  163.781801][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  164.186632][ T9303] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1394'.
[  164.189634][ T9303] netlink: zone id is out of range
[  164.195224][ T9303] netlink: zone id is out of range
[  164.197058][ T9303] netlink: zone id is out of range
[  164.198826][ T9303] netlink: zone id is out of range
[  164.200590][ T9303] netlink: zone id is out of range
[  164.397791][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801fa12c00: rx timeout, send abort
[  164.831683][    C1] net_ratelimit: 81 callbacks suppressed
[  164.831695][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  164.902634][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801fa12c00: abort rx timeout. Force session deactivation
[  165.280505][ T9319] loop6: detected capacity change from 0 to 524287999
[  165.871673][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  166.056707][ T9345] loop0: detected capacity change from 0 to 1024
[  166.060079][ T9345] EXT4-fs: Ignoring removed bh option
[  166.063246][ T9345] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  166.074183][ T9345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.514651][ T9351] loop4: detected capacity change from 0 to 32768
[  166.524988][ T9351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1413 (9351)
[  166.534684][ T9351] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.539182][ T9351] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  166.545486][ T9351] BTRFS info (device loop4): disk space caching is enabled
[  166.548986][ T9351] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  166.555563][ T9357] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1416'.
[  166.612676][ T9351] BTRFS info (device loop4): rebuilding free space tree
[  166.627582][ T9351] BTRFS info (device loop4): disabling free space tree
[  166.630374][ T9351] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  166.634879][ T9351] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  166.715958][ T5864] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  166.736151][ T8680] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.897634][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.901748][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  167.215547][ T9406] loop0: detected capacity change from 0 to 128
[  167.218822][ T9406] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  167.305633][ T9413] loop0: detected capacity change from 0 to 256
[  167.321280][ T9413] FAT-fs (loop0): Directory bread(block 64) failed
[  167.326369][ T9413] FAT-fs (loop0): Directory bread(block 65) failed
[  167.334896][ T9413] FAT-fs (loop0): Directory bread(block 66) failed
[  167.337696][ T9413] FAT-fs (loop0): Directory bread(block 67) failed
[  167.340500][ T9413] FAT-fs (loop0): Directory bread(block 68) failed
[  167.343358][ T9413] FAT-fs (loop0): Directory bread(block 69) failed
[  167.346141][ T9413] FAT-fs (loop0): Directory bread(block 70) failed
[  167.348901][ T9413] FAT-fs (loop0): Directory bread(block 71) failed
[  167.352920][ T9413] FAT-fs (loop0): Directory bread(block 72) failed
[  167.355626][ T9413] FAT-fs (loop0): Directory bread(block 73) failed
[  167.536157][ T9422] loop0: detected capacity change from 0 to 512
[  167.540207][ T9422] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  167.546718][ T9422] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.1439: inode #1661: comm syz.0.1439: iget: illegal inode #
[  167.554389][ T9422] EXT4-fs (loop0): no journal found
[  167.556627][ T9422] EXT4-fs (loop0): can't get journal size
[  167.564038][ T9422] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  167.568634][ T9422] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8056c118, mo2=0002]
[  167.575143][ T9422] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  167.580571][ T9422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.607685][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.817311][ T9434] loop0: detected capacity change from 0 to 128
[  167.836520][ T9434] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  167.843500][ T9434] ext4 filesystem being mounted at /458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  167.871014][ T9434] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.1444: bg 0: bad block bitmap checksum
[  167.901546][ T5841] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  167.941873][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  168.273555][   T33] audit: type=1326 audit(1755600362.118:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.1.1442" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a978ebe9 code=0x0
[  168.521942][   T47] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  168.592566][ T6036] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  168.683974][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  168.688098][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.696938][   T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.703489][   T47] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[  168.707266][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.712171][   T47] usb 1-1: config 0 descriptor??
[  168.754067][ T6036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.758442][ T6036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.763589][ T6036] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  168.771354][ T6036] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  168.776565][ T6036] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  168.779743][ T6036] usb 5-1: Product: syz
[  168.784278][ T6036] usb 5-1: config 0 descriptor??
[  168.851337][ T9454] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  168.981938][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  169.130434][   T47] ntrig 0003:1B96:0009.0008: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.0-1/input0
[  169.201133][ T6036] waltop 0003:172F:0037.0009: unknown main item tag 0x0
[  169.203936][ T6036] waltop 0003:172F:0037.0009: unknown main item tag 0x0
[  169.206259][ T6036] waltop 0003:172F:0037.0009: unknown main item tag 0x0
[  169.212154][ T6036] waltop 0003:172F:0037.0009: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  169.331080][   T47] ntrig 0003:1B96:0009.0008: Firmware version: 2.3.14.45.6 (cd15 bed5)
[  169.404166][   T47] usb 5-1: USB disconnect, device number 6
[  169.534592][ T6036] usb 1-1: USB disconnect, device number 24
[  170.031953][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  170.697796][ T9487] capability: warning: `syz.4.1465' uses 32-bit capabilities (legacy support in use)
[  170.888902][ T9501] loop0: detected capacity change from 0 to 764
[  170.953948][ T9508] overlayfs: failed to clone upperpath
[  171.007729][ T9492] loop4: detected capacity change from 0 to 32768
[  171.022040][ T9492] (syz.4.1467,9492,0):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  171.025721][ T9492] (syz.4.1467,9492,0):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  171.030072][ T9492] (syz.4.1467,9492,0):ocfs2_check_volume:2420 ERROR: status = -13
[  171.033924][ T9492] (syz.4.1467,9492,0):ocfs2_check_volume:2432 ERROR: status = -13
[  171.037508][ T9492] (syz.4.1467,9492,0):ocfs2_mount_volume:1764 ERROR: status = -13
[  171.048883][ T9492] (syz.4.1467,9492,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 77
[  171.061678][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  171.081022][ T9492] (syz.4.1467,9492,0):ocfs2_fill_super:1177 ERROR: status = -13
[  171.403332][ T9521] loop4: detected capacity change from 0 to 32768
[  171.847521][ T9521] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  171.847521][ T9521] 
[  171.851656][ T9521] ERROR: (device loop4): remounting filesystem as read-only
[  172.005944][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.011774][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.014843][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.017972][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.021088][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.111645][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  172.250488][ T9526] chnl_net:caif_netlink_parms(): no params data found
[  172.365495][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.368541][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.372077][ T9526] bridge_slave_0: entered allmulticast mode
[  172.375798][ T9526] bridge_slave_0: entered promiscuous mode
[  172.380302][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.387522][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.390479][ T9526] bridge_slave_1: entered allmulticast mode
[  172.398064][ T9526] bridge_slave_1: entered promiscuous mode
[  172.437742][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.446261][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.484776][ T9526] team0: Port device team_slave_0 added
[  172.492882][ T9526] team0: Port device team_slave_1 added
[  172.534145][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.537141][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.561677][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.571870][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.581836][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.611237][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.703661][ T9526] hsr_slave_0: entered promiscuous mode
[  172.706899][ T9526] hsr_slave_1: entered promiscuous mode
[  172.709766][ T9526] debugfs: 'hsr0' already exists in 'hsr'
[  172.712735][ T9526] Cannot create hsr debugfs directory
[  173.141788][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  173.234644][ T9555] loop4: detected capacity change from 0 to 2048
[  173.240160][ T9555] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0)
[  173.303680][ T9526] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  173.313941][ T9526] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  173.320348][ T9526] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  173.332220][ T9526] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  173.350386][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'.
[  173.420327][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'.
[  173.429448][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.470212][ T9526] 8021q: adding VLAN 0 to HW filter on device team0
[  173.496042][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.499028][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.517803][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.520760][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.647595][ T9579] loop4: detected capacity change from 0 to 8
[  173.728687][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'.
[  173.756492][ T9584] SQUASHFS error: lzo decompression failed, data probably corrupt
[  173.760542][ T9584] SQUASHFS error: Failed to read block 0x71: -5
[  173.779841][ T9584] SQUASHFS error: lzo decompression failed, data probably corrupt
[  173.794256][ T9584] SQUASHFS error: Failed to read block 0x71: -5
[  173.805092][   T33] audit: type=1800 audit(1755600367.698:89): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1503" name="file0" dev="loop4" ino=3 res=0 errno=0
[  173.910265][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.101777][ T5235] Bluetooth: hci0: command tx timeout
[  174.182165][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  174.594543][ T9526] veth0_vlan: entered promiscuous mode
[  174.626269][ T9526] veth1_vlan: entered promiscuous mode
[  174.702091][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'.
[  174.811026][ T9526] veth0_macvtap: entered promiscuous mode
[  174.856083][ T9526] veth1_macvtap: entered promiscuous mode
[  174.915589][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.965595][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.014484][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.033232][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.044355][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.052501][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.196157][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.199555][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.221780][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  175.234791][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1518'.
[  175.243783][ T9617] delete_channel: no stack
[  175.258091][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.264900][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.417657][ T9620] loop4: detected capacity change from 0 to 40427
[  175.420890][ T9620] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  175.423688][ T9620] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  175.426653][ T9620] F2FS-fs (loop4): build fault injection type: 0x6
[  175.431085][ T9620] F2FS-fs (loop4): invalid crc value
[  175.481339][ T9620] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  175.486494][ T9620] F2FS-fs (loop4): Start checkpoint disabled!
[  175.494072][ T9620] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  175.496466][ T9620] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  176.006605][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  176.176475][ T5843] usb 6-1: Using ep0 maxpacket: 8
[  176.182567][ T5235] Bluetooth: hci0: command tx timeout
[  176.193772][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.201752][ T5843] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  176.205319][ T5843] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  176.208607][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.216931][ T5843] usb 6-1: config 0 descriptor??
[  176.261839][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  176.972183][   T24] usb 6-1: USB disconnect, device number 2
[  177.144770][ T9674] syzkaller0: entered promiscuous mode
[  177.147066][ T9674] syzkaller0: entered allmulticast mode
[  177.311788][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  177.333251][   T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  177.503996][   T47] usb 5-1: Using ep0 maxpacket: 16
[  177.508304][   T47] usb 5-1: config 0 has an invalid interface number: 3 but max is 0
[  177.515508][   T47] usb 5-1: config 0 has no interface number 0
[  177.518357][   T47] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  177.523202][   T47] usb 5-1: config 0 interface 3 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32
[  177.530086][   T47] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=68.b5
[  177.536775][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.540519][   T47] usb 5-1: Product: syz
[  177.542760][   T47] usb 5-1: Manufacturer: syz
[  177.544883][   T47] usb 5-1: SerialNumber: syz
[  177.549116][   T47] usb 5-1: config 0 descriptor??
[  177.552977][ T9672] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.558288][   T47] ir_toy 5-1:0.3: required endpoints not found
[  177.766136][ T1278] usb 5-1: USB disconnect, device number 7
[  177.828476][ T9677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1544'.
[  178.264488][ T5235] Bluetooth: hci0: command tx timeout
[  178.353169][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  178.381145][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'.
[  178.845890][ T9703] loop5: detected capacity change from 0 to 512
[  178.856687][ T9703] EXT4-fs (loop5): orphan cleanup on readonly fs
[  178.859438][ T9703] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1556: bad orphan inode 13
[  178.864706][ T9703] ext4_test_bit(bit=12, block=18) = 1
[  178.867006][ T9703] is_bad_inode(inode)=0
[  178.868817][ T9703] NEXT_ORPHAN(inode)=2130706432
[  178.871075][ T9703] max_ino=32
[  178.874687][ T9703] i_nlink=1
[  178.877707][ T9703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  178.888702][ T9703] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  178.916867][ T9703] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  178.941250][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.947833][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  179.105926][   T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  179.109629][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.124436][   T24] usb 5-1: config 0 descriptor??
[  179.127760][   T24] cp210x 5-1:0.0: cp210x converter detected
[  179.145184][ T9720] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1563'.
[  179.343699][   T24] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  179.349035][   T24] cp210x 5-1:0.0: querying part number failed
[  179.355410][   T24] usb 5-1: cp210x converter now attached to ttyUSB0
[  179.381729][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  179.547856][   T24] usb 5-1: USB disconnect, device number 8
[  179.564464][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  179.569722][   T24] cp210x 5-1:0.0: device disconnected
[  180.341784][ T5235] Bluetooth: hci0: command tx timeout
[  180.396453][ T9743] loop4: detected capacity change from 0 to 65536
[  180.413702][ T9743] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  180.416951][ T9743] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  180.431674][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  180.435628][ T9743] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40.
[  180.443609][ T9743] XFS (loop4): Starting recovery (logdev: internal)
[  180.452695][ T9743] XFS (loop4): Ending recovery (logdev: internal)
[  180.456053][ T9743] XFS (loop4): Quotacheck needed: Please wait.
[  180.484457][ T9743] XFS (loop4): Quotacheck: Done.
[  180.487961][ T9743] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  180.687072][ T9758] loop5: detected capacity change from 0 to 32768
[  180.858484][ T9758]  loop5: p1 p3 < >
[  181.168527][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.173717][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.417462][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.441147][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.474067][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  181.776411][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.776551][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'.
[  181.780316][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.788774][ T9774] netlink: 'syz.1.1581': attribute type 15 has an invalid length.
[  181.792309][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1581'.
[  181.796880][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.822469][   T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.836447][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.839582][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.853872][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.862480][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.036171][ T9790] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1587'.
[  182.040089][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1587'.
[  182.501752][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  182.596701][ T9804] netlink: 'syz.4.1593': attribute type 2 has an invalid length.
[  182.771940][ T9820] loop4: detected capacity change from 0 to 512
[  182.775106][ T9820] EXT4-fs (loop4): Test dummy encryption mode enabled
[  182.777377][ T9820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  182.800429][ T9820] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1601: bad orphan inode 131083
[  182.827249][ T9820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.896960][ T9831] loop5: detected capacity change from 0 to 2048
[  182.911099][ T9831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.917406][ T9820] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  182.979211][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.007212][ T5235] Bluetooth: hci2: link tx timeout
[  183.010047][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  183.015345][ T5235] Bluetooth: hci2: link tx timeout
[  183.017616][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.146040][ T9852] netlink: 'syz.4.1614': attribute type 21 has an invalid length.
[  183.149445][ T9852] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1614'.
[  183.156326][ T9852] netlink: 'syz.4.1614': attribute type 5 has an invalid length.
[  183.159408][ T9852] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1614'.
[  183.221822][ T5905] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  183.381764][ T5905] usb 6-1: Using ep0 maxpacket: 16
[  183.387056][ T5905] usb 6-1: config 254 has an invalid interface number: 235 but max is 0
[  183.394496][ T5905] usb 6-1: config 254 has no interface number 0
[  183.397191][ T5905] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7
[  183.406853][ T5905] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024
[  183.412164][ T5905] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  183.416606][ T5905] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  183.420756][ T5905] usb 6-1: config 254 interface 235 has no altsetting 0
[  183.424171][ T1278] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  183.434318][ T5905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  183.438160][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.444259][ T5905] usb 6-1: Product: syz
[  183.446130][ T5905] usb 6-1: Manufacturer: syz
[  183.448401][ T5905] usb 6-1: SerialNumber: syz
[  183.540510][ T9877] netlink: 'syz.1.1624': attribute type 3 has an invalid length.
[  183.544209][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  183.547905][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'.
[  183.571772][ T1278] usb 5-1: Using ep0 maxpacket: 32
[  183.577878][ T1278] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  183.581384][ T1278] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  183.584916][ T1278] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  183.588702][ T1278] usb 5-1: config 1 has no interface number 0
[  183.591909][ T1278] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.596283][ T1278] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  183.602550][ T1278] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  183.608853][ T1278] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  183.613953][ T1278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.625903][ T1278] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  183.661155][ T5905] usbtest 6-1:254.235: couldn't get endpoints, -71
[  183.664826][ T5905] usbtest 6-1:254.235: probe with driver usbtest failed with error -71
[  183.673756][ T5905] usb 6-1: USB disconnect, device number 3
[  183.826741][ T1278] snd_usb_pod 5-1:1.1: cannot start listening: -90
[  183.829126][ T1278] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  183.832959][ T1278] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90
[  184.531696][ T5905] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  184.581742][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  184.686710][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.691800][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.696155][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  184.706342][ T5905] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  184.710391][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.718200][ T5905] usb 6-1: config 0 descriptor??
[  185.061700][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  185.133861][ T5905] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  185.394247][ T5905] usb 6-1: USB disconnect, device number 4
[  185.621741][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  186.146148][ T9937] input: syz0 as /devices/virtual/input/input12
[  186.299439][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1654'.
[  186.303058][ T6036] usb 5-1: USB disconnect, device number 9
[  186.399487][ T9960] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  186.415141][ T9960] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  186.626507][ T9969] loop5: detected capacity change from 0 to 32768
[  186.649734][ T9969] JBD2: Ignoring recovery information on journal
[  186.661708][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  186.677092][ T9969] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  186.687050][ T9969] (syz.5.1663,9969,0):ocfs2_group_add:495 ERROR: The disk is too old and small. Force to do offline resize.
[  186.699362][ T9526] ocfs2: Unmounting device (7,5) on (node local)
[  186.828155][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.830679][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.876092][ T9980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.883463][ T9980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.920076][ T9980] veth1_macvtap: left allmulticast mode
[  186.955256][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.962745][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.966428][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.969959][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.989167][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.993183][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.996157][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.999123][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.029501][ T9992] loop5: detected capacity change from 0 to 1024
[  187.034783][ T9992] EXT4-fs: Ignoring removed orlov option
[  187.036690][ T9992] EXT4-fs: Ignoring removed nomblk_io_submit option
[  187.046030][ T9992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.152197][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  187.157672][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.370244][T10017] loop5: detected capacity change from 0 to 1024
[  187.373525][T10017] EXT4-fs: Ignoring removed nobh option
[  187.377314][T10017] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  187.396804][T10017] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.1682: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  187.407529][T10017] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1682: couldn't read orphan inode 11 (err -117)
[  187.418829][T10017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.434838][T10017] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1682: bg 0: block 10: padding at end of block bitmap is not set
[  187.447031][T10017] Quota error (device loop5): write_blk: dquota write failed
[  187.450175][T10017] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  187.454961][T10017] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1682: Failed to acquire dquot type 0
[  187.478002][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.580264][T10028] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  187.584489][ T6036] IPVS: starting estimator thread 0...
[  187.586275][ T1278] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  187.592065][ T1278] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  187.671685][T10036] IPVS: using max 80 ests per chain, 192000 per kthread
[  187.701952][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  187.735046][T10046] loop4: detected capacity change from 0 to 8192
[  187.900935][T10044] loop5: detected capacity change from 0 to 32768
[  188.741729][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  188.897786][T10050] loop4: detected capacity change from 0 to 262144
[  188.905581][T10050] F2FS-fs (loop4): invalid crc value
[  188.939083][T10050] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.942293][T10050] F2FS-fs (loop4): Start checkpoint disabled!
[  188.945857][T10050] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  189.119154][ T6036] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  189.271826][ T6036] usb 6-1: Using ep0 maxpacket: 8
[  189.277585][ T6036] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e
[  189.285633][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.293162][ T6036] usb 6-1: Product: syz
[  189.296370][ T6036] usb 6-1: Manufacturer: syz
[  189.300147][ T6036] usb 6-1: SerialNumber: syz
[  189.307364][ T6036] usb 6-1: config 0 descriptor??
[  189.556117][ T6036] usb 6-1: USB disconnect, device number 5
[  189.781916][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.747048][T10095] loop5: detected capacity change from 0 to 32768
[  190.755401][T10095] bcachefs: bch2_fs_open() bch_fs_open err opening /dev/loop5: erofs_nochanges
[  190.759625][T10095] bcachefs: bch2_fs_get_tree() error: erofs_nochanges
[  190.831777][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.876479][T10111] netlink: 'syz.1.1721': attribute type 1 has an invalid length.
[  190.879804][T10111] netlink: 'syz.1.1721': attribute type 2 has an invalid length.
[  190.885378][T10111] netlink: 'syz.1.1721': attribute type 1 has an invalid length.
[  190.888726][T10111] netlink: 'syz.1.1721': attribute type 2 has an invalid length.
[  191.140427][T10129] loop4: detected capacity change from 0 to 4096
[  191.146124][T10129] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  191.180298][T10129] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  191.188683][T10129] ntfs3(loop4): ino=1a, mi_enum_attr
[  191.194704][T10129] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  191.201292][T10136] bridge_slave_0: left allmulticast mode
[  191.204904][T10136] bridge_slave_0: left promiscuous mode
[  191.207442][T10136] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.216809][T10136] bridge_slave_1: left allmulticast mode
[  191.230073][T10136] bridge_slave_1: left promiscuous mode
[  191.233501][T10136] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.240365][T10136] bond0: (slave bond_slave_0): Releasing backup interface
[  191.248412][T10136] bond0: (slave bond_slave_1): Releasing backup interface
[  191.254961][T10136] team0: Port device team_slave_0 removed
[  191.258897][T10136] team0: Port device team_slave_1 removed
[  191.264705][T10136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.268558][T10136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.423466][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1738'.
[  191.861783][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  191.978531][T10131] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  191.984490][T10131] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  191.988055][T10131] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  191.999286][T10131] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  192.021131][T10131] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  192.026410][T10131] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  192.033146][T10131] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  192.100053][T10162] netlink: 'syz.5.1743': attribute type 21 has an invalid length.
[  192.170142][T10165] binder: 10163:10165 unknown command 0
[  192.172163][T10165] binder: 10163:10165 ioctl c0306201 2000000003c0 returned -22
[  192.281530][T10178] loop5: detected capacity change from 0 to 8
[  192.672748][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  192.853743][   T10] usb 5-1: config 0 has no interfaces?
[  192.858949][   T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  192.864279][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.867958][   T10] usb 5-1: Product: syz
[  192.873185][   T10] usb 5-1: Manufacturer: syz
[  192.875389][   T10] usb 5-1: SerialNumber: syz
[  192.881227][   T10] usb 5-1: config 0 descriptor??
[  192.901732][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  193.182974][ T5905] usb 5-1: USB disconnect, device number 10
[  193.223449][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  193.322848][T10200] block nbd0: server does not support multiple connections per device.
[  193.328607][T10200] block nbd0: shutting down sockets
[  193.364763][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1763'.
[  193.687679][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'.
[  193.707222][T10229] netlink: 'syz.5.1772': attribute type 2 has an invalid length.
[  193.727022][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'.
[  193.731386][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'.
[  193.794739][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'.
[  193.798756][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'.
[  193.941736][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  194.027953][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  194.030598][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  194.371760][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  194.397977][T10264] loop4: detected capacity change from 0 to 1024
[  194.432633][  T138] hfsplus: b-tree write err: -5, ino 4
[  194.521711][   T10] usb 6-1: Using ep0 maxpacket: 16
[  194.525245][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.530908][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.544028][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  194.550952][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  194.558137][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  194.565137][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'.
[  194.570539][   T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  194.578432][   T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  194.581440][T10270] bridge0: entered promiscuous mode
[  194.584380][   T10] usb 6-1: Manufacturer: syz
[  194.586422][T10270] macvlan2: entered allmulticast mode
[  194.588985][T10270] bridge0: entered allmulticast mode
[  194.592993][T10270] bridge0: port 3(macvlan2) entered blocking state
[  194.595268][T10270] bridge0: port 3(macvlan2) entered disabled state
[  194.600251][T10270] bridge0: left allmulticast mode
[  194.605793][T10270] bridge0: left promiscuous mode
[  194.609551][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.612896][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.617820][   T10] usb 6-1: config 0 descriptor??
[  194.861766][   T10] rc_core: IR keymap rc-hauppauge not found
[  194.864517][   T10] Registered IR keymap rc-empty
[  194.866324][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  194.882061][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  194.902123][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  194.920349][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13
[  194.930800][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  194.952768][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  194.981769][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  194.986849][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  195.002186][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  195.400809][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  195.422371][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  195.441764][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  195.463528][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  195.483292][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  195.502628][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  195.524737][   T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  195.528667][   T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  195.536376][   T10] usb 6-1: USB disconnect, device number 6
[  195.575998][T10288] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1798'.
[  195.580664][T10288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.728496][T10295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.958118][T10308] loop5: detected capacity change from 0 to 512
[  195.964983][T10308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  195.974250][T10308] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  195.976909][T10308] System zones: 0-2, 18-18, 34-34
[  195.985719][T10308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.991206][T10308] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.030041][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.031739][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  196.101761][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  196.104452][ T5235] Bluetooth: hci1: command 0x0405 tx timeout
[  196.519393][T10319] netlink: 'syz.1.1812': attribute type 1 has an invalid length.
[  196.560929][T10323] netlink: 'syz.1.1814': attribute type 21 has an invalid length.
[  196.578473][T10323] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1814'.
[  196.867180][T10347] netlink: 'syz.5.1826': attribute type 3 has an invalid length.
[  197.054546][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030131800: rx timeout, send abort
[  197.061709][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  197.558027][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030131800: abort rx timeout. Force session deactivation
[  197.861962][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'.
[  198.101778][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  198.160744][T10374] loop5: detected capacity change from 0 to 32768
[  198.169135][T10374] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.183960][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  198.186701][T10374] XFS (loop5): Ending clean mount
[  198.186723][ T5235] Bluetooth: hci1: command 0x0405 tx timeout
[  198.191267][T10374] XFS (loop5): Quotacheck needed: Please wait.
[  198.223187][T10374] XFS (loop5): Quotacheck: Done.
[  198.255024][ T9526] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.676896][T10412] loop5: detected capacity change from 0 to 1024
[  198.725114][   T40] hfsplus: b-tree write err: -5, ino 3
[  198.728332][ T9526] hfsplus: node 4:3 still has 1 user(s)!
[  198.748439][T10414] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  199.050265][T10430] loop4: detected capacity change from 0 to 4096
[  199.058598][T10430] ntfs3(loop4): Primary boot: invalid bytes per sector 1792.
[  199.066409][T10430] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[  199.152702][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  199.418174][T10458] loop4: detected capacity change from 0 to 2048
[  199.435249][T10458] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.481515][T10462] PKCS7: Unknown OID: [4] 5.25.373.87(bad)
[  199.484751][T10462] PKCS7: Only support pkcs7_signedData type
[  199.779066][T10472] loop5: detected capacity change from 0 to 32768
[  199.783551][T10472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1875 (10472)
[  199.830890][T10472] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  199.834674][T10472] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  199.837520][T10472] BTRFS info (device loop5): using free-space-tree
[  200.139920][   T13] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  200.181703][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  200.224448][ T9526] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.287602][T10518] sctp: [Deprecated]: syz.1.1890 (pid 10518) Use of struct sctp_assoc_value in delayed_ack socket option.
[  200.287602][T10518] Use struct sctp_sack_info instead
[  200.501780][T10532] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007
[  201.088302][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1901'.
[  201.221676][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  201.311803][ T6036] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  201.471951][ T6036] usb 5-1: Using ep0 maxpacket: 16
[  201.477619][ T6036] usb 5-1: unable to get BOS descriptor or descriptor too short
[  201.481906][   T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  201.485198][ T6036] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  201.489223][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.495204][ T6036] usb 5-1: Product: syz
[  201.497042][ T6036] usb 5-1: Manufacturer: syz
[  201.499185][ T6036] usb 5-1: SerialNumber: syz
[  201.646922][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.657700][   T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  201.706604][   T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  201.710367][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.717665][ T6036] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  201.724178][   T10] usb 6-1: config 0 descriptor??
[  201.746081][ T6036] usb 5-1: USB disconnect, device number 11
[  201.935925][   T24] usb 6-1: USB disconnect, device number 7
[  202.258599][T10571] loop4: detected capacity change from 0 to 1024
[  202.261712][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  202.265778][T10571] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data
[  202.534411][T10575] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  202.538372][T10575] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  202.542448][T10575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  202.614357][T10576] fuse: Bad value for 'fd'
[  203.217696][T10588] loop4: detected capacity change from 0 to 512
[  203.221079][T10588] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.227082][T10588] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.231322][T10588] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  203.242145][T10588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  203.242530][T10586] loop5: detected capacity change from 0 to 32768
[  203.249538][T10588] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1919: corrupted in-inode xattr: e_value size too large
[  203.258610][T10588] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1919: couldn't read orphan inode 15 (err -117)
[  203.266867][T10586] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  203.266971][T10588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.301662][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  203.319047][T10588] EXT4-fs (loop4): shut down requested (1)
[  203.431837][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.797081][ T9526] ocfs2: Unmounting device (7,5) on (node local)
[  203.889369][   T33] audit: type=1326 audit(1755600397.778:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1925" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  203.907707][   T33] audit: type=1326 audit(1755600397.778:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1925" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  203.924985][   T33] audit: type=1326 audit(1755600397.798:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1925" exe="/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  203.936726][   T33] audit: type=1326 audit(1755600397.798:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.5.1925" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  204.045003][T10628] netlink: 'syz.5.1937': attribute type 1 has an invalid length.
[  204.048530][T10628] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1937'.
[  204.061726][T10628] netlink: 'syz.5.1937': attribute type 2 has an invalid length.
[  204.065059][T10628] netlink: 'syz.5.1937': attribute type 1 has an invalid length.
[  204.163563][T10638] loop5: detected capacity change from 0 to 1764
[  204.177639][T10638] iso9660: Corrupted directory entry in block 14 of inode 1920
[  204.341711][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  204.708442][T10656] netlink: 201916 bytes leftover after parsing attributes in process `syz.5.1948'.
[  205.275314][T10685] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1962'.
[  205.381685][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  205.436670][T10698] loop5: detected capacity change from 0 to 512
[  205.439699][T10698] EXT4-fs: Ignoring removed nobh option
[  205.455821][T10698] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1968: iget: bad i_size value: 38620345925642
[  205.463302][T10698] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1968: couldn't read orphan inode 15 (err -117)
[  205.472243][T10698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.488544][T10698] EXT4-fs (loop5): shut down requested (1)
[  205.525902][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.669866][T10713] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  205.680303][T10713] CIFS mount error: No usable UNC path provided in device string!
[  205.680303][T10713] 
[  205.686297][T10713] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  206.100178][T10722] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  206.105080][T10722] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  206.153308][T10724] loop5: detected capacity change from 0 to 512
[  206.167607][T10724] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  206.171201][T10724] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  206.181492][T10724] EXT4-fs (loop5): 1 truncate cleaned up
[  206.185521][T10724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.198893][T10724] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  206.213242][T10724] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  206.239409][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.421717][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  206.590937][T10731] loop5: detected capacity change from 0 to 32768
[  206.606537][T10731] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  206.629605][T10731] XFS (loop5): Ending clean mount
[  206.672348][ T9526] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  206.820663][T10739] loop4: detected capacity change from 0 to 32768
[  206.827222][T10739] btrfs: Deprecated parameter 'usebackuproot'
[  206.829902][T10739] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  206.836981][T10739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1985 (10739)
[  206.847408][T10739] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.851890][T10739] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  206.855569][T10739] BTRFS info (device loop4): using free-space-tree
[  206.941333][ T1091] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  206.948621][T10739] BTRFS error (device loop4): failed to load root extent
[  206.952017][T10739] BTRFS warning (device loop4): try to load backup roots slot 1
[  206.955371][   T36] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  206.960638][T10739] BTRFS warning (device loop4): couldn't read tree root
[  206.963873][T10739] BTRFS warning (device loop4): try to load backup roots slot 2
[  206.967383][   T36] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  206.973713][T10739] BTRFS warning (device loop4): couldn't read tree root
[  206.976814][T10739] BTRFS warning (device loop4): try to load backup roots slot 3
[  206.997648][T10739] BTRFS info (device loop4): rebuilding free space tree
[  207.019588][T10739] BTRFS info (device loop4): checking UUID tree
[  207.124033][ T8680] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.286359][T10789] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  207.286458][T10790] loop5: detected capacity change from 0 to 256
[  207.311676][T10790] FAT-fs (loop5): Directory bread(block 64) failed
[  207.313869][T10790] FAT-fs (loop5): Directory bread(block 65) failed
[  207.321303][T10790] FAT-fs (loop5): Directory bread(block 66) failed
[  207.326459][T10790] FAT-fs (loop5): Directory bread(block 67) failed
[  207.328638][T10790] FAT-fs (loop5): Directory bread(block 68) failed
[  207.330751][T10790] FAT-fs (loop5): Directory bread(block 69) failed
[  207.335610][T10790] FAT-fs (loop5): Directory bread(block 70) failed
[  207.339212][T10790] FAT-fs (loop5): Directory bread(block 71) failed
[  207.351921][T10790] FAT-fs (loop5): Directory bread(block 72) failed
[  207.354907][T10790] FAT-fs (loop5): Directory bread(block 73) failed
[  207.471997][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  208.459924][T10806] loop5: detected capacity change from 0 to 32768
[  208.511665][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  208.600478][T10825] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  208.782560][   T33] audit: type=1326 audit(1755600402.668:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  208.789921][   T33] audit: type=1326 audit(1755600402.668:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  208.805354][   T33] audit: type=1326 audit(1755600402.668:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2013" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  208.819987][   T33] audit: type=1326 audit(1755600402.668:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  208.828563][   T33] audit: type=1326 audit(1755600402.668:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  208.835810][   T33] audit: type=1326 audit(1755600402.688:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2013" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  208.866376][T10845] loop4: detected capacity change from 0 to 256
[  208.878223][T10845] FAT-fs (loop4): Directory bread(block 64) failed
[  208.880854][T10845] FAT-fs (loop4): Directory bread(block 65) failed
[  208.887029][T10845] FAT-fs (loop4): Directory bread(block 66) failed
[  208.890499][T10845] FAT-fs (loop4): Directory bread(block 67) failed
[  208.893337][T10845] FAT-fs (loop4): Directory bread(block 68) failed
[  208.899686][T10845] FAT-fs (loop4): Directory bread(block 69) failed
[  208.909361][T10845] FAT-fs (loop4): Directory bread(block 70) failed
[  208.911492][T10845] FAT-fs (loop4): Directory bread(block 71) failed
[  208.918803][T10845] FAT-fs (loop4): Directory bread(block 72) failed
[  208.921153][T10845] FAT-fs (loop4): Directory bread(block 73) failed
[  208.935896][   T33] kauditd_printk_skb: 14 callbacks suppressed
[  208.935904][   T33] audit: type=1800 audit(1755600402.828:114): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2018" name="file2" dev="loop4" ino=1048634 res=0 errno=0
[  209.012049][T10857] pimreg3: entered allmulticast mode
[  209.280111][T10865] loop4: detected capacity change from 0 to 32768
[  209.283879][T10865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2026 (10865)
[  209.292453][T10865] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  209.296481][T10865] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  209.299947][T10865] BTRFS info (device loop4): using free-space-tree
[  209.352199][ T8680] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  209.552088][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  209.996752][T10915] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000'
[  210.090169][T10922] netlink: 'syz.1.2045': attribute type 1 has an invalid length.
[  210.131980][T10926] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2047'.
[  210.433523][ T6036] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  210.462612][   T33] audit: type=1326 audit(1755600404.338:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.1.2053" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96a978ebe9 code=0x0
[  210.591654][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  210.611927][ T6036] usb 6-1: Using ep0 maxpacket: 8
[  210.622680][ T6036] usb 6-1: config 162 has an invalid interface number: 97 but max is 0
[  210.626310][ T6036] usb 6-1: config 162 has no interface number 0
[  210.628590][ T6036] usb 6-1: config 162 interface 97 has no altsetting 0
[  210.634360][ T6036] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  210.640060][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.643802][ T6036] usb 6-1: Product: syz
[  210.645655][ T6036] usb 6-1: Manufacturer: syz
[  210.647686][ T6036] usb 6-1: SerialNumber: syz
[  210.863618][ T6036] metro_usb 6-1:162.97: required endpoints missing
[  210.869488][ T6036] usb 6-1: USB disconnect, device number 8
[  211.621787][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  211.802804][T10956] loop5: detected capacity change from 0 to 256
[  211.815849][T10956] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9aa2f194, utbl_chksum : 0xe619d30d)
[  211.907872][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2062'.
[  212.040840][T10971] loop5: detected capacity change from 0 to 4096
[  212.127888][T10983] bridge0: port 1(syz_tun) entered blocking state
[  212.130926][T10983] bridge0: port 1(syz_tun) entered disabled state
[  212.135536][T10983] syz_tun: entered allmulticast mode
[  212.138320][T10983] syz_tun: entered promiscuous mode
[  212.206102][T10991] kAFS: No cell specified
[  212.671665][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  213.690304][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'.
[  213.701778][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  213.770116][T11034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2096'.
[  213.950494][T11042] autofs: Unknown parameter 'no9 PG!8E	'
[  214.426360][T11068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2113'.
[  214.429870][T11068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2113'.
[  214.477487][T11072] tipc: Started in network mode
[  214.479686][T11072] tipc: Node identity , cluster identity 4711
[  214.485724][T11072] tipc: Failed to set node id, please configure manually
[  214.488843][T11072] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  214.530807][T11078] loop4: detected capacity change from 0 to 8
[  214.539168][T11078] SQUASHFS error: lzo decompression failed, data probably corrupt
[  214.545362][T11078] SQUASHFS error: Failed to read block 0x91: -5
[  214.548032][T11078] SQUASHFS error: Unable to read metadata cache entry [8f]
[  214.550990][T11078] SQUASHFS error: Unable to read inode 0x11f
[  214.741664][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  215.112654][ T1278] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  215.261714][ T1278] usb 5-1: Using ep0 maxpacket: 32
[  215.266004][ T1278] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  215.269458][ T1278] usb 5-1: config 0 has no interface number 0
[  215.274631][ T1278] usb 5-1: config 0 interface 12 has no altsetting 0
[  215.279772][ T1278] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  215.284211][ T1278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.287706][ T1278] usb 5-1: Product: syz
[  215.291161][ T1278] usb 5-1: Manufacturer: syz
[  215.293691][ T1278] usb 5-1: SerialNumber: syz
[  215.298293][ T1278] usb 5-1: config 0 descriptor??
[  215.303423][ T1278] f81534 5-1:0.12: required endpoints missing
[  215.500627][   T33] audit: type=1326 audit(1755600409.388:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11110 comm="syz.1.2132" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96a978ebe9 code=0x0
[  215.513884][   T47] usb 5-1: USB disconnect, device number 12
[  215.781871][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  216.454571][T11141] input: syz0 as /devices/virtual/input/input16
[  216.821691][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  216.837082][T11151] loop5: detected capacity change from 0 to 32768
[  216.843476][T11151] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2151 (11151)
[  216.853973][T11151] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  216.858405][T11151] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  216.862585][T11151] BTRFS info (device loop5): disk space caching is enabled
[  216.865845][T11151] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  216.906061][T11151] BTRFS info (device loop5): rebuilding free space tree
[  216.926747][T11151] BTRFS info (device loop5): disabling free space tree
[  216.930054][T11151] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  216.937668][T11151] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  216.990598][T11185] mkiss: ax0: crc mode is auto.
[  216.996627][ T9526] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  216.999031][   T13] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  217.688456][T11198] loop5: detected capacity change from 0 to 40427
[  217.695553][T11198] F2FS-fs: heap/no_heap options were deprecated
[  217.728509][T11198] F2FS-fs (loop5): Invalid segment count (1)
[  217.730806][T11198] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  217.736037][T11198] F2FS-fs (loop5): invalid crc value
[  217.742439][T11213] netlink: 'syz.4.2173': attribute type 1 has an invalid length.
[  217.745431][T11213] netlink: 'syz.4.2173': attribute type 1 has an invalid length.
[  217.752120][T11213] netlink: 'syz.4.2173': attribute type 1 has an invalid length.
[  217.755743][T11213] block nbd0: shutting down sockets
[  217.861673][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  218.124072][T11198] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  218.128421][T11198] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30
[  218.131179][T11198] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  218.382005][ T6036] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  218.651845][ T6036] usb 5-1: Using ep0 maxpacket: 8
[  218.661134][ T6036] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  218.673462][ T6036] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  218.677241][ T6036] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  218.680392][ T6036] usb 5-1: Product: syz
[  218.683302][ T6036] usb 5-1: Manufacturer: syz
[  218.685368][ T6036] usb 5-1: SerialNumber: syz
[  218.894039][ T6036] usb 5-1: palm_os_3_probe - error -71 getting connection information
[  218.899694][ T6036] visor 5-1:1.0: probe with driver visor failed with error -71
[  218.903066][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  218.915367][ T6036] usb 5-1: USB disconnect, device number 13
[  219.806679][T11260] netlink: 'syz.4.2194': attribute type 2 has an invalid length.
[  219.951670][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  219.990339][T11268] netlink: 'syz.4.2198': attribute type 5 has an invalid length.
[  220.250379][T11281] netlink: 'syz.4.2204': attribute type 25 has an invalid length.
[  220.308820][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2208'.
[  220.417333][T11296] loop5: detected capacity change from 0 to 8
[  220.547735][T11300] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2213'.
[  220.861019][T11314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2221'.
[  220.864410][T11314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2221'.
[  220.935670][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'.
[  220.991681][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  221.088951][T11318] loop5: detected capacity change from 0 to 40427
[  221.093515][T11318] F2FS-fs (loop5): build fault injection rate: 16
[  221.096639][T11318] F2FS-fs (loop5): build fault injection type: 0x77
[  221.103252][T11318] F2FS-fs (loop5): invalid crc value
[  221.111089][T11318] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  221.115998][T11318] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12)
[  222.019927][T11338] loop4: detected capacity change from 0 to 131072
[  222.031699][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  222.115264][T11338] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  222.118063][T11338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  222.123172][T11338] F2FS-fs (loop4): invalid crc value
[  222.187112][T11338] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  222.206345][T11338] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  222.209421][T11338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  222.406940][T11353] 8021q: adding VLAN 0 to HW filter on device bond1
[  222.438663][T11353] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  222.464433][T11353] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  222.480424][T11353] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  222.513941][ T5864] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  222.527580][T11353] syz_tun: left allmulticast mode
[  222.533250][T11353] syz_tun: left promiscuous mode
[  222.545157][T11353] bridge0: port 1(syz_tun) entered disabled state
[  222.555494][T11353] bond1: (slave ip6gretap1): Removing an active aggregator
[  222.570863][T11353] bond1: (slave ip6gretap1): Releasing backup interface
[  222.580546][T11353] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 5e:61:e3:7c:84:3b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  222.616687][T11353] bond1: (slave macvlan2): Releasing backup interface
[  222.790039][T11371] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  222.805589][T11371] cramfs: wrong magic
[  222.999154][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'.
[  223.046084][T11398] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2256'.
[  223.061680][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  223.140038][T11403] fuse: root generation should be zero
[  223.156510][T11409] loop5: detected capacity change from 0 to 164
[  223.215690][T11413] netlink: 'syz.5.2264': attribute type 10 has an invalid length.
[  223.225503][T11413] team0: Port device dummy0 added
[  223.343632][T11419] kAFS: No cell specified
[  224.101686][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  224.208680][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2276'.
[  224.570110][T11450] loop5: detected capacity change from 0 to 32768
[  224.741054][T11470] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  224.931078][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2293'.
[  224.935147][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2293'.
[  224.948484][   T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.960448][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.968402][T11466] loop4: detected capacity change from 0 to 32768
[  224.972368][ T5864] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.976433][ T5864] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.987870][T11466] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  225.015129][T11466] XFS (loop4): Ending clean mount
[  225.024677][T11466] XFS (loop4): Quotacheck needed: Please wait.
[  225.073821][T11466] XFS (loop4): Quotacheck: Done.
[  225.112969][ T8680] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  225.141793][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  225.187635][T11494] loop5: detected capacity change from 0 to 512
[  225.194554][T11494] EXT4-fs (loop5): Test dummy encryption mode enabled
[  225.206817][T11494] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  225.239474][T11494] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2298: bad orphan inode 131083
[  225.254537][T11494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.336137][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.340086][ T5235] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff
[  225.408805][T11505] loop5: detected capacity change from 0 to 256
[  225.422783][T11501] loop4: detected capacity change from 0 to 4096
[  225.466521][T11512] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.567784][T11511] loop5: detected capacity change from 0 to 4096
[  225.776469][T11531] syzkaller0: entered promiscuous mode
[  225.779011][T11531] syzkaller0: entered allmulticast mode
[  226.185703][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  227.221710][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  228.261681][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  228.776761][T11585] syz_tun: entered allmulticast mode
[  228.779998][T11581] loop4: detected capacity change from 0 to 32768
[  228.784812][T11584] syz_tun: left allmulticast mode
[  229.161144][T11604] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.180651][T11604] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  229.193696][T11604] bond_slave_0: entered promiscuous mode
[  229.196250][T11604] bond_slave_1: entered promiscuous mode
[  229.198596][T11604] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  229.202908][T11604] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  229.215592][T11604] bridge_slave_0: left allmulticast mode
[  229.217529][T11604] bridge_slave_0: left promiscuous mode
[  229.219488][T11604] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.223950][T11604] bridge_slave_1: left allmulticast mode
[  229.225934][T11604] bridge_slave_1: left promiscuous mode
[  229.227952][T11604] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.233525][T11604] bond0: (slave bond_slave_0): Releasing backup interface
[  229.236274][T11604] bond_slave_0: left promiscuous mode
[  229.240038][T11604] bond0: (slave bond_slave_1): Releasing backup interface
[  229.246119][T11604] bond_slave_1: left promiscuous mode
[  229.256070][T11604] team0: Port device team_slave_0 removed
[  229.262483][T11604] team0: Port device team_slave_1 removed
[  229.262805][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  229.264737][T11604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.271271][T11604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.276187][T11604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.278574][T11604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.287190][T11604] bond1: (slave ip6gretap1): Releasing backup interface
[  229.290013][T11604] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 3a:7f:28:6e:b8:3a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  229.300220][T11604] bond1: (slave macvlan2): Removing an active aggregator
[  229.302857][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  229.306242][T11604] bond1: (slave macvlan2): Releasing backup interface
[  229.855378][T11638] loop4: detected capacity change from 0 to 1024
[  229.878944][T11638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.903069][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.158212][T11653] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2367'.
[  230.161880][ T6036] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  230.181867][   T47] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  230.199688][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'.
[  230.341922][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  230.399017][ T6036] usb 6-1: Using ep0 maxpacket: 16
[  230.404258][   T47] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  230.413524][   T47] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  230.417445][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.420787][   T47] usb 5-1: Product: syz
[  230.424723][   T47] usb 5-1: Manufacturer: syz
[  230.426937][   T47] usb 5-1: SerialNumber: syz
[  230.428778][ T6036] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  230.432441][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.436268][ T6036] usb 6-1: Product: syz
[  230.438088][ T6036] usb 6-1: Manufacturer: syz
[  230.440053][ T6036] usb 6-1: SerialNumber: syz
[  230.445793][   T47] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  230.450700][ T6036] usb 6-1: config 0 descriptor??
[  230.963193][ T6036] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  230.971490][ T6036] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  230.978310][ T6036] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  230.982099][ T6036] usb 6-1: media controller created
[  231.002279][ T6036] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  231.176781][ T6036] zl10353_read_register: readreg error (reg=127, ret==0)
[  231.180012][ T6036] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  231.184529][ T6036] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  231.194240][ T6036] usb 6-1: USB disconnect, device number 9
[  231.219606][   T47] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  231.265346][ T6036] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  231.391698][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  231.722019][T11673] loop5: detected capacity change from 0 to 4096
[  231.727898][T11673] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  232.178289][T11697] veth0: entered promiscuous mode
[  232.422069][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  232.619380][T11705] netlink: 'syz.1.2390': attribute type 21 has an invalid length.
[  232.625226][T11705] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2390'.
[  232.629268][T11705] netlink: 'syz.1.2390': attribute type 4 has an invalid length.
[  232.637128][T11705] netlink: 'syz.1.2390': attribute type 3 has an invalid length.
[  232.641197][T11705] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2390'.
[  232.845061][T11690] veth0: left promiscuous mode
[  232.967216][   T10] usb 5-1: USB disconnect, device number 14
[  232.978194][T11721] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2396'.
[  232.993330][T11721] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2396'.
[  233.116396][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2403'.
[  233.461718][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  233.952325][   T47] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  233.987487][T11796] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  233.990122][T11796] team0: Device macvtap1 is already an upper device of the team interface
[  234.049732][T11800] netlink: 'syz.1.2432': attribute type 10 has an invalid length.
[  234.052601][T11800] vlan0: entered allmulticast mode
[  234.114433][   T47] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  234.117109][   T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  234.122109][   T47] usb 5-1: config 0 has no interface number 0
[  234.124739][   T47] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  234.134706][   T47] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  234.153359][   T47] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  234.157289][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.160541][   T47] usb 5-1: Product: syz
[  234.163968][   T47] usb 5-1: Manufacturer: syz
[  234.165503][   T47] usb 5-1: SerialNumber: syz
[  234.168325][   T47] usb 5-1: config 0 descriptor??
[  234.243383][T11819] netlink: 'syz.1.2441': attribute type 5 has an invalid length.
[  234.378194][   T47] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71
[  234.381721][ T6036] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  234.386170][   T47] usb 5-1: USB disconnect, device number 15
[  234.428881][T11832] netlink: 'syz.1.2447': attribute type 10 has an invalid length.
[  234.432627][T11832] netlink: 1948 bytes leftover after parsing attributes in process `syz.1.2447'.
[  234.436194][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'.
[  234.501767][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  234.533624][ T6036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 245, setting to 64
[  234.538056][ T6036] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  234.541043][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.546199][ T6036] usb 6-1: config 0 descriptor??
[  234.753039][ T6036] ath6kl: Failed to submit usb control message: -71
[  234.755112][ T6036] ath6kl: unable to send the bmi data to the device: -71
[  234.757540][ T6036] ath6kl: Unable to send get target info: -71
[  234.760244][ T6036] ath6kl: Failed to init ath6kl core: -71
[  234.763102][ T6036] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[  234.768524][ T6036] usb 6-1: USB disconnect, device number 10
[  234.937494][T11835] loop4: detected capacity change from 0 to 4096
[  234.964756][T11836] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.246999][T11838] loop4: detected capacity change from 0 to 32768
[  235.252817][T11838] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2449 (11838)
[  235.273864][T11838] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  235.278244][T11838] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  235.289341][T11838] BTRFS info (device loop4): using free-space-tree
[  235.486444][ T8680] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  235.541678][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  236.581694][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  236.860391][T11895] batadv_slave_0: entered promiscuous mode
[  237.631780][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  238.265512][T11925] loop4: detected capacity change from 0 to 4096
[  238.273689][T11925] NILFS (loop4): invalid segment: Checksum error in segment payload
[  238.276558][T11925] NILFS (loop4): trying rollback from an earlier position
[  238.287030][T11925] NILFS (loop4): recovery complete
[  238.289360][T11928] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.341542][T11931] loop5: detected capacity change from 0 to 16
[  238.671665][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  239.169368][T11957] atomic_op ffff888020ddd198 conn xmit_atomic 0000000000000000
[  239.375776][T11962] could not allocate digest TFM handle sm3
[  239.496463][T11982] loop4: detected capacity change from 0 to 128
[  239.509488][T11982] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  239.522785][T11982] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.551267][ T8680] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  239.582015][T11992] syzkaller1: entered promiscuous mode
[  239.583899][T11992] syzkaller1: entered allmulticast mode
[  239.701679][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  239.816502][T12011] loop4: detected capacity change from 0 to 512
[  239.819534][T12011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  239.827053][T12011] EXT4-fs (loop4): 1 truncate cleaned up
[  239.835568][T12011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.851023][   T33] audit: type=1800 audit(1755600433.738:117): pid=12011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2499" name="file1" dev="loop4" ino=15 res=0 errno=0
[  240.741706][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  241.256448][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.601447][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2507'.
[  241.627846][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2507'.
[  241.781790][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  241.838617][T12066] ref_ctr increment failed for inode: 0x165b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880366db5c0
[  242.153998][T12073] autofs4:pid:12073:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  242.481962][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'.
[  242.770238][   T33] audit: type=1326 audit(1755600436.658:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  242.780137][   T33] audit: type=1326 audit(1755600436.658:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  242.791421][   T33] audit: type=1326 audit(1755600436.678:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  242.813749][   T33] audit: type=1326 audit(1755600436.678:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  242.821535][   T33] audit: type=1326 audit(1755600436.678:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  242.822623][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  242.832398][   T33] audit: type=1326 audit(1755600436.688:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  242.841148][   T33] audit: type=1326 audit(1755600436.688:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  242.848250][   T33] audit: type=1326 audit(1755600436.688:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  242.855520][   T33] audit: type=1326 audit(1755600436.688:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c5f8ebe9 code=0x7ffc0000
[  243.256391][T12107] syzkaller1: entered promiscuous mode
[  243.258845][T12107] syzkaller1: entered allmulticast mode
[  243.711700][ T5843] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  243.861799][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  243.879074][ T5843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.886182][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.901133][ T5843] usb 6-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30
[  243.906336][ T5843] usb 6-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217
[  243.921705][ T5843] usb 6-1: config 1 interface 1 has no altsetting 0
[  243.936562][ T5843] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  243.940358][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.952835][ T5843] usb 6-1: Product: syz
[  243.954676][ T5843] usb 6-1: Manufacturer: syz
[  243.963222][ T5843] usb 6-1: SerialNumber: syz
[  244.008857][ T5843] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  244.208775][ T5843] usb 6-1: USB disconnect, device number 11
[  244.445855][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2536'.
[  244.519344][T12141] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  244.773803][T12165] loop4: detected capacity change from 0 to 128
[  244.776829][T12165] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  244.905299][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  245.051991][T12174] loop4: detected capacity change from 0 to 32768
[  245.157568][T12174] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  245.157588][T12174]   allowing incompatible features above 0.0: (unknown version)
[  245.157595][T12174]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  245.175561][T12174] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  245.178738][T12174] bcachefs (loop4): initializing new filesystem
[  245.188637][T12174] bcachefs (loop4): going read-write
[  245.200513][T12174] bcachefs (loop4): marking superblocks
[  245.207489][T12174] bcachefs (loop4): initializing freespace
[  245.212235][T12174] bcachefs (loop4): done initializing freespace
[  245.216616][T12174] bcachefs (loop4): reading snapshots table
[  245.219905][T12174] bcachefs (loop4): reading snapshots done
[  245.263854][T12174] bcachefs (loop4): done starting filesystem
[  245.328939][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  245.328954][   T33] audit: type=1800 audit(1755600439.218:129): pid=12174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2553" name="file1" dev="loop4" ino=4098 res=0 errno=0
[  245.574200][T12220] bcachefs (loop4): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  245.574200][T12220]   set version_upgrade=incompat to enable
[  245.723265][T12225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2571'.
[  245.904218][T12213] loop5: detected capacity change from 0 to 32768
[  245.935384][T12213] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  245.941672][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  246.009935][T12213] XFS (loop5): Ending clean mount
[  246.023469][T12213] XFS (loop5): Quotacheck needed: Please wait.
[  246.064546][T12213] XFS (loop5): Quotacheck: Done.
[  246.138903][ T9526] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.520179][T12245] loop5: detected capacity change from 0 to 736
[  246.735592][T12250] loop5: detected capacity change from 0 to 256
[  246.746788][T12250] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9aa2f194, utbl_chksum : 0xe619d30d)
[  246.981685][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  247.847554][T12284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2594'.
[  247.863314][T12174] syz.4.2553 (12174) used greatest stack depth: 15304 bytes left
[  247.866730][   T33] audit: type=1800 audit(1755600441.748:130): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2553" name="file1" dev="loop4" ino=4098 res=0 errno=0
[  247.906533][T12288] loop5: detected capacity change from 0 to 16
[  247.913670][T12288] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  248.021686][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  248.107585][ T8680] bcachefs (loop4): shutting down
[  248.109917][ T8680] bcachefs (loop4): going read-only
[  248.116510][ T8680] bcachefs (loop4): finished waiting for writes to stop
[  248.146594][ T8680] bcachefs (loop4): flushing journal and stopping allocators, journal seq 1377
[  248.223701][ T8680] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 1384
[  248.263222][ T8680] bcachefs (loop4): clean shutdown complete, journal seq 1385
[  248.290449][ T8680] bcachefs (loop4): marking filesystem clean
[  248.423899][ T8680] bcachefs (loop4): shutdown complete
[  249.061737][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  249.562234][ T1278] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  249.711748][ T1278] usb 6-1: Using ep0 maxpacket: 32
[  249.739299][ T1278] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.744304][ T1278] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.749948][ T1278] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  249.755883][ T1278] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  249.759246][ T1278] usb 6-1: Product: syz
[  249.760941][ T1278] usb 6-1: Manufacturer: syz
[  249.769750][ T1278] hub 6-1:4.0: USB hub found
[  249.974430][ T1278] hub 6-1:4.0: 2 ports detected
[  250.101696][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  250.456203][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2622'.
[  251.141640][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  251.202462][ T1278] hub 6-1:4.0: activate --> -90
[  251.408585][ T1278] hub 6-1:4.0: hub_ext_port_status failed (err = -71)
[  251.411464][ T6036] usb 6-1: USB disconnect, device number 12
[  251.552002][   T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  251.705723][   T24] usb 5-1: Using ep0 maxpacket: 32
[  251.709741][   T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  251.713636][   T24] usb 5-1: config 0 has no interface number 0
[  251.716380][   T24] usb 5-1: config 0 interface 12 has no altsetting 0
[  251.724717][   T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  251.728494][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.732226][   T24] usb 5-1: Product: syz
[  251.733981][   T24] usb 5-1: Manufacturer: syz
[  251.735936][   T24] usb 5-1: SerialNumber: syz
[  251.739970][   T24] usb 5-1: config 0 descriptor??
[  252.181834][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  252.980961][   T24] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  252.984922][   T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  252.987384][   T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  252.990167][   T24] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  252.995354][   T24] usb 5-1: USB disconnect, device number 16
[  253.162426][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2657'.
[  253.195715][T12425] netlink: 'syz.5.2659': attribute type 5 has an invalid length.
[  253.221660][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  253.247219][T12431] netlink: 'syz.1.2661': attribute type 2 has an invalid length.
[  253.302400][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  253.834902][T12443] loop4: detected capacity change from 0 to 32768
[  253.845199][T12443] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2666 (12443)
[  253.868669][T12443] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  253.873319][T12443] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  253.876377][T12443] BTRFS info (device loop4): using free-space-tree
[  253.986728][T12443] BTRFS info (device loop4): rebuilding free space tree
[  254.050357][ T8680] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  254.261673][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  254.551718][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  254.701828][   T10] usb 5-1: Using ep0 maxpacket: 16
[  254.707724][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.711379][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.717294][   T10] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  254.721278][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.728231][   T10] usb 5-1: config 0 descriptor??
[  254.993322][T12485] netlink: 'syz.4.2671': attribute type 1 has an invalid length.
[  255.311645][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  255.471402][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.474912][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.680922][T12491] netlink: 'syz.1.2678': attribute type 1 has an invalid length.
[  255.810766][T12491] 8021q: adding VLAN 0 to HW filter on device bond1
[  256.118248][T12493] bond1 (unregistering): Released all slaves
[  256.341724][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  256.475407][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  256.477949][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  256.482558][   T10] usb 5-1: USB disconnect, device number 17
[  256.984419][T12511] loop5: detected capacity change from 0 to 512
[  257.002383][T12511] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  257.381688][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  257.483760][T12535] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2698'.
[  257.919792][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.919792][   T40] loop5: rw=1, sector=528, nr_sectors = 32 limit=512
[  257.930179][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.930179][   T40] loop5: rw=1, sector=592, nr_sectors = 32 limit=512
[  257.934778][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.934778][   T40] loop5: rw=1, sector=656, nr_sectors = 32 limit=512
[  257.938977][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.938977][   T40] loop5: rw=1, sector=720, nr_sectors = 32 limit=512
[  257.944080][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.944080][   T40] loop5: rw=1, sector=784, nr_sectors = 32 limit=512
[  257.949614][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.949614][   T40] loop5: rw=1, sector=848, nr_sectors = 32 limit=512
[  257.955958][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.955958][   T40] loop5: rw=1, sector=912, nr_sectors = 32 limit=512
[  257.963062][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.963062][   T40] loop5: rw=1, sector=976, nr_sectors = 32 limit=512
[  257.973339][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.973339][   T40] loop5: rw=1, sector=1040, nr_sectors = 32 limit=512
[  257.979170][   T40] kworker/u10:2: attempt to access beyond end of device
[  257.979170][   T40] loop5: rw=1, sector=1104, nr_sectors = 32 limit=512
[  257.993417][T12545] loop4: detected capacity change from 0 to 512
[  257.995968][T12545] EXT4-fs: Ignoring removed bh option
[  257.998177][T12545] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  258.015408][T12545] EXT4-fs (loop4): 1 truncate cleaned up
[  258.026590][T12545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.207369][T12551] loop5: detected capacity change from 0 to 1024
[  258.421881][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  259.272891][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.461663][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  260.433104][T12607] bond2: entered promiscuous mode
[  260.437140][T12607] 8021q: adding VLAN 0 to HW filter on device bond2
[  260.452335][T12599] loop5: detected capacity change from 0 to 32768
[  260.461320][T12599] o2cb: This node has not been configured.
[  260.467984][T12599] o2cb: Cluster check failed. Fix errors before retrying.
[  260.470328][T12599] (syz.5.2726,12599,0):ocfs2_dlm_init:3354 ERROR: status = -22
[  260.477431][T12599] (syz.5.2726,12599,0):ocfs2_mount_volume:1735 ERROR: status = -22
[  260.485530][T12599] (syz.5.2726,12599,0):ocfs2_fill_super:1177 ERROR: status = -22
[  260.501642][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  260.585268][T12624] JFS: charset not found
[  260.811824][ T6036] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  260.969600][ T6036] usb 5-1: config 0 has an invalid interface number: 168 but max is 0
[  260.986744][ T6036] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.990183][ T6036] usb 5-1: config 0 has no interface number 0
[  261.005686][ T6036] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  261.009724][ T6036] usb 5-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  261.015270][ T6036] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[  261.019541][ T6036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.035800][ T6036] usb 5-1: config 0 descriptor??
[  261.057153][ T6036] HFC-S_USB 5-1:0.168: probe with driver HFC-S_USB failed with error -5
[  261.178871][T12648] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.2748'.
[  261.184481][T12648] openvswitch: netlink: Message has 4 unknown bytes.
[  261.270480][ T6036] usb 5-1: USB disconnect, device number 18
[  261.551655][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  261.678359][T12658] loop5: detected capacity change from 0 to 4096
[  261.690413][T12659] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.707112][T12658] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  261.714913][T12658] Remounting filesystem read-only
[  261.735452][ T9526] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  261.784856][T12661] loop5: detected capacity change from 0 to 4096
[  261.788159][T12661] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  261.800767][T12661] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  262.292795][T12722] netlink: 1092 bytes leftover after parsing attributes in process `syz.5.2781'.
[  262.371764][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  262.521742][   T10] usb 5-1: Using ep0 maxpacket: 32
[  262.532866][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  262.537668][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  262.554229][   T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  262.558098][   T10] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  262.561418][   T10] usb 5-1: Product: syz
[  262.563431][   T10] usb 5-1: Manufacturer: syz
[  262.565454][   T10] usb 5-1: SerialNumber: syz
[  262.572677][   T10] usb 5-1: config 0 descriptor??
[  262.581791][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  262.603346][   T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  262.791473][   T47] usb 5-1: USB disconnect, device number 19
[  262.795627][ T5864] usb 5-1: Failed to submit usb control message: -71
[  262.798824][ T5864] usb 5-1: unable to send the bmi data to the device: -71
[  262.804817][ T5864] usb 5-1: unable to get target info from device
[  262.807590][ T5864] usb 5-1: could not get target info (-71)
[  262.812066][ T5864] usb 5-1: could not probe fw (-71)
[  263.006923][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2801'.
[  263.294229][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2812'.
[  263.298316][T12788] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  263.354153][T12796] loop4: detected capacity change from 0 to 256
[  263.364940][T12796] FAT-fs (loop4): Directory bread(block 64) failed
[  263.367036][T12796] FAT-fs (loop4): Directory bread(block 65) failed
[  263.369184][T12796] FAT-fs (loop4): Directory bread(block 66) failed
[  263.372753][T12796] FAT-fs (loop4): Directory bread(block 67) failed
[  263.375672][T12796] FAT-fs (loop4): Directory bread(block 68) failed
[  263.378428][T12796] FAT-fs (loop4): Directory bread(block 69) failed
[  263.381478][T12796] FAT-fs (loop4): Directory bread(block 70) failed
[  263.384648][T12796] FAT-fs (loop4): Directory bread(block 71) failed
[  263.386834][T12796] FAT-fs (loop4): Directory bread(block 72) failed
[  263.389108][T12796] FAT-fs (loop4): Directory bread(block 73) failed
[  263.416223][T12796] bio_check_eod: 226 callbacks suppressed
[  263.416233][T12796] syz.4.2816: attempt to access beyond end of device
[  263.416233][T12796] loop4: rw=1, sector=1224, nr_sectors = 64 limit=256
[  263.423228][T12796] syz.4.2816: attempt to access beyond end of device
[  263.423228][T12796] loop4: rw=1, sector=1320, nr_sectors = 36 limit=256
[  263.631651][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  264.661669][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  264.951671][   T33] audit: type=1326 audit(1755600458.838:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  264.962238][   T33] audit: type=1326 audit(1755600458.838:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  264.971506][   T33] audit: type=1326 audit(1755600458.858:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdbbc18ebe9 code=0x7ffc0000
[  264.986870][T12871] loop4: detected capacity change from 0 to 512
[  264.988623][   T33] audit: type=1326 audit(1755600458.858:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbbc18ec23 code=0x7ffc0000
[  264.992860][T12871] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  265.015503][T12871] EXT4-fs (loop4): 1 truncate cleaned up
[  265.019263][T12871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.030704][   T33] audit: type=1326 audit(1755600458.868:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdbbc18d69f code=0x7ffc0000
[  265.040280][   T33] audit: type=1326 audit(1755600458.868:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdbbc18ec77 code=0x7ffc0000
[  265.049895][   T33] audit: type=1326 audit(1755600458.868:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdbbc18d550 code=0x7ffc0000
[  265.062226][   T33] audit: type=1326 audit(1755600458.878:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdbbc18e7eb code=0x7ffc0000
[  265.071356][   T33] audit: type=1326 audit(1755600458.878:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdbbc18d84a code=0x7ffc0000
[  265.082260][   T33] audit: type=1326 audit(1755600458.878:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.4.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdbbc18d84a code=0x7ffc0000
[  265.105670][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.171308][T12885] batadv_slave_1: entered promiscuous mode
[  265.176647][T12885] batadv_slave_1: left promiscuous mode
[  265.253866][T12898] netlink: 'syz.5.2855': attribute type 1 has an invalid length.
[  265.256695][T12898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  265.701863][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  266.741729][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  266.805324][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2882'.
[  266.934460][T12975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2890'.
[  267.414818][T12985] loop4: detected capacity change from 0 to 16
[  267.424964][T12985] erofs (device loop4): mounted with root inode @ nid 36.
[  267.781712][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  268.647018][T13015] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  268.831735][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  269.381692][T13026] loop4: detected capacity change from 0 to 512
[  269.392039][T13026] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2908: casefold flag without casefold feature
[  269.397580][T13026] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2908: couldn't read orphan inode 15 (err -117)
[  269.404216][T13026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.635906][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.697431][T13046] loop4: detected capacity change from 0 to 512
[  269.701119][T13046] EXT4-fs: Ignoring removed nobh option
[  269.709269][T13046] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  269.718450][T13046] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  269.724149][T13046] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.2914: casefold flag without casefold feature
[  269.732330][T13046] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2914: couldn't read orphan inode 13 (err -117)
[  269.745536][T13046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.761696][T13046] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  269.795866][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.861666][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  269.953769][T13066] loop5: detected capacity change from 0 to 256
[  269.965164][T13066] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  270.013721][T13060] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2922'.
[  270.275183][   T54] Bluetooth: hci1: unexpected event for opcode 0x0c56
[  270.451251][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2939'.
[  270.824835][T13105] netlink: 392 bytes leftover after parsing attributes in process `syz.4.2945'.
[  270.901668][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  270.917896][T13114] loop4: detected capacity change from 0 to 256
[  270.923956][T13114] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  270.928327][T13114] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  270.939787][T13114] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  271.149150][T13127] netlink: 'syz.4.2956': attribute type 1 has an invalid length.
[  271.152690][T13127] NCSI netlink: No device for ifindex 0
[  271.627190][T13141] netlink: 'syz.5.2962': attribute type 6 has an invalid length.
[  271.643929][T13141] netlink: 'syz.5.2962': attribute type 6 has an invalid length.
[  271.796072][T13143] loop5: detected capacity change from 0 to 4096
[  271.941730][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  272.529019][T13156] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0
[  272.542472][T13156] binder: 13155:13156 ioctl 4018620d 200000004a80 returned -1
[  272.597517][T13158] loop4: detected capacity change from 0 to 512
[  272.603862][T13158] EXT4-fs (loop4): orphan cleanup on readonly fs
[  272.607254][T13158] __quota_error: 9 callbacks suppressed
[  272.607261][T13158] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  272.608223][T13161] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2971'.
[  272.618947][T13158] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  272.626225][T13158] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2970: Failed to acquire dquot type 1
[  272.635832][T13158] EXT4-fs (loop4): 1 truncate cleaned up
[  272.645337][T13158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  272.659826][T13158] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2970: bg 0: block 248: padding at end of block bitmap is not set
[  272.669355][T13163] loop5: detected capacity change from 0 to 4096
[  272.674137][T13163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  272.676936][T13163] EXT4-fs (loop5): Test dummy encryption mode enabled
[  272.682158][T13163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.696049][ T8680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.719319][ T9526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.991716][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  273.829450][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'.
[  273.834996][T13205] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2990'.
[  273.898352][T13201] loop5: detected capacity change from 0 to 32768
[  273.914469][T13201] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.931816][T13201] XFS (loop5): Ending clean mount
[  273.934403][T13217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2992'.
[  273.940211][T13201] XFS (loop5): Quotacheck needed: Please wait.
[  273.968776][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'.
[  273.970129][T13201] XFS (loop5): Quotacheck: Done.
[  274.016796][T13221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2994'.
[  274.020510][T13221] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  274.025096][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  274.045379][ T9526] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  274.162893][T13225] loop4: detected capacity change from 0 to 4096
[  274.187774][T13228] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.558514][T13238] loop5: detected capacity change from 0 to 1024
[  274.561860][T13238] hfsplus: Unknown parameter '000000000000000000000000xffffffffffffffff'
[  275.071682][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  275.768527][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3006'.
[  275.808510][T13258] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  275.940782][T13273] 
[  275.941853][T13273] =====================================================
[  275.944797][T13273] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  275.948011][T13273] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  275.951751][T13273] -----------------------------------------------------
[  275.954910][T13273] syz.5.3016/13273 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  275.958237][T13273] ffff888022283168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  275.962042][T13273] 
[  275.962042][T13273] and this task is already holding:
[  275.965205][T13273] ffff88802f1ed028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  275.969415][T13273] which would create a new lock dependency:
[  275.972037][T13273]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  275.975386][T13273] 
[  275.975386][T13273] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  275.979138][T13273]  (&dev->event_lock#2){..-.}-{3:3}
[  275.979168][T13273] 
[  275.979168][T13273] ... which became SOFTIRQ-irq-safe at:
[  275.984395][T13273]   lock_acquire+0x120/0x360
[  275.986347][T13273]   _raw_spin_lock_irqsave+0xa7/0xf0
[  275.988507][T13273]   input_inject_event+0xa5/0x340
[  275.990581][T13273]   led_trigger_event+0x138/0x210
[  275.992748][T13273]   kbd_bh+0x1c6/0x2e0
[  275.994514][T13273]   tasklet_action_common+0x36c/0x580
[  275.996768][T13273]   handle_softirqs+0x286/0x870
[  275.998904][T13273]   __irq_exit_rcu+0xca/0x1f0
[  276.000881][T13273]   irq_exit_rcu+0x9/0x30
[  276.002647][T13273]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  276.005073][T13273]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.007699][T13273]   memcpy_toio+0x7b/0xd0
[  276.009586][T13273]   drm_fb_memcpy+0x320/0x5d0
[  276.011629][T13273]   bochs_primary_plane_helper_atomic_update+0x2f6/0x930
[  276.014621][T13273]   drm_atomic_helper_commit_planes+0x60f/0xec0
[  276.017328][T13273]   drm_atomic_helper_commit_tail+0x5d/0x520
[  276.019936][T13273]   commit_tail+0x29a/0x3a0
[  276.021978][T13273]   drm_atomic_helper_commit+0xa6b/0xb10
[  276.024371][T13273]   drm_atomic_commit+0x262/0x2c0
[  276.026563][T13273]   drm_atomic_helper_dirtyfb+0xd7b/0xee0
[  276.028940][T13273]   drm_fbdev_shmem_helper_fb_dirty+0x160/0x2f0
[  276.031460][T13273]   drm_fb_helper_damage_work+0x224/0x710
[  276.033784][T13273]   process_scheduled_works+0xae1/0x17b0
[  276.036116][T13273]   worker_thread+0x8a0/0xda0
[  276.038102][T13273]   kthread+0x711/0x8a0
[  276.039892][T13273]   ret_from_fork+0x3fc/0x770
[  276.041908][T13273]   ret_from_fork_asm+0x1a/0x30
[  276.044053][T13273] 
[  276.044053][T13273] to a SOFTIRQ-irq-unsafe lock:
[  276.047078][T13273]  (tasklist_lock){.+.+}-{3:3}
[  276.047102][T13273] 
[  276.047102][T13273] ... which became SOFTIRQ-irq-unsafe at:
[  276.052542][T13273] ...
[  276.052556][T13273]   lock_acquire+0x120/0x360
[  276.056071][T13273]   _raw_read_lock+0x36/0x50
[  276.058103][T13273]   __do_wait+0xde/0x740
[  276.059928][T13273]   do_wait+0x1f8/0x520
[  276.061801][T13273]   kernel_wait+0xab/0x170
[  276.063612][T13273]   call_usermodehelper_exec_work+0xbe/0x230
[  276.065603][T13273]   process_scheduled_works+0xae1/0x17b0
[  276.067451][T13273]   worker_thread+0x8a0/0xda0
[  276.069018][T13273]   kthread+0x711/0x8a0
[  276.070529][T13273]   ret_from_fork+0x3fc/0x770
[  276.072100][T13273]   ret_from_fork_asm+0x1a/0x30
[  276.073679][T13273] 
[  276.073679][T13273] other info that might help us debug this:
[  276.073679][T13273] 
[  276.076927][T13273] Chain exists of:
[  276.076927][T13273]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  276.076927][T13273] 
[  276.081280][T13273]  Possible interrupt unsafe locking scenario:
[  276.081280][T13273] 
[  276.083944][T13273]        CPU0                    CPU1
[  276.085709][T13273]        ----                    ----
[  276.087440][T13273]   lock(tasklist_lock);
[  276.088815][T13273]                                local_irq_disable();
[  276.091019][T13273]                                lock(&dev->event_lock#2);
[  276.093365][T13273]                                lock(&client->buffer_lock);
[  276.095877][T13273]   <Interrupt>
[  276.097065][T13273]     lock(&dev->event_lock#2);
[  276.098694][T13273] 
[  276.098694][T13273]  *** DEADLOCK ***
[  276.098694][T13273] 
[  276.101371][T13273] 7 locks held by syz.5.3016/13273:
[  276.103093][T13273]  #0: ffff88801eee3118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[  276.106071][T13273]  #1: ffff88801db0f230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[  276.109415][T13273]  #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[  276.112539][T13273]  #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[  276.115627][T13273]  #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[  276.118608][T13273]  #5: ffff88802f1ed028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  276.121918][T13273]  #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  276.124841][T13273] 
[  276.124841][T13273] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  276.128192][T13273]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  276.130002][T13273]     IN-SOFTIRQ-W at:
[  276.131301][T13273]                       lock_acquire+0x120/0x360
[  276.133342][T13273]                       _raw_spin_lock_irqsave+0xa7/0xf0
[  276.135625][T13273]                       input_inject_event+0xa5/0x340
[  276.137735][T13273]                       led_trigger_event+0x138/0x210
[  276.139972][T13273]                       kbd_bh+0x1c6/0x2e0
[  276.141676][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  276.141912][T13273]                       tasklet_action_common+0x36c/0x580
[  276.147219][T13273]                       handle_softirqs+0x286/0x870
[  276.149391][T13273]                       __irq_exit_rcu+0xca/0x1f0
[  276.151410][T13273]                       irq_exit_rcu+0x9/0x30
[  276.153386][T13273]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[  276.155727][T13273]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.158290][T13273]                       memcpy_toio+0x7b/0xd0
[  276.160296][T13273]                       drm_fb_memcpy+0x320/0x5d0
[  276.162356][T13273]                       bochs_primary_plane_helper_atomic_update+0x2f6/0x930
[  276.165096][T13273]                       drm_atomic_helper_commit_planes+0x60f/0xec0
[  276.167624][T13273]                       drm_atomic_helper_commit_tail+0x5d/0x520
[  276.170041][T13273]                       commit_tail+0x29a/0x3a0
[  276.172045][T13273]                       drm_atomic_helper_commit+0xa6b/0xb10
[  276.174416][T13273]                       drm_atomic_commit+0x262/0x2c0
[  276.176643][T13273]                       drm_atomic_helper_dirtyfb+0xd7b/0xee0
[  276.179038][T13273]                       drm_fbdev_shmem_helper_fb_dirty+0x160/0x2f0
[  276.181516][T13273]                       drm_fb_helper_damage_work+0x224/0x710
[  276.183921][T13273]                       process_scheduled_works+0xae1/0x17b0
[  276.186323][T13273]                       worker_thread+0x8a0/0xda0
[  276.188386][T13273]                       kthread+0x711/0x8a0
[  276.190373][T13273]                       ret_from_fork+0x3fc/0x770
[  276.192726][T13273]                       ret_from_fork_asm+0x1a/0x30
[  276.194948][T13273]     INITIAL USE at:
[  276.196339][T13273]                      lock_acquire+0x120/0x360
[  276.198387][T13273]                      _raw_spin_lock_irqsave+0xa7/0xf0
[  276.200628][T13273]                      input_inject_event+0xa5/0x340
[  276.202876][T13273]                      kbd_led_trigger_activate+0xbc/0x100
[  276.205290][T13273]                      led_trigger_set+0x52d/0x950
[  276.207471][T13273]                      led_trigger_set_default+0x260/0x2a0
[  276.209868][T13273]                      led_classdev_register_ext+0x73d/0x930
[  276.212370][T13273]                      input_leds_connect+0x517/0x790
[  276.214599][T13273]                      input_register_device+0xd0e/0x1140
[  276.216855][T13273]                      atkbd_connect+0x72e/0xa00
[  276.218881][T13273]                      serio_driver_probe+0x82/0xd0
[  276.220998][T13273]                      really_probe+0x26d/0x9e0
[  276.223015][T13273]                      __driver_probe_device+0x18c/0x2f0
[  276.225225][T13273]                      driver_probe_device+0x4f/0x430
[  276.227390][T13273]                      __driver_attach+0x452/0x700
[  276.229492][T13273]                      bus_for_each_dev+0x233/0x2b0
[  276.231713][T13273]                      serio_handle_event+0x1f9/0x8d0
[  276.233931][T13273]                      process_scheduled_works+0xae1/0x17b0
[  276.236299][T13273]                      worker_thread+0x8a0/0xda0
[  276.238436][T13273]                      kthread+0x711/0x8a0
[  276.240345][T13273]                      ret_from_fork+0x3fc/0x770
[  276.242514][T13273]                      ret_from_fork_asm+0x1a/0x30
[  276.244662][T13273]   }
[  276.245575][T13273]   ... key      at: [<ffffffff99e22060>] input_allocate_device.__key.5+0x0/0x20
[  276.248593][T13273] -> (&client->buffer_lock){....}-{3:3} {
[  276.250456][T13273]    INITIAL USE at:
[  276.251807][T13273]                    lock_acquire+0x120/0x360
[  276.253850][T13273]                    _raw_spin_lock+0x2e/0x40
[  276.255835][T13273]                    evdev_pass_values+0xb9/0xbd0
[  276.257974][T13273]                    evdev_events+0x1e6/0x340
[  276.259870][T13273]                    input_pass_values+0x288/0x890
[  276.262114][T13273]                    input_event_dispose+0x330/0x6b0
[  276.264389][T13273]                    input_inject_event+0x1dd/0x340
[  276.266529][T13273]                    evdev_write+0x2fc/0x480
[  276.268518][T13273]                    vfs_write+0x27e/0xa90
[  276.270481][T13273]                    ksys_write+0x145/0x250
[  276.272481][T13273]                    do_syscall_64+0xfa/0x3b0
[  276.274625][T13273]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.277128][T13273]  }
[  276.277999][T13273]  ... key      at: [<ffffffff99e22300>] evdev_open.__key.25+0x0/0x20
[  276.280699][T13273]  ... acquired at:
[  276.281989][T13273]    lock_acquire+0x120/0x360
[  276.283581][T13273]    _raw_spin_lock+0x2e/0x40
[  276.285164][T13273]    evdev_pass_values+0xb9/0xbd0
[  276.286855][T13273]    evdev_events+0x1e6/0x340
[  276.288477][T13273]    input_pass_values+0x288/0x890
[  276.290201][T13273]    input_event_dispose+0x330/0x6b0
[  276.292116][T13273]    input_inject_event+0x1dd/0x340
[  276.293839][T13273]    evdev_write+0x2fc/0x480
[  276.295687][T13273]    vfs_write+0x27e/0xa90
[  276.297483][T13273]    ksys_write+0x145/0x250
[  276.299318][T13273]    do_syscall_64+0xfa/0x3b0
[  276.300982][T13273]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.303125][T13273] 
[  276.304115][T13273] 
[  276.304115][T13273] the dependencies between the lock to be acquired
[  276.304122][T13273]  and SOFTIRQ-irq-unsafe lock:
[  276.309466][T13273]   -> (tasklist_lock){.+.+}-{3:3} {
[  276.311547][T13273]      HARDIRQ-ON-R at:
[  276.313252][T13273]                         lock_acquire+0x120/0x360
[  276.315524][T13273]                         _raw_read_lock+0x36/0x50
[  276.317849][T13273]                         __do_wait+0xde/0x740
[  276.319846][T13273]                         do_wait+0x1f8/0x520
[  276.321839][T13273]                         kernel_wait+0xab/0x170
[  276.323980][T13273]                         call_usermodehelper_exec_work+0xbe/0x230
[  276.326700][T13273]                         process_scheduled_works+0xae1/0x17b0
[  276.329176][T13273]                         worker_thread+0x8a0/0xda0
[  276.331324][T13273]                         kthread+0x711/0x8a0
[  276.333309][T13273]                         ret_from_fork+0x3fc/0x770
[  276.335882][T13273]                         ret_from_fork_asm+0x1a/0x30
[  276.338781][T13273]      SOFTIRQ-ON-R at:
[  276.340614][T13273]                         lock_acquire+0x120/0x360
[  276.343441][T13273]                         _raw_read_lock+0x36/0x50
[  276.346249][T13273]                         __do_wait+0xde/0x740
[  276.348426][T13273]                         do_wait+0x1f8/0x520
[  276.350620][T13273]                         kernel_wait+0xab/0x170
[  276.353222][T13273]                         call_usermodehelper_exec_work+0xbe/0x230
[  276.356431][T13273]                         process_scheduled_works+0xae1/0x17b0
[  276.359018][T13273]                         worker_thread+0x8a0/0xda0
[  276.361212][T13273]                         kthread+0x711/0x8a0
[  276.363233][T13273]                         ret_from_fork+0x3fc/0x770
[  276.365494][T13273]                         ret_from_fork_asm+0x1a/0x30
[  276.367711][T13273]      INITIAL USE at:
[  276.369124][T13273]                        lock_acquire+0x120/0x360
[  276.371208][T13273]                        _raw_write_lock_irq+0xa2/0xf0
[  276.373470][T13273]                        copy_process+0x224f/0x3c00
[  276.375627][T13273]                        kernel_clone+0x21e/0x840
[  276.377753][T13273]                        user_mode_thread+0xdd/0x140
[  276.380019][T13273]                        rest_init+0x23/0x300
[  276.382058][T13273]                        start_kernel+0x3a9/0x410
[  276.384133][T13273]                        x86_64_start_reservations+0x24/0x30
[  276.386620][T13273]                        x86_64_start_kernel+0x143/0x1c0
[  276.388998][T13273]                        common_startup_64+0x13e/0x147
[  276.391239][T13273]      INITIAL READ USE at:
[  276.392794][T13273]                             lock_acquire+0x120/0x360
[  276.395114][T13273]                             _raw_read_lock+0x36/0x50
[  276.397306][T13273]                             __do_wait+0xde/0x740
[  276.399425][T13273]                             do_wait+0x1f8/0x520
[  276.401527][T13273]                             kernel_wait+0xab/0x170
[  276.403769][T13273]                             call_usermodehelper_exec_work+0xbe/0x230
[  276.406564][T13273]                             process_scheduled_works+0xae1/0x17b0
[  276.409247][T13273]                             worker_thread+0x8a0/0xda0
[  276.411442][T13273]                             kthread+0x711/0x8a0
[  276.413628][T13273]                             ret_from_fork+0x3fc/0x770
[  276.415995][T13273]                             ret_from_fork_asm+0x1a/0x30
[  276.418310][T13273]    }
[  276.419228][T13273]    ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[  276.421819][T13273]    ... acquired at:
[  276.423157][T13273]    lock_acquire+0x120/0x360
[  276.424665][T13273]    _raw_read_lock+0x36/0x50
[  276.426272][T13273]    send_sigio+0x101/0x370
[  276.427733][T13273]    dnotify_handle_event+0x169/0x440
[  276.429508][T13273]    fsnotify+0x1814/0x1a80
[  276.431048][T13273]    fsnotify_move+0x126/0x5b0
[  276.432603][T13273]    vfs_rename+0x90b/0xf00
[  276.434127][T13273]    do_renameat2+0x6ce/0xa80
[  276.435670][T13273]    __x64_sys_renameat2+0xce/0xe0
[  276.437350][T13273]    do_syscall_64+0xfa/0x3b0
[  276.438861][T13273]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.440810][T13273] 
[  276.441590][T13273]  -> (&f_owner->lock){....}-{3:3} {
[  276.443291][T13273]     INITIAL USE at:
[  276.444589][T13273]                      lock_acquire+0x120/0x360
[  276.446697][T13273]                      _raw_write_lock_irq+0xa2/0xf0
[  276.448872][T13273]                      __f_setown+0x67/0x370
[  276.450838][T13273]                      generic_setlease+0xd60/0x1240
[  276.453044][T13273]                      fcntl_setlease+0x3a2/0x4c0
[  276.455175][T13273]                      do_fcntl+0x6a9/0x1910
[  276.457143][T13273]                      __se_sys_fcntl+0xc8/0x150
[  276.459346][T13273]                      do_syscall_64+0xfa/0x3b0
[  276.461349][T13273]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.463914][T13273]     INITIAL READ USE at:
[  276.465564][T13273]                           lock_acquire+0x120/0x360
[  276.467746][T13273]                           _raw_read_lock_irqsave+0xaf/0x100
[  276.470243][T13273]                           send_sigio+0x38/0x370
[  276.472386][T13273]                           kill_fasync+0x24d/0x4d0
[  276.474621][T13273]                           fsnotify_insert_event+0x32e/0x3e0
[  276.477211][T13273]                           inotify_handle_inode_event+0x3ea/0x5f0
[  276.479853][T13273]                           inotify_ignored_and_remove_idr+0x29/0x70
[  276.482641][T13273]                           fsnotify_destroy_marks+0x155/0x330
[  276.485153][T13273]                           dentry_unlink_inode+0x2c2/0x3f0
[  276.487612][T13273]                           vfs_rmdir+0x262/0x520
[  276.489661][T13273]                           do_rmdir+0x25f/0x550
[  276.491833][T13273]                           __x64_sys_rmdir+0x47/0x50
[  276.494095][T13273]                           do_syscall_64+0xfa/0x3b0
[  276.496285][T13273]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.498894][T13273]   }
[  276.499903][T13273]   ... key      at: [<ffffffff99b22f60>] file_f_owner_allocate.__key+0x0/0x20
[  276.503279][T13273]   ... acquired at:
[  276.504684][T13273]    lock_acquire+0x120/0x360
[  276.506261][T13273]    _raw_read_lock_irqsave+0xaf/0x100
[  276.508069][T13273]    send_sigio+0x38/0x370
[  276.509552][T13273]    kill_fasync+0x24d/0x4d0
[  276.511083][T13273]    fsnotify_insert_event+0x32e/0x3e0
[  276.512884][T13273]    inotify_handle_inode_event+0x3ea/0x5f0
[  276.514849][T13273]    inotify_ignored_and_remove_idr+0x29/0x70
[  276.516851][T13273]    fsnotify_destroy_marks+0x155/0x330
[  276.518679][T13273]    dentry_unlink_inode+0x2c2/0x3f0
[  276.520423][T13273]    vfs_rmdir+0x262/0x520
[  276.521941][T13273]    do_rmdir+0x25f/0x550
[  276.523460][T13273]    __x64_sys_rmdir+0x47/0x50
[  276.525062][T13273]    do_syscall_64+0xfa/0x3b0
[  276.526599][T13273]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.528600][T13273] 
[  276.529403][T13273] -> (&new->fa_lock){....}-{3:3} {
[  276.531094][T13273]    INITIAL USE at:
[  276.532381][T13273]                    lock_acquire+0x120/0x360
[  276.534804][T13273]                    _raw_write_lock_irq+0xa2/0xf0
[  276.536813][T13273]                    fasync_remove_entry+0xf1/0x1c0
[  276.538873][T13273]                    __fput+0x8a2/0xa70
[  276.540714][T13273]                    task_work_run+0x1d4/0x260
[  276.542749][T13273]                    exit_to_user_mode_loop+0xec/0x110
[  276.544901][T13273]                    do_syscall_64+0x2bd/0x3b0
[  276.546838][T13273]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.549268][T13273]    INITIAL READ USE at:
[  276.550742][T13273]                         lock_acquire+0x120/0x360
[  276.552898][T13273]                         _raw_read_lock_irqsave+0xaf/0x100
[  276.555317][T13273]                         kill_fasync+0x199/0x4d0
[  276.557417][T13273]                         snd_fasync_work_fn+0x162/0x210
[  276.559703][T13273]                         process_scheduled_works+0xae1/0x17b0
[  276.562170][T13273]                         worker_thread+0x8a0/0xda0
[  276.564289][T13273]                         kthread+0x711/0x8a0
[  276.566373][T13273]                         ret_from_fork+0x3fc/0x770
[  276.568526][T13273]                         ret_from_fork_asm+0x1a/0x30
[  276.570793][T13273]  }
[  276.571656][T13273]  ... key      at: [<ffffffff99b22f80>] fasync_insert_entry.__key+0x0/0x20
[  276.574486][T13273]  ... acquired at:
[  276.575755][T13273]    lock_acquire+0x120/0x360
[  276.577324][T13273]    _raw_read_lock_irqsave+0xaf/0x100
[  276.579116][T13273]    kill_fasync+0x199/0x4d0
[  276.580785][T13273]    evdev_pass_values+0x627/0xbd0
[  276.582469][T13273]    evdev_events+0x1e6/0x340
[  276.584023][T13273]    input_pass_values+0x288/0x890
[  276.585706][T13273]    input_event_dispose+0x330/0x6b0
[  276.587449][T13273]    input_inject_event+0x1dd/0x340
[  276.589173][T13273]    evdev_write+0x2fc/0x480
[  276.590703][T13273]    vfs_write+0x27e/0xa90
[  276.592191][T13273]    ksys_write+0x145/0x250
[  276.593703][T13273]    do_syscall_64+0xfa/0x3b0
[  276.595272][T13273]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.597267][T13273] 
[  276.598092][T13273] 
[  276.598092][T13273] stack backtrace:
[  276.600023][T13273] CPU: 0 UID: 0 PID: 13273 Comm: syz.5.3016 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  276.600033][T13273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.600039][T13273] Call Trace:
[  276.600043][T13273]  <TASK>
[  276.600047][T13273]  dump_stack_lvl+0x189/0x250
[  276.600057][T13273]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.600066][T13273]  ? __pfx__printk+0x10/0x10
[  276.600077][T13273]  validate_chain+0x1f05/0x2140
[  276.600088][T13273]  __lock_acquire+0xab9/0xd20
[  276.600099][T13273]  ? kill_fasync+0x199/0x4d0
[  276.600106][T13273]  lock_acquire+0x120/0x360
[  276.600116][T13273]  ? kill_fasync+0x199/0x4d0
[  276.600125][T13273]  _raw_read_lock_irqsave+0xaf/0x100
[  276.600133][T13273]  ? kill_fasync+0x199/0x4d0
[  276.600140][T13273]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[  276.600148][T13273]  ? do_raw_spin_lock+0x121/0x290
[  276.600157][T13273]  kill_fasync+0x199/0x4d0
[  276.600165][T13273]  ? kill_fasync+0x53/0x4d0
[  276.600172][T13273]  evdev_pass_values+0x627/0xbd0
[  276.600182][T13273]  ? evdev_pass_values+0x601/0xbd0
[  276.600191][T13273]  evdev_events+0x1e6/0x340
[  276.600199][T13273]  ? evdev_events+0x79/0x340
[  276.600207][T13273]  ? input_pass_values+0x8d/0x890
[  276.600215][T13273]  input_pass_values+0x288/0x890
[  276.600224][T13273]  ? input_handle_event+0x70c/0xf30
[  276.600231][T13273]  input_event_dispose+0x330/0x6b0
[  276.600238][T13273]  input_inject_event+0x1dd/0x340
[  276.600245][T13273]  ? input_inject_event+0xb6/0x340
[  276.600252][T13273]  evdev_write+0x2fc/0x480
[  276.600261][T13273]  ? __pfx_evdev_write+0x10/0x10
[  276.600269][T13273]  ? bpf_lsm_file_permission+0x9/0x20
[  276.600278][T13273]  ? security_file_permission+0x75/0x290
[  276.600287][T13273]  ? rw_verify_area+0x255/0x4d0
[  276.600295][T13273]  ? __lock_acquire+0xab9/0xd20
[  276.600304][T13273]  ? __pfx_evdev_write+0x10/0x10
[  276.600313][T13273]  vfs_write+0x27e/0xa90
[  276.600322][T13273]  ? __pfx_vfs_write+0x10/0x10
[  276.600331][T13273]  ? __fget_files+0x2a/0x420
[  276.600342][T13273]  ? __fget_files+0x2a/0x420
[  276.600352][T13273]  ? __fget_files+0x3a0/0x420
[  276.600361][T13273]  ? __fget_files+0x2a/0x420
[  276.600372][T13273]  ksys_write+0x145/0x250
[  276.600381][T13273]  ? __pfx_ksys_write+0x10/0x10
[  276.600391][T13273]  ? do_syscall_64+0xbe/0x3b0
[  276.600400][T13273]  do_syscall_64+0xfa/0x3b0
[  276.600409][T13273]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.600417][T13273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.600424][T13273]  ? exc_page_fault+0x9f/0xf0
[  276.600431][T13273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.600439][T13273] RIP: 0033:0x7f63c5f8ebe9
[  276.600446][T13273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.600453][T13273] RSP: 002b:00007f63c6e79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  276.600461][T13273] RAX: ffffffffffffffda RBX: 00007f63c61b5fa0 RCX: 00007f63c5f8ebe9
[  276.600467][T13273] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004
[  276.600472][T13273] RBP: 00007f63c6011e19 R08: 0000000000000000 R09: 0000000000000000
[  276.600476][T13273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.600481][T13273] R13: 00007f63c61b6038 R14: 00007f63c61b5fa0 R15: 00007fffb2ec2ab8
[  276.600488][T13273]  </TASK>
[  277.221774][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  278.261739][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  279.301698][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  280.341699][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  281.381659][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  282.421667][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  283.461676][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  284.501673][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  285.541661][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
09:09:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001074 RDI=0000000000001075 RBP=00000000000003f8 RSP=ffffc900062f7010
R8 =ffff8881087f8237 R9 =1ffff110210ff046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af1908 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f63c6e796c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f63c5f733e0 CR3=000000010f9f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffffffffffff XMM01=2323232323232323 2323232323232323
XMM02=0000000000000000 0000000000000023 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=ffffffffffffffff ffffffffffffffff XMM05=00007f63c6187478 00007f63c61874c0
XMM06=00007f63c61874b8 00007f63c61874b0 XMM07=00007f63c61874a8 00007f63c61874a0
XMM08=35ca37e6a79f83ce 3c7ffd42c7de4993 XMM09=0000000000000000 00007f63c6012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=6bfecdb7dd553e00 RBX=ffffffff81968308 RCX=6bfecdb7dd553e00 RDX=0000000000000001
RSI=ffffffff8be325e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30721ff8 CR3=000000010e39e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fdbbc212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
